Privacy Policy

The Data Controller is CIGIERRE – COMPAGNIA GENERALE RISTORAZIONE S.p.A., VAT number 01896000302 (hereinafter also referred to as 'Cigierre'), with its registered office at via Nazionale n. 35 – 33010 Tavagnacco (UD).

You can contact the Data Controller:

• by sending a certified email to: cigierre@legalmail.it;
• by calling the number 0432-804804;
• by sending a letter to the address: via Nazionale n. 35 – 33010 Tavagnacco (UD).

The Data Controller has appointed a DPO (Data Protection Officer), whose tasks are listed in Article 39 of the GDPR.

You can contact the DPO:

• by sending an email to: dpo@cigierre.com;
• by sending a letter, addressed to the DPO, to the address: via Nazionale n. 35 – 33010 Tavagnacco (UD).

1) WEBSITE BROWSING 

• Purpose: analysis of logs required to monitor the actions performed by users of the Website and of the administrative area in order to protect the security of the Website and of the data collected, as well as to prevent malicious activities. 
• Categories of data processed:  Website usage data: log data, device used, IP address, date of access, pages visited and activities carried out in the individual sections of the Website. 
• Legal basis: legitimate interest of the Controller or of third parties (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code). For information on the balancing test carried out, please contact us using the contact details provided in this notice. 
  Retention period: 6 months and, in any event, for the time necessary for the purposes of the service or for any different limitation period established by law. 

2) PROTECTION OF THE CONTROLLER'S RIGHTS, COMPLIANCE WITH LEGAL OBLIGATIONS AND CONTROLS BY THE AUTHORITIES 

• Purpose: Your data may be processed by the Controller in order to protect its rights, to take legal action or to assert claims against You or third parties, or to comply with obligations arising from laws, regulations, EU legislation, or provisions/requests of Authorities entitled to do so by law and/or of supervisory and control bodies. 
• Categories of data processed: 
  • identification and contact data: first name; last name; e-mail; date of birth; gender; city; postcode; mobile phone number; 
  • other data: information freely provided by You when filling in the various online forms on this Website; 
  • Website usage and log data: log data, device used, IP address, date of access; pages visited, activities carried out in the individual sections of the Website. 
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code) or compliance with a legal obligation (Art. 6(1)(c) GDPR). For information on the balancing test carried out, please contact us using the contact details provided in this notice
• Retention period: the limitation period established by law. In any event, payment and transaction data are retained for 10 years for administrative and accounting purposes.

3) COOKIES
The Website uses cookies. Please read our Cookie Policy, bearing in mind that You can change Your cookie preferences at any time via the following link.

4) TRACKING OF TRANSACTIONAL AND SERVICE E-MAILS

• Purpose: use of tracking pixels in transactional and service e-mails (such as, by way of example, order confirmations, account activation or confirmation messages, communications relating to the completion or update of the authentication process, handling of requests to change credentials, notifications relating to operations carried out on the Website or App, and responses to requests to exercise data subject rights) for the sole purpose of verifying that the message has actually been received and opened on a device attributable to the recipient user, in order to ensure the proper provision of the requested service and the security of the account.
• Categories of data processed: data relating to the opening of the e-mail, date and time of opening, type of device used to open the message, browser, operating system, e-mail client.
• Legal basis: this purpose does not require the data subject's consent, as it is a measure strictly necessary for the provision of a service explicitly requested by the user (Art. 122 of the Italian Privacy Code).
• Retention period: the data relating to the opening of the message is retained for the time necessary to verify the proper receipt of the transactional or service communication and, in any event, for no longer than 6 months from sending, without prejudice to any different limitation period established by law for the protection of a right.

 

We process the data you provide directly or that is acquired by the Data Controller in the course of its activities. We do not collect and process personal data obtained through the consultation of databases, public registers, or other sources.

Your personal data may be accessed by duly authorised employees, as well as by external suppliers, appointed as data processors where necessary, who provide support in the delivery of the services, and by law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorised by law, to the extent strictly necessary to achieve the purposes for which the data were provided:

• support for the "Contact Us" form: our authorised staff or support service provider;

In any event, You may request a complete and up-to-date list of the parties with whom we share Your data by sending an e-mail to: cigierre@legalmail.it or by contacting the DPO at dpo@cigierre.com.  
Please note that Your data will not be disseminated beyond the foregoing. 
 

• Right to obtain access to Your personal data and to the following information:  
  • confirmation as to whether or not personal data concerning You are being processed;  
  • the purposes of the processing;  
  • the categories of personal data concerned;  
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed;  
  • where the personal data are not collected from the data subject, any available information as to their source;  
  • the existence of automated decision-making, including profiling;  
  • a copy of the personal data undergoing processing. 

• Rectification, erasure or restriction of processing (Articles 16, 17 and 18 GDPR); 

• Right to object at any time to the processing of Your personal data, including profiling, in particular where:  
  • the processing is based on the legitimate interest of the Controller, subject to You stating the grounds for Your objection;  
  • the personal data are processed for direct marketing purposes; 
  • the processing is carried out for the purpose of sending commercial communications and advertising or direct sales material. 

• Right to data portability, i.e. the right to receive the personal data concerning You, which You have provided to a Controller, in a structured, commonly used and machine-readable format and, where applicable, to transmit those data to another controller, where the processing is based on consent or on a contract and is carried out by automated means. Where technically feasible, You have the right to have the data transmitted directly from one controller to another.  

• Right to withdraw Your consent at any time; where the processing does not rely on another legal basis (including compliance with a legal obligation or performance of a contract), the data must be erased by the Controller. 

• Right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and instructions published on the Authority's official website www.garanteprivacy.it.