Online shop currently limited to shipping within Italy. For shipments outside Italy, contact us.
Privacy policy
INFORMATION PURSUANT TO THE LEGISLATIVE DECREE. N.196/2003
Data Controller
Famiglia Pomponio S.A.S. di Pomponio Antonio Nicola
Contrada Colle Comune, 39 – 66020 – Scerni (CH)
Data Controller email address: info@famigliapomponio.it
Types of Data Collected
Among the Personal Data collected by this Website, either independently or through third parties, are: first name; last name; email address; website; Trackers; Usage Data; phone number; payment information; billing address; number of Users; city; device information; session statistics; latitude (city); longitude (city); browser information.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific explanation texts displayed before the Data are collected.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. Failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website indicates that certain Data is optional, Users are free to refrain from providing such Data, without this having any impact on the availability or operation of the Service.
Users who are unsure about which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.
Method and place of processing of collected data
Methods of processing
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The processing is carried out using computers and/or IT tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the operation of this website (administrative, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than their own. For further information on the place of processing, the User can refer to the section containing details on the processing of Personal Data.
Retention Period
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required for the purpose for which it was collected and may be retained for a longer period due to any legal obligations or based on the User’s consent.
Purpose of Processing
The User’s Data is collected to allow the Owner to provide its Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Content commenting, Analytics, Contacting the User, Displaying content from external platforms, Handling payments, Hosting and backend infrastructure, Infrastructure monitoring, SPAM protection, Collection of privacy preferences, and Advertising.
For detailed information on the purposes of processing and the Personal Data processed for each purpose, the User may refer to the “Detailed information on the processing of Personal Data” section.
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Commenting services allow Users to formulate and publish their comments regarding the content of this Website.
Users, depending on the settings chosen by the Owner, can also leave comments anonymously. If the Personal Data provided by the User includes an email address, this may be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments.
If a third-party commenting service is installed, it is possible that, even if Users do not use the commenting service, it may collect traffic data relating to the pages on which the commenting service is installed.
Comment system managed directly (this Website)
This Website has its own content commenting system.
Personal Data processed: last name; email address; first name; website.
Unless otherwise specified, this Website processes all payments by credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise specified, Users are asked to provide their payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information; instead, it will only receive notification from the relevant payment service provider that the payment has been successfully completed.
PayPal (PayPal)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: last name; email address; billing address; payment information; first name; phone number; Various types of data as specified in the service’s privacy policy.
Place of processing: See PayPal’s privacy policy – ​​Privacy Policy.
This type of service allows this Website to monitor the use and behavior of its components, allowing for improved performance and functionality, maintenance, or troubleshooting.
The Personal Data processed depends on the characteristics and implementation method of these services, which by their very nature filter the activity of this Website.
Uptime Robot (Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.)
Uptime Robot is a monitoring service provided by Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.
Personal Data processed: various types of Data as specified in the service’s privacy policy.
Place of processing: Turkey – Privacy Policy.
Some of the services listed below may use Tracking Tools to identify the User, or use behavioral retargeting, i.e., displaying personalized ads based on the User’s interests and behavior, or measure ad performance. For more information, we recommend checking the privacy policies of the respective services. These services generally offer the option to disable this tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can learn more about how to disable interest-based ads in the “How to disable interest-based advertising” section of this document.
Meta ads conversion tracking (Meta pixel) (Meta Platforms, Inc.)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing, which connects data from the Meta advertising network with actions performed within this Website. The Meta pixel tracks conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data processed: Usage Data; Trackers.
Place of processing: United States – Privacy Policy – ​​Opt Out; Ireland – Privacy Policy – ​​Opt Out.
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Google Analytics (Universal Analytics) (Google LLC)
Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the Data processing, (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
To understand Google’s use of data, please consult the Google partner policy.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – ​​Opt Out; Ireland – Privacy Policy – ​​Opt Out.
Google Analytics (Universal Analytics) with anonymized IP (Google LLC)
Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller handles data processing, (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.
Google may use the Personal Data to contextualize and personalize ads on its own advertising network.
This Google Analytics integration anonymizes your IP address. This anonymization process works by shortening Users’ IP addresses within the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States.
To understand Google’s use of data, please consult Google’s partner policy.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – ​​Opt Out; Ireland – Privacy Policy – ​​Opt Out.
Google Analytics 4 (Google LLC)
Google Analytics is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller handles the processing, (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. To learn more, please consult Google’s official documentation.
To understand Google’s use of data, please consult Google’s partner policy.
Personal Data processed: city; Usage Data; browser information; device information; latitude (of city); longitude (of city); number of Users; session statistics; Trackers.
Place of processing: United States – Privacy Policy – ​​Opt Out; Ireland – Privacy Policy – ​​Opt Out.
Contact form (this Website)
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other request as indicated by the form header.
Personal Data processed: last name; email address; first name; phone number.
Mailing list or newsletter (this Website)
By registering on the mailing list or for the newsletter, the User’s email address will automatically be added to a contact list to which email messages containing information, including commercial or promotional information, relating to this Website may be sent. The User’s email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal Data processed: last name; email address; first name.
Contact by telephone (this Website)
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Website, as well as to respond to support requests.
Personal Data processed: telephone number.
This type of service hosts data and files that enable this Website to function, allow its distribution, and provide a ready-to-use infrastructure to run specific features of this Website.
Some of the services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.
ArubaCloud (Aruba S.p.A.)
ArubaCloud is a hosting service provided by Aruba S.p.A.
Personal Data processed: various types of Data as specified in the service’s privacy policy.
Place of processing: Italy – Privacy Policy.
This type of service analyzes the traffic of this Website, potentially containing Users’ Personal Data, in order to filter it from traffic, messages, and content recognized as SPAM.
Akismet (Automattic Inc.)
Akismet is a SPAM protection service provided by Automattic Inc. or by Aut O’Mattic A8C Ireland Ltd., depending on how the Data Controller manages the processing.
Personal Data processed: last name; email address; first name.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
This type of service allows this Website to collect and save Users’ preferences regarding the collection, use, and processing of their personal data, as required by applicable privacy legislation.
iubenda Cookie Solution (iubenda srl)
iubenda’s Cookie Solution allows the Owner to collect and save Users’ preferences regarding the processing of personal data, and in particular the use of Cookies and other Tracking Tools on this Website.
Personal Data processed: Tracking Tools.
Place of processing: Italy – Privacy Policy.
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service may still collect web traffic data for the pages where the service is installed, even when users do not use it.
Google Fonts (Google LLC)
Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller processes the data, which allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Vimeo Video (Vimeo, LLC)
Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.
Google Maps Widget (Google LLC)
Google Maps is a map visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller processes the Data, that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Font Awesome (Fonticons, Inc.)
Font Awesome is a font visualization service provided by Fonticons, Inc. that allows this Website to incorporate content of this kind on its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.
Information on how to opt out of interest-based ads
In addition to any opt-out features provided by any of the services listed in this document, Users can learn more about how to opt out of interest-based ads in the dedicated section of the Cookie Policy.
Cookie Policy
This website uses tracking tools. To learn more, users can consult the Cookie Policy.
More information for users
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- The User has given consent for one or more specific purposes.
- Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual obligations;
- Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, the Data Controller may always be asked to clarify the specific legal basis for each processing operation, and in particular to specify whether the processing is a statutory requirement, a contractual requirement, or a requirement necessary to enter into a contract.
Further information on retention periods
Unless otherwise stated in this document, Personal Data is processed and retained for the time required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or based on the User’s consent.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
- Personal Data collected for purposes related to the Owner’s legitimate interests will be retained until such interests are fulfilled. Users may obtain further information regarding the legitimate interests pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When processing is based on the User’s consent, the Owner may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be required to retain Personal Data for a longer period to comply with a legal obligation or an order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right to access, erasure, rectification, and the right to data portability can no longer be exercised.
User Rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, within the limits established by law, the User has the right to:
- Withdraw consent at any time. The User may withdraw previously given consent to the processing of their Personal Data.
- Object to the processing of their Data. The User may object to the processing of their Data if the processing is based on a legal basis other than consent.
- Access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the Data processed.
- Verify and request rectification. The User can verify the accuracy of their Data and request its updating or correction.
- Restrict processing. The User may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its storage.
- Request the deletion or removal of their Personal Data. The User may request the deletion of their Data by the Data Controller.
- Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance.
- File a complaint. The User can file a complaint with the competent data protection supervisory authority or take legal action.
Users have the right to obtain information regarding the legal basis for data transfers abroad, including to any international organization governed by international law or set up by two or more countries, such as the UN, as well as regarding the security measures taken by the Data Controller to protect their data.
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to such processing for reasons related to their particular situation.
Users are informed that, if their Data is processed for direct marketing purposes, they can object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To learn whether the Data Controller is processing Data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to exercise your rights
Any requests to exercise your rights can be directed to the Data Controller using the contact details provided in this document. The request is free of charge and the Data Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectification, erasure, or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of these recipients upon request.
Further information on treatment
Legal Defense
The User’s Personal Data may be used by the Data Controller in court or in the preparatory stages leading to possible legal action arising from improper use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose Personal Data by order of public authorities.
Specific Information
Upon the User’s request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Website and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.
Information not contained in this policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website and, if technically and legally feasible, by sending a notification to Users via any contact information available to the Data Controller. Please check this page frequently, referring to the date of the last modification indicated at the bottom.
If the changes affect processing based on consent, the Data Controller will collect the User’s consent again, if necessary.
