Be Truffle, as Data Controller, pursuant to art. 13 of EU Regulation 679/2016 (“General Data Protection Regulation”, hereinafter “GDPR”), with this document informs Users on the methods of processing of personal data in relation to navigation on the website www.betruffle.com ( hereinafter “the Site”).

The information, provided only for the Site and not for other websites that may be consulted by the User via links, is subject to changes, in accordance with legislative changes and/or new purposes that may be pursued through the Site. Please take note view the “Last updated” section at the bottom of this page to find out when the Policy was last updated. Any change to this Policy will come into force upon its publication on the Site.

1. Data controller
The Data Controller is Be Truffle, in the person of its legal representative pro tempore, with registered office in Via delle Imprese, 4 – 00030 – San Cesareo (RM) ITALY.

2. Data being processed, purposes and legal bases, data retention period, nature of the provision
The Data Controller may process the following personal data:

2.1 Browsing data
Navigation data:

The computer systems responsible for operating the Site acquire, during normal operation, some personal data which are then transmitted implicitly in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties but which by its very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes the IP addresses or domain names of the computers used by the Users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User’s IT environment.

Purpose of the processing
Allow the User to browse the Site and obtain anonymous statistical information on the use of the Site to check its correct functioning and to determine which data/contents are more or less useful/interesting for Users and therefore be able to improve the effectiveness of the material available in the site.

Legal basis of the processing
Legitimate interest of the Data Controller (art. 6, par. 1, letter f) GDPR).

Data retention period
The data will be kept for the time strictly necessary to fulfill the purpose and deleted immediately after their processing.

Nature of the contribution
The communication of navigation data is mandatory and essential to allow the Owner to allow the User to use the Site.

2.2 Data relating to registration on the Site and creation of your account
Personal data provided when creating the User’s personal account:
name and surname, e-mail address

Purpose of the processing
Allow the creation of the User’s personal account.

Legal basis of the processing
Execution of the contract to which the interested party is a party (art. 6, par. 1, letter b) GDPR.

Data retention period
Until the cancellation request by the User.

Recipients of the data
The data will be communicated only to authorized personnel and providers of services offered through the Site or connected to its operation, or in any case necessary for the provision of the services requested by the User, as data controllers.

Nature of the contribution
The communication of personal data for the purposes of creating a personal account is mandatory, where it is marked as such (*). Failure to provide the data indicated as mandatory will make it impossible to complete registration on the Site.

2.3 Data relating to online purchases
Personal data provided during purchases:
e-mail address, name and surname, address, company name, telephone number, VAT number, selected items, payment method, billing data.
In case of purchase by the registered User, also purchase history

Purpose of the processing
Conclude orders and fulfill contractual obligations.
Administrative and accounting obligations.
Protection of the Owner’s rights (e.g. defense of rights in court).

Legal basis of the processing
Execution of the contract to which the interested party is a party (art. 6, par. 1, letter b) GDPR.
Fulfillment of legal obligations (art. 6, par.1, letter b) GDPR).
Legitimate interest of the Data Controller (art. 6, par. 1, letter f) GDPR).

Data retention period
The data will be stored for the duration established by applicable legislation, including of a fiscal nature.

Nature of the contribution
The communication of personal data is mandatory, where it is marked as such (*). Failure to provide the data indicated as mandatory will make it impossible to make purchases

2.4 Data provided in the Contact form and in requests for information
Personal data provided in the Contact section and through the voluntary sending of emails:
name and surname, e-mail address, telephone number as well as any personal data contained in the request.

Purpose of the processing
Respond to requests for information sent by the User.

Legal basis of the processing
Fulfillment of pre-contractual measures adopted at the request of the interested party (art. 6, paragraph 1, letter b) GDPR).

Data retention period
The data will be kept for the time necessary to process the requests, after which they will be deleted.

Nature of the contribution
The communication of the data requested in the contact form is mandatory, where it is marked as such (*).
Failure to provide the data indicated as mandatory will make it impossible to provide the requested information.

2.5 Data relating to subscription to the Newsletter
Data provided for subscribing to the Newsletter:
email address

Purpose of the processing
Send periodic communications relating to La Rustichella products to Users who have signed up to the Newsletter service.

Legal basis of the processing
The legal basis of the processing is given by the consent of the interested party (art. 6, par. 1, let. a) GDPR.

Data retention period
The data will be stored until the User revokes consent and in any case up to a maximum period of 24 months from the User’s last interaction.

Nature of the contribution
The communication of the personal data requested for the purposes of subscribing to the Newsletter is not mandatory for the purposes of using the Site.
Failure to consent to the processing of data for this purpose will not in any way preclude access to the services connected to it.
However, failure to provide the requested data will make it impossible to complete the subscription to the Newsletter.

2.6 Communications pursuant to art. 130, paragraph 4, Privacy Code – so-called “Soft spam”.
In case of purchases through the Site, the Owner may use the e-mail address provided by the User at the time of purchase to transmit commercial communications relating exclusively to products similar to those purchased by the User, unless the User has opposite, completely free of charge, when sending the purchase order or during subsequent communications via the “Unsubscribe” link contained in each e-mail.

2.7 Cookies
While browsing the Site, various types of cookies may be used, in compliance with the applicable provisions. In this regard, please read what is indicated in the extended information on cookies, which can be viewed via the following link: Cookie Policy.

3. Treatment methods
The data will be collected electronically, protected from risks of destruction, modification, cancellation and unauthorized access by means of adequate physical, logical and organizational security measures and further processed, including on paper, to the extent and within the times strictly necessary for carry out the purposes indicated above.

The data may be processed, for the purposes referred to in point 2, by subjects operating within the internal organizational structure of the Data Controller, specifically authorized and trained according to their respective duties, as well as by external subjects necessary for the functioning of the Site and the provision of the requested services, appointed as data controllers pursuant to art. 28 GDPR.

There are no automated profiling processes.

4. Recipients of the data
The data acquired through the Site may be communicated to collaborators and employees of Be Truffle, specifically authorized for processing, and to providers of services offered through the Site or connected to its operation, or in any case necessary for the provision of the services requested by the User , as data controllers.

The data acquired through the Site will not be communicated to third parties, unless the communication is necessary for the provision of the requested service (e.g. logistics company, PayPal), required by law or regulation, without prejudice to any communication of data upon request of the Judicial or Public Security Authorities, in the cases and in the ways provided for by law.

The data will not be transferred to third countries or international organizations and will not be disseminated.

5. Rights of the interested party pursuant to articles 15 – 21 GDPR
Pursuant to the articles. 15-21 GDPR, interested parties have the right to:

• obtain confirmation as to whether or not data concerning them is being processed and in this case obtain access to their data and the information referred to in the art. 15 GDPR (right of access);
• obtain the rectification of inaccurate personal data without unjustified delay or the integration of incomplete personal data (right of rectification – art. 16 GDPR);
• obtain the cancellation of data without unjustified delay (right to cancellation – art. 17 GDPR);
• obtain the limitation of processing (right of limitation – art. 18 GDPR);
• object to processing at any time for reasons related to your particular situation as well as object to processing for marketing purposes at any time (right to object
• art. 21 GDPR);
• lodge a complaint with the Guarantor for the Protection of Personal Data pursuant to art. 77 GDPR.

The rights can be exercised by contacting Be Truffle:

– by sending an email to the following addresses: email info@betruffle.com;

– by submitting a written request or a registered letter with return receipt to the operational headquarters in Via delle Imprese, 4 – 00030 – San Cesareo (RM).

The User can request cancellation from the Newsletter service at any time by sending an email to the following address: info@betruffle.com or by clicking on the “Unsubscribe” link present in each Newsletter. The revocation of consent does not affect the lawfulness of the processing based on consent before the revocation.