Privacy Policy

Privacy Policy for ninadolcetti.com

At Nina Dolcetti, accessible via ninadolcetti.com, we are firmly committed to safeguarding your personal data, ensuring transparency in how we collect, process, and use your information. Your privacy is of paramount importance, and we adhere to the highest standards of data protection in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Introduction: Our Commitment to Privacy and Data Protection

This Privacy Policy outlines the types of personal data we collect through our website ninadolcetti.com, how we use and protect that data, and your rights in relation to it. We handle your information responsibly and in accordance with all regulatory and legal obligations. By visiting our website, contacting us, or engaging with our products or services, you consent to the practices described in this Policy.

2. Scope of This Policy and Our Role as Data Controller

This Policy applies to personal data collected through ninadolcetti.com and any interactions you may have with us via this platform, such as submitting contact forms, placing orders, subscribing to newsletters, or accessing customer support. Nina Dolcetti, as the data controller, is responsible for determining the purposes and means of processing your personal data. If you have any questions about this Policy or your data, you may contact us at [email protected].

3. Categories of Personal Data We Collect and Process

We may collect, store, and process the following categories of personal data:

a. Usage Data
Includes browser type, referring URL, IP address, geographic location, date/time stamps, pages visited, and session duration. This data helps improve site functionality and user experience.

b. Account Data
Includes identifiers such as your name, billing and delivery address, email address, phone number, and any other data you provide when creating or managing your user account.

c. Profile Data
Includes your preferences, purchase history, items in your shopping cart or wishlist, and behavioral interactions on ninadolcetti.com.

d. Communication Data
Includes customer support inquiries, communications sent via our contact forms or email, and associated correspondence details.

e. Technical Data
Includes device type, operating system, browser settings, screen resolution, language preferences, and other configuration data that relates to how you access our services.

f. Transaction Data
Includes payment methods, transaction amounts, order details, and shipping information. All payment and financial data are processed through secure third-party providers.

g. Preference Data
Includes information you provide in relation to newsletter subscriptions, marketing consent preferences, product interest areas, and promotional interactions.

4. Legal Bases for Processing Your Personal Data

We process personal data strictly as permitted by applicable data protection legislation. Depending on the nature of the interaction with you, our legal bases include:

– Consent: Where you have expressly given us permission to process your data (e.g., joining our mailing list).
– Contractual necessity: To fulfill obligations arising from any contractual relationship (e.g., completing purchases or responding to inquiries).
– Legitimate interest: To operate, protect, and improve our services, override compliance obligations, and communicate with our users in a proportionate and reasonable manner.
– Legal obligation: Where the processing is necessary for compliance with a legal or regulatory requirement.

5. Your Data Protection Rights

You have comprehensive rights concerning your personal data under GDPR and CCPA legislation, including:

– Right of Access: To request a copy of the personal data we hold about you.
– Right of Rectification: To correct or update inaccurate or incomplete data.
– Right of Erasure: To have your personal data deleted under lawful bases.
– Right to Restriction: To restrict the processing of your data under certain conditions.
– Right to Data Portability: To receive your personal data in a commonly used format and transfer it to another data controller.
– Right to Object: To object to processing based on legitimate interests or direct marketing.
– Right Not to Be Subject to Automated Decision-Making: We do not perform profiling or automated decision-making that would significantly affect you.

To exercise any of your rights, you may contact us at [email protected].

6. Security Measures

We employ appropriate technical and organizational safeguards to ensure the confidentiality, integrity, and availability of your data, including:

– Secure server architecture and encryption protocols (SSL/TLS)
– Limited employee access to personal data based on role and necessity
– Regular security audits and vulnerability assessments
– Enforced data access controls and authentication mechanisms
– Secure backups and disaster recovery procedures
– Staff training and awareness on data protection principles

7. International Data Transfers

Where your personal data is transferred outside of the European Economic Area (EEA) or United Kingdom for processing (including storage through third-party services), we ensure appropriate safeguards are in place. These may include Standard Contractual Clauses, Data Processing Agreements, or confirmation of adequacy decisions that ensure equivalent levels of data protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, contractual, accounting, or reporting requirements. Examples include:

– Transaction/Account Data: Retained for up to 7 years, as required by financial and tax laws.
– Communication Data: Retained for up to 24 months from the most recent correspondence.
– Marketing Preferences: Retained until you withdraw your consent.
– Usage Data and Analytics: Retained for up to 26 months, in line with Google Analytics best practices.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to provide essential functionality, personalize content, analyze traffic, and improve performance. The types of cookies we use include:

– Essential Cookies: Necessary for website core functions such as navigation and secure checkout.
– Functional Cookies: Enhance user experience by remembering preferences and previous actions.
– Analytics Cookies: Collect usage data to enable us to understand how visitors interact with ninadolcetti.com.
– Performance Cookies: Monitor site performance and identify technical issues.

10. Cookie Management and Compliance

Upon visiting ninadolcetti.com, you will have the option to accept, reject, or customize cookie preferences through our Cookie Consent Banner. You can also manage or revoke your consent at any time via your browser settings or the cookie management options provided on our website. Our implementation complies with GDPR and CCPA requirements concerning notice, consent, and access relating to online identifiers and behavioral data.

11. Children’s Privacy

We do not knowingly collect or process data from individuals under the age of 13. If we learn that we have inadvertently obtained personal data from a child without verified parental consent, we will promptly delete such information. If you believe that a child under 13 has submitted data to us, please contact us immediately at [email protected].

12. Updates to This Policy

We reserve the right to amend this Privacy Policy to reflect changes in legislation, industry practices, or our internal practices. Any substantive changes will be posted to this page, and we may also notify you via email or website banners where appropriate.

13. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how your data is handled, please contact:

Email: [email protected]

We are dedicated to ensuring your personal data remains secure and treated with the highest level of care. Your privacy is not a privilege—it is your right. For further information or to exercise any privacy-related rights, please do not hesitate to get in touch.