Privacy policy

PRIVACY POLICY

Paolo Scafora SRL (hereinafter “Paolo Scafora”) and Bread and Network Srls (hereinafter “BAN”) care about the protection of your personal data and respect for your privacy.

Here’s how we do it:

Our duty and your privacy:

This information concerns you if you are already our customer, if you are registered on our website, if you are subscribed to our newsletter or if you are visiting our website.

INDEX:

- Who we are

- Our responsibility

- Your commitment

- When and how we collect your personal data

- The types of data we collect

- Why we collect your data

- Website use and service management

- Customer support

- Marketing

- Profiling

- What we mean by legal basis

- How we process your data

- Your choices and your rights

- Where your data is stored

- How long we retain your data

- Third parties who may process your data

Who we are:

In managing your data related to website registration activities and product sales, the data controllers are Paolo Scafora, Tax Code/VAT No. 05051861218, with registered office at Via Tavernola 8, 80025 Casandrino (Naples), Italy, and Bread and Network, Tax Code/VAT No. 04622460618, with registered office in Piazza Bernini Snc (CE), who jointly manage your data based on specific agreements. We will be happy to provide you with further information about the essential content of such agreements upon request.

In managing your data in relation to promotional and marketing activities, the data controller is Paolo Scafora, who appoints BAN as data processor in carrying out such operations.

Our responsibility:

If you are already a customer, registered, or simply visiting the website https://www.paoloscaforanapoli.com/, or subscribed to our newsletter, we inform you that your data will be lawfully processed in accordance with our decisions regarding the methods and purposes of such processing.

Your commitment:

We simply ask you to carefully read this policy to be fully informed about how we process your personal data.

When and how we collect your personal data:

As soon as you interact with https://www.paoloscaforanapoli.com/, we begin collecting data. Collection may occur either through information you voluntarily provide or automatically while using the website.

This is how data collection takes place:

The types of data we collect:

Contact details

Your first and last name, shipping and billing address, phone number, email address.

Identification data

Your IP address, login information, browser type and version, time zone setting, plug-in types and versions, geolocation information about where you may be located, operating system and related versions, etc.

Data relating to the use of Paolo Scafora

Your browsing path within the Paolo Scafora website (clickstream analysis), your views of products and services, page load and response times, download errors, duration of visits, interaction behavior and other actions, etc.

What about sensitive data?

We do not collect any type of sensitive data concerning you (that is, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sex life or sexual orientation).

Why do we collect your data?

We may process your data only for specific purposes and always in the presence of a legal basis that allows us to do so. Here is why we process your data:

Website use and service management:

Data is processed to allow registration on the Website, access to and execution of services reserved for registered users, and the possible submission through the Website of purchase orders for products available on the Website, with the consequent conclusion of the relevant sales contract with BAN, including any administrative and accounting formalities. In this case, the legal basis is the contract and legitimate interest.

Customer support

Communication of changes to our services, customer support via live chat, telephone or email, including correction of any bugs. In this case, the legal basis is the contract.

Marketing

Data is processed for the sending of advertising material and newsletters, to carry out commercial information activities via telephone, SMS, email, as well as traditional methods (e.g. sending catalogs by post), regarding Paolo Scafora’s promotional and commercial initiatives, to conduct market research and customer satisfaction surveys. In this case, the legal basis is your consent.

Profiling

For the sole purpose of offering you deals as much as possible in line with your interests, we may perform certain analyses on aggregated data without carrying out any profiling activity on your specific habits. In this case, the legal basis is legitimate interest.

In any case, there is no automated decision-making process concerning you.

What we mean by legal basis:

Consent

This is the authorization to process your personal data for a specific purpose.

You can change your mind at any time!

You may withdraw your consent at any time by sending us an email at: privacy@breadandnetwork.it, or by clicking the opt-out button.

If you decide to withdraw your consent and there are no other legal grounds allowing us to process your personal data, we will stop processing it. However, if another legal basis allows us to do so, we will continue processing while always respecting your rights.

The contract

The processing of your data is necessary for pre-contractual information and for the performance of the relevant contract.

Legitimate interest

The processing of your data is possible based on our legitimate interests or those of third parties, provided that these do not override your rights and freedoms. Legitimate interests may include:

• collecting information from your behavior on our website and/or applications;

• providing, developing and improving our services;

• enabling us to improve, personalize or modify our services and offers;

• verifying the effectiveness of our marketing campaigns;

• improving data protection.

How we process your data:

Data processing is carried out mainly by electronic means, except for product shipping activities which may also be performed using manual tools.

Your choices and your rights:

Your choices

You may decide not to provide us with your data.

In this case, you may continue browsing our website, but we will not be able to provide any services without your personal data.

You may disable cookies by changing your browser settings.

You can block cookies by setting your browser to prevent them from being stored. You can also delete cookies directly from your browser settings. If you disable cookies, you may continue browsing our website, but some services may not function properly. For more information, please refer to our Cookie Policy.

You may ask us not to use your data for marketing purposes.

Before starting processing, we will inform you of our intention to use your data for marketing purposes and (if applicable) the involvement of third parties. You may withdraw your consent to receive promotional communications by clicking the appropriate link included in each of our communications or by emailing privacy@breadandnetwork.it.

Your rights

You may exercise your rights at any time by emailing privacy@breadandnetwork.it.

You have the right to access information concerning you.

This includes the right to request additional information regarding:

• the categories of data we process;

• the purposes of processing;

• the categories of recipients to whom the data may be disclosed;

• the retention period or, if not possible, the criteria used to determine that period;

• other rights relating to the use of your data.

We will provide the requested information within one month of your request, unless this would adversely affect the rights and freedoms of others (for example, another person’s confidentiality or intellectual property rights) or unless we are prevented by law. We will inform you if we are unable to fulfill your request for such reasons.

You have the right to obtain correction of your data if it is inaccurate or outdated.

You have the right to obtain the deletion of your personal data (right to be forgotten).

You may request deletion of your personal data at any time if retention is no longer necessary for the purposes of processing.

You have the right to transfer your data to another operator (data portability).

We will provide you with a copy of your data in an interoperable format if you wish to transfer it to another operator. Upon your request and where technically feasible, we will transfer the data directly to the new operator. We will not proceed if portability involves disclosure of other individuals’ personal data.

You have the right to object to the processing of your personal data.

You may always contact the supervisory authority to lodge a complaint. Before doing so, please contact us — we will be happy to resolve any issue relating to the processing of your personal data.

You have the right to object to the use of your data in automated decision-making processes, including profiling.

We may use your data to identify information that may be relevant to you (for example, sending personalized emails based on your detected preferences). Otherwise, we will use your data solely to provide our services.

We guarantee your rights even when we process your data on behalf of third parties.

If we process your data on behalf of third parties, we guarantee that requests relating to the exercise of your rights will be forwarded to them without undue delay.

What level of security do we adopt?

We guarantee that your data is processed with the highest level of security: we have adopted appropriate physical, IT and organizational measures to ensure protection of your data.

However, please remember that:

• You provide your data at your own risk. We do our best, but unfortunately there is currently no 100% secure data transmission.

• You must always keep your username and password secure — you are the only one who knows them.

• If you believe your data has been compromised, please contact us immediately at privacy@breadandnetwork.it.

Where is your data stored?

Your data is processed within the European Union and in other data facilities managed by the third parties identified below.

By providing us with your personal data, you also consent to its transfer, storage and processing by us.

If it becomes necessary to transfer and/or store your data outside the EU, you will be adequately informed. In such cases, we will adopt all appropriate measures to ensure maximum protection.

How long do we retain your data?

We will cease active processing of your data within 12 months from your last use of the service or account closure, unless legal obligations (e.g. sales invoices) require longer retention. For promotional activities addressed to you, which you may request to stop at any time, we will retain your data for a maximum of 24 months from your subscription.

Third parties who may process your data:

To carry out our online activities, we rely on third parties to host applications, communicate with customers, manage emails, etc. We ensure that this collaboration takes place with leading market providers offering such services. We share your data with them only when necessary to ensure full functionality of our services and in compliance with the security measures and best practices described in this Privacy Policy.

Fraud prevention:

In certain cases, to complete your purchase, additional fraud prevention checks may be required. You may receive communications, including by email from our dedicated account ......(INSERT CC email account from which requests are sent), requesting that you provide the authorization code, a copy of your identity document and of the credit card used for the purchase (with the central eight digits obscured). The data collected will be retained for 1 (one) year from collection for evidentiary purposes, cooperation with judicial authorities and to handle any disputes that may arise. The legal basis in this case is the contract and the data controller’s legitimate interest. We guarantee that such data will be processed in full compliance with applicable data protection regulations and may need to be shared with third parties that process credit/debit card payments and perform anti-fraud checks, banks and judicial authorities.

For further information, please contact us at privacy@breadandnetwork.it

Thank you!

Thank you for reading this policy, which we have tried to make simple, clear and transparent. We are always looking to improve — if you have any suggestions, please write to privacy@breadandnetwork.it.

This policy may change in the future: any changes will be communicated to you by email, so that you may have full control over your data.