Privacy Policy
Last updated: 25 gennaio 2025
This privacy policy is provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and describes how we process personal data of users who visit and use the website goldenhive.it.
1. Data Controller
The Data Controller is:
LA TRAMONTANA DELLA CACCIARELLA S.R.L.
Limited Liability Company
Via Gualtiero Serafino 8 - 00136 - Rome (RM), Italy
VAT/Tax Code: 11978511001
EU VAT: IT11978511001
REA: RM-1341172
Certified Email: [email protected]
Email for privacy requests: [email protected]
2. Categories of Data Collected
We collect the following categories of personal data:
Identity data
Name, surname, tax code (if required for invoicing)
Contact data
Email address, phone number, shipping and billing address
Transaction data
Order details, purchase history, payment information (securely processed through Stripe or PayPal)
Technical data
IP address, browser type and version, time zone settings, browser plug-in types and versions, operating system
Usage data
Information about how you use our website, products and services
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Contract Performance (Art. 6(1)(b) GDPR)
To process your orders, manage your account and provide you with the products and services you requested
Consent (Art. 6(1)(a) GDPR)
For sending marketing communications and newsletters, and for the use of non-essential cookies
Legal Obligation (Art. 6(1)(c) GDPR)
To comply with tax, accounting and document retention obligations under Italian law
Legitimate Interest (Art. 6(1)(f) GDPR)
To prevent fraud, ensure website security and improve our services
4. Purposes of Processing
Your personal data is processed for the following purposes:
- Processing and managing orders
- Shipping and delivering products
- Processing payments
- Customer service and request management
- Managing your user account
- Sending newsletters and promotional communications (with consent only)
- Statistical analysis to improve the website and services
- Compliance with legal and tax obligations
- Fraud and abuse prevention
5. Data Sharing and Data Processors
Your data may be shared with the following third parties acting as data processors:
| Servizio | Finalità | Privacy Policy |
|---|---|---|
| Stripe, Inc. | Credit/debit card payment processing | Link |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | PayPal payment processing | Link |
| Google LLC (Google Analytics) | Web traffic statistical analysis | Link |
| Meta Platforms, Inc. (Meta Pixel) | Advertising conversion tracking | Link |
| Couriers and shipping services | Delivery of ordered products | Varies depending on the carrier used |
Some of our data processors are located in the United States. Data transfers to the US are carried out based on Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework.
6. Your Rights (Art. 15-22 GDPR)
As a data subject, you have the following rights:
Right of Access (Art. 15)
You have the right to obtain confirmation whether personal data concerning you is being processed and, if so, to access the personal data
Right to Rectification (Art. 16)
You have the right to obtain rectification of inaccurate personal data concerning you
Right to Erasure (Art. 17)
You have the right to obtain the erasure of personal data concerning you, unless legal retention obligations apply
Right to Restriction (Art. 18)
You have the right to obtain restriction of processing in certain circumstances
Right to Data Portability (Art. 20)
You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format
Right to Object (Art. 21)
You have the right to object at any time to the processing of personal data concerning you, including profiling
Right to Withdraw Consent
You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
To exercise your rights, you can contact us at [email protected] or via certified email at [email protected]
7. Data Retention Period
We retain your personal data for the following periods:
- Order and billing data: 10 years (tax obligations under Art. 2220 Italian Civil Code)
- Account data: until account deletion or deletion request
- Marketing data: until consent withdrawal
- Analytics data: 26 months (Google Analytics)
- Technical logs: 12 months
8. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all communications
- Data access limited to authorized personnel
- Continuous system monitoring
- Regular data backups
- Staff training on data protection
9. Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by Art. 34 of the GDPR.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante Privacy):
Garante per la protezione dei dati personali
Piazza Venezia 11 - 00187 Rome
Website: www.garanteprivacy.it
Email: [email protected]
PEC: [email protected]
11. Cookies
For detailed information about the use of cookies, please consult our Cookie Policy.
12. Changes to the Privacy Policy
We reserve the right to modify this privacy policy. In case of substantial changes, we will notify you through the website or by email.