Privacy Policy
This Privacy Policy is intended to clearly and transparently explain how the personal data you provide to us are processed when you contact our offices through this website.
Da Vittorio S.r.l., as Data Controller, constantly ensures that your personal data are always processed in compliance with the provisions of Regulation (EU) 2016/679 (“GDPR”) concerning data protection.
This privacy notice therefore aims to explain how our company collects, uses, discloses, stores and, where applicable, transfers your personal data, pursuant to Article 13 GDPR.
A. Identity and contact details of the Data Controller
The Data Controller of your data is Da Vittorio S.r.l., represented by its legal representative pro-tempore, with registered office in Brusaporto (BG), Via Cantalupa 17, Tax Code and VAT No. 03237670165 (hereinafter “Company” or “Controller”), with the following contact details:
- phone: +39-035.681024
- email: privacy@davittorio.com
B. Data Protection Officer
The Company has not appointed a Data Protection Officer (DPO).
C. Purpose of processing and legal basis
The processing of your personal data by Da Vittorio S.r.l. may take place based on:
- a) your consent (for example, for information or product orders);
- b) a contract (if you purchase products from our Company);
- c) a legal obligation (when our Company is required to comply with specific legal requirements).
D. Categories of data processed
In order to send you the products you wish to purchase through our website, we process the following categories of personal data concerning you:
- identification data: first name, last name;
- contact data: email address, phone number, physical address.
- banking data: when you make a purchase via bank transfer.
The processing of the above data is based on principles of fairness, lawfulness, transparency and protection of your confidentiality and rights.
E. Protection of your data and possible recipients
Your personal data will be processed exclusively by our staff, specifically authorized and trained to process such data and, in any case, under the responsibility of the Data Controller and exclusively for the purposes for which your data were collected.
Da Vittorio S.r.l. adopts appropriate technical and organizational measures in accordance with the GDPR to ensure the security of your personal data, protecting them against loss, theft and/or misuse, as well as unauthorized access, disclosure, alteration and/or destruction, whether intentional or accidental.
Your personal data are stored at our Company and will not be disclosed or transmitted to third parties, except:
- a) for data related to tax obligations and payments by credit card or other digital payment methods, for which our Company relies on specialized third-party providers;
- b) to allow the storage of copies of your contact data through external providers/servers (services of backup, mailing and CRM) to safeguard their integrity or for better management;
- c) for the management of specific services requested by you that require specialized personnel (event planner, voucher with bookings at our restaurants, cafés and hotels);
- d) for courier services necessary for the delivery of purchased products.
Da Vittorio S.r.l. ensures and guarantees that the above-mentioned providers offer, in any case, the same guarantees of security and reliability in data processing as ensured by our Company.
However, Da Vittorio S.r.l. may be required, in certain cases, to transmit your personal data, in whole or in part, to third parties due to legal obligations, judicial proceedings of any kind and/or requests from public authorities.
F. Transfer of data to third countries
Da Vittorio S.r.l. does not transfer your data outside the European Union to third countries or to International Organizations.
G. Data retention period
Your personal data are retained only for the time strictly necessary to achieve the purposes for which they were collected and, in any case, no longer than the statutory limitation period.
In some cases, Da Vittorio S.r.l. may retain your data even after this period, to the extent strictly necessary and essential to allow our Company to exercise and/or defend a right in court.
H. Profiling
Da Vittorio S.r.l. does not use automated processes aimed at profiling.
I. Data subject rights
With reference to your personal data, you may exercise, using the contact details indicated above (“Section A” of this notice), the following rights:
- right of access to personal data; right to obtain rectification or erasure of the same or restriction of processing concerning them (Articles 15 – 18 GDPR);
- right to object to processing pursuant to Article 21 GDPR;
- right to data portability, limited to data in electronic format, within the limits set by Article 20 GDPR.
With regard to data for which the legal basis of processing is your consent, you have the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out by the Controller based on the consent provided before withdrawal.
L. Complaint
We also inform you that you have the right, where the conditions are met, to lodge a complaint with the competent supervisory authority, as identified by Articles 3, 55 and 56 GDPR.
For further details and more information, please visit the official website of the Data Protection Authority at the following address: www.gdpd.it.
M. Communications and provision of data
Finally, we inform you that the provision of your personal data may constitute a legal and/or contractual obligation and, in any case, a necessary requirement for the conclusion and execution of the commitments undertaken by our Company.
In such cases, failure to provide the data may result in the impossibility for our Company to fulfill your requests.
N. Cookie
For further information on how our website uses your browsing data, please also read our cookie policy.
10/04/2026
The Data Controller reserves the right to amend this privacy policy depending on changes to the website or the introduction of new services or functionalities.