Privacy Policy
Allegro Natura S.r.l., owner of the portal https://allegronatura.it (hereinafter also ‘Application’ or ‘website’), wishes to provide a detailed description of how the personal data of individuals, also referred to as ‘users’ or ‘data subjects’ are managed within the website. We also intend to provide comprehensive information in compliance with Article 13 of Regulation (EU) 2016/679, commonly known as the General Data Protection Regulation (GDPR), and in compliance with Italian Legislative Decree no. 196 of 30 June 2003, which is known as the ‘Data Protection Act’, as amended by Italian Legislative Decree no. 101 of 10 August 2018. This information applies to our website only and does not extend to other connected websites or than can be accessed using links in our portal.
- CONTROLLER
The controller for the processing of personal data is the company Allegro Natura S.r.l. (‘Controller’), with registered offices at Via Gaetano Donizzetti, 2 - 20122 Milan, Italy, tax code and VAT no. 12295720010. The company can be contacted by e- mail at ecommerce@allegronatura.it and by certified e-mail (PEC) at allegronaturasrl@legalmail.it.
- Personal data collected
Personal data can either be entered in the website voluntarily by Users or collected in an automated manner while they are using this application.
2.1 - Data provided by the user:
- user profile information, first name, surname, postal address including city and post code, and telephone number;
- contact information: first name and surname, e-mail address, telephone number, shipping address and order details.
- Tax information regarding payments and billing, for example the billing and shipping address, tax code and certified e-mail address (PEC).
2.2 - Data collected in an automated manner
- information regarding the device, such as the IP address, browser and operating system;
- Information on browsing behaviour, such as pages visited, products viewed and products purchased (subject to the acceptance of cookies by the user).
- Various types of cookie (see cookie policy)
Any use of cookies - or other tracking tools - by this Application or by the owners of the third-party services used by this application, unless otherwise specified, has the purpose of identifying users and recording their preferences for purposes closely related to providing the services they request.
- Purposes and legal basis of data processing
Allegro Natura utilises users’ personal information for the following purposes:
- To improve the website and services: Personal data can be used to improve the website and services and make them more useful and pertinent for users. These data include information on browsing behaviour, such as pages visited and products viewed and purchased. The legal basis is the legitimate interest of the controller.
- To process orders: Personal data are collected in order to process orders, dispatch shipments and invoice the products. These data include the user’s name, e-mail address, telephone number, shipping address and payment information. The legal basis is the execution of a contract or precontractual measures to which the user/data subject is a party.
- Contact form and customer assistance live chat services: Personal data are collected to provide customers with assistance, answer questions and solve problems. These data include the user’s name, e-mail address, telephone number and product information. The legal basis is the execution of a contract or precontractual measures to which the user/data subject is a party;
- to send commercial and promotion messages, for direct marketing purposes, to send invitations to events and to assess customer satisfaction, using both traditional contact methods (i.e. postal mail and telephone calls from an operator) and automated contact methods (i.e. automated telephone calls and similar methods, such as faxes, e-mails, text messages, etc.). The legal basis in the data subject’s consent or, in the case of customer satisfaction or new product surveys, for customers already registered with the website, their legitimate interest;
- tracking of the user’s/ data subject’s browsing and purchase choices, in order to improve the marketing offering and commercial promotions and to assess customer satisfaction. This activity is carried out also by using technologies such as cookies (for further information see the website “Cookie Policy”). The legal basis is the data subject’s consent;
- purposes associated with legal obligations and/or the provisions imparted by bodies authorised to do so by law. The legal basis for the processing of personal data is the controller’s legal obligation.
- to establish, exercise or defend the data controller’s rights in proceedings in or out of court.
- NATURE OF PROCESSING
The provision of personal data is only mandatory for the processing required to deliver the services.
Any refusal to provide the personal data required to provide the services will make it impossible to access and use website services and to carry out the contractual agreements or precontractual measures requested by the data subject; the provision of data following the granting of consent by the data subject is free and optional and any refusal by the data subject will not have any negative repercussions on the provision of the services offered within the portal and the connected applications.
- METHODS AND DURATION OF PROCESSING
The data collected will be processed using electronic, computerised and data transmission instruments, or by manual processing using approaches closely related to the purposes for which the Personal Data are collected and, in any case, in order to ensure their security. More specifically, all technical, computerised, organisational and procedural security measures will be adopted to ensure an adequate level of data protection in compliance with applicable legislation. The personal data collected for purposes relating to the execution of the contract with the User will be retained until the execution of the contract has been completed and in compliance with statutory and tax obligations (for example, the statutory obligation to retain accounting records and other corporate documentation for 10 years).
The personal data collected for purposes relating to the legitimate interest of the controller will be retained until such interest has been fulfilled. Users have the right to object to processing for processing based on legitimate interest and/or to withdraw their consent to processing at any time without affecting the legitimacy of processing based on consent granted prior to withdrawal.
The personal data processed for marketing purposes will be stored for no longer than 24 months after collection.
This period is necessary to allow the company to achieve the purposes for which the data were collected, namely:
- to send marketing messages;
- to personalise the user’s website experience;
At the end of this period, the personal data will be erased or rendered anonymous.
The company may retain the personal data for a longer period if this is necessary in order to fulfil legal obligations or resolve any disputes.
Users are also entitled to request for their personal data to be erased or object to their processing for marketing and profiling purposes at any time.
- Data disclosure and transfer abroad
Allegro Natura processes users’ personal data on its servers located in Italy as well as on Shopify servers within the EU. Shopify International Limited, the provider of the Allegro Natura e-commerce platform, files the personal data of users belonging to the European Economic Area in its data centre in Dublin (Ireland). If data are transferred outside the EU for technical and organisational reasons, Shopify has implemented a series of measures to guarantee, to the controller and all website users, that personal data are processed in compliance with Regulation (EU) 2016/679, through the adoption of:
- transfer based on European Commission adequacy decisions, in compliance with Article 45
- transfers subject to appropriate safeguards, in compliance with Article 46: Article 46.2 letter b) binding corporate rules and letter c) standard data protection clauses adopted by the Commission;
- recipients of the data
The personal data provided by users for the purposes described in point 3 above may be revealed or disclosed to the following subjects:
employees and/or collaborators of Alimentari Vicenzi, for the performance of administration, accounting and IT and logistical support activities, who act as persons authorised to carry out processing;
- companies or consultants appointed to install, maintain, update and, in general, manage hardware and software (including the Platform);
- companies appointed by Allegro Natura for mailing activities and/or to send online messages in general;
- any public and/or private entities, natural and legal persons (administrative and tax consultancy firms), should communication be instrumental or functional to proper compliance with the contractual obligations undertaken in connection with the services provided through the website, as well as legal obligations;
- companies or professionals providing logistics services, for example couriers, shipping companies and entities contracted to deliver and/or collect purchased products;
- those subjects (including Public Authorities) that have access to the data pursuant to regulatory or administrative provisions;
- commercial information companies, in order to assess the solvency of a potential customer;
- companies contracted to maintain our IT system;
- companies that provide the controller with live chat and customer assistance services or platforms;
- legal firms contracted by us to protect our rights or handle disputes concerning the Contract;
- entities, other than those listed above appointed as processors or persons authorised to carry out processing, for the performance of activities relating to the conclusion of the purchase through the website.
- for the management of transactions and payments, personal data will be processed by external companies, e.g. banks, financial institutions and external payment platforms - e.g. PayPal, Satispay, Apple Pay and Google Pay. For details on the processing of payment data, consult the privacy policies of the above-mentioned commercial partners:
- PayPal PayPal privacy policy;
- Satispay Privacy policy - Satispay
- Apple Pay Legal - Apple Payments Privacy Notice - Apple
- Google Payment Privacy Notice
- UnionPay Privacy Notice
None of the personal data provided by users in connection with website registration and/or purchases made using the website are subject to dissemination. An updated list of the processors and persons authorised to carry out processing are available from the registered offices of the controller.
- Cookies and similar technologies
Allegro Natura uses cookies and other tracking tools to improve users’ website browsing experience. Cookies are small text files that are stored on users’ computers or mobile devices when they visit a website. Cookies can be used to save users’ preferences, improve their browsing experience or provide specific advertising. To find out more about cookies and other tracking tools, consult the website’s cookie policy.
- INTERACTION WITH SOCIAL MEDIA NETWORKS AND EXTERNAL PLATFORMS
Our Platform may, from time to time, contain external links of our advertising and affiliate partners. If data subjects follow a link to any of these websites, they must remember that these websites have their own privacy practices and that we do not accept any responsibility for these policies. Please consult the privacy policies of the above-mentioned websites before granting consent to the processing of your personal data. These services make it possible to interact with social media networks, or other external platforms, directly from the pages of this website. Interactions and the information acquired by this application are in any case governed by the user’s privacy settings for each social media network.
If a social media interaction service is installed, it is possible that, even if users do not use the service, it may still collect traffic data on the pages in which it is installed.
- EXERCISING OF USER RIGHTS
Data subjects may, at any time, exercise their rights under applicable data protection regulations, including their right to:
- receive confirmation that their personal data exit and to access their content (right of access);
- update, amend and/or correct their personal data (right to rectification);
- request the erasure or restrict the processing of their data processed in breach of the law including those for which storage is not necessary in relation to the purposes for which the data were collected or otherwise processed (right to be forgotten and right to restriction of processing);
- object to processing based on legitimate interest (right to object);
- withdraw consent, without prejudice to the legitimacy of processing based on consent granted prior to withdrawal;
- file a complaint with a Supervisory Authority in the event of breaches of personal data protection regulations;
To exercise the above rights, users may contact the controller by e-mail using the address ecommerce@allegronatura.it or fill out the form for exercising personal data protection rights and send it by secure e-mail (PEC) to (allegronaturasrl@legalmail.it) or by registered mail to Allegro Natura S.r.l., Via Gaetano Donizetti 2 - 20122 Milan, Italy.
CHANGES TO THE PRIVACY POLICY
The ongoing evolution of our services may result in changes to the characteristics of personal data processing described above. This privacy policy may be subject to amendments over time, where they become necessary as a result of new regulations on personal data protection, or of the evolution of or changes to our services. We therefore invite you to periodically check the contents of our policy; where possible we will make every effort to inform you of any changes made and their consequences in a timely manner.