Privacy Policy
At Sapori Autentici, we are committed to protecting the privacy and security of our customers and online visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site, use our online platform, or interact with our service.
Information We Collect
We collect personal data that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, when you participate in activities on our online platform, or otherwise contact us. The personal data that we collect depends on the context of your interactions with us and the service, but may include:
- Personal Identification Information: Name, surname.
- Contact Information: Postal address.
- Payment Data: Information necessary to process payments, though we do not store sensitive payment card data on our servers. This is handled by secure third-party payment processors.
- Order Information: Details about the products or services you purchase or enquire about, your preferences.
- Correspondence: Information contained in communications you send to us, such as emails or letters.
We may also collect information automatically when you visit our site. This information may include your IP address, browser type, operating system, referring URLs, access times, and information about how you use our online platform. This data is primarily needed for our internal analytics and reporting purposes, as well as ensuring the security and operation of our service.
How We Use Your Information
We use personal information collected via our online platform for various purposes, including:
- To provide, operate, and maintain our service.
- To improve, personalize, and expand our service.
- To understand and analyze how you use our service.
- To develop new products, services, features, and functionality.
- To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the service, and for marketing and promotional purposes.
- To process your transactions and manage your orders.
- To send you emails or other communications regarding your account or orders.
- To find and prevent fraud.
- To comply with legal obligations.
Lawful Basis for Processing (under GDPR)
We will only process your personal data when we have a lawful basis to do so. The lawful bases we rely on include:
- Consent: Where you have given us clear consent for specific processing purposes.
- Contract: Where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal Obligation: Where the processing is necessary for us to comply with the law (not including contractual obligations).
- Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your fundamental rights and freedoms. Examples include improving our services, preventing fraud, and direct marketing (where permitted by law).
Sharing Your Personal Information
We may share your personal information with third parties in the following situations:
- Service Providers: We may share your information with third-party service providers who perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. These service providers are contractually bound to protect your information and use it only for the purposes for which it was disclosed.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Legal Requirements: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
- Protecting Our Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, and illegal activities, or as evidence in litigation in which we are involved.
We do not sell your personal data to third parties.
Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
Your Data Protection Rights (under GDPR)
Depending on your location, particularly if you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain rights regarding your personal data:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the physical address provided below.
Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
Cookies and Similar Technologies
Our site may use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in a separate Cookie Policy, if applicable, or within the cookie consent banner on our site.
Links to Other Websites
Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
Our service is not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you become aware that we have collected personal data from a child under age 16 without verification of parental consent, please contact us, and we will take steps to remove that information from our servers.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. The updated version will be indicated by a new date and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
Contact Us
If you have questions or comments about this Privacy Policy, you may contact us at:
Sapori Autentici
85 Via Cristoforo Colombo,
Caserta, Campania,
81100, Italy
Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes GDPR. In Italy, the relevant authority is the Garante per la protezione dei dati personali.