Privacy Policy

Notice pursuant to article 13 of Regulation (EU) 2016/679.

 

Data controller

Caviar Import S.r.l.
Via P.S. Mattarella 20/B, 30037 Scorzè (VE), Italy
Tax code / VAT no. 03946810276
Email: [email protected]
Certified email (PEC): [email protected]

This notice is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and applies to users who browse and purchase on this website.

 

Personal data we process

Depending on how you interact with the website, we process:

• contact details: first name, last name, billing and shipping address, telephone number, email;
• order data: products purchased, amounts, payment method, shipping status;
• account data: username, encrypted password, preferences and saved addresses;
• communications: the content of the messages you send us through the website forms or by email;
• technical data: IP address, device and browser type, pages visited, collected through cookies and similar technologies.

We do not process your payment card data: it is collected directly by the payment service provider.

 

Sources of data

Data come mainly from you, when you create an account, place an order, sign up to the newsletter or write to us. Some technical data are collected automatically while you browse. Further data may come from the payment providers and from the couriers handling delivery.

 

Purposes of processing

Personal data are processed for the following purposes:

• order management and product sales;
• performance of the purchase contract;
• shipping and delivery;
• customer service;
• tax and accounting obligations;
• legal obligations;
• marketing and newsletter, only with prior explicit consent.

 

Legal basis

The processing of data is based on:

• the performance of a contract;
• legal obligations;
• the consent of the data subject, for marketing and non-technical cookies;
• the legitimate interest of the controller, for example website security and fraud prevention.

 

Method of processing and security

Data are processed by electronic means and with adequate security measures to ensure their confidentiality, integrity and availability. No security measure is entirely impenetrable, however: please do not send us confidential information through unprotected channels.

 

Recipients of the data

Data may be disclosed to:

• couriers and logistics operators, for the delivery of orders;
• payment service providers: PayPal and Nexi (XPay) for card payments;
• Brevo, for sending the newsletter, if you have given your consent;
• IT and hosting suppliers that operate the website infrastructure;
• tax and legal advisors;
• public authorities, where required by law.

Suppliers process the data as data processors, under an agreement pursuant to article 28 of the GDPR. Data are not sold to third parties.

 

Transfers outside the European Economic Area

Some suppliers may process data outside the European Economic Area. In that case the transfer takes place on the basis of an adequacy decision of the European Commission or of the Standard Contractual Clauses.

 

Retention

Data are retained for the time necessary to:

• perform the contract;
• comply with tax and legal obligations, as a rule ten years for accounting records;
• any defensive purposes, within the limits of the law.

Data processed on the basis of consent are retained until that consent is withdrawn.

 

Rights of the data subject

You may exercise the rights provided for by articles 15-22 of the GDPR:

• access to data;
• rectification;
• erasure;
• restriction of processing;
• objection;
• portability;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.

Requests should be sent to [email protected].

 

Complaints

If you believe that the processing of your data infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of the country where you live.

 

Children’s data

The website is not intended for minors and we do not knowingly collect personal data of children. If you are a parent or guardian and believe that a child has provided us with their data, please write to us and we will delete it.

 

Cookies

The use of cookies and similar technologies is described in the Cookie Policy. You may change your preferences at any time through the consent banner.

 

Updates

This notice may be updated to reflect organisational, technical or regulatory changes. The current version is always published on this page.