Privacy policy
This privacy policy describes how the personal data of users visiting the pistacchissimo.it website (hereinafter the "Site") is processed, in accordance with Regulation (EU) 2016/679 ("GDPR"), Legislative Decree 196/2003 and subsequent amendments ("Privacy Code"), and the Guidelines of the Italian Data Protection Authority regarding cookies (provision of June 10, 2021).
1. Data Controller
The Data Controller is Rinaldi Marco, VAT ID 05297750878. For any requests regarding your data, you can write to [email protected].
2. Types of data processed
- Browsing data and logs. The computer systems used to operate the Site acquire, during normal operation, certain data whose transmission is implicit in Internet protocols (IP address, browser/device type, requested pages, date and time). This data is used for the proper functioning, security, and diagnostics of the Site.
- Data provided voluntarily. If you email us, we process the data you provide (name, email address, message content) to respond to your request.
- Data collected via cookies and tracking tools. See our Cookie Policy for details.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Site operation, security, and usage | Legitimate interest / performance of the requested service (Art. 6.1.b/f GDPR) |
| Responding to requests sent via email | Response to your request / legitimate interest (Art. 6.1.b/f GDPR) |
| Aggregated usage statistics (Google Analytics) | Consent (Art. 6.1.a GDPR) |
| Sending push notifications | Consent (Art. 6.1.a GDPR) |
4. Cookies and tracking tools
The Site uses technical cookies (for which consent is not required) and, subject to your consent, statistical and notification tools. Full details, including duration and how to manage consent, can be found in our Cookie Policy.
5. Third-party services and data recipients
To provide our services, we use the following providers, who process data as data processors or independent controllers:
- NETSONS S.R.L. (Hosting): stores data on its servers and manages technical logs.
- Cloudflare, Inc. (CDN and security): routes traffic and applies anti-abuse protections via technical cookies.
- Google Ireland Ltd / Google LLC (Google Analytics 4): aggregated usage statistics, only subject to consent.
- OneSignal, Inc. (push notifications): sends browser notifications, only if you subscribe.
- OpenStreetMap Foundation (maps): when you open the Map page, your IP address is communicated to mapping servers to load the maps.
Data is not disseminated or sold to third parties for purposes other than those indicated.
6. Data transfer outside the European Union
Some providers (Google, OneSignal, Cloudflare) are based in the United States. Transfers are based on adequate safeguards pursuant to Art. 44 et seq. of the GDPR: adherence to the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
7. Data retention period
Browsing data and logs are kept for the time strictly necessary for technical and security purposes (usually no longer than 12 months); statistical data is kept according to Google Analytics settings (see Cookie Policy); notification subscriptions are kept until you unsubscribe; emails and communications received at our contact addresses are kept for the time strictly necessary to manage and fulfill the user's request and, in any case, for a period not exceeding 24 months from the last communication, unless further retention is required to comply with specific legal obligations (e.g., commercial and administrative correspondence) or to protect a right in legal proceedings.
8. Data subject rights
You may exercise your rights under Art. 15-22 of the GDPR at any time: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (without affecting the lawfulness of processing based on consent before its withdrawal). To exercise these rights, write to [email protected].
Furthermore, you have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali - www.garanteprivacy.it) if you believe that the processing of your data violates current regulations.
9. Changes to this policy
The Data Controller may update this policy; changes will be published on this page. Last update: June 2026.