Privacy Policy

Subjects of Treatment

Data Controller under the current laws is the site administrator, Komera – Cucina Nostra, who can be contacted through the CONTACTS section.

Legal Basis for Processing
This site processes data primarily based on user consent. Consent is granted through the banner at the bottom of the page or through the use or consultation of the site as conclusive behavior. By using or consulting the site, visitors and users approve this privacy policy and consent to the processing of their personal data according to the methods and purposes described below, including potential disclosure to third parties if necessary to provide a service. Through communication or service request forms, additional consents relating to the specific purpose of the service are collected.

The provision of data and, therefore, consent to the collection and processing of data is optional, the User can deny consent and can revoke any consent already given at any time (via the banner at the bottom of the page or the browser settings for cookies, or the Contacts link). However, denying consent may result in the inability to provide some services, and the browsing experience on the site may be compromised.

Data related to site security and abuse prevention, as well as data for traffic analysis (statistics) in aggregated form, are processed based on the legitimate interest of the Data Controller in protecting the site and its users. In such cases, the user always has the right to object to the data processing (see paragraph User Rights).

Purpose of Processing
The processing of data collected by the site, in addition to purposes related, instrumental, and necessary to provide the service, is aimed at the following purposes:

– Statistics (analysis)
Collection of data and information in an exclusively aggregated and anonymous form to verify the proper functioning of the site. None of this information is related to the physical person – User of the site, and it does not allow in any way their identification. No consent is required.

– Security
Collection of data and information to protect the security of the site (anti-spam filters, firewalls, virus detection) and Users and to prevent or unmask fraud or abuse to the detriment of the website. Data is recorded automatically and may include personal data (IP address) that could be used, in accordance with the current laws, to block attempts to damage the site itself or to harm other users, or otherwise harmful or criminal activities. This data is never used for User identification or profiling and is periodically deleted. No consent is required.

– Ancillary Activities
Communicating data to third parties performing functions necessary or instrumental to the operation of the service (e.g., comment boxes) and to allow third parties to carry out technical, logistical, and other activities on our behalf. Providers have access only to personal data necessary to perform their tasks, and they commit to not using data for other purposes and to process personal data in accordance with current regulations.

Data Collected
This site collects user data in two ways.

– Data collected automatically
While browsing, the following information may be collected and stored in the site’s server log files (hosting):
– internet protocol (IP) address;
– type of browser;
– parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– the web page of origin of the visitor (referral) and exit;
– possibly the number of clicks.

This data is used for statistical and analytical purposes, in an exclusively aggregated form. The IP address is used solely for security purposes and is not cross-referenced with any other data.

– Voluntarily Provided Data

The site may collect other data in the case of voluntary use of services by users, such as comment services or communication (contact forms, comment boxes), and it will be used exclusively to provide the requested service:
– name;
– email address.

Place of Processing
Data is processed at the Data Controller’s headquarters and at the Aruba web Hosting data center. The Aruba web hosting service is the data processor, processing data on behalf of the owner. Aruba is located in the European Economic Area and operates in compliance with European regulations.

Data Retention Period
Data collected by the site during its operation is stored for the time strictly necessary to perform the activities specified. Upon expiration, data will be deleted or anonymized unless there are further purposes for retaining it.

Data (IP address) used for site security purposes (blocking attempts to damage the site) is kept for 30 days.
Data for analytics purposes (statistics) is stored in aggregated form for 24 months.

Transfer of Collected Data to Third Parties
Data collected by the site is generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in cases provided by law; when necessary for the provision of a specific service requested by the User; for the execution of security checks or site optimization.

Transfer of Data to Non-EU Countries
This site may share some of the collected data with services located outside the European Union area. In particular with Google, Facebook, and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Data Protection Authority, specifically Decision 1250/2016 (Privacy Shield – here is the Italian Data Protection Authority’s information page), for which no further consent is required. The above-mentioned companies guarantee their adherence to the Privacy Shield.

Security Measures
We process the data of visitors/users lawfully and correctly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data. We are committed to protecting the security of your personal data during transmission by using Secure Sockets Layer (SSL) software, which encrypts the information in transit. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, access to the data may be granted to categories of persons in charge involved in the organization of the site or external subjects (such as third-party technical service providers, hosting providers).

Cookies
This site uses cookies, text files that are stored on the user’s terminal or that allow access to information on the user’s terminal. Cookies allow information about visitors’ preferences to be stored, are used to verify the correct functioning of the site, and to improve its functionality by personalizing the page content based on the type of browser used, or to simplify navigation by automating procedures (e.g., Login, site language), and finally to analyze the use of the site by visitors.

This site uses the following categories of cookies:

– technical cookies, used solely to transmit a communication over an electronic network, to ensure the correct display of the site and navigation within it. Furthermore, they allow distinguishing between different users connected in order to provide the correct service to the right user (Login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer duration (such as the cookie required to store the user’s consent regarding the use of cookies, which lasts 1 year). No consent is required for these cookies;

– analytical cookies, used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site itself. They are similar to technical cookies if the service is anonymized.

– profiling and marketing cookies, used exclusively by third parties other than the owner of this site to collect information on users’ browsing behavior, interests, and consumption habits, also to provide personalized advertising.

By clicking OK on the banner displayed at the first access to the site or by browsing

the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the storage of such cookies on their terminal for the purposes indicated above, or to access information on their terminal through cookies.

Cookie Disabling
The user can refuse the use of cookies and can revoke any consent already given at any time. Since cookies are linked to the browser used, THEY CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing/revoking consent to the use of cookies, or through this dedicated area (click here).

DISABLING COOKIES MAY PREVENT THE CORRECT USE OF SOME FUNCTIONS OF THE SITE ITSELF; in particular, services provided by third parties may not be accessible and, therefore, may not be viewable:
– YouTube videos or other video-sharing services;
– social network buttons;
– Google maps.

Instructions for disabling cookies can be found on the following web pages:

Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari

Third-Party Cookies
This site also acts as an intermediary for third-party cookies (such as social network buttons), used to provide additional services and functionalities to visitors and to simplify the use of the site itself, or to provide personalized advertising. This site has no control over these cookies, which are entirely managed by third parties, and does not have access to the information collected through these cookies. Information on the use of these cookies and their purposes, as well as how to disable them, is provided directly by the third parties on the pages indicated below.

Please note that user tracking generally does not involve identifying the user unless the User is already registered for the service and is also already logged in, in which case it is understood that the User has already given their consent directly to the third party at the time of registration for the relevant service (e.g., Facebook).

This site uses cookies from the following third parties.

– Google Inc.
For information on data usage and processing by Google, it is recommended to read the Google privacy policy and the How Google uses information from sites or apps that use its services page.

– Google Analytics: used to analyze site usage by users, compile reports on site activity and user behavior, verify how often users visit the site, how the site is found, and which pages are most frequently visited. The information is combined with data collected from other sites to create a comparative framework of site usage compared to other sites in the same category.
Data collected: browser identifier, date and time of interaction with the site, referral page, IP address.
Place of data processing: European Union as the service is anonymized.

Data collected does not allow for the personal identification of users and is not cross-referenced with other information related to the same person. Data is processed in aggregate and anonymized (truncated to the last octet). Under a specific agreement (DPA), Google Inc. (data processor) is prohibited from cross-referencing such data with other services.

Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.

The user can selectively disable (opt-out) data collection by Google Analytics by installing the browser add-on provided by Google (opt-out).

– YouTube: platform, owned by Google, for video sharing. Cookies are set when accessing the page containing the embed and when the video is played, and do not allow User identification unless they are already logged into their Google account.
For videos on the site, the “enhanced privacy (no cookie)” option has been enabled, which ensures that YouTube does not store information about visitors unless they voluntarily play the video.
Data collected: number and behavior of service users, IP address, information linking site visits to Google accounts for logged-in users, video viewing preferences.
Place of data processing: USA.

Social Network Plugins
This site also incorporates plugins and/or buttons to allow easy sharing of content on your preferred social networks. When you visit a page on our website that contains a plugin, your browser connects directly to the servers of the social network from which the plugin is loaded. These servers may track your visit to our website and, if applicable, associate it with your social network account, especially if you are logged in at the time of your visit or have recently browsed one of the websites containing social plugins. If you do not want the social network to record data related to your visit on our website, you must log out of your social network account and, if necessary, delete the cookies that the social network has installed in your browser.

This site has plugins with advanced privacy protection features for Users, which do not send cookies or access cookies present in the User’s browser upon page load but only after clicking on the plugin.

The collection and use of information by these third parties are governed by their respective privacy policies, to which you are kindly requested to refer.

– Facebook (cookie policy link)
– Twitter (cookie policy link)
– LinkedIn (cookie policy link)
– Google+ (cookie policy link).

User Rights
According to European Regulation 679/2016 (GDPR), the User may, in the manner and within the limits established by current legislation, exercise the following rights:

– oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning them for the purpose of sending advertising material or direct sales, or for conducting market research or commercial communication;
– request confirmation of the existence of personal data concerning them (right of access

);
– know their origin;
– receive them in an intelligible form;
– obtain information regarding the logic, methods, and purposes of processing;
– request their update, correction, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including data that is no longer necessary for the purposes for which it was collected;
– in cases of processing based on consent, receive, at the sole cost of any support, their data provided to the controller, in a structured, machine-readable, and commonly used format suitable for electronic devices;
– the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor – link to the Privacy Guarantor’s page);
– as well as, more generally, exercise all the rights granted to them under current legal provisions.

Requests must be addressed to the Data Controller.

Updates
This privacy policy was last updated on November 29, 2018.