Privacy policy

This privacy notice is provided pursuant to EU Regulation 2016/679 (GDPR) and describes how Pasticceria Der Gourner processes personal data collected through the website dergournerpasticceria.it. The data controller is CPM s.r.l., with registered office at Piazza Rolandi 2, Alagna Valsesia, 13021 VC, Italy.

Types of Data Collected

Through our website, we may collect the following types of data:

Personal data voluntarily provided by the user: name, surname, email address, phone number, shipping address, payment information.
Browsing data: IP address, browser type, operating system, access times, referring URLs.
Cookies and tracking technologies: we use cookies and tracking tools such as Google Analytics 4 and Meta Pixel to analyze traffic and improve user experience. For more details, please refer to our [Cookie Policy].

Purposes of Processing

Collected data will be processed for the following purposes:

Management and fulfillment of orders;
Sending communications related to purchases (e.g., order confirmations, shipping notifications);
Customer support and handling of requests sent via email or contact form;
Sending newsletters and marketing communications, subject to the user's consent;
Traffic analysis and improvement of browsing experience and website functionality.

Legal Basis of Processing

The processing of personal data is based on:

Execution of a contract or pre-contractual measures (e.g., order management);
Legal obligations (e.g., invoicing);
Explicit consent (e.g., newsletter subscription);
Legitimate interest of the controller (e.g., website traffic analysis).

Methods of Processing

Personal data is processed using electronic and manual tools, in compliance with the principles of lawfulness, fairness, and transparency. Appropriate technical and organizational measures are adopted to ensure data security.

Data Sharing

Personal data may be shared with:

Couriers and logistics partners for product delivery;
Payment service providers (e.g., PayPal, Stripe, Satispay);
IT and hosting service providers;
Analytics and marketing service providers (e.g., Google Analytics 4, Meta Pixel);
CRM Pienissimo Pro for customer relationship management;
Competent authorities, where required by law.

Data will never be sold to third parties for marketing purposes without the explicit consent of the user.

Data Transfers Outside the EU

Some of our service providers, such as Google and Meta, may transfer personal data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission, to guarantee an adequate level of data protection.

Data Retention

Personal data collected for contractual purposes will be retained for the time necessary to manage the order and fulfill legal obligations.
Data collected for marketing purposes will be retained until consent is withdrawn.

User Rights

The user has the right to:

Access their personal data;
Request rectification or deletion of data;
Object to processing or request its restriction;
Request data portability;
Withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal);
Lodge a complaint with the Data Protection Authority.

To exercise these rights, the user may send a request to: info@dergournerpasticceria.it.

Minimum Age for Website Use

The website and services offered are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they may contact us at info@dergournerpasticceria.it to request its deletion.

Changes to this Policy

This notice may be subject to updates or modifications. We encourage you to review it periodically to stay informed.