Privacy Policy

Privacy Policy di https://www.maestridelformaggio.it
Last updated: 29 May 2026

1. Data controller
   The data controller is CASEIFICIO ARTIGIANALE COLACIELLO SNC, with its registered office at TRAVERSA FILANGIERI 5, 86095 FROSOLONE (IS) – P. IVA: IT01639310703 – Email: info@meastridelformaggio.it

2. Scope
   This privacy policy applies to the website published at https://www.maestridelformaggio.it (hereinafter referred to as the “Website”) and to the processing of personal data in connection with the public use of the Website, including data collected via the contact form. This privacy policy also applies to the restricted areas of the Website and sections accessible only via login.

3. Types of data processed
   The following categories of data may be processed:

• browsing data: information that the browser automatically sends to the Website (e.g. IP address, pages visited, time of access, user agent);
• data provided voluntarily: data entered by the data subject in the contact form (the specific fields vary depending on the form completed);
• contact details on the page (telephone number, work email address) when used by the user to contact the Data Controller.
• cookies and tracking technologies, technical, profiling or third-party cookies, as set out in the relevant section.

4. Purpose of processing and legal basis

Purpose	Data	Legal basis
Respond to enquiries submitted via the form (information, quotes)	Information provided in the form	Processing of pre-contractual measures taken at the data subject’s request (Article 6(1)(b) of the GDPR)
Handling telephone and email enquiries	Contact details	Taking pre-contractual steps / legitimate interest (responding to enquiries)
Website operation and security (logs, abuse prevention)	Browsing data	The data controller’s legitimate interests (Article 6(1)(f) of the GDPR) and legal obligations
Legal and tax obligations	Required information	Legal obligation (Article 6(1)(c) of the GDPR)

5. Methods of processing
   The data is processed using manual, electronic and telematic means, in accordance with procedures strictly related to the purposes set out above. The Data Controller implements appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of the data (in accordance with Article 32 of the GDPR). The processing is carried out in accordance with the principles of lawfulness, fairness, transparency and data minimisation.

6. Retention periods

• Browsing data/logs: Data may be retained for a maximum of 7 days, unless further investigation is required for security reasons.
• Data from the contact form: for the time strictly necessary to process the request (within a maximum of 30 days), unless otherwise required by law.
• Data relating to accounting and tax obligations: retention in accordance with applicable legal requirements.
• Cookies and tracking: the duration is specified in the Cookie Policy.
  

  The retention period is determined in accordance with the principle of data minimisation.

7. Recipients and transfers
   The data may be disclosed to:

• authorised internal staff for purposes relating to the handling of requests;
• external suppliers appointed as data processors (e.g. hosting, email management, IT consultancy);
• public bodies and competent authorities, where required by law.
  

  Each supplier is designated as an external data processor (Art. 28 GDPR).
  The Website may incorporate third-party content or links (such as video hosting services or interactive maps). In such cases, data may be processed by external suppliers; please consult their respective privacy policies. Should new services be introduced, this policy will be updated.

8. Transfers outside the EU
   The Data Controller does not envisage any transfers of personal data outside the European Economic Area in the course of the Website’s ordinary activities. Should transfers to third countries become necessary, such transfers will only take place on the basis of appropriate safeguards.

9. Cookies and tracking technologies
   

   The Website uses technical cookies that are necessary for it to function. It may also use analytics or third-party cookies (e.g. multimedia content, social media), which are only installed with the user’s prior consent via a banner. The preferences you select are recorded and can be changed at any time via the “Cookie Settings” link in the footer of the Website. For further details, please refer to the dedicated Cookie Policy. 

10. Minors
    The Website and its services are not intended for children under the age of 14 (or 16 for marketing purposes). Where the processing concerns children, the Data Controller will seek the consent of the person with parental responsibility in the cases provided for by law.

11. Rights of data subjects
    In accordance with Articles 15–22 of the GDPR, the data subject has the right to:

• to obtain confirmation of whether personal data is being processed and to access such data (Article 15);
• correct inaccurate data (Article 16);
• to have their data erased (Article 17) in the cases provided for;
• to have the processing restricted (Article 18);
• object to the processing on legitimate grounds (Article 21);
• request data portability (Article 20), where applicable;
• withdraw your consent at any time (without affecting the lawfulness of processing based on your previous consent).
  

  Requests can be sent by email to info@maestridelformaggio.it. The data subject also has the right to lodge a complaint, in accordance with the law, with the Italian Data Protection Authority (www.garanteprivacy.it), pursuant to Article 77 of the GDPR.

12. Profiling and automated decision-making
    At the time of updating this policy, there are no automated profiling processes or automated decisions that produce legal or significant effects on the data subject. Should such processes or decisions be introduced in the future, they will only be carried out with the data subject’s explicit consent.

13. Data breaches
    In the event of breaches that pose a risk to the rights of data subjects, notification will be given to the Data Protection Authority and, where applicable, to the users concerned. Notification will be made in accordance with the provisions of Article 33 of the GDPR.

14. Accessibility
    This policy is always available in the website footer, in Italian, and can be accessed from all devices.

15. Updates to this policy
    The Data Controller reserves the right to update this policy. Any substantial changes will be communicated in an appropriate manner.