Privacy Policy

This privacy policy describes how La Bottega del Natale collects, uses, and protects the personal data you provide when using our online platform. We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect information you provide directly to us when you use our service. This may include:

• Personal identification and contact information (such as your name, billing and shipping address, and country).
• Payment information (processed securely by third-party payment processors; we do not store your full payment card details).
• Order details and purchase history.
• Communications you send to us (such as inquiries, customer service requests, and feedback).
• Information you provide when creating an account on our site.

We also automatically collect certain information when you access and use our online platform. This may include:

• Device information (such as hardware model, operating system, browser type).
• Log information (such as IP address, pages viewed, date and time of visit, referral source).
• Usage data (information about how you interact with our site and services).

How We Use Your Information

We use the information we collect for various purposes, including:

• To process and fulfill your orders, manage payments, and provide requested products and services.
• To communicate with you about your orders, account, and inquiries.
• To provide customer support.
• To improve our online platform, products, and services.
• To personalize your experience on our site.
• To detect and prevent fraud and other malicious activity.
• To comply with legal obligations and enforce our terms and conditions.
• For internal business purposes, such as data analysis, auditing, and research.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract: Processing is necessary for the performance of a contract with you, such as fulfilling your order and providing customer support.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate interests: Processing is necessary for our legitimate interests, such as improving our services, preventing fraud, and managing our business operations, provided these interests are not overridden by your data protection rights.
• Consent: We may process your data based on your consent for specific purposes, such as sending marketing communications, where required by law. You have the right to withdraw your consent at any time.

Sharing Your Information

We may share your personal data with trusted third parties under the following circumstances:

• Service providers: We may share data with third-party vendors and service providers who perform services on our behalf, such as payment processing, shipping, data analysis, hosting, and customer service. These parties are authorized to use your personal data only as necessary to provide these services to us.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your information may be transferred as part of that transaction.
• With your consent: We may share your information with your consent or at your direction.

We do not sell or rent your personal data to third parties for their marketing purposes.

Data Security

We take reasonable measures to protect your personal data from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose for which it is processed.

Your Data Protection Rights

In accordance with applicable data protection laws, you have certain rights regarding your personal data. These may include:

• The right to access your personal data.
• The right to request rectification of inaccurate personal data.
• The right to request the erasure of your personal data (in certain circumstances).
• The right to restrict the processing of your personal data (in certain circumstances).
• The right to data portability (in certain circumstances).
• The right to object to the processing of your personal data (in certain circumstances).
• The right not to be subject to automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• The right to withdraw your consent at any time (where processing is based on consent).
• The right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes applicable law.

To exercise these rights, you may contact us using the contact information provided below.

Cookies and Tracking Technologies

Our online platform uses cookies and similar tracking technologies to collect information about your browsing behavior. Cookies are small data files stored on your device that help us improve our site and your experience, see which areas and features of our site are popular, and count visits. You can control the use of cookies through your browser settings.

Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our online platform.

Contact Information

If you have questions or concerns about this privacy policy or our data practices, you may contact us by postal mail at:

La Bottega del Natale
78 Via dei Calzaiuoli
Florence, Tuscany, 50122
Italy