La Tonda di Gastaldi Federico ("We", "Company", "La Tonda Dolci") is committed to protecting the privacy of our users ("you", "customer"). This policy describes how we collect, use, disclose, and protect your personal data in accordance with:

• General Data Protection Regulation (GDPR) of the European Union;
• California Privacy Rights Act (CPRA) for residents of California;
• Digital Markets Act (DMA) of the European Union;
• General Data Protection Law (LGPD) of Brazil;
• Protection of Personal Information Act (POPIA) of South Africa.

1. Data controller

The data controller is:

Company Name: La Tonda di Gastaldi Federico


Address: Via Antonio Pacinotti, 34 - 15121 - Alessandria (AL) - Italy


E-mail: info@latondadolci.com


Data Protection Officer (DPO): info@latondadolci.com

2. Types of Data Collected

We collect different types of personal data to provide you with our services. The personal data we collect includes, but is not limited to:

• Contact Data: Name, surname, address, email, phone number.
• Payment Data: Credit card details or other payment methods.
• Usage Data: Information on how you interact with our website (e.g., IP address, browsing data, product preferences).
• Geolocation Data: If authorized, we collect information about your location.
• Sensitive Personal Data (CPRA): If applicable, we collect sensitive information such as health data, sexual orientation, precise geolocation, only with explicit consent and for necessary purposes.
• Cookies and Tracking Technologies: We use cookies and similar technologies to collect information about how you use our website.

3. Purpose of Data Processing

We process your data for the following purposes:

• Contract Execution: To process your orders, manage payments, and provide after-sales assistance.
• Commercial Communications: If you consent, we may send you newsletters or promotions about
• Service Improvement: To analyze browsing data to improve the website user experience.
• Legal Compliance: To comply with legal obligations, such as maintaining accounting records.
• Security: To ensure the security of our website, prevent fraud, and improve cybersecurity.

4. Legal Basis for Data Processing (GDPR, LGPD, POPIA)

Under the GDPR, Brazilian LGPD and South African POPIA, the legal basis for processing your data is:

• Contract Performance: When we process data to provide our services, ship products, or respond to your inquiries.
• Consent: When we use your data for direct marketing purposes or to send newsletters.
• Legal Obligation: When we are required to process data to fulfill legal obligations (e.g., invoicing and accounting).
• Legitimate Interest: When we process data to prevent fraud or improve the security of our website.

5. Your Rights Under the GDPR

Under the GDPR, you have the following rights:

• Right of Access: You can request a copy of your personal data we hold.
• Right to Rectification: You can request the correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data.
• Right to Restriction of Processing: You can request to limit the use of your data in certain circumstances.
• Right to Data Portability: You can request the transfer of your data to another data controller.
• Right to Object: You can object to the processing of your data for direct marketing purposes.

6. Your Rights Under the CPRA

For residents of California, the CPRA grants you the following rights:

• Right to Know: You have the right to know what personal data we collect, use, and disclose.
• Right to Deletion: You can request the deletion of your data, subject to certain legal exceptions.
• Right to Opt-Out: You can opt-out of the sale or sharing of your data.
• Right to Limit the Use of Sensitive Data: You have the right to limit the use of sensitive personal data we collect.
• Right to Non-Discrimination: You will not be discriminated against for exercising your rights under the CPRA.

7. Rights Under LGPD and POPIA

If you reside in Brazil or South Africa, you have similar rights under their respective laws:

• Right to Access, Rectify, and Delete: You can access, correct, or request the deletion of your data.
• Right to Object: You can object to the processing of your data for certain purposes.
• Right to Portability: You can request that your data be transferred to another data controller.
• Right to Be Informed: You have the right to be informed about international data transfers.

8. International Data Transfers (GDPR, LGPD, POPIA)

If we process your data outside the European Union, Brazil, or South Africa, we ensure that appropriate measures are taken to ensure a level of protection adequate to the GDPR, LGPD, and POPIA, as well as local regulations.

9. Disclosure of Data to Third Parties

We share your personal data only with:

• Service Providers: Third parties who help us manage the site, process orders, payments, and deliveries.
• Legal Obligations: When required by law, we may disclose your data to the relevant authorities.
• Affiliated Companies: We may share your data with our affiliate companies for administrative or marketing purposes, with your permission.

We do not sell your personal data to third parties.

10. Data Security

We take appropriate security measures to protect your personal data from unauthorized access, loss, destruction, or alteration. We use SSL/TLS encryption protocols to protect online transactions.

11. Data Retention

Your personal data is retained for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable law. Once these purposes are completed, your data will be deleted or anonymized, unless legal retention obligations apply.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about your browsing on our site. For more details, please refer to our Cookies Policy.

13. Changes to the Privacy Policy

We reserve the right to update this privacy policy at any time. Changes will be posted on our website with a visible update date.

14. Contact

For any questions or requests related to this policy, you can contact us at:

Company Name: La Tonda di Gastaldi Federico


Address: Via Antonio Pacinotti, 34 - 15121 - Alessandria (AL) - Italy


E-mail: info@latondadolci.com

 

Last update: 01/02/2025