Privacy Notice (Privacy Policy)
Pursuant to Article 13 of EU Regulation 2016/679
Data Controller
Shewants S.r.l., owner of the “Il Milanese Imbruttito” trademark, in its capacity as Data Controller, processes the personal data of users browsing the website in compliance with the general principles and specific provisions set out in the legislation on personal data protection (EU Regulation 2016/679, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), including with regard to security measures. This notice, drafted pursuant. to Article 13 of the aforementioned European Regulation, describes the characteristics of the processing activities carried out and the rights granted to the data subject. The data subject may contact Shewants S.r.l. without any particular formalities at the following address: Via C. Salutati 7, Milan (MI) – email: info@imbruttito.com Categories of Personal Data Collected and Processed.
The Data Controller collects and processes different types of personal data relating to the user, including:
– Information enabling user identification, such as IP address and domain names;
– Information regarding actions performed during browsing;
– Information relating to user preferences expressed during navigation.
The website uses various types of cookies, including:
– Session and functionality cookies
– Analytical cookies (first or third-party)
– Profiling cookies
Purposes of Processing and Legal Bases
The Data Controller processes personal data to:
– Manage the website and allow navigation via technical cookies;
– Assess user behaviour on the website;
– Evaluate user browsing preferences;
– Send commercial information;
– Maintain the website and comply with legal obligations;
– Detect and pursue unlawful conduct.
Legal bases: contractual obligations, consent, legal obligations, legitimate interest.
Processing Methods and Data Retention Personal data are processed electronically and retained for six months from collection.
Communication of Personal Data
Data may be accessed by authorised employees and external data processors. Data will not be disclosed unless required by law.
Transfer of Personal Data Outside the EEA Data may be transferred outside the EEA (e.g., to the US via Google Analytics). Adequacy decisions or appropriate safeguards are ensured.
Data Subject Rights
Data subjects may exercise rights under Articles 15–22 GDPR: access, rectification, objection, withdrawal of consent, complaint to the Data Protection Authority, and—where applicable erasure, restriction, portability.