PRIVACY POLICY

1. Introduction

This document represents the external privacy policy to be published on all sites of the Birroteca group. On the basis of Art. 13 of the GDPR, in case of collection of data concerning him/her from the interested party, birroteca will provide the interested party, when the personal data are obtained, the following information:

a) the identity and contact details and, where applicable, of its representative;

b) the contact details of the data protection officer, where applicable;

c) the purposes of the processing for which the personal data are intended as well as the legal basis of the processing;

d) if the processing is based on article 6 (Legitimate interest), paragraph 1, letter f), the legitimate interests pursued by the data controller or by third parties;

e) any recipients or any categories of recipients of the personal data;

f) where applicable, the intention of birroteca to transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in Article 46 o 47, or in article 49, second paragraph, the reference to the appropriate or opportune guarantees and the means to obtain a copy of such data or the place where they have been made available.

In order to guarantee a correct and transparent treatment towards the interested party, birroteca will provide the following additional information (Article 13, paragraph II):

a) the retention period of the personal data or, if this is not possible, the criteria used to determine this period;

b) the existence of the right of the interested party to ask the data controller for access to personal data and the rectification or cancellation of the same or the limitation of the treatment that concern him or to oppose their treatment, in addition to the right to portability some data;

c) if the treatment is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;

d) the right to lodge a complaint with a supervisory authority;

e) if the communication of personal data is a legal or contractual obligation or a brewery requirement necessary for the conclusion of a contract, and if the interested party is obliged to provide personal data as well as the possible consequences of failure to communicate such data;

f) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the interested party.

2. Contents of the disclosure

2.1. Your privacy is important to us

Your privacy and the security of your personal data are really important to Birroteca Srl (“birroteca”), which is why we collect and manage your personal data with the utmost care and adopt all the necessary security measures.

Below you will find information on how we process your personal data deriving from browsing or using the services offered. For detailed information on how Birroteca manages your personal data, please read this Privacy Policy in its entirety.

Some services may be subject to different legal terms, in which case we will provide you with all the relevant information from time to time.

2.2.Data controller

The personal data controller is Birroteca SPA, Registered office Via Mafalda di Savoia, 41, 29122 PIACENZA (PC), Italy, VAT number 01606680336.

Contacts: info@labuttiga.it

Birroteca is the data controller of the activities carried out by the following group companies:

Birroteca Srl
la Buttiga Srl

This information applies to the following websites:

2.3.Responsible for the treatment

If a treatment must be carried out on behalf of birroteca, the latter will only resort to data controllers who present sufficient guarantees to implement adequate technical and organizational measures so that the treatment meets the requirements of this regulation, guarantees the protection of rights of the interested party.

2.4.Purpose of the treatment

Birroteca collects and processes your personal data for the following purposes:

conclude and execute the contract for the purchase of the products offered on the brewery group sites. When you complete your purchase, we ask you for the personal data necessary for the execution of the contract, such as payment, invoicing, product shipment and any return management.
registration on the sites of the brewery group and use of the services offered to registered users. Registration is possible by entering some personal information, necessary to guarantee your identification and the performance of the services offered to registered users.
provision of the services offered on the brewery websites. For this purpose, Birroteca needs to collect, in relation to each service and its characteristics, the personal data necessary to carry out the service requested by you.
management of requests to our offices, which uses the personal data you provide to satisfy your requests for information and requests for assistance.
sending CVs. If you send us your CV to be considered for an application for a position, we will use the information contained in your CV for that purpose only. Your CV will be kept for a maximum period of eighteen months, after which it will be cancelled: if you wish, you can of course send us a new updated version.
statistical analysis and surveys. We use some information on your use of the Birroteca group sites to carry out statistical analyzes and surveys in order to improve our offer and our services;
sending commercial and promotional communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the sites of the brewery group, we will send you communications containing our commercial proposals on similar products and services to the e-mail address you have provided.
subject to your express consent, we will be able to use the contact details you have provided for commercial communications on our products and services, in order to update you on news, new arrivals, exclusive products, our offers and promotions. Furthermore, always subject to your consent, we will be able to use your contacts in the context of carrying out market research and surveys to measure satisfaction in order to improve our services and the relationship with our users. These communications will take place exclusively with the methods chosen by you (via e-mail, SMS, telephone, paper mail, instant messaging).
only with your consent, Birroteca will be able to personalize your experience as a registered user on the sites of the Birroteca group by proposing previews and offers in line with your tastes and sending you personalized commercial communications according to your interests, these communications will take place exclusively with the methods you have chosen ( by e-mail, SMS, telephone, paper mail, instant messaging). Personalization will be carried out by analyzing your previous purchases and the other information described in the previous paragraph "Personal data collected". For more information on this data and on the activity that allows it to be processed, please consult the paragraph "Your buttiga account".
If you wish to authorize the activities referred to in the previous points and subsequently do not wish to receive further communications from the brewery or would like to limit the methods in which to be contacted, you can interrupt these communications at any time by simply clicking on the appropriate "unsubscribe" link at the bottom of each communication, or by sending an email to entering "privacy" as the subject.
We inform you that you may receive further communications from us even after submitting your unsubscribe request, as some mailings may have already been planned, our systems may take some time to process your request.
In relation to all the activities indicated above, we will process your personal data mainly through IT and electronic tools, in full compliance with current legislation on the matter.

2.5. Processed data

The categories of personal data that Birroteca collects and processes when you browse or make purchases on Birroteca are as follows:

we collect the personal data necessary to conclude and execute your purchase on the Birroteca sites, such as name and surname, e-mail address, shipping address, billing address, telephone and payment details;
we collect your email address when you sign up for our newsletter service;
we process the personal data you provide to us when you contact our offices to provide you with the information you request;
subject to your consent, we collect and use your personal data for marketing purposes;
for the registration of your account on birroteca, we collect your e-mail address and password. If you are a registered user, we collect information about your access to the reserved area of the Birroteca sites. With your express consent, by analyzing your personal data we can process information regarding your interests and preferences with respect to our products and services, in order to present you proposals and offers in line with your tastes. In case of authentication to the birroteca account via external social networks, we collect from these third parties the data necessary for registration/authentication via Facebook and Google. We also collect information about you from third parties and, in particular, from Facebook. This information includes the following categories of data: email address.
We collect, with your consent, information about your browsing on the Birroteca sites, such as the pages you visit and how you interact with the single page and we save this information on our servers.
in the event that you provide personal data of third parties to biroteca, for example in cases where you decide to purchase a product to be delivered to a friend, or to give a gift, biroteca will arrange for the privacy information to be delivered to the third party at the time of the first communication. We remind you that the use of personal data of third parties is subject to the regulations on the protection of personal data.

We inform you that Birroteca does not process personal data relating to minors. If you access birroteca and use the services offered by the birroteca, you declare that you are of legal age.

2.6. Cookies

We use cookies on the birrotecad sites to ensure the correct technical functioning of the web pages and to perform user traffic analysis activities. In the following table we list the cookies used on the Birroteca sites in order to give the user the possibility to revoke or modify his consent.

2.7.Legal basis of the treatment

The processing of personal data carried out by Birroteca is based on the following legal bases:

Consent of the interested party for marketing and business development purposes.
Execution of contracts for the sale and/or distribution of products.
Execution of staff recruitment contracts.
Pursuit of the legitimate interest of the data controller in safeguarding the security of company assets (e.g. video surveillance, anti-fraud).

2.8. Recipients of the data

The personal data collected by Birroteca may be communicated to legal or natural persons who will be designated as external data processors according to the indications of article 28 of the European regulation. The data may be communicated to the following categories of external managers:

brewery srl;
Companies that provide processing services to support the brewery
External subjects who deal with the management of information systems;
Competent authorities for the fulfillment of legal obligations, upon specific request.

The transfer of personal data outside the territory of the European Union is not envisaged.

2.9. Personal data retention period

Data processing can be carried out in an automated or manual form, with methods and tools aimed at guaranteeing security and confidentiality.

In compliance with the provisions of art. 5 paragraph 1 lett. e) of EU Reg. 2016/679 the personal data collected will be stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed._cc781905-5cde-3194 -bb3b-136bad5cf58d_

Your personal data is stored in compliance with the terms and criteria specified below:

data collected to conclude and execute contracts for the purchase of goods on birroteca: up to the conclusion of the administrative-accounting formalities. The billing data will be kept for ten years from the billing date;
data of the registered user: the data will be kept until you request cancellation of your buttiga account;
data relating to the payment: up to the certification of the payment and the conclusion of the related administrative-accounting formalities following the expiry of the right of withdrawal and the terms applied for contesting the payment;
data collected in the context of the use of services offered on birroteca: these data are kept until the termination of the service or the cancellation of the subscription to the service by the User;
data connected to user requests to our offices: the data useful to assist you will be kept until your request is satisfied;
CV: for eighteen months from receipt;
data used for commercial communication activities with users who purchase products on dbirroteca sites: these data are kept until the service is terminated or the user exercises his/her opposition by unsubscribing;
data provided for commercial communications activities, opinion polls and market research: up to the request by the user to interrupt the activity and in any case within 1 year from the last interaction of any kind by the user with the brewery;
data used to personalize the Site and to show personalized commercial offers: until the user requests the cessation of the activity and in any case within 1 year from the last interaction of any kind by the user with the brewery;
data used for carrying out market research and surveys to measure satisfaction: until the User requests the cessation of the activity.

In any case, for technical reasons, the termination of the treatment and the consequent definitive cancellation or irreversible anonymization of the relative personal data will be definitive within thirty days from the terms indicated above.

2.10. Rights of the interested party

The General Data Protection Regulation ("EU Regulation 679/2016") in articles 15-22 gives the interested parties the following faculties:

Right of access: right to know the personal data held by the Data Controller and how they are used;
Right to object to the processing of personal data;
Right to update inaccurate personal data;
Right to the cancellation of data that are no longer necessary, processed unlawfully, for which the authorization for processing has been revoked, or for which the data subject has objected to processing;
Right to limit the processing of inaccurate personal data, processed unlawfully, for which the owner is no longer authorized to process, but necessary in legal terms;
Right to the portability of your personal data.

To exercise the rights listed above, interested parties can refer to the brewery at Via mafalda di savoia 41, E-mail: info@labuttiga.it.

2.11. Right to complain

Interested parties who believe that the processing of personal data referred to them carried out by Birroteca takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor for the protection of personal data. The contacts of the Guarantor for the protection of personal data are available on the birroteca websites http://www.garanteprivacy.it/