Privacy policy

Welcome to the Goppion Caffè S.P.A. website. (‘Site’).

On this page, we provide you with information pursuant to art. 13 of Regulation (EU) 2016/679 (‘GDPR’) on the processing of your personal data that we collect when you browse the Site and interact with its services.

Please read this information carefully before providing us with your personal data.

 

  1. DATA CONTROLLER

Goppion Caffè S.P.A., via Terraglio 48, Preganziol (TV) is the independent data controller for the purposes of managing the Site and your registration on the Site (personal account), marketing and profiling, better described in the following paragraph.

Blitz Micro S.r.l., Strada Scudetto 23, 31100, Treviso (TV) is the independent data controller for administrative and accounting purposes connected to the sale, shipping, and assistance on your purchase.

  1. DATA PROTECTION OFFICER (DPO)

Blitz Micro S.r.l. has appointed a data protection officer (DPO), who you can contact by writing to the following email address

  1. CATEGORIES OF PERSONAL DATA COLLECTED
  2. a) Navigation data

Browsing the Site and accessing the related services involve the acquisition of some personal data relating to your browsing, such as, for example, the IP addresses or domain names of the computers you use to connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error , etc.) and other parameters relating to the operating system and IT environment you use.

  1. b) Personal data that you voluntarily provide to us

The personal data that you voluntarily provide to us when you register on the Site, access its related services, purchase a product or interact with customer service, such as, for example, personal data, contact data, data relating to purchases and banking data.

  1. c) Cookies

The Site uses so-called Cookies. For more information on cookies and their use on the Site, please see the cookies page.







 

  1. PURPOSE, LEGAL BASIS AND STORAGE PERIOD
    I. Your personal data will be processed by Goppion Caffè S.P.A. for:

PURPOSE

LEGAL BASIS

STORAGE PERIOD

A

Registration on the Site (personal account): to allow you to create your personal account on the Site and to access and use the related services

Execution of the contract or pre-contractual measures requested by you

Until you request account deletion or termination of service

B

For assistance with second-level purchases or at another online store; for general and company information: for feedback on your request for general product or brand information

Performance of the contract or pre-contractual measures requested by you (response to requests made by the data subject)

For the period of time necessary to respond to your request


  1. Your personal data will be processed by Blitz Micro S.r.l. for:

PURPOSE

LEGAL BASIS

STORAGE PERIOD

C

Sale of products: for the conclusion and execution of the contract of sale of the products offered on the Site, including the management and processing of purchase orders, delivery of products, communication of any circumstances inherent to the order, management of payments and anti-fraud checks

Execution of the contract or pre-contractual measures requested by you

For the time necessary to process the purchase order (subject to further storage, where necessary, for the purposes that follow).

D

After-sales service: for handling and replying to requests you send us in relation to products purchased on the Site, e.g. in connection with returns, complaints and refunds

Execution of the contract or pre-contractual measures requested by you

For the period of time necessary to process your request (subject to further storage, where necessary, for the purposes that follow).

E

Fulfilment of legal obligations: for the fulfilment of legal obligations (in particular in civil, fiscal, public security, banking and personal data protection matters)

Fulfilment of legal obligations

For the period established by law. Billing data is kept for 10 years from the date of issue of the invoice.

F

Litigation and prevention of offences: to defend or enforce a right and/or for the detection and prevention of fraud and other crimes or offences

Legitimate interest of the Data Controller

For the period necessary for the purpose for which the data are collected in accordance with applicable law (e.g. statute of limitations).

 

  1. NATURE OF THE PROVISION OF DATA

The provision of data in the e-commerce registration fields is necessary to register on the Site, use the related services and purchase products on the Site and failure to provide such data will make it impossible to obtain the requested products and services.

 

  1. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS (PROFILING)

There are no automated decision-making processes on the site.

7.PROCESSING METHODS

Your data shall be processed by Goppion Caffè and Blitz Micro as independent data controllers primarily by means of computerized and telematic means, in compliance with technical and organizational regulations aimed at preventing unlawful, incorrect or nonauthorized use.


8.CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND DISCLOSURE OF DATA

In order to pursue the purposes for which the data are collected, Goppion Caffè and Blitz Micro, as independent Data Controllers, may avail themselves of the following categories of subjects to whom the data may be communicated or who may become aware of the data in their capacity as data processors:

  • providers of IT services, such as internet services and cloud computing;
  • parties carrying out logistics, warehousing, promotion and delivery of products and services;
  • parties performing customer service activities;
  • firms and other entities that provide assistance, consultancy and services, such as legal, tax, accounting, economic-financial, technical-organizational, data processing, or communication, for example;
  • parties that provide banking, financial, insurance and debt collection services;
  • entities providing anti-fraud payment control activities;
  • subsidiary, parent, affiliated and associated companies;
  • public authorities and supervisory and control bodies.


The updated list of those responsible for processing personal data is available upon specific request via the methods indicated in paragraph 12.

Exclusively for the purposes specified above, your personal data may also be known by internal data controllers authorized to process them based on their respective duties.

No data collected on the Site is disclosed.


  1. DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION

Your personal data may be transferred, for the purposes for which they were collected, to the United States of America (USA) which is a country not belonging to the European Union.

The transfer of personal data to subjects located in the USA will take place exclusively by virtue of the signing between Goppion Caffè and the non-EU recipient of the standard contractual clauses adopted or approved by the European Union Commission (art. 46, paragraph II, letters c and d of the GDPR).

To obtain a copy of such data you can contact Goppion Caffè, as indicated in paragraph 12.


  1. SOCIAL BUTTONS AND WIDGETS

There are also social buttons/widgets on the Site. In particular, these are the icons of social networks, such as, for example, Facebook, Twitter, YouTube, and Instagram, which allow you to reach - by means of ‘clicking’ on the icon - the relevant social networks. With the support of these tools you can, for example, share content or recommend products from the Site on social networks.

Following clicks on the social buttons/widgets, the social network may collect data relating to your visit to the Site. As mentioned in the introduction, this privacy policy does not cover the processing of your data by the social network, for which you should refer exclusively to the privacy policy provided by the social network.

Apart from cases in which you spontaneously share your data with the chosen social networks by clicking on the social buttons/widgets, Goppion Caffè does not disseminate or share any personal data with the social network.

 

  1. MINORS

The Site and the services are intended for the sale of products and services to adults. Therefore, the Data Controllers do not intentionally collect personal data from persons under the age of 18. If you access the services of the Site itself, you declare that you are of legal age.


  1. RIGHTS OF THE DATA SUBJECTS

In relation to the personal data provided by you, you have the right at any time to request:

  • confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to the personal data and to obtain a copy thereof (Article 15 of the GDPR);
  • the rectification of inaccurate personal data concerning you, as well as the integration of the same, where deemed incomplete, always in relation to the purposes of processing (art. 16 of the GDPR);
  • the cancellation of personal data in the cases referred to in Article 17 of the GDPR;
  • the limitation of processing in the cases referred to in Article 18 of the GDPR;
  • to object to the processing of personal data in accordance with Article 21 of the GDPR;
  • data portability, if the processing is based on your consent or on a contract and is carried out by automated means (art. 20 of the GDPR).


To exercise these rights, please write to: privacy@goppioncaffe.it or privacy@blitzmicro.com.



Finally, please note that, if the conditions are met, you also have the right to lodge a complaint with the Guarantor Authority for the protection of personal data as supervisory authority in accordance with established procedures.