Facebook-f Instagram Google

Cookie Policy

1. Background

The casagrondona.co.uk website (hereinafter “Site”) uses cookies and other tracking tools to enable the proper functioning of the site, ensure security, measure traffic, improve the browsing experience and, with the user’s consent, perform statistical, marketing and profiling activities.

“Cookies” mean small text files stored on the user’s device. “Tracking tools” means technologies similar to cookies such as pixels, scripts, online identifiers, fingerprinting, local storage, and session storage. This Cookie Policy applies to all tools listed, regardless of the technology used, in accordance with the Privacy Guarantor’s Guidelines of June 10, 2021 (Prov. No. 231/2021).

2. Data controller and additional parties involved

Data controller: Bocchia Caffè s.r.l. – Via Campomorone 48/B, 16164 Genova Pontedecimo (GE) – P. IVA 01819580992 – e-mail: ordini@casagrondona.it.

Limited to any marketing activities and group newsletters related to the Casa Grondona brands, Biscottificio Grondona S.p.A. – Via Adamoli 470, 16141 Genova (GE) – Tel. 010 78590 21 – may act as co-processor pursuant to Art. 26 GDPR, where it determines jointly with Bocchia Caffè s.r.l. purposes and means of processing. This qualification does not automatically concern all cookies and tracking tools on the Site, which remain governed by this Cookie Policy according to the role actually assumed by the subjects involved.

Please refer to the Privacy Policy posted on the Site for details of roles and full disclosures.

3. Types of cookies used

In accordance with Article 122 Legislative Decree 196/2003 and the Guarantor Guidelines 10/06/2021, the cookies and tracking tools used on the Site are classified as follows:

  • Technical (necessary) cookies: do not require consent and are installed on the basis of Article 122 Legislative Decree 196/2003;
  • Third-party analytical cookies that are not assimilated to technical: require consent;
  • Profiling, marketing, targeting and third-party cookies: require the free, specific, informed, unequivocal and revocable consent of the data subject (art. 6, par. 1, lett. a) GDPR and art. 122 Cod. Privacy).

4. Technical cookies (necessary)

Technical cookies are installed without the need for consent, as they are strictly necessary for the provision of the service requested by the user or the operation of the Site.

5. Analytical (statistical/performance) cookies – consent required

The following cookies measure traffic, sessions, access sources, marketing campaign attribution and Site performance. They are not assimilated to technical cookies under the Guarantor Guidelines 10/06/2021 and require the user’s prior consent.

6. Marketing, profiling and targeting cookies – consent required

The following cookies and tools are used for advertising activities, retargeting, measuring marketing campaigns, profiling and interaction with third-party platforms. They are installed only with the user’s consent.

7. Data transfers to countries outside the EEA

The use of cookies and tracking tools provided by Google LLC, Meta Platforms, YouTube/Google Ireland, PixelYourSite and other providers may result in the transfer of personal data to countries outside the European Economic Area, particularly the United States of America. In such cases, the Data Controller verifies the existence of the safeguards set forth in Articles 44-49 GDPR, including the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework for U.S. certified providers) and/or the Standard Contractual Clauses, supplemented by additional measures where necessary.

8. Consent management

When first accessing the Site, a banner is shown that allows the user to:

  • accept all cookies;
  • Reject all cookies that are not strictly necessary;
  • Customize preferences by category;
  • Consult the Privacy Policy and this Cookie Policy.

Consent is collected in a free, specific, informed, unequivocal and revocable manner, in accordance with Art. 4, no. 11 and Art. 7 GDPR, EDPB Guidelines 05/2020 on Consent and Guarantor Guidelines 10/06/2021.

Invalid forms of consent are not used, such as: pre-selected boxes, scroll, continuation of navigation, unjustified cookie walls, graphically unbalanced banners that induce the user to accept. “Accept,” “Reject,” and “Customize” buttons have equal graphical prominence.

The Owner maintains appropriate documentation of consent (consent log with timestamp, session identifier and user choice) to meet the evidentiary burden of Article 7(1) GDPR.

9. Modification or revocation of consent

You may change or revoke your consent at any time by clicking on the “COOKIE SETTINGS” link in the footer of each page of the Site. Withdrawal of consent does not affect the lawfulness of prior processing.

For third parties that have their own opt-out tools (e.g. Google, Meta), the user can exercise the right directly on the platforms of their respective providers, as well as via the Site banner.

10. Retention of user’s choice

The choice expressed by the user is recorded to avoid continuous repetition of the banner. The storage of the choice is subject to a reasonable period, in line with the Garante’s guidelines (approximately 6 months), after which the banner is proposed again. The banner is also reproposed in case of:

  • Significant changes in the purposes or tracking tools used;
  • Introduction of new third-party cookies;
  • Technical inability to recognize the previous choice;
  • Direct request from the user.

11. Rights of the data subject

Data subjects may exercise their rights under Articles 15-22 GDPR, as detailed in the Privacy Policy published on the Site, at any time by contacting the Data Controller at the following contact details:

Bocchia Caffè s.r.l. – Via Campomorone 48/B, 16164 Genova Pontedecimo (GE)
E-mail: ordini@casagrondona.it
This is without prejudice to the right to lodge a complaint with the Data Protection Authority (Art. 77 GDPR).

12. Updates to the Cookie Policy

This Cookie Policy may be updated as a result of technical changes to the Site, the cookies installed or the third-party vendors involved. Prior to the first publication and following any significant change, the Owner performs a new technical scan of the Site and updates the above list of cookies, keeping evidence for accountability purposes under Articles 5(2), 24 and 25 GDPR.

The version in effect is the one published on the Site on the date of consultation.

RESERVE YOUR PLACE