Privacy Policy

Ottolina website privacy policy pursuant to art. 13 REGULATION (EU) 2016/679 (General Data Protection Regulation)

Owner and data controller

During the consultation of this site, data relating to identified or identifiable persons may be processed. The “Owner” of their processing is:

Place of data processing

Caffè Ottolina Spa, with headquarters in Milan, Via Decemviri 20/24, 20137 Milan.
Fiscal Code and VAT Number 00709150155.
Tel. +39 02/730032
Mail: shop@ottolina.it
PEC: caffeottolinaspa@legalmail.it

Data Collected – Purpose – Duration of Retention

Data provided voluntarily by the user: the user can use the contact form or email addresses to make requests or contact the facility. The optional, explicit and voluntary sending of personal data by the user to the contacts on this site entails the subsequent acquisition of the data provided by the sender for the sole purposes envisaged in the individual sessions of the site. Such data will be processed in order to follow up on the user’s request (e.g. requesting information, sending your Curriculum Vitae, online purchases, delivery services, seat reservations). In no case will data acquired through forms or receiving emails be saved and used for the transmission of subsequent marketing or update emails unless specific consent has been given. Otherwise they will be deleted.

Data collected in the online shop: the user can choose to create an account in our shop in which the personal, contact and address data necessary for the fulfillment of orders, as well as the order history, will be recorded. The data will be stored until the account is closed, at the request of the interested party. Furthermore, in the checkout section in our online shop the user must provide all the data necessary for the correct fulfillment of the order. Sharing such data is mandatory and if it is incorrect or incomplete it will not be possible to fulfill the requested order. The data thus collected will be stored for accounting and tax purposes only in accordance with the provisions of current legislation. It should be noted that the payment system integrated into the shop is managed by external Payment Service Providers, to whose privacy policy we refer for what concerns the processing of data relating to the chosen payment options.

Newsletter: it is possible to indicate a mailbox to which our promotional communications relating to new products, events or initiatives organized by Caffè Ottolina will be sent. Providing this email is optional and consent to its use can be revoked at any time and in complete autonomy through the appropriate function at the bottom of the newsletter, which will result in the immediate cancellation of the address from our mailing list.

Recording photos and videos during online or in-person events: it is possible that during events organized by Caffè Ottolina, video-photographic material is collected to be subsequently disclosed on our communication channels (company websites, social channels, videos at points of sale, targeted promotional communications). On such occasions, specific information is displayed in this regard and by accessing the physical or virtual room, the interested party automatically provides consent to the processing of his/her data (including the image). However, we remind you that the interested party has the right to have access to the material, request a limitation on its use and revoke consent to the use of his/her image by contacting: shop@ottolina.it . The photos and videos will be stored in our digital archives for a maximum of 3 years, except for files that will be classified as official videos or photos that will become part of our historical archives as evidence of the activity carried out by the company over the years.

Browsing data and cookies

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and environment.

user’s computer. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

With regard to cookies, please refer to the specific Cookie Policy available on the site.

Sharing, communication and dissemination of data

The data transmitted may be transferred or communicated to other companies for activities strictly connected and instrumental to the operation of the service (e.g. food delivery) as well as to any external parties exclusively for accounting and tax issues or technical support or corporate control (in particular legal and tax services, IT services).

No transfer abroad outside the European Union is envisaged.

Rights of interested parties

We remind you that according to the GDPR regulation, the interested party has the right to:

Request access to their personal data and request their rectification, erasure or limitation of processing.
Know the purposes of the processing, the categories of data processed, the recipients to whom the data is communicated, the retention period.
Revoke consent at any time, remembering the consequences of this choice
Request the erasure of data that is no longer necessary for the purpose for which it was collected,
Oppose profiling or direct marketing processing
File a complaint to the Privacy Authority.
Know the subjects to whom personal data may be communicated and verify the extract of the contracts in place with these subjects.
To exercise these rights, request clarifications and report changes, we invite you to contact your address above.