Privacy Policy

Last updated: July 14, 2025

Acetaia Malagoli Daniele Srl , with registered office in Castelfranco Emilia (MO), via Celeste n. 9, CF and VAT number 04171920368 , in the person of its legal representative pro tempore , owner of the website reachable at the URL www.acetaiamalagoli.com (hereinafter, “Site”) , informs the interested party (User) that his/her personal data, relating to navigation within the Site itself, with direct access from the homepage or through subpages, as well as relating to the use of the services, goods or products offered, will be treated with the utmost care and with tools designed to guarantee suitable security. Please note that this information – which complies with Articles 13 and 14 of EU Regulation 2016/679 on the protection of personal data (also known as the "General Data Protection Regulation" – GDPR) and Legislative Decree 196/2003 ("Personal Data Protection Code") – does not apply to other external websites that may be accessed via links contained therein.

DATA CONTROLLER.

The data controller is Acetaia Malagoli Daniele Srl , with registered office in Castelfranco Emilia (MO), via Celeste n. 9, CF and VAT number 04171920368. The data controller can also be contacted at the email address info@acetaiamalagoli.com .

PURPOSE AND LEGAL BASIS OF DATA PROCESSING.

Allow correct navigation on the Site.
Complete and execute the purchase of goods and booking of services offered on the Site.
Allow registration on the Site and use of services reserved for registered users.
Manage requests made by Users via email or telephone.

The processing of personal data for these purposes is necessary, pursuant to Art. 6, paragraph 1, letter b) of the GDPR, to perform a contract to which the User is a party, or to take pre-contractual measures at the User's request.

The provision of personal data by the User, while not a legal requirement, is necessary to achieve these purposes. Failure to provide such data will make it impossible to achieve them.

Perform statistical analyses of navigation and users.
Allow subscription to the newsletter for sending commercial and promotional information.

The processing of personal data for these purposes is subject to the User's consent, pursuant to Art. 6, paragraph 1, letter a) of the GDPR.

Providing personal data by the User is optional. Failure to provide it does not prevent the User from using the Site; the User will not be subjected to statistical analysis, nor will he or she receive commercial or promotional emails.

Comply with all obligations incumbent on the data controller under applicable legislation.

The processing of personal data for these purposes is necessary, pursuant to Art. 6, paragraph 1, letter c) of the GDPR, to fulfill legal obligations to which the data controller is subject.

By providing personal data for any of the purposes listed above, the data controller may process them to fulfill legal obligations.

Exercise or defend a right in court.

The processing of personal data for this purpose is necessary, pursuant to Art. 6, paragraph 1, letter f) of the GDPR, to pursue the data controller's legitimate interest in protecting its rights in court.

By providing personal data for any of the purposes listed above, the data controller may process them to exercise legal rights.

TYPE AND SOURCES OF THE DATA PROCESSED.

Acetaia Malagoli Daniele Srl does not process personal data relating to minors under the age of 18. By accessing the Site, registering a user account, using the services offered, or purchasing goods, the User expressly declares that he or she is at least 18 years of age.

Data deriving from the User's navigation.

This data, through the normal operation of the Site, is acquired and transmitted implicitly through the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but, by its very nature, through processing with data held by third parties, it could allow Users to be identified.

This category of data includes the IP addresses or domain names of the computers used by Users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the User's IT environment.

This data is used solely to obtain anonymous and aggregate statistical information on the use of the Site and to monitor its proper functioning. It resides permanently on the servers of third-party hosting providers. The data may also be used to determine liability in the event of any unlawful or harmful actions carried out on or through the Site.

However, these data processing and association activities are never carried out by the data controller; they are used solely to verify correct functioning and are automatically deleted after processing.

Cookies.

Like many websites, we use cookies on the Site to operate and improve its functionality (including to remember your actions and preferences), perform analytics, and better understand interactions. We may also allow third parties and service providers to use cookies on the Site to better personalize services, products, and advertising on the Site and other websites. For specific information about the cookies we use in connection with operating our store with Shopify, visit https://www.shopify.com/legal/cookies .

Most browsers automatically accept cookies by default, but you can choose to remove or reject cookies through your browser settings. Removing or blocking cookies may negatively impact your user experience and may result in the incorrect functioning and unavailability of some Site services, including some general features and functionality. Additionally, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.

The Site also recognizes the Global Privacy Control (GPC) signal, which allows you to opt out of certain uses or disclosures of your information. If you communicate your preference via GPC, we will treat that signal as a valid request to opt out of sharing/targeted advertising for the associated browser or device, and if we are able to associate the device by sending the signal to your Shopify account, we will apply the opt-out request to your account as well. To learn more about Global Privacy Control, visit https://globalprivacycontrol.org/ . Beyond Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent by your web browser or device.

3. Data provided voluntarily by the User.

This data is provided by the User, during voluntary interaction with the Site, in order to use the services offered on the Site, purchase the products sold on the Site , request information, receive assistance or for any personal purpose.

In particular, this concerns:

Personal data required to register the User account: first and last name, date of birth, email address; optional personal data: gender;
personal data necessary to conclude and execute the purchase and sale of goods on the Site or service reservations: shipping and billing address, telephone number, payment information, as well as the data necessary to register the User account and/or security questions and other information used for account security purposes;
Personal data of third parties, if provided voluntarily by the User who decides, for example, to purchase goods to be delivered to a friend or to give a gift; in such cases, Acetaia Malagoli Daniele Srl will provide the third party with the privacy policy upon initial communication;
personal data provided voluntarily when contacted by email or telephone to request information, receive assistance, or for any personal purpose;
Personal data required to subscribe to the newsletter: email address.

DATA PROCESSING METHODS.

Your personal data is processed, using methods strictly necessary to achieve the purposes indicated above, through some or all of the operations indicated in Article 4, No. 2) of EU Regulation 2016/679: collection, recording, organization, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. These operations may be performed with or without the aid of electronic, telematic, or otherwise automated tools, in any case in compliance with the provisions of Article 32 of EU Regulation 2016/679. The User's personal data is not subject to any fully automated decision-making process, including profiling.

DATA RETENTION.

The User's personal data will be processed and stored for the entire period necessary to fulfill the aforementioned purposes and, in particular:

the data collected to conclude and execute contracts for the purchase of goods and/or booking of services on the Site are retained until the conclusion of the contract and the administrative-accounting formalities, while the data relating to invoicing are retained for ten years from the invoicing date;
Payment data for commercial transactions relating to the purchase of goods on the Site are retained until payment is certified and the related administrative and accounting formalities are completed following the expiry of the right of withdrawal and the terms applied for contesting the payment;
the data collected for the registration of the user account are retained until the cancellation of that account;
the data collected for the management of requests made by email or telephone are retained until the request is completed;
the data collected to allow correct navigation on the Site are stored for the duration indicated in the specific Cookie Policy ;
the data collected for newsletter subscription are retained until the User remains subscribed to the newsletter and/or does not object to such processing;
the data collected for statistical analysis are retained for the period established by the analytical cookies adopted, as illustrated in the specific Cookie Policy;
the data collected for the fulfillment of legal obligations are retained for the time necessary for the provisions of the law or regulation;
The data collected for the defense of rights in court are retained until the statute of limitations of the right to be asserted expires or, if legal proceedings are initiated, until their definitive conclusion.

DATA COMMUNICATION.

Your personal data may be disclosed to, or accessed by, the following for the purposes listed above and to provide, improve, protect, and promote our services:

persons authorized to process data, i.e. collaborators and/or employees of the data controller;
data controllers and related additional controllers and authorized persons, such as, by way of example and not limited to: accountants, consultants, service providers, IT service providers or support providers, and their assigned technical personnel, any collaborators, and those in charge of occasional maintenance operations, all adequately trained in protecting confidentiality;
banking institutions and online payment infrastructures;
couriers, carriers and freight forwarders;
judicial or administrative authorities, for the fulfillment of legal obligations;
entities that process data in compliance with specific legal obligations.

TRANSFER OF DATA TO THIRD COUNTRIES.

Personal data is transferred to countries outside the European Union and the European Economic Area, where it is stored and maintained on Shopify servers located in Canada and the United States. In any case, Shopify offers guarantees regarding the collection, use, and retention of personal data of data subjects residing in the European Economic Area, as stated at https://it.shopify.com/legal/privacy . Regarding the transfer of personal data to Canada, such data is protected by PIPEDA, the Canadian private sector privacy regulation, deemed adequate by the European Commission through an adequacy decision. Regarding the transfer of personal data to the United States, however, Shopify adopts so-called "binding corporate rules" pursuant to Article 47 of EU Regulation 2016/67. In any case, such transfer may be considered necessary for the conclusion and performance of a contract between the User/Customer and Acetaia Malagoli Daniele Srl (for the purchase of goods offered on the Site), pursuant to Article 49, paragraph 1, letter b) of EU Regulation 2016/679.

RIGHTS OF THE INTERESTED PARTY.

Pursuant to Articles 15-18 and 20-21 of EU Regulation 2016/679, the User has the:

right to access your personal data (once you have received confirmation that your data is being processed by the data controller);
right to obtain the rectification and integration of your data;
right to obtain the deletion of your data;
right to obtain restriction of processing of your personal data under certain conditions;
right to receive the personal data provided to the data controller in a structured, commonly used and machine-readable format, and to transmit them to a different data controller if technically feasible;
right to object to the processing of personal data where there are reasons related to his/her personal situation;
right not to be subject to automated decision-making;
right to obtain communication in the event that one's data is subject to a serious breach, likely to present a high risk to the rights and freedoms of natural persons;
right to withdraw consent to processing at any time;
The right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place where the alleged infringement occurred. In Italy, the supervisory authority is the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, Italy, telephone number: +39 06 696771, email address: protocollo@gpdp.it , certified email address: protocollo@pec.gpdp.it .

Requests should be addressed to the data controller, who undertakes to make it as easy as possible for data subjects to exercise their rights, using the contact details indicated in point 1.

CHANGES TO THIS PRIVACY POLICY.

Acetaia Malagoli Daniele Srl reserves the right to modify, update, add, or remove portions of this Privacy Policy at its sole discretion and at any time.

The interested User is required to periodically check for any changes published on the Site.