The purposes of data processing.

The Data Controller uses your personal data to perform, provide and improve the services offered.

These purposes include:

Sale and delivery of products and services. Data is processed to receive and manage orders, provide services and products, as well as provide assistance regarding orders placed, products, services and promotional offers.

Providing and improving services. Data is processed to analyze activities, suggest features, correct and improve the use and efficiency of our services, in order to provide adequate assistance also in the post-sales phase.

Suggestions and personalization. Data derived from monitoring your navigation on the site, the interests you show for particular products or services, the purchases you make and the information you voluntarily provide through our questionnaires will serve to define your personal profile. Defining your profile will allow us to suggest products, features and services that might be of interest to you, all in order to identify preferences and personalize the services offered. We will process such data only with your prior consent, expressed through the acceptance of cookies or through the completion of our questionnaires. Your lack of consent will in no way prejudice the functioning of the site.

Communicating with you. Personal data is processed to communicate with you regarding our services through different channels (e.g., by phone, email and chat).

Advertising. Data that contributed to the creation of your personal profile is processed to show you specific advertising, defined based on interests in relation to features, products and services that might be to your liking.

Personal data may also be used for sending informational and advertising material or for commercial communications in any case related to the Data Controller’s activity, as well as, with your consent, for direct marketing activities. Your lack of consent will in no way prejudice the functioning of the site.

The data controller may use the email coordinates provided by the data subject in the context of a previous sale of its own products/services for direct sales purposes, provided that they are similar products/services to those subject to the sale and there is no refusal of such use, initially or on the occasion of subsequent communications by the data subject. Therefore, the data subject, at the time of collection and/or on the occasion of each communication sent by the data controller, may object at any time to the processing.

The data subject may object at any time to the use of their email address by contacting the Data Controller in the manner described in the paragraph “Contacts, Information and Reviews” at the bottom of this page.

Newsletter. If you register for our Newsletter, we use the data strictly necessary and instrumental for this purpose, i.e., the data you provided separately, to regularly send you our newsletter via email based on your consent.

You can unsubscribe at any time, either via a message to the contacts below or via a specific link available in every Newsletter. After cancellation, we proceed to delete your email address, unless you have expressly consented to further use of your data and subject to our reservation for subsequent use of the data, use of which you have been properly informed in this statement in compliance with legal provisions.

Prevention of fraud and credit risks. Data is also processed to prevent and detect fraud and abuse in order to also protect your safety.

Comply with legal obligations. In some cases, we are legally obliged to collect and process your personal data.

The legal basis for processing is the execution of pre-contractual and/or contractual obligations, the pursuit of a legitimate interest of the data controller, compliance with legal obligations, as well as the consent of the data subject where required.

Communication to third parties of processed data.

The Data Controller, recognizing the fundamental importance of your data for its activities, does not intend to transfer it to third parties. The Data Controller only communicates the processed data to its employees, collaborators and third-party suppliers and, therefore, to companies that perform certain activities on behalf of the Data Controller, aimed at fulfilling orders and services requested by you, to providers of services and tools for the processing of personal data provided directly or derived from website navigation, to all those public and private entities to whom communication is necessary for the correct fulfillment of the purposes described above in order to comply with obligations provided for by laws, regulations, or Community legislation. Such entities, however, are also subject to compliance with the obligations relating to the Privacy Information or in any case to procedures that provide for safeguards similar to those described in this Privacy Information. These third parties are not permitted to use the data for their own purposes, unless they must obtain, as data controllers, specific consent. The communication of data is therefore necessary and functional to ensure the correct fulfillment of the purposes for which they were collected and, in any case, in full compliance with privacy regulations.

Transfer of data outside the European Economic Area.

The Data Controller, whenever it is necessary to transfer the processed data beyond the European economic border, will ensure that they are transferred in full compliance with this Privacy Information and the applicable regulations regarding the protection of personal data.

Security of your personal data guaranteed.

The Data Controller, also thanks to internal staff and external suppliers, uses systems and devices aimed at ensuring the security and privacy of its customers.

Automated decision-making processes

Access to your data and your personal profile

According to applicable regulations, as a data subject you have the right to request from the Data Controller access to, rectification, erasure (right to be forgotten) of your personal data, as well as the possibility to exercise the right to portability of the same to another Data Controller.

You can also ask the Data Controller to restrict the processing of your data, or even object to it.

If you decide to exercise any of these rights, or in case of clarifications and/or objections regarding the methods of data collection and management, we suggest you contact the Data Controller.

Withdrawal of consent

If the processing, including of special categories of data, is based on consent [on Article 6, paragraph 1, letter a) of the Regulation, or on Article 9, paragraph 2, letter a) of the Regulation], it is your right to withdraw the consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Complaint

It is your right to lodge a complaint with the Supervisory Authority.

Retention period of personal data.

Your personal data is retained by the Data Controller to allow you to continuously use the services offered for the entire time necessary to pursue the purposes described in this Privacy Information. For example, by keeping the history of transactions made and shipments requested, we allow you to monitor the purchase and post-purchase and thus improve and facilitate the use of our services. In addition to the duration period of a contract concluded by you, the data will be retained for a subsequent period according to the following criteria:

• within the terms established by current legislation, including secondary legislation
• within the period necessary for the absorption of any legal protections. In any case, the maximum data retention time is estimated at ten years from the termination of the relationship,

Minors and the services of the Data Controller

The Data Controller does not sell products to minors. If you are under 18, you can use the Services only with the involvement of a parent or guardian.

Contacts, Information and Reviews

In case of doubts, clarifications, requests and objections concerning the processing of personal data, we invite you to contact the Data Controller by writing to privacy@rosabakehouse.com

Finally, we would like to suggest that you frequently check our website www.rosabakehouse.com to verify any changes to our privacy information, given the possibility of changes resulting from any variation in our services.

Our current Privacy Information applies to all data we have about you and your account, unless otherwise indicated.