Privacy & Cookie Policy

1. Scope of Application

This policy is provided in accordance with EU Regulation 2016/679 (GDPR) and current Italian legislation. It applies exclusively to the website mielenaturale.it (hereinafter referred to as "the Site").

2. Data Controller

3. Types of Data Processed

The Site collects and processes the following categories of personal data.

A. Data Provided Voluntarily by the User

This refers to information spontaneously sent by the user through direct contact channels:

• Email correspondence;
• Interactions via social media platforms (Facebook, Messenger, Instagram, TikTok);
• Instant messaging via WhatsApp and Telegram;
• Telephone contact or SMS.

The user acknowledges that the use of third-party platforms (e.g., Meta, TikTok, Telegram) involves data processing operated by the providers of such platforms according to their own policies, over which the Controller has no direct influence.

B. Browsing Data

Computer systems acquire certain data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, system logs). Such data is used solely to ensure the security and correct functioning of the Site.

4. Purpose and Legal Basis

• Responding to inquiries and providing services: To process requests for information or bespoke quotes.
  Legal Basis: Performance of contractual or pre-contractual measures (Art. 6, para. 1, letter b GDPR).
• Compliance with legal obligations: Management of fiscal and administrative duties.
  Legal Basis: Legal obligation (Art. 6, para. 1, letter c GDPR).
• Cybersecurity: Protection against malicious attacks and spam.
  Legal Basis: Legitimate interest of the Controller (Art. 6, para. 1, letter f GDPR).
• Commercial Communications (Marketing): 1. Subject to obtaining explicit consent (Art. 6, para. 1, letter a GDPR). 2. Via "Soft Opt-in" (Art. 130, para. 4, Legislative Decree 196/2003) for sending emails related to products or services similar to those already purchased, unless the data subject objects.

5. Methods, Location, and Infrastructure

Data is processed using protected electronic tools (including biometric authentication, firewalls, and antivirus software) primarily within the European Economic Area (EEA).

Technical Partners

• Hosting: BunnyWay d.o.o. (Slovenia) and OVH S.r.l. (Italy).
• Electronic Mail: QBoxMail S.r.l. (Italy).
• Productivity: Google Workspace. The transfer to Google LLC (USA) is legitimised by adherence to the EU-U.S. Data Privacy Framework.

Social Media and Messaging

• Meta (WhatsApp, FB, IG): Transfer based on the Data Privacy Framework. For "Page Insights" services, a Joint Controllership regime applies (Art. 26 GDPR).
• Telegram and TikTok: Transfers protected by Standard Contractual Clauses (SCC).

6. Data Retention

• Marketing and contacts: 12 months from the last interaction.
• Fiscal/Legal data: 10 years (statutory limitation periods).

7. Rights of the Data Subject

Users may exercise their rights of access, rectification, erasure (right to be forgotten), restriction, objection, and portability by writing to privacy@mielenaturale.it.

It is always possible to lodge a complaint with the Italian Data Protection Authority (Garante) at (www.gpdp.it).

8. Cookie Policy

The Site uses exclusively technical cookies necessary for navigation. No proprietary profiling or automated analytical tools are active. Third-party cookies (e.g., Google Maps) are only activated if the user voluntarily interacts with such elements.

9. Amendments

The Controller reserves the right to update this document in accordance with regulatory or technical developments.