Privacy Policy

Holder of processing of personal data

The Data Controller of the personal data is Associazione Culturale ROSABAKEHOUSE, based in 00060 Capena (RM), Via Scoranello, no. 14, Fiscal Code and VAT no. IT97930000589, e-mail: privacy@rosabakehouse.com (from now on called “Data Controller”). At this moment there is no one responsible for protection data.

Categories of the personal data of the customers collected by the Data Controller.

The personal data are collected in order to provide our products and constantly improve the service offered with the aim of satisfying your needs.

The categories of the data we collect are as follows:

Data directly received:

The Data Controller stores each data that you directly provide us with regards to the services provided and purchases made.  You can freely choose not to provide some

personal data but, in this case, you shall be aware that you may not be able to take advantage from many services we provide. 

In this category you find: 

Common data: (for example records and fiscal data, delivery addresses, mail address, etc.) used for the registration, for the subscription to newsletters, for the purchase of products, to take advantage from pre- and after-sales services.

Data referred to your interests and preferences: collected through the voluntary compilation of our questionnaires and used to define, with your consent, your personal profile.

Videos and photos referring to products: The Owner frequently receives from the users and/or Customers of the web site www.rosabakehouse.com videos and photos regarding products, recipes, use demonstrations, etc. that, after moderation and editing by persons appointed by the Owner, will be advertised on RosaBakehouse’s social channels.

Data collected automatically. 
In this category you find:

Data collected in our website: when you visit our website, you sign up, proceed with the purchase and use our services, the Data Controller collects and automatically stores some data categories, as for example your preferences selected, or your choices and interests in some special product and service categories. Some data will be used to record some of your settings (i.e. language of the site) and making your surfing more comfortable. Other data are used to define, upon your consent, your personal profile with the aim of sending your advertisement which could be of your interest shown.
If you subscribe to our newsletter, we will regularly send you our e-mail newsletter bases on your consent according to Art. 6 (1) 1 lit. a) GDPR, using the data required or disclosed by you separately for this purpose. 
You may unsubscribe from the newsletter service at any time. For this purpose you can either send a message clicking on the “Chat” button ans speaking with one of our operators or use the opt-out link in the newsletter. Upon subscription, we will delete your e-mail address unless you have expressly consented to the further use of your data, or we reserve the right to further use your personal data in the scope and manner permitted by the lawn, of which we inform you in this notice. 
If we receive your e-mail address in connection with the sale of a product and you have not opted out, we reserve the right to occasionally email you to remember that there are still products pending in your cart. You can opt out of this use of your email address at any time by sending a message by clicking on the below “Chat” button or by using the opt-out line in the advertising email, without incurring any costs.

Data received from other sources: The Data Controller, unintentionally, could receive your information from other sources following a previous consent and accesses made on other web sites. Therefore, the choices made in other web sites can remain in the memory of your browser or your device disregard from the effective consent given to the Data Controller.

For the automatic collection of these data types cookies and similar technologies are used. For further information about cookies and their use or to express or deny your consent for the use of all or part of the cookies please read the Cookie Policy.

Purposes of data processing:

The Data Controller uses your personal data to carry out, provide and improve the services provided.

These purposes include:

Sale and delivery of products and services. The data are processed in order to receive and handle the purchase orders, provide services and products and provide assistance with reference to the purchases made, products, services and promotional offers.

Provide and improve services. Data are processed in order to analyze the activities, suggest functionalities, correct and improve the use and efficiency of our services in order to provide an appropriate assistance also in the After-Sales step.

Suggestions and customization. Data gathered from the monitoring of your navigation on the site, the interests that you demonstrate for particular products or services, the purchases you make and the information you voluntarily provide us through our questionnaires will serve to define your personal profile. The definition of your profile will allow us to suggest products, features and services that may be of interest to you, all in order to identify preferences and customize the services offered. We may process such data only with your consent, expressed through the acceptance of cookies or through the compilation of our questionnaires. Your missing consent will not affect the operation of the site in any way.

Communicate with you. The personal data are processed in order to communicate with you with reference to our services through several tools (i.e. via phone, e mail and chat).

Advertisement. The data are processed in order to show specific advertising, defined depending on the interests related to the functionality, products and services that could be of your interest. Personal data may be used, also for the purpose of sending informative and advertising material or for commercial communications in any case attributable to the activity of the Data Controller, as well as, subject to your previous consent, for direct marketing activities. Your lack of consent will in no way affect the operation of the site in any way.

The data controller may use for direct sales purposes the electronic mail details provided by the interested party in the context of a previous sale of their products / services, provided that they are products / services similar to those for sale and there is no the refusal of such use, initially or on the occasion of subsequent communications by the interested party.

Therefore, the interested party at the time of collection and at the time of sending each communication by the holder can oppose the processing at any time.

The interested party may take position against the use of his email address at any time by contacting the Data Controller in the manner described in the “Contacts, Information and Revisions” paragraph at the bottom of this page.

Prevention of fraud and credit risks. Data are processed also in order to prevent and detect frauds and abuses to protect your safety.

Comply with legal obligations. In some cases, the law obliges us to collect and process your personal data.
The legal basis of the processing is the execution of a contract, the pursuit of a legitimate interest of the data controller, the fulfilling of legal obligations, as well as the consent of the interested party where requested.

Communication of the processed data to third parties.

The Data Controller, recognizing the fundamental importance of your data for his activities, does not intend to transfer them to third parties. The Data Controller is limited to communicating the processed data to its employees, collaborators and third-party suppliers and, therefore, to companies that carry out certain activities on behalf of the Data Controller, for the purpose of processing orders and services requested by you, to suppliers of services and tools for the processing of personal data provided directly or derived from the navigation of the site, to all those public and private subjects to whom the communication is necessary for the correct fulfillment of the aforementioned purposes in order to comply with legal obligations, by regulations or by Community legislation. These subjects, however, are also subjected to the respect of the charges relating to the Privacy Information or in any case to procedures that provide for protections similar to those described in this Privacy Information. These third parties are not allowed to use the data for their own purposes, except to obtain, as owners, a specific consent. Data communication, therefore, is necessary and functional in order to guarantee the correct fulfillment of the purposes for which they were collected and, in any case, in full compliance with privacy regulations.

Transfer of data outside the European Economic Area.

Each time it is necessary to transfer the personal data beyond the borders of the European Economic Area, the Owner ensures that these data are transferred in total compliance with this Policy and with the related regulations concerning the protection of personal data.
Security of your personal data guaranteed.

Thanks to an internal staff and external suppliers, the Data Controller uses systems and devices apt at guaranteeing the security and the privacy of its customers.

Automated decision-making processes

We inform you that in the processing of your data an automated decision-making process could be adopted, aimed at improving the management of the site and your browsing experience.

Access to your own personal data and to your personal profile.

According to the applicable legislation, as an interested party you have the right to request the Data Controller to access, rectify and delete your personal data, as well as the possibility to exercise the right to the portability of the same to another Owner of Processing.

You can also ask the Data Controller to limit the processing of your data, or even to oppose it.

In case you decide to exercise one of these rights, or in case of clarifications and/or objections with reference to the way of collecting and handling the data, we suggest you to contact the Data Controller.

Withdrawal of consent 

If the processing, even of particular data, is based on consent [on Article 6, paragraph 1, letter a) of the Rules, or on Article 9, paragraph 2, letter a) of the Rules], it is your right to withdraw the consent same at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.

Complaint

It is your right to lodge a complaint with the Control Authority.

Time of preservation of personal data. Your personal data are preserved by the Data Controller in order to allow you to constantly use the services provided for as long as necessary for the pursuit of the purposes described in this Privacy Policy. For example, keeping the history of the transactions carried out and the shipments requested, we allow you to monitor the purchase and post purchase, and thus improve and facilitate the use of our services. Once you end the contract, data will be preserved for a period of time with the following criteria:

1. within the terms established by current legislation, even secondary
2. within the period necessary for the absorption of any legal protections. In any case, the maximum data retention time is estimated in ten years from the termination of the relationship.

Minors and services the data controller

The Data Controller does not sell products to minors. If you are less than 18 years old, you can use these services only with a parent or a guardian.

Contacts, Policy and Revisions

For any doubt, clarification, request and objections regarding the processing of the personal data please get in contact with the Data Controller at privacy@rosabakehouse.com

Finally, we would like to suggest that you frequently check our website www.rosabakehouse.com to check for any changes to our privacy policy, given the possibility of changes resulting from any improvement in our services.

Our current Privacy Notice applies to all data we have about you and your account, unless otherwise indicated.

Edition of: 01.03.2020