Information pursuant to Articles 13 and 14 of EU Regulation 2016/679 on the Protection of Personal Data

The following describes how the site is managed with regard to the processing of personal data of users who consult it.

General Beverage S.r.l. - Registered office: Galleria del Corso, 1 - 20122 Milan tel. +39 0187 832305 - fax. +39 0187 461368 - VAT No. 00645690454 - e-mail: info@iobevo.com is aware of the importance of protecting the confidentiality of personal data and is committed to complying with the directives and regulations in force regarding privacy that guarantee safe and confidential internet browsing

The user of the website www.ristosanohome.com (the "site"), interested in the processing, is invited to carefully read this document governing, in general, the rules that General Beverage S.r.l. observes in collecting and processing personal data and, in particular, the manner and purpose of the processing of personal data conferred by the user himself through navigation on the website, the use of the registration and contact masks present therein, as well as through making purchases of goods or provision of the services made available and offered through the site itself.

This information is also provided pursuant to Articles 13 and 14 of the EU Regulation 2016/679 on the protection of personal data to those who interact with the website of RISTOSANO HOME Data Controller, accessible electronically from the address www.ristosanohome.com

The Data Controller

The "owner" of the treatment is General Beverage S.r.l. - Registered office: Galleria del Corso, 1 - 20122 Milan tel. +39 0187 832305 - fax. +39 0187 461368 - V.A.T. 00645690454 - e-mail: info@iobevo.com

General principles for the processing of personal data

The processing of personal data is governed by the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality. In particular:

• Process the data exclusively for the purposes and in the manner outlined in the policy statement;
• Process data for purposes for which the prior consent of the data subject is required only if there is express authorization to do so;
• Respect for anonymity, allowing anonymous browsing of the site in areas that do not require authentication, except for automatic acquisition of browsing data;
• make data available to third parties only for purposes instrumental to the provision of the requested service or in other cases, except where permitted by law, only when the data subject has given consent;
• Respect the rights of data subjects, responding to requests for cancellation, modification, supplementation of the data provided, opposition to the processing of data for the purpose of sending commercial information and advertising;
• Ensure proper and lawful management of personal data, safeguarding the data subject's right to privacy, and apply appropriate security measures to protect the confidentiality, integrity and availability of processed data;
• ensure maximum transparency by accompanying each data collection action with appropriate disclosures;

Types of data processed

"Personal data" is defined as "any information relating to an identified or identifiable natural person (i.e., the data subject); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic features of his or her physical, physiological, genetic, mental, economic, cultural, or social identity;" (Art. 4 of EU Regulation 2016/679).

Therefore, personal data are the name, contact information and contact details, as well as any other information about the user of the site that is, directly or indirectly, obtainable from them.

1. REGISTRATION DATA

When registering on the site and creating an account, as well as subsequently, by filling out special forms and registration forms, the user will be asked to provide certain personal data, such as first and last name, e-mail address, mailing address, billing information.

The information requested during registration will be used to enable access to online services and to ensure the proper performance of all activities related or instrumental to the provision of such services.

In addition, since registration is preparatory for access to and use of our services, the personal data of the users of the website, having made the choice of service and after further information, will be processed for the purposes related and/or functional to the chosen service.

In the event that the chosen services are operated by third parties, the data, subject to information provided to the user, will be communicated to the individual operators. The latter operate as "controllers" for processing related to the provision of services under their responsibility (banking institutions, payment institutions, couriers).

1. DATA FOR PURCHASES

Data necessary to enable online purchases, with respect to the specified products and in the manner specified in the contractual conditions of sale; (Legal basis of processing: Execution of the contract).

1. DATA VOLUNTARILY PROVIDED BY THE USER

The voluntary and explicit sending of electronic mail messages to the addresses indicated in the different access channels of the website www.ristosanohome.com and the filling in of the specifically prepared forms entail the subsequent acquisition of the address and data of the sender/user, necessary to respond to the instances produced and/or provide the requested service.

Sending this data is done on an optional, explicit and voluntary basis, and involves the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data entered.

IO SANO will process these data assuming that they refer to the user or to third parties who have expressly authorized the user to confer them on the basis of a suitable legal basis that legitimizes their processing. In this case, the user is the autonomous owner of the treatment, and assumes all the obligations and responsibilities of the law, conferring the widest indemnity with respect to any dispute, claim, request for compensation for damages from treatment, etc. that may be received by IO SANO from third parties whose personal data have been processed through the use of the site in violation of the regulations in force.

IO SANO invites in any case the user not to send personal data unless strictly necessary: some categories of personal data can be processed only with the explicit consent of the user and in compliance with the current legislation.

The Data Controller therefore stresses the importance of expressing your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.

1. NAVIGATION DATA

The computer systems and software procedures responsible for the operation of the website www.ristosanohome.com acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested users, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the browser and operating system used, and other parameters related to the user's operating system and computer environment.

These data are used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the Site and to check its correct functioning and are deleted immediately after processing or within a maximum of one week. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.

This data is stored in the systems of the Data Controller or in those of the Managers appointed to manage the website.

1. SYSTEM LOGS.

Access to the Site, consultation of its contents and use of the services offered allows the web server to automatically record so-called "system LOGs," i.e., information that the user's browser sends while browsing the site. This information consists of the web pages requested by the user, the documents consulted, modified or created, IP address, browser type, browser language, date and time of the request.

1. STATISTICAL DATA

Statistical analysis services allow the Data Controller to monitor and analyze traffic data, aimed at measuring the functioning of the site for research purposes, usability evaluations and interest. The data are in aggregate or anonymous form, thus with no possibility of user identification.

This site uses Google Analytics, a statistical analysis service of browsing activities provided by Google Inc. ("Google"). On this site Google Analytics is configured for anonymous data collection, The data collected are related to cookies and site usage data

1. COMMERCIAL, PROMOTIONAL COMMUNICATIONS AND NEWSLETTERS

The processing of personal data for commercial and promotional communication services is carried out in order to promote and advertise our products and services, by sending, by e-mail (or also SMS, telephone messaging applications and services, social networks, FAX when specified), commercial communications and informative and advertising material.

This type of service allows the Data Controller to maintain a database of email contacts, telephone contacts, or contacts of any other type used to communicate with the user.

These services may also allow for the collection of data related to the date and time the user views the messages, as well as the user's interaction with them, such as information about clicks on links embedded in the messages.

At any time, you may discontinue sending commercial communications by using the unsubscribe tools available in those communications or update your preferences for sending communications, limiting or denying them altogether.

Cookies

This website uses cookies to provide its users with the best possible experience on the site, as well as to optimize their visit. Please refer to the specific disclosure.

Purpose of processing data provided by users

Personal data voluntarily provided by website users are processed for different purposes, specified below, and for which consent may be required:

Purpose of processing	Legal basis and consent to processing
a. for the creation of the user account and purposes related to its management, in case of any registration to the site; b. to verify your identity, also in case of support in restoring accesses; c. to manage your acquisitions and any kind of request for technical, commercial or administrative assistance, and provide further services requested by the user	The processing is carried out in the context of the performance of a contract to which the user is a party or to the performance of pre-contractual measures taken at the request of the user (Art. 6, para. 1 (b) of the Regulations). Consent is not necessary.
d. to follow up any requests made to us, for example by spontaneously sending messages, electronic or traditional mail to the addresses indicated on the site, which entail the subsequent acquisition of the address, including e-mail, of the sender or the relevant telephone numbering necessary to respond to the requests, as well as any other personal data included in the relevant communications.	Processing is carried out as part of the performance of a contract to which the user is a party or to the performance of pre-contractual measures taken at the request of the user (art. 6, paragraph 1, letter b) of the Regulations). Consent is not required doubtful if it is non-customer now.
e. for the execution of obligations under laws, regulations and legislation, national and/or EU, as well as provisions issued by authorities empowered to do so by law or by supervisory and control bodies;	The processing is necessary to fulfill a legal obligation (Art. 6(1)(a) of the Regulations). Consent is not necessary.
f. prevent or detect any abuse in the use of the site, or any fraudulent activity, and thus enable the company to protect itself in court.
2. MARKETING AND SALES PROMOTION ACTIVITIES
a. Marketing promotion purposes etc of the owner's services	The consent ex art 6 paragraph 1 letter a, except in the case of legitimate interest of the titoalare if sending mail promiozionali already customers 130 paragraph 4 d lgs 196-2003 as amended.

One or more consents given may be revoked at any time by contacting General Beverage Ltd. in the manner indicated for the exercise of rights, at the bottom of this privacy policy.

Purpose of navigation data processing and system logs

Personal data whose transmission is implicit in the use of Internet communication protocols and system LOGs are processed only to obtain anonymous statistical information on the use of the site, to check its correct operation and to protect the computer systems that enable its operation.

The data do not allow the identification of data subjects and are not associated with other data sources that would allow assimilation such as to identify users.

Such data, such as the user's IP address, could also be used to ascertain liability in case of hypothetical computer crimes against the site.

Obligation or option to give data

Apart from what has been specified above for navigation data, the user is free to provide the personal data indicated in the forms or in the registration procedures. Failure to provide them may make it impossible to obtain what has been requested or to perform certain services, as specified below with reference to the above-mentioned purposes:

1. REQUEST MANAGEMENT AND SERVICE DELIVERY

The provision of data (possibly marked as necessary in the forms) is necessary for the pursuit of the purposes set out in point 1 and any refusal to provide it will result in the impossibility of processing orders or fulfilling users' requests and for them to take advantage of the services available through the website.

In addition, the processing of data for these purposes is necessary in order to fulfill any legal obligations: personal data must be processed in accordance with applicable regulations, including their storage and communication to the Authorities for accounting, tax or other obligations.

2. MARKETING AND SALES PROMOTION ACTIVITIES

The provision of data, based on the user's consent, is optional for the pursuit of the purposes set out in point 2 and failure to provide it, or withdrawal of consent, will not allow the sending of commercial and promotional communications. Failure to provide data will not result in any consequence in the provision of services.

Method of treatment

Personal data are processed by automated tools, methods and procedures for the time strictly necessary to achieve the purposes for which they were collected and for the pursuit of the purposes set forth in this policy.

In particular, the processing is carried out, through specially appointed personnel, mainly with the aid of electronic, computerized or otherwise automated means, through the use of electronic mail or other remote communication techniques.

Data retention

Data are kept for the time strictly necessary to provide the requested service or for the time stipulated by applicable regulations.

In general, personal data provided by users that are no longer necessary for the pursuit of the purposes for which they were collected are immediately deleted or anonymized, except for the retention requirements indicated herein, prescribed by law or indication to the contrary by the data subject.

The company to protect its interests, will also process personal data as long as permitted by law, in accordance with Article 2947 of the Civil Code, particularly as may be necessary to protect the interests of the Holder from possible claims related to the services provided.

For the purposes of marketing, sales promotion, the data will be kept for no longer than 2 years after collection and in any case until the revocation of consent, after which the company will no longer use the user's personal data for such purposes, reserving the right to retain them as long as may be necessary to protect its interests from possible claims based on such processing.

Data Security

The Data Controller shall take specific, appropriate and preventive security measures to safeguard the confidentiality, integrity, completeness, and availability of the data subject's personal data, as well as to prevent data loss, unlawful or incorrect use, and unauthorized access.

In particular, to protect the personal data of the data subject, the Site uses an encryption system with SSL (Secure Sockets Layer - find out more) technology, which provides protection by encrypting information both on the login page and in other sections where you can release, view, or modify your personal data.

Recipients of personal data

Personal data may be disclosed to individuals who can access the data by virtue of a provision of law, regulation or EU legislation, within the limits provided by these rules.

For the provision and management of the services requested by the user, the user's personal data may be communicated to other parties, in their capacity as managers and/or autonomous controllers of the processing of personal data (such as credit card issuing institutions, couriers or Poste Italiane S.p.A, providers of web services, electronic mail or technical services that provide services instrumental to providing the services of the site, individuals who provide assistance and advice on accounting, administrative, legal, tax, financial and debt collection in relation to the provision of services, internal staff authorized to process data and bound by obligations of confidentiality) to the extent necessary to carry out their duties at our organization, and who act as data processors or who have committed to confidentiality, including with appropriate legal obligation.

Data may also be disclosed to individuals, entities or authorities for legal obligation, protection from abuse or fraud, or by order of the authorities.

The full list of the above subjects can be obtained directly from info@ristosanohome.com

Personal data collected is not disseminated.                                                                                                         

Place of data processing

Processing related to the web services of this site takes place at the aforementioned headquarters of the Data Controller, which makes use of external providers for the web site hosting service, and is handled only by technical personnel authorized for processing and, occasionally, by appointees for maintenance operations.

In case of necessity, the data may be processed by the staff of the company that maintains the technological part of the site, appointed as data controller at the headquarters of the company.

Personal data will be stored on servers/databases of the Data Controller or its suppliers located within the territory of the European Union. Except as further indicated the data will not be transferred outside the European Union.

Transfer to third countries

Some of your personal data may be transferred to recipients located outside the European Union, as indicated in the different processing purposes. The company ensures that the electronic and paper processing of personal data by these recipients is carried out in accordance with the requirements of current legislation, i.e., basing the transfer on an adequacy decision or, alternatively, on the standard contractual clauses approved by the European Commission.

Rights of data subjects

The users of the site to whom the personal data refer, as data subjects and within the limits of the legislation in force, are recognized the rights referred to in Articles 15 to 22 of the EU Regulation 2016/679, that is, in summary, the right to ask General Beverage S.r.l. - Registered Office: Galleria del Corso, 1 - 20122 Milan tel. +39 0187 832305 - fax. +39 0187 461368 - VAT No. 00645690454 - e-mail: info@iobevo.com , at any time:

• Access to personal data, as well as further information about their processing
• The rectification or updating of data
• deletion of data

The user can also:

• object to the processing,
• request restriction of processing
• Obtain in a structured, commonly used, machine-readable format data about the user
• Withdraw consent for the processing purposes that require it

Pursuant to and within the limits of current legislation, you have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority) if you believe that the processing of personal data violates the legislation.

The rights listed above may be exercised by the interested party, at any time, by contacting General Beverage S.r.l. - Registered office: Galleria del Corso, 1 - 20122 Milan tel. - V.A.T. Number 00645690454 - e-mail: info@iobevo.com

Operational headquarters-Industrial Zone, Novoleto, Pontremoli;

e-mail: info@ristosanohome.com

tel +39 0187 832305

Please also note that registered users of the site may at any time view and modify their personal data by accessing the data modification mask within their personal account; they may grant or revoke any previously given consent to send commercial communications by writing an email to info@ristosanohome.com; they may request the deletion of their account by writing an email to info@ristosanohome.com.

Changes and updates

This privacy policy is in force from 1/1/2023 and General Beverage S.r.l. - Registered office: Galleria del Corso, 1 - 20122 Milan tel. +39 0187 832305 - fax. +39 0187 461368 - VAT No. 00645690454 - e-mail: info@iobevo.com reserves the right to modify or update the content also in relation to changes in applicable legislation. All changes and updates will be binding as soon as they are published on the site.