Privacy Policy

Welcome to our website www.verapellestore.com (hereinafter referred to as the ‘Site’).
Your privacy and the security of your personal data are very important to us, which is why we collect and handle your personal data with the utmost care and take specific measures to keep it safe. Below you will find our ‘Privacy Policy’, which contains detailed information about the processing of your personal data and the terms and conditions of our services.

1. General information
Who is the Data Controller?
The Data Controller, i.e. the entity that decides how and why we process your personal data, is:

CPLUS SRL
Registered office: Via San Vito, 50 - 83029 Solofra - Avellino
P. VAT: IT02991840642
E-mail: info@cplus.it
Telephone (+39) 0825 534049

Who is the Data Processor?
The Data Processor, whom you can contact to exercise your rights under Art. 12 of GDPR 2016/679 and/or for any clarifications regarding personal data protection, can be reached by sending an email to info@cplus.it.


2. What personal data do we collect?
The categories of personal data that the Site and processes when you browse or purchase are as follows:
- we collect personal data necessary to conclude and execute your purchase on the Site. such as your first and last name, e-mail address, shipping address, billing address, telephone number and social security number;
- we collect your e-mail address when you subscribe to our newsletter service;
- we process personal data that you provide to us when you contact our Customer Service to provide you with requested assistance;
- with your consent, we collect and use your personal data for marketing purposes;
- for the registration of your user account and the use of services reserved for registered users, we collect your first and last name, e-mail address and password. If you are a registered user, we collect information about your access to the private area of the Site. Subject to your express consent, by analysing your personal data we may process information about your interests and preferences regarding our products and services, in order to present you with proposals and offers in line with your tastes.
- we collect information about your navigation on the Site, such as the pages you visit and how you interact with the individual page, and store this information on our servers.
- In the event that you provide the Site with personal information about a third party, for example if you decide to purchase a product to give to a friend, or to give a gift, the Site will make sure that the third party is provided with the privacy policy at the time of the first communication. Please note that the use of personal data of third parties is subject to data protection regulations.
Please note that the Site does not process personal data relating to minors. If you access and use the services offered by the Site, you declare that you are over the age of majority.


3. How do we use the personal data collected?
The Site collects and processes your personal data for the following purposes:
1. to conclude and execute the contract for the purchase of products offered on the Site. When you conclude your purchase we ask you for the personal data necessary for the activities of executing the contract;
2. registration on the Site and use of the services offered to registered users. Registration on the Site is possible by entering certain personal information, necessary to ensure your identification and the performance of the services offered to registered users.
3. provision of the services offered on the Site. To this end, the Site needs to collect, in relation to each service and its characteristics, the personal information necessary to carry out the service you have requested.
4. management of requests to our Customer Service, which uses the personal data you provide to fulfil your requests for information and assistance.
5. analysis and statistical surveys. We use certain information about your use of the Site to perform statistical analysis and surveys in order to improve our offerings and services;
6. sending commercial and promotional communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the Site, we will send you communications containing our commercial proposals on related products and services to the e-mail address you have provided to us.
7. with your express consent, we may use the contact details you provide us with for commercial communications about our products and services, in order to keep you up to date with news, new arrivals, exclusive products, offers and promotions
8. only with your consent, the Site may personalise your experience as a registered user, providing you with previews and offers in line with your tastes and sending you commercial communications personalised according to your interests.

If you consent to the activities described in paragraphs 7) and 8) above and subsequently do not wish to receive further communications from us or wish to limit the manner in which we may contact you, you may opt-out of these communications at any time by contacting our Customer Service Department and indicating the subject line ‘privacy’ or by writing to the appropriate address above.
Please note that you may receive further communications from us even after you have submitted your unsubscribe request, as some mailings may have already been scheduled, our systems may take some time to process your request.
In connection with all of the above activities, we will process your personal data mainly by means of computerised and electronic tools; the tools we use guarantee high standards of security, in full compliance with the relevant legislation.

4. Cookie Policy
This Site makes use of tracking tools. To find out more, please see our Cookie Policy.


5. Your account
When creating your account, we offer you the possibility of using the following services:
- My account: manage your addresses, newsletter subscription and contact information.
- My orders: track the dispatch of your orders, change or return articles that are not suitable for you and see your order history.
- My wish list: save the items you most want and keep an eye on their availability.
- My Information: manage your account information.
- Stored payment methods.
With your express consent, the Site may customise your experience and the content of commercial communications and offers you see when you browse as a registered user, according to your interests. This activity makes it easier for you to find products and services that are of greater liking and interest to you and at the same time allows us to improve our offerings to you. In particular, information about the purchases you have made in the past and information about the sections of the Site you visit most often or the services you use most frequently helps us to understand which products and services you are most interested in.
In order to ensure that the information we hold on you is correct and enables us to properly carry out the activities described above, we encourage you to access your account and, if you feel it necessary, to update it or request an update.


6. Legal basis for processing
We process your personal data only in the presence of one of the conditions provided for by current legislation, and specifically
(a) for the conclusion and performance of a contract to which you are a party.
When we process your data for the conclusion of a purchase contract to which you are a party, we take care to use only the minimum information necessary for the execution of the contract. This basis legitimises the processing of personal data that takes place in the following activities
- conclusion and execution of a contract for the purchase of products offered on the Site;
- registration on the Site and use of services reserved for registered users;
- provision of services offered on the Site;
- management of your requests by our Customer Service.
The provision of your personal data for these activities is a contractual obligation. You are free to provide us with your data or not, but without the requested data we will not be able to conclude or execute the contract and your requests. This means that you will not be able to purchase products and you will not be able to use the services of the Site and that your requests cannot be handled;
b) to comply with a legal obligation.
If you enter into a contract for the purchase of goods on the Site, your data will be processed in order to comply with the Site's legal obligations under tax and other regulations to which it is subject. You are free to decide whether or not to enter into a contract and whether or not to provide us with your data, but if you do enter into a contract your data will be necessary and will be processed to carry out the aforementioned legal obligations to which the Site is subject.
(c) for our legitimate interest.
Some of your personal data when you purchase products with a credit or debit card may be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out such activities to prevent and prosecute fraudulent activities.
d) on the basis of your consent.
We will only carry out the following processing where you have given us your express consent:
- carrying out marketing activities and opinion polls and market research;
- analysis of your browsing and consumption habits in the context of using your account, in order to personalise your experience on our Site.
Providing us with your personal data for these activities is completely optional. You are free to provide us with your data for these purposes or not, but without it it will not be possible for the Site to carry out marketing activities, opinion polls and market research, and analysis of your habits.


7. Who will process your data?
Your personal data will be processed by the internal staff of verapellestore.com who are specifically trained and authorised to process them.
Your personal data will also be transmitted to third parties that we use to provide our services; these third parties have been adequately selected and offer suitable guarantees of compliance with the regulations on the processing of personal data. These parties have been designated as data processors and carry out their activities according to the instructions given by the Site and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialising in IT and telematic services; couriers; companies carrying out marketing activities; companies specialising in market research and data processing.
Your data may be transmitted to the police and to judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection against threats to public safety, to allow the Site to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.


8. Transfer of data abroad
The management and storage of personal data will take place on servers of the Data Controller and/or of third party companies duly appointed as External Data Processors located within the European Union. Personal data may be transferred abroad, in accordance with the provisions of current legislation, including to countries outside the European Union. The transfer to non-EU countries, in addition to the cases in which this is guaranteed by Adequacy Decisions of the Commission, is carried out in such a way as to provide appropriate and adequate Guarantees in accordance with Articles 46 or 47 or 49 of the Regulation.


9. How long do we keep the data?
We keep your personal data for a limited period of time, which varies according to the type of activity that involves the processing of your personal data. After this period has expired, your data will be permanently deleted or otherwise irreversibly anonymised.
Your personal data is stored in accordance with the terms and criteria specified below:
- data collected to conclude and execute contracts for the purchase of goods on the Site: until the conclusion of administrative-accounting formalities. Data related to invoicing will be kept for ten years from the date of invoicing;
- registered user data: data will be kept until you request the deletion of your user account;
- payment-related data: until the payment is certified and the relevant administrative-accounting formalities are completed, following the expiry of the right of withdrawal and the terms applied to dispute the payment
- data collected in the context of the use of services offered on the Site: this data is retained until the User ceases to use the service or cancels the subscription to the service
- data related to User requests to our Customer Service: this data will be kept until your request is satisfied;
- data used for commercial communication activities towards users who purchase products on the Site (soft spam): these data will be kept until the service is terminated or the user exercises their objection by unsubscribing
- data provided for commercial communication activities, opinion polls and market research: until the user's request to stop the activity and in any case within 2 years from the last interaction of any kind by the user
- data used to personalise the Site and to show personalised commercial offers: until the user requests the termination of the activity and in any case within 2 years from the last interaction of any kind by the user
- data used for carrying out market research and satisfaction surveys: until the User requests the termination of the activity.

In any case, for technical reasons, the cessation of processing and the consequent definitive cancellation or irreversible anonymisation of the relevant personal data shall be definitive within thirty days of the aforementioned terms.


10. Your rights
You may exercise your rights at any time with reference to the specific processing of your personal data by the Site. Please find below their general description and how to exercise them.
a) Access to and modification of your data: you have the right to access your personal data and to ask for them to be corrected, modified or supplemented with other information. If you wish, we will provide you with a copy of the data in our possession.
b) Withdrawing your consent: you may at any time withdraw a consent you have given for us to process your personal data in connection with any activity for marketing purposes. In this regard, we would like to remind you that the sending of commercial and promotional communications, the conducting of market research and satisfaction surveys for customising the website and commercial offers according to your interests are considered marketing activities. Upon receipt of your request, we will promptly stop processing your personal data based on this consent, while other processing or processing based on other assumptions will continue to be carried out in full compliance with the provisions in force.
c) Object to the processing of your data: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, by explaining to us the reasons justifying your request; before granting it, the Site will have to assess the reasons for your request.
d) Deletion of your data: in the cases provided for by current legislation, you may request the deletion of your personal data. Upon receipt and examination of your request, if legitimate, we will promptly cease processing and delete your personal data.
e) Request that the processing of your personal data be temporarily limited: in this case, the Site will continue to store your personal data but will not process them, unless you request otherwise and exceptions are provided for by law. You can obtain the restriction of processing when you contest the accuracy of your personal data, when the processing is unlawful but you object to the deletion of your data, when we no longer need your data but you need it to exercise your right in court and when you object to the processing, during the period in which we assess the grounds for your request.
f) Request your data or transfer it to a different party (‘right to data portability’). You can request to receive your data that we process on the basis of your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we may at your request transfer your data directly to a third party indicated by you to us.
In order to exercise some of your rights described above you can access your account or alternatively you can contact us by calling 0825 534049 or by writing to our Customer Service stating ‘privacy’, or by writing to the Data Controller address above.
In order to ensure that our users' data is not violated or misused by third parties, before granting your request to exercise any of the above rights, we will ask you for certain information to ensure your identity.


11. Security measures
We protect your personal data with specific technical and organisational security measures to prevent your personal data from being used unlawfully or fraudulently. In particular, we use security measures that ensure: the confidentiality, integrity and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. Furthermore, the Site undertakes to regularly test, verify and evaluate the effectiveness of technical and organisational measures in order to ensure continuous improvement in the security of processing.


12. Complaints
If you believe that the processing of your personal data has been unlawfully carried out, you may lodge a complaint with one of the competent data protection supervisory authorities.
In Italy, the complaint may be lodged with the Garante per la Protezione dei Dati Personali.
More information on how to file a complaint is available on the Garante's website at http://www.garanteprivacy.it


13. Changes to this policy
The constant evolution of our services may lead to changes in the characteristics of the processing of your personal data described herein. As a result, this privacy policy may be subject to changes and additions over time, which may also be necessary with reference to new legislation on the protection of personal data. We therefore invite you to periodically check its contents: where possible, we will endeavour to inform you in good time of any such changes and their consequences. The updated version of the privacy policy, in any case, will be published on this page, indicating the date of its last update.


14. Legislative references and useful links
The processing of your personal data is carried out by the Website in full compliance with the relevant regulations set out in Regulation (EU) 2016/679 General Data Protection Regulation, the Italian data protection regulations and the provisions of the Italian Data Protection Authority (http://www.garanteprivacy.it).

Last update: 20/09/2024