Privacy and cookies

Privacy policy

Privacy notice pursuant to Articles 13 and 14 of the European Regulation EU/2016/679 GDPR.

The website www.caffemonforte.com collects some personal data of its Users.

Data Controller

Torrefazione Monforte s.r.l.
REA CB-124582
VAT No. IT01645990704
C.da Pesco Farese n. 25/26
86025 Ripalimosani (CB)
ITALY

Email: sales@caffemonforte.com
Certified Email: torrefazionemonfortesrl@pec.it
Phone: +39 0874 48 47 23

Summary Privacy Notice

The User’s personal data is collected for the following purposes and using the following services:

Contacting the User

• Contact Form

Personal data: Name and email.

• Business Contact Form

Personal data: Postal code; city; surname; email; physical address; first name; phone number; VAT number; password; province.

• Mailing List or Newsletter

Personal data: Name and email.

Payment Processing

• Prestashop Checkout, PayPal

Personal data: Various types of data as specified in the service’s privacy policy; payment information.

Protection from SPAM

• Google reCAPTCHA

Personal data: Cookies; Usage data.

Remarketing and Behavioral Targeting

• Ads Remarketing, Facebook Remarketing and Google Analytics Remarketing for display advertising

Personal data: Cookies and Usage data

Statistics

• Google Analytics 4, Google Ads Conversion Tracking, Facebook Ads Conversion Tracking, Google Analytics Display Advertisers Extension, Hotjar

Personal data: Cookies and Usage data

Registration and authentication provided directly by www.caffemonforte.com

• Direct registration

Personal data: Postal code; city; surname; email; physical address; first name; phone number; VAT number; password; province

Extended Privacy Notice

The rules on personal data protection provide for the protection of individuals and other subjects with respect to the processing of their data. In compliance with Articles 12, 13 and 14 of the European Regulation, the User’s data is processed in accordance with the principles of:

- Lawfulness, our data processing is based on compliance with the rules;

- Fairness, the processing respects both mutual requirements and the rules;

- Purpose limitation, the purposes of the processing are determined, explicit and legitimate;

- Subsequent processing will not have purposes incompatible with the original ones;

- Transparency, the processing ensures the full awareness of the data subject, the traceability of the personal data and the possibility to obtain information at any time, upon request;

- Data minimization, the data is adequate, relevant and limited to what is necessary to achieve the purposes;

- Accuracy, the data is accurate and, if necessary, updated;

- All reasonable measures are taken to promptly delete or rectify inaccurate data;

- Storage limitation, the data is kept in a form that allows the identification of the data subject for a period not exceeding the achievement of the purpose for which it was collected;

- Integrity and confidentiality, the acquired data is protected by technical and organizational measures aimed at ensuring adequate security, including protection, in order to prevent or minimize the risks of unauthorized or unlawful processing, loss, destruction or accidental damage;

- Accountability, we adopt and verify comprehensive processes of legal, organizational, and technical measures to protect personal data;

- Our focus is on the effectiveness and efficiency of the measures taken and on preventing violations and abuses that may limit or cause harm to the rights and freedoms of individuals;

- Review, the security policies applied to the data, systems and information networks are periodically examined and reassessed;

- Right to be forgotten, after a reasonable period of time, which normally coincides with the end of the processing operations, the data subject has the right to deletion of the data or its transformation into an anonymous form;

- Portability, within the capabilities allowed by electronic systems, we guarantee the possibility to receive personal data in a format that allows interoperability with other systems, as well as the transmission of data to another receiving controller;

- Access, we guarantee the right to easily access, and/or at reasonable intervals, the personal data collected by us;

- Rectification, at any time the data subject has the right to obtain rectification of inaccurate data, which we will promptly correct;

- Restriction of processing, the data subject has the right to obtain restriction of processing when the conditions specified in the GDPR are met;

- Objection, each data subject has the right to object to the processing of their personal data for legitimate reasons if it is not essential to obtain contractual performance;

- Privacy by design, we incorporate personal data protection from the design phase of a process with the related IT support applications; this ensures the implementation of mechanisms that guarantee the processing of only the personal data necessary for that specific design;

- Privacy by default, we protect the data of natural persons "by default", that is, as the default setting; this implies that the processing occurs through an internal policy that protects them from specific risks.

How Data is Collected

Providing data is completely optional and subject to the User's will.

In case of contact through the Contacts or Business page, newsletter subscription, site registration and order completion, Torrefazione Monforte s.r.l. needs to acquire some contact data in order to accept the received message and provide a response in the first case, to send communications to the User in the second, and to manage the Users’ purchases in the third.

In case of sending a message via the Contacts page, in order to respond to a query raised by the User or provide information regarding their purchases, Torrefazione Monforte s.r.l. needs to acquire the User’s name and email. Lack of consent will make it impossible for the Data Controller to process the request, and thus the message will not be sent.

In case of sending a message via the Business page, in order to provide the necessary responses to the company that has requested information and to have its contact details to get in touch, Torrefazione Monforte s.r.l. needs to acquire information about the company and its contact details. Lack of consent will make it impossible for the Data Controller to process the request, and thus the request will not be sent.

In the case of newsletter subscription, the User explicitly agrees to provide their email and optionally their name, to receive communications regarding offers and news for informational and advertising purposes from Torrefazione Monforte s.r.l.

The User can place an order regardless of registration with a username and password, with the only specification that the creation of a personal account guarantees confirmation of the order being received, information on the progress and traceability of the shipment, and the sending of any preview promotions and special discounts (subject to the acquisition of their free, explicit and informed consent).

How Users' Data is Processed

The processing of the User's personal data is carried out by means of the operations indicated in Article 4, paragraph 1, no. 2 of Regulation EU No. 2016/679 and, specifically: “collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data”. The personal data will be processed both in paper and electronic form.

Which Categories of the User's Personal Data May Be Collected

In order to provide a precise service, Torrefazione Monforte s.r.l. needs to acquire some personal data of the User.

In case of sending a message via the Contacts page: the User's name and email, in order to respond to a query raised by the User or provide information regarding their purchases.

In case of sending a message via the Business page: postal code; city; surname; email; physical address; first name; phone number; VAT number; password; province. This is to obtain adequate information about the company requesting more information and to have its contact details in order to provide a response.

In the case of newsletter subscription: the User's name and email, in order to send communications regarding offers and news for informational and advertising purposes.

In case of site registration and order completion: first name, last name, shipping address including postal code, city, province, VAT number and tax code, useful for invoicing according to legal terms and for the shipment and delivery of products; the email address to send any information related to the placed order and/or phone number to be contacted urgently if necessary. Upon receiving an order, the Data Controller automatically sends an email confirming the order, summarizing all its details.

Legal Basis for the Processing of the User's Personal Data

European data protection regulations require that each individual processing, in order to meet the requirement of lawfulness, must be justified by one of the legal bases provided for therein (consent, execution of pre-contractual measures or fulfillment of contractual obligations, legal obligations, protection of vital interests, public interest related to the exercise of official authority, legitimate interest).

Contractual Purposes and Basis

The Data Controller collects and processes the User's data in order to allow the proper fulfillment of the obligations arising from the purchase contract. This type of processing is based on the acquisition of information that the User freely provides at the time of purchase.

The User's data is collected to enable the Data Controller to provide other services, as well as for the following purposes: statistics, contacting the User, interaction with social networks and external platforms, remarketing and behavioral targeting, display of content from external platforms, payment processing, interaction with live chat platforms, protection from SPAM, and direct registration on the site.

For further detailed information on the purposes of the processing and the personal data specifically relevant for each purpose, the User may refer to the respective sections of this document.

How the User's Personal Data is Stored

In processing operations, the Data Controller uses a wide range of security measures. Taking into account the state of the art and implementation costs, as well as the nature, purpose, context and objectives of the processing, and the risk of varying likelihood and severity for the rights and freedoms of individuals, appropriate technical and organizational measures have been implemented to ensure a level of security commensurate with the risk.

How Long is Personal Data Retained

Torrefazione Monforte s.r.l. retains the User's personal data only for as long as necessary to achieve the purpose for which it was collected, i.e. until all obligations arising from the existing sales contract and retention obligations imposed by current legislation have been fully and precisely met.

With Whom the User's Personal Data May Be Shared

The processing of personal data is carried out electronically, with guarantees of logical and physical security and confidentiality of information. All acquired data is stored and/or processed through specific procedures and handled by individuals or legal entities specifically designated to manage or support the activities carried out by the Data Controller. In order to dispatch the order, and based on the legitimate interests of the Data Controller to make transportation as simple as possible, we transmit the necessary data for processing the shipment to appropriately designated couriers and/or transporters.

The company that manages the site may also come into contact with the Users' data when it is necessary to provide assistance to the Data Controller regarding technical issues or issues related to the use of the e-commerce platform.

Data Protection Officer - Responsible for the Protection of Personal Data

The Data Controller has not appointed a Data Protection Officer (DPO), but if during processing it deems it necessary or appropriate to do so, it will promptly inform the Users.

Users' Rights

At any time, it is possible to request information or file complaints by contacting the Data Controller at the certified email address torrefazionemonfortesrl@pec.it or by using the contact details provided on the site. As a data subject, by using the same contact details and at any time, all the rights recognized under Articles 15-22 of the European Regulation 679/2016 may be exercised. If any irregularities or violations regarding the processing of personal data are found, the right exists to contact the National Supervisory Authority, using the contact details provided on the site: http://www.garanteprivacy.it/ or the European Data Protection Supervisor at https://edps.europa.eu/.

In particular, the User has the right to:

• withdraw consent at any time. The User can withdraw consent to the processing of their personal data previously given.
• object to the processing of their data. The User may object to the processing of their data when it is based on a legal ground other than consent. Further details on the right to object are provided in the section below.
• access their data. The User has the right to obtain information about the data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the processed data.
• verify and request rectification. The User can verify the accuracy of their data and request its update or correction.
• obtain a restriction on processing. When certain conditions apply, the User can request a restriction on the processing of their data. In such a case, the Data Controller will not process the data for any purpose other than storage.
• obtain deletion or removal of their personal data. When certain conditions apply, the User can request the deletion of their data by the Data Controller.
• receive their data or have it transferred to another controller. The User has the right to receive their data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision applies when the data is processed using automated means and the processing is based on the User's consent, on a contract to which the User is a party, or on contractual measures connected thereto.
• file a complaint. The User may file a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the Right to Object

When personal data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue the legitimate interests of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are informed that if their data is processed for direct marketing purposes, they can object to the processing without providing any justification. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to Exercise Your Rights

To exercise their rights, Users may send a request to the contact details of the Data Controller provided in this document. Requests are free of charge and will be processed by the Data Controller as soon as possible, and in any case within one month.

Data Transfer to Non-EU Countries

The User's personal data will not be transferred to a third country or an international organization, and in the event that it becomes necessary to do so for legal purposes, it will be carried out in accordance with the applicable legal provisions, and the User will be notified in advance and given the opportunity to object for legitimate reasons.

Cookie Policy

This website uses Cookies. For more information and to view the detailed notice, the User can consult the Cookie Policy.

Additional Information on Processing

Legal Defense

The User's personal data may be used by the Data Controller in legal proceedings or in the preparatory phases of such proceedings for the defense against abuses in the use of this website or related Services by the User.
The User acknowledges that the Data Controller may be required to disclose the data by order of public authorities.

Specific Notices

Upon the User's request, in addition to the information contained in this privacy policy, this website may provide the User with additional and contextual notices regarding specific Services, or the collection and processing of personal data.

System Logs and Maintenance

For operational and maintenance purposes, this website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain personal data, such as the User's IP address.

Information Not Included in This Policy

Additional information regarding the processing of personal data may be requested at any time from the Data Controller using the provided contact details.

Response to “Do Not Track” Requests

This website does not support “Do Not Track” requests.
To find out if any third-party services used support them, the User is advised to consult their respective privacy policies.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time, informing the Users on this page and, if possible, on this website, and, where technically and legally feasible, by sending a notification to the Users through one of the contact details held by the Data Controller. Please therefore regularly review this page, referring to the date of the last update indicated at the bottom.

If the changes affect processing for which the legal basis is consent, the Data Controller will collect the User's consent again, if necessary.

Miscellaneous

The processing of the User's personal data, collected for the purposes we have indicated, is functional to the provision of a precise, competent, and expert service. Therefore, it is of fundamental importance that the personal data remains accurate and up-to-date; in this regard, the support and cooperation of the User is essential, by communicating any changes.

Consent to Receive the Notice

By checking the box "I accept the Privacy Terms" with the mouse cursor, the User declares that they have read the notice and have acquired and understood the information provided and indicated in accordance with Chapters II and III of the European Regulation EU 2016/679 of 27 April 2016.

Cookie Policy

Cookies consist of portions of code installed in the browser that assist the Owner in providing the service according to the purposes described. Some of the purposes for which the Cookies are installed may also require the User's consent.

Where the installation of Cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.

Technical Cookies and Cookies serving aggregated statistical purposes

Activity strictly necessary for the functioning of the Service

This website uses Cookies to save the User's session and to carry out other activities that are strictly necessary for the operation of www.orominerva.it, for example in relation to the distribution of traffic.

Activity regarding the saving of preferences, optimization and statistics

This website uses Cookies to save browsing preferences and to optimize the User's browsing experience. Among these Cookies are, for example, those used for the setting of language and currency preferences or for the management of first party statistics employed directly by the Owner of the site.

Other types of Cookies or third parties that install Cookies

Some of the services listed below collect statistics in an anonymized and aggregated form and may not require the consent of the User or may be managed directly by the Owner - depending on how they are described - without the help of third parties.

If any third party operated services are listed among the tools below, these may be used to track Users' browsing habits – in addition to the information specified herein and without the Owner's knowledge. Please refer to the privacy policy of the listed services for detailed information.

The characteristics of the aforementioned cookies are best described in the table below.

How to provide or withdraw consent to the installation of Cookies

In addition to what is specified in this document, the User can manage preferences for Cookies directly from within their own browser and prevent – for example – third parties from installing Cookies. Through browser preferences, it is also possible to delete Cookies installed in the past, including the Cookies that may have saved the initial consent for the installation of Cookies by this website. Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari e Microsoft Edge.

With regard to Cookies installed by third parties, Users can manage their preferences and withdrawal of their consent by clicking the related opt-out link (if provided), by using the means provided in the third party's privacy policy, or by contacting the third party.

Notwithstanding the above, the Owner informs that Users may follow the instructions provided on the subsequently linked initiatives by the EDAA (UE), Network Advertising Initiative (US) e Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

Since the installation of third-party Cookies and other tracking systems through the services used within this Website cannot be technically controlled by the Owner, any specific references to Cookies and tracking systems installed by third parties are to be considered indicative. In order to obtain complete information, the User is kindly requested to consult the privacy policy for the respective third-party services listed in this document.

Given the objective complexity surrounding the identification of technologies based on Cookies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of Cookies by this Website.

Campobasso, 24/03/2025