Privacy information
Privacy
Notice pursuant to Regulation (EU) 2016/679 (“GDPR”)
Last updated [15-10-2026]
1. WHO PROCESSES YOUR DATA?
Data Controller
Manetti Alimentari Srl, represented by its legal representative pro tempore, with registered office at Via F. Parri 7, 50051 Castelfiorentino (FI), VAT no. IT05443960488, email info@salumeriatoscana.shop.
Privacy contact
For any questions or requests relating to your personal data, you can write to us at salumeriatoscanadop@gmail.com.
Other parties
Your personal data may be disclosed to our employees or collaborators belonging to the categories of administrative, sales, legal and accounting staff or IT system administrators, depending on the processing, who, operating under our direct authority, are authorised to process the data and receive appropriate operating instructions in this regard. The recipients of your data also include third-party providers of services relating to payments, shipping and marketing services, hosting providers and providers of information systems engineering services, IT companies or companies specialising in market research and data processing, with whom we enter into agreements requiring them to adopt appropriate technical and organisational measures to protect your personal data. Your data may also be transmitted to the police and to the judicial and administrative authorities in accordance with the law.
We may also transfer your personal data in the event of the sale or transfer of all or part of our business or assets (including in the event of reorganisation, spin-off, dissolution or liquidation).
In no case do we assign or sell your personal data.
Your personal data may be transferred outside the European Union to be processed by some of our service providers. In this case, we ensure that such transfer takes place in compliance with the applicable legislation and that an adequate level of protection of personal data is guaranteed in accordance with this Privacy Policy, on the basis of an adequacy decision, standard clauses defined by the European Commission or Binding Corporate Rules. Where your personal data are transferred to providers established in the United States, the transfer takes place on the basis of the EU-U.S. Data Privacy Framework, for certified providers, or of the standard contractual clauses approved by the European Commission.
2. WHAT TYPES OF DATA DO WE COLLECT?
Personal data means all information relating to the user that allows us to identify them, such as their name, contact details, payment details and information about their access to the Site. When you register on our Site, create an account, use our services or contact our customer service, we collect some of your personal data. Some of the aforementioned data are provided to us voluntarily by the user, while others are collected by us automatically.
Data provided voluntarily by the user
The Site offers users the possibility of voluntarily providing personal information through, for example, creating an account, purchasing products through our Site, posting a review or comment, completing the returns procedure, filling in the contact form or using the messaging and chat service with our customer service, or when you contact us to leave your comments or opinions.
When you leave comments and reviews in the dedicated sections of the Site, the content of your reviews, your name and your photo (if uploaded) will be visible to those who access the Site.
Sensitive data
We do not process sensitive data, i.e. details about physical or mental health or about the alleged commission of offences or criminal convictions; however, should you spontaneously share any such information with us, we will process such data only with your prior explicit consent.
Third-party data
If you decide to provide data of third parties, make sure that these persons have been informed in advance and adequately of the processing methods and purposes set out herein. In such a case, you act as an independent data controller, assuming all legal obligations and responsibilities.
Data of minors under 16
In this regard, we remind you that if you are under 16 years of age you may not provide us with any personal data, and in any case we accept no responsibility for any false statements you may provide. Should we become aware of any untruthful statements, we will immediately delete any personal data acquired.
Browsing data
We collect the following data through the services you use:
- technical data: this category of data includes the IP addresses or domain names of the computers you use when connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and IT environment. These data are used only for statistical information (and are therefore anonymous) and to check that the Site is functioning correctly, and are deleted immediately after processing. The data could be used to establish liability in the event of hypothetical computer crimes against the site: except in this case, data on web contacts are not retained for more than 7 days.
- data collected using cookies or similar technologies: for more information, please read section 11 “Cookies” of this notice.
3. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?
a) To provide you with access to our Site and the use of our services
When you use our Site and its services, we will use your personal data to enable you to register on the Site and create a personal account, to verify your identity as a user of the Site, to enable you to purchase products and, where applicable, return the products purchased, to provide you with customer service and resolve any issues you report, to send you necessary communications (such as confirming your purchase order, confirming that the payment was successful or reminding you of products in your cart) and to provide you with all the other services described in the General Terms and Conditions.
b) To inform you about products, services and events and for other promotional purposes
Where you have expressly given us your consent or where we have a legitimate interest (under the applicable legislation), we will use your data to update you on products and services offered by us and to inform you about promotional, commercial and advertising activities of the Company or of third-party business partners by email, SMS or WhatsApp; only if you are a professional may we notify you of such promotions and events by telephone call through an operator or through a customer care service consisting of the offer of dedicated services in the sales and after-sales phases. In addition, again subject to your consent or where we have a legitimate interest (under the applicable legislation), we may use your data in the context of market research and surveys to measure your satisfaction, by email, SMS or WhatsApp, in order to improve our services and our relationship with our users.
c) To offer you a personalised service
Where you have expressly given us your consent, we use your data to analyse your consumption habits and choices, in order to offer you a personalised service in line with your interests and to improve our commercial offering.
d) To improve the services we offer through the Site
We will use the data provided to improve the services we offer through the Site and your shopping experience. In particular, we may analyse the use and measure the effectiveness of our Site and our services in order to better understand how it is used, so as to improve it, and to engage users and build their loyalty.
e) To protect our rights, property or the security of data
We may also use personal data in connection with the use of our Site to prevent or detect fraud, abuse, illegal use and breaches of our General Terms and Conditions, and to comply with court orders and government requests or fulfil applicable legal requirements.
4. WHAT IS THE LEGAL BASIS FOR PROCESSING?
We will process your personal data only where we have a legal basis for doing so.
In most cases, we will process your data to provide you with access to the Site and to the services offered on it. In addition, we may process your data for one or more of the following reasons:
▪ With your prior explicit consent (for example, to inform you about our products, services and events and for other promotional purposes, and to offer you a personalised service)
▪ To ensure compliance with legal obligations, regulations and EU rules (for example, to comply with court orders and government requests or fulfil applicable legal requirements)
▪ For our legitimate interest (for example, to improve the services we offer through the Site or to protect the ownership and security of the data we process).
5. IS PROVIDING YOUR DATA MANDATORY?
Providing personal data is mandatory only for the processing necessary to provide you with access to our Site and to the services we offer through it. Any refusal to provide the personal data required for this purpose makes it impossible to register on the Site and to use its services. All other information is optional, but providing it allows us to offer you a better experience.
6. HOW DO WE PROCESS YOUR DATA AND FOR HOW LONG?
Personal data will be stored in paper and/or electronic form and for the time strictly necessary to achieve the purposes referred to in point 3 above (“For what purposes do we process your data?”).
In particular, when you register on the Site and create an account, we process and retain most of the information we hold about you for as long as you actively use the services we offer through the Site. Following the closure of your account, we will retain your personal information for a maximum period of 24 months from the date of deletion of the account for the purposes of defence and/or to assert our rights in court and/or out of court in the event of disputes relating to the performance of our services; your further personal information relating to transactions carried out through the Site is retained for 10 years as required by law (including tax obligations).
For direct marketing and profiling purposes, we retain your data for a maximum period equal to that provided for by the applicable legislation, namely 24 and 12 months respectively from your last interaction of any kind with the Site.
For analysis purposes aimed at improving the service, the user’s personal data will be subject to a maximum retention period of 24 months from the date on which they were recorded.
At the end of the maximum retention period, we will automatically delete your data or anonymise it permanently and irreversibly.
Please note that if you do not take any active action (such as using the services offered by the Site, browsing, searching and/or any other use of the Site) for a continuous period of 36 months, you will be classified as an inactive user and, after written notice concerning the deactivation of your account, we will retain your personal data for the maximum retention period provided for herein.
7. HOW CAN YOU EXERCISE YOUR RIGHTS?
In accordance with the GDPR, you have the right to request from us, at any time, access to your personal data and the rectification or erasure thereof, to object to their processing or to exercise the right to data portability. The applicable data protection legislation also allows you to exercise the right to request the restriction of processing in the cases provided for by Article 18 GDPR, and to obtain the data concerning you in a structured, commonly used and machine-readable format in the cases provided for by Article 20 GDPR.
Requests may be sent to the email address salumeriatoscanadop@gmail.com.
In particular, if you have authorised the activities referred to in letter b) (Marketing purposes) of point 3 above (“For what purposes do we process your data?”) and subsequently no longer wish to receive further communications from us or wish to limit the ways in which you are contacted, you may stop these communications at any time, including simply by clicking on the “unsubscribe” link at the bottom of each communication.
Finally, we remind you that you always have the right to lodge a complaint with the competent supervisory authority, the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), pursuant to Article 77 GDPR, if you believe that the processing of your data infringes the regulations in force.
8. HOW DO WE ENSURE THE PROTECTION OF YOUR DATA?
Your personal data are processed by the parties indicated in point 1 above (“Who processes your data?”), in accordance with the applicable legislation. In particular, to ensure the security of your data, taking into account the state of the art and the costs of implementation, as well as the nature, scope, context and purposes of processing and the risk of varying likelihood and severity for the rights and freedoms of natural persons, we have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
9. WHEN WAS THIS NOTICE UPDATED?
This notice was published on the date indicated in the heading and may be amended over time, including in connection with the entry into force of new sector regulations, the updating or provision of new services, or technological innovations. In such case, we will inform you by drawing your attention to these updates.
10. FURTHER INFORMATION
(A) Job applications
If the “Work with us” page is active on our Site, you will be able to view any open positions we may have and send us an unsolicited application.
CVs received, following the announcement of our open positions through the Site or if you decide on your own initiative to send us your CV, will be retained for a maximum period of 6 months from the date of receipt solely for the purpose of evaluating your application or re-evaluating it for subsequent searches for professional positions compatible with your profile, provided that such searches are opened during the maximum retention period of your data. You may object to the processing of your personal data at any time by writing to salumeriatoscanadop@gmail.com.
If you apply, remember to include in your curriculum vitae the statement by which you consent to the processing of your personal data for recruitment purposes, and avoid including sensitive personal data (such as health status or religious, philosophical or political beliefs) that are not relevant to the job offer.
(B) Third-party links
This Privacy Policy refers exclusively to the Site. Where the Site contains links to third-party websites, please note that we do not exercise any form of control over them and are in no way responsible for them. We therefore invite you to read the respective privacy notices on the third-party sites you access.
11. COOKIES
Cookies are small text files that the Site saves on your device to make it work, to remember your choices and, only with your consent, to measure visits and show you relevant advertising.
Technical (necessary) cookies
These are needed to make the Site work: cart, checkout, account login, language and currency, security. They are set by the Shopify platform, which hosts the shop, and do not require your consent.
Statistics cookies
These help us understand how the Site is used in order to improve it. We use Google Analytics, provided by Google Ireland Limited. These cookies are set only with your consent.
Marketing cookies
These are used to measure the effectiveness of our campaigns and to show you ads in line with your interests on other websites and social networks. They are set only with your consent. We use the services of:
- Google Ads (Google Ireland Limited);
- Meta Pixel (Meta Platforms Ireland Limited, for Facebook and Instagram);
- TikTok Pixel (TikTok Technology Limited);
- Pinterest Tag (Pinterest Europe Limited).
Product reviews are displayed via the Judge.me app, which may use technical cookies to display them correctly.
How to manage cookies
You can accept, reject or choose which non-technical cookies to enable from the banner that appears on your first visit, and change your mind at any time. You can also delete or block cookies in your browser settings: in this case, some functions of the Site, such as the cart, may not work properly.
To find out how the providers listed process the data collected through cookies, you can consult their respective privacy notices.
12. DO YOU HAVE ANY FURTHER QUESTIONS?
We welcome questions, comments and concerns about our privacy notice and our privacy practices.
If you wish to provide feedback or if you have any questions or concerns, please write to us at salumeriatoscanadop@gmail.com.