Privacy Policy
This Privacy Notice describes how we collect, use, and manage personal data in compliance with Article 13 of Legislative Decree no. 196/03 (Personal Data Protection Code) and Articles 13 and 14 of the European Regulation 679/2016 (hereinafter also “GDPR”).
The notice is provided for this website only and does not apply to other websites the user might visit via links. This policy is based on Recommendation No. 2/2001 adopted on 17 May 2001 by the European data protection authorities, convened within the Article 29 Working Party under Directive 95/46/EC, to identify minimum requirements for online personal data collection, particularly regarding the methods, timing, and nature of the information data controllers must provide to users when accessing web pages, regardless of the purpose of the connection. We therefore invite you to review our Privacy Policy outlined below.1. Data Controller
The Data Controller is Amato Consulting Srl, with registered office at Contrada Montegallina snc, Città di Lipari , email info@dolceterraeolie.com, telephone +39 3926572842.2. Data Processor
The Data Processor is Amato Consulting Srl. For any requests regarding the processing of your personal data, you may contact Amato Consulting Srl at the email address or by phone at +39 3926572842.3. Types of Personal Data Collected
This website collects the following personal data:- Identification data (name, surname, email address, telephone number, etc.).
- Browsing data (IP address, browser type, usage data).
- Payment and billing data, if applicable.
- Other information voluntarily provided by users through forms or direct communications.
It is important to note that the site’s software procedures acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.
Although this information is not intended to be associated with identified users, by its nature, if associated with other data held by third parties (e.g., your internet service provider), it could allow identification of users. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URLs of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment.
These data are used solely for anonymous statistics on site usage and to monitor correct site functioning.
The Data Controller and, depending on the requested service, the Designated Processor retain, for a limited period as prescribed by law, the logs of connections/navigation performed to respond to any requests from judicial authorities or other authorized public bodies to verify possible liability in cases of computer crime.
Except as specified for browsing data, the user is free to provide or not the personal data requested in the registration form for services. On such forms, some data may be marked as mandatory; these data are necessary to provide the requested service. If such data are not provided, the requested service cannot be delivered.
Upon providing personal data, as required by Article 13 of Legislative Decree No. 196/03 and Articles 13 and 14 of the GDPR, a concise yet complete and transparent information notice is given to the data subject about the purposes and methods of processing, the mandatory or optional nature of providing data, the consequences of failing to provide data, the recipients or categories of recipients to whom personal data might be disclosed and the scope of data dissemination, the rights under Article 7 of Legislative Decree No. 196/03 and Articles 15 and following of the GDPR (access, integration, updating, correction, deletion for illegality, opposition to processing, etc.), and the identity and registered office of the Data Controller and Processors.
The data subject is thus called upon to express informed, free, specific, and documented consent as provided by law, where required. When data provision occurs in successive stages, additional information notices may be provided and new consents requested as required by the Privacy Code and GDPR.
4. Purpose of Processing
Personal data will be processed for the following purposes:- To provide the services requested by the user.
- To improve the user experience and our website.
- To respond to user requests.
- To comply with legal or regulatory obligations.
- To manage any disputes or complaints.
Any new data processing unrelated to the declared purposes will be activated only after notifying the data subject and, if required by Legislative Decree No. 196/03 and the GDPR, obtaining consent. In any case, personal data shall not be communicated to third parties or disclosed without prior consent of the data subject, except as expressly provided by Article 24 of Legislative Decree No. 196/03 and the GDPR.
5. Legal Basis for Processing
The processing of your personal data is based on:- User consent for the specified purposes.
- The necessity to perform a contract or to take pre-contractual measures at the data subject’s request.
- The fulfillment of legal obligations to which we are subject.
- The legitimate interests of the data controller, such as improving our services and security.
6. Recipients of Personal Data
Your personal data may be shared with:- Service providers acting on behalf of the controller (e.g., hosting, IT maintenance, etc.).
- Competent authorities, if required by law.
7. Data Retention
Personal data will be retained only for the time strictly necessary to achieve the purposes for which they were collected, taking into account applicable legal or regulatory obligations.8. User Rights
You have the right to:- Access your personal data.
- Request correction or deletion of your data.
- Object to processing or request restriction of processing.
- Obtain data portability.
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
9. Security Measures
The Data Processor adopts appropriate technical and organizational measures to ensure the security of personal data and to prevent unauthorized access, loss, or damage. These security measures meet the minimum requirements set by the Legislator (Technical Discipline on minimum security measures pursuant to Articles 33 to 36 of Legislative Decree No. 196/03). Data subjects have the right at any time to obtain confirmation of the existence or absence of their data and to know its content and origin, verify its accuracy, or request integration or updating, or correction (Article 7 of Legislative Decree No. 196/03 and Article 16 of GDPR). Pursuant to the same article, the data subject has the right to request deletion, anonymization, or blocking of data processed unlawfully, as well as to object on legitimate grounds to their processing. The Company also disclaims any responsibility regarding: the rules and methods of personal data management of other websites accessible through links; the content of any email services, web spaces, chat forums provided to users. Data processing related to web services offered by this site takes place at the Company’s premises, and possibly at the Data Processors’ locations, carried out by authorized personnel responsible for service management, marketing activities (when requested by the user), data retention, and occasional maintenance operations.10. Changes to the Privacy Policy
This Privacy Policy may be updated periodically. Users will be informed of any changes through notices on the website or other appropriate means.Last updated: 25 Luglio, 2025
