Privacy policy

WHO WE ARE

CHO SPIRITS Srl, with registered office at LARGO AUGUSTO 8 – 20122 Milan (MI), Italy – Tax Code and VAT No. 12617060962, represented by its legal representative and appointed as Data Controller, hereinafter referred to as the “Data Controller”, hereby informs users that, pursuant to Article 13 of Italian Legislative Decree No. 196 of 30 June 2003 and Article 13 of EU Regulation No. 2016/679, the data collected will be processed in accordance with the methods and for the purposes set out below.

TYPES OF DATA COLLECTED

Our Personal Data Protection Policy governs the use and storage of the data provided.

The Data Controller is responsible for the personal data provided to us.

PURPOSES OF DATA COLLECTION

The purposes for which data is collected are as follows:

User Data is collected to enable the Data Controller to provide the product sales service through the website spiritoreale.it, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Analytics, Access to accounts on third-party services, Displaying content from external platforms, Tag management, Contacting the User, Interaction with support and feedback platforms, Managing support and contact requests, Interaction with live chat platforms, Advertising, Registration and authentication, Payment management, Platform and hosting services, and Heat mapping and session recording.

DATA VOLUNTARILY PROVIDED BY THE USER

By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list through which communications containing information, including commercial and promotional content, relating to CHO SPIRITS Srl brands may be sent.

The User’s email address may also be added to this list as a result of registering on this website or following a purchase.

DATA PROCESSING

The personal data requested during registration and required for submitting an order is collected by CHO SPIRITS Srl and processed using electronic and/or digital systems for the purpose of fulfilling the obligations arising from the agreement entered into with the Customer.

In addition to the Data Controller, in certain cases other parties involved in activities aimed at fulfilling contractual obligations may have access to the data, including internal staff, third-party technical service providers, carriers, transport companies and couriers, hosting providers, IT companies and communication agencies. Where necessary, such parties may also be appointed as Data Processors by the Data Controller.

An up-to-date list of Data Processors may be requested from the Data Controller at any time. Personal data will under no circumstances and for no reason be transferred to third parties other than as provided above.

CHO SPIRITS Srl guarantees its customers compliance with the applicable legislation governing the processing of personal data, including the Italian Privacy Code under Legislative Decree No. 196 of 30 June 2003.

BROWSING DATA

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols.

This information is not collected for the purpose of being associated with identified individuals; however, by its very nature, it could allow Users to be identified through processing and association with data held by third parties.

This category of data includes the IP addresses or domain names of the computers used by Users connecting to the website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the User’s operating system and IT environment.

This data is used solely for the purpose of obtaining anonymous statistical information regarding the use of the website and checking that it is functioning correctly, and it is deleted immediately after processing.

The data may be used to establish liability in the event of hypothetical cybercrimes committed against the website. Except for this possibility, data relating to web contacts is currently retained for no longer than seven days.

COOKIES

Cookies are not used for the transmission of personal information, nor are so-called persistent cookies of any kind used, such as User tracking systems.

The use of so-called session cookies, which are not permanently stored on the User’s computer and disappear when the browser is closed, is strictly limited to the transmission of session identifiers consisting of random codes generated by the server and required to enable secure and efficient browsing of the website.

The session cookies used on this website avoid the use of other IT techniques that could potentially compromise the confidentiality of Users’ browsing activities and do not allow the acquisition of personally identifiable User data.

Please refer to the Cookie Policy for further information.

OPTIONAL NATURE OF PROVIDING DATA

Except as specified above with regard to browsing data, Users are free to provide personal data through information request forms or through the contact details available on the website in order to receive information materials or for any other form of communication.

Failure to provide personal data may, in many cases, result in the inability to obtain the requested service.

For completeness, it should be noted that, in certain cases falling outside the ordinary management of this website, the Italian Data Protection Authority may request information and documents pursuant to Article 157 of the Italian Personal Data Protection Code for the purpose of supervising the processing of personal data. In such cases, providing a response is mandatory.

PLACE OF DATA STORAGE

Processing activities connected with the web services provided through this website take place at the premises of the companies involved and, where applicable, at the premises of external Data Processors.

Such processing is carried out by authorised personnel responsible for managing the requested services, marketing activities where requested by the User, data storage activities and occasional maintenance operations.

METHODS OF PROCESSING

Specific security measures are implemented to prevent data loss, unlawful or improper use of data, and unauthorised access.

DATA RETENTION PERIOD

No data is stored within the company’s web infrastructure, as all data collected online in connection with specific User requests is sent directly to the Data Controller, who retains it for the period necessary to fulfil the relevant request.

RIGHTS OF DATA SUBJECTS

Individuals whose Personal Data is processed have the right, at any time, to obtain confirmation as to whether or not such data exists, to be informed of its content and source, to verify its accuracy and to request that it be supplemented or updated.

Data subjects also have the right to request the deletion, anonymisation or blocking of data processed unlawfully, as well as to object, on legitimate grounds, to its processing.

HOW TO EXERCISE YOUR RIGHTS

The Data Subject may exercise the rights described above at any time by sending an email to CHO@pec.net.