Privacy Policy
1. Data Controller
The data controller for personal data is Cappuccetto Verde, a sole proprietorship, located at via Asti-Nizza, 14055 Costigliole d’Asti (AT), Piedmont, Italy.
Email: info@cappuccettoverde.com.
2. Data Collected
We only collect data necessary to provide the service:
– Identification data: first name, last name
– Contact details: email address, phone number
– Order details: dietary preferences, declared allergens, pickup/delivery location and time
– Browsing data: technical cookies (see the Cookies section)
3. Purpose and Legal Basis for Processing
Data is processed for the following purposes:
– Booking and order management – legal basis: performance of a contract (Art. 6, par. 1, let. b, GDPR)
– Compliance with legal obligations (e.g., accounting, tax) – legal basis: legal obligation (Art. 6, par. 1, let. c, GDPR)
– Sending commercial and promotional communications – legal basis: explicit consent of the data subject (Art. 6, par. 1, let. a, GDPR), which can be withdrawn at any time
We do not carry out automated profiling or make automated decisions that produce legal effects on the data subject.
4. Communication to Third Parties
Data is not sold or transferred to third parties for commercial purposes. It may be shared exclusively with:
— Pickup points and partner facilities (wineries, farmhouses, accommodation facilities), limited to the following information strictly necessary for organizing the pickup or event: first name, last name, phone number, pickup time and, if applicable, declared allergens or dietary requirements. These parties act as independent data controllers for hospitality purposes and are required to comply with current personal data protection regulations.
— Essential technical service providers (hosting, email platforms) acting as data processors under the GDPR.
— Public authorities, only in cases provided for by law.
Any data transfers to third countries only take place in the presence of adequate safeguards (adequacy decisions, standard contractual clauses).
5. Data Retention
Order-related data is kept for 5 years from the date of the order, in accordance with tax and accounting obligations under Italian law. Data processed based on consent (marketing communications) is deleted upon request or, in any case, when consent expires.
6. Rights of the Data Subject
Under Articles 15-22 of the GDPR, you have the right to:
– Access your personal data
– Rectify or update it
– Request its deletion (“right to be forgotten”)
– Limit its processing
– Object to the processing
– Request data portability
– Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
To exercise your rights, write to: info@cappuccettoverde.com. We will respond within 30 days of receiving the request.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. Cookies
The site uses only technical cookies necessary for the pages to function correctly. No profiling or third-party cookies are used for advertising purposes. You can manage cookie preferences through your browser settings.
8. Updates
This policy may be updated in the event of regulatory or operational changes. The updated version will always be available at www.cappuccettoverde.com.
Version updated: July 2025