Privacy Policy

This Privacy Policy aims to describe how the website https://donpeppinu.it is managed by Flamingo S.r.l. with regard to the processing of personal data of users/visitors accessing it.

This information notice is intended to provide users with details about the processing of their personal data in compliance with Article 13 of the Italian Personal Data Protection Code and Articles 13 and 14 of the European Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The Data Controller is Flamingo S.r.l., headquartered in Modica – C.da Addolorata Mola n. 39 – 97015, email info[@]donpeppinu.it, VAT number 01550130882.

The Data Controller has not appointed a Data Protection Officer (DPO).

2. Types of Data Processed

The Data Controller collects the following data during the navigation of its website:

2.1 Navigation Data (Technical Cookies)

The IT systems and software procedures responsible for the operation of this website automatically collect certain data during normal operation, which are implicitly transmitted when using Internet communication protocols.

This information, by its nature, could—through association and processing with data held by third parties—allow the identification of users/visitors (e.g., IP address, operating system installed on the user’s device, browser used for navigation, time of navigation, pages visited and links clicked within them, duration of page views, referring websites).

These data, in anonymous form, are used solely for statistical purposes and to monitor the correct functioning of the site.
2.2 Third-Party Cookies

For this particular type of cookies, please refer to our cookie policy, which you can find below or at the following link: Cookie Policy.
2.3 Data Voluntarily Provided by Users/Visitors:

When users/visitors connect to this website and submit their personal data to access certain services or to make requests via email, this entails the collection by the Data Controller of the sender’s address and/or other personal data that will be processed exclusively to respond to the request or to provide the service.

3. Purpose of Data Processing

The personal data collected by the Data Controller are intended for the following purposes:

to ensure the user the best delivery and management of the service;
to assess the quality of services and the level of user satisfaction;
the tracking of user browsing behavior through statistical detection tools, including cookies (please refer to the related policy for more information);
to enable the use of the “contact” form on the website;
to allow the user to subscribe to the newsletter.

4. Legal Basis for Processing

The processing of the user’s personal data is justified by the following legal grounds:

For purposes a., b., and c., the legitimate interest of the Data Controller;
For purposes d. and e., the explicit consent of the user.

5. Data Retention

Navigation data will be retained for a period not exceeding three months;
Data collected through the contact form will be retained by the Data Controller for as long as necessary to respond to users’ inquiries, and in any case, for a maximum period of twelve months;
Data collected for the user’s newsletter subscription will be retained for the entire duration of the subscription. Processing will cease upon the user’s request to unsubscribe from the newsletter;
Data collected for the creation of a private area/profile within the website will be retained for the entire duration of the private area/profile. Retention will cease upon the user’s request to delete the private area/profile;

6. Data Disclosure

Data collected during navigation or provided by the user through the contact form or newsletter subscription form may be disclosed to:

to third parties with whom the Data Controller has established partnership agreements, solely for the purpose of providing the offered services;
to independent advertising companies that may use these data on the user’s visits (which do not include the user’s name, address, email address, or phone number) to this and other websites to create advertisements for products and services that might interest the user.

7. Data Subject’s Rights

The rights granted to data subjects under EU Regulation No. 679/2016 include the rights to:

request access to the personal data collected and the related information;
request the correction of inaccurate data or the completion of incomplete data;
request the deletion of their personal data in the cases provided for by Article 17, paragraph 1 of EU Regulation No. 679/2016;
request the restriction of the processing of the user’s data in the cases provided for by Article 18, paragraph 1 of EU Regulation No. 679/2016;
request and obtain that the user’s personal data processed in an automated manner and collected with the data subject’s consent or based on a contract with the data subject be provided to them in a structured, commonly used, and machine-readable format, including for the purpose of transmitting such data to another data controller (right to data portability);
object at any time to the processing of their personal data in the cases provided for by Article 21 of EU Regulation No. 679/2016;
withdraw consent at any time, but only in cases where the processing is based on consent for one or more purposes and involves common personal data (such as date and place of birth or place of residence) or special categories of data (such as racial origin, political opinions, religious beliefs, health status, or sexual life);
file a complaint with a supervisory authority and for Italy, with the Data Protection Authority (www.garanteprivacy.it).

8. Methods of Processing

Processing is carried out using automated tools (e.g., electronic procedures and devices) and/or manually (e.g., on paper), for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with applicable legal provisions.

9. Optional Nature of Data Provision

Except for navigation data, the provision of personal data is optional. However, failure to provide such data may make it impossible for users/visitors to access or receive the requested services.