Privacy Policy

1. Data Controller

The Data Controller of your Personal Data is LAMOLINA SRL, responsible to you for the legitimate and correct use of your Personal Data. You can contact them for any information or request at the following addresses:

Data Controller: LA MOLINA SRL
Legal Representative: DENIS MILOVIDOV
Registered Office: Via Bologna 21, 51039 Quarrata PT
VAT Number: 02095610479

Contacts:
PEC: lamolina@pec.it

2. Types of data collected, purposes and legal basis.

The Personal Data processed are collected either directly from the User/Data Subject or automatically through the website.

Data provided directly by the User/Data Subject:
The data provided directly by the User/Data Subject are all Personal Data entered by them on the website or otherwise provided to the Data Controller by any means. Such data will be processed in compliance with the guarantees of confidentiality and security measures provided by current legislation, also with the aid of electronic tools directly and/or through third parties, for the purposes listed below, together with the relevant legal basis:

A)
PURPOSE: Purposes strictly related to the execution of pre-contractual measures and to respond to specific requests from the User/Data Subject.
DATA PROCESSED: Name, Surname, Email, Phone, Company Data.
LEGAL BASIS: Contract to which the data subject is a party and/or execution of pre-contractual measures adopted at the request of the data subject.

B)
PURPOSE: Exercise of the Data Controller's rights, for example, the right to defense in court.
DATA PROCESSED: Name, Surname, Email, Phone, Company Data.
LEGAL BASIS: Legitimate interest

C)
PURPOSE: Direct and indirect marketing purposes and market research, for sending newsletters, emails, SMS messages, instant messages, and WhatsApp messages containing advertising and informational material.
DATA PROCESSED: Name, Surname, Email, Phone, Company Data.
LEGAL BASIS: Consent

D)
PURPOSE: Direct and indirect marketing purposes and market research, for sending newsletters, emails, SMS messages, instant messages, and WhatsApp messages containing advertising and informational material from third parties (e.g., Data Controller's partners).
DATA PROCESSED: Direct and indirect marketing purposes and market research, for sending newsletters, emails, SMS messages, instant messages, and WhatsApp messages containing advertising and informational material from third parties (e.g., Data Controller's partners).
LEGAL BASIS: Direct and indirect marketing purposes and market research, for sending newsletters, emails, SMS messages, instant messages, and WhatsApp messages containing advertising and informational material from third parties (e.g., Data Controller's partners).
 
E)
PURPOSE: Direct and indirect marketing purposes and market research, for sending newsletters, emails, SMS messages, instant messages, and WhatsApp messages containing advertising and informational material from third parties (e.g., Data Controller's partners).
DATA PROCESSED: Name, Surname, Email, Phone, Company Data.
LEGAL BASIS: Booking, reception, and administrative/accounting services.

F)
PURPOSE: Booking, reception, and administrative/accounting services.
DATA PROCESSED: Name, Surname, Email, Phone, Company Data.
LEGAL BASIS: Contract to which the data subject is a party and/or execution of pre-contractual measures adopted at the request of the data subject. The User/Data Subject assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties.

Data collected automatically through the website:
Automatically collected data are information automatically collected through the website www.lamolinashop.it (also from third-party applications integrated into this Application), including, for example: the IP addresses or domain names of the computers used by the User/Data Subject connecting to this website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (for example, the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, and parameters relating to the operating system and the User/Data Subject's IT environment. Complete details on each type of data collected are provided in the dedicated sections of this website's cookie policy.

Automatically collected data are processed exclusively for the purposes for which they are collected, as described below.

The Data Controller processes the data provided by data subjects to enable the functioning of the website, optimization, and traffic distribution, in addition to the other purposes described in this document and in the cookie policy.

3. Mandatory or optional nature of data provision and consequences of refusal to provide data

The provision of data for the purposes referred to in points a, b is optional but necessary for the execution of the contract.

The provision of data for the purposes referred to in points c, d is optional and your data may be used with your prior consent; in case of lack of consent, your data cannot be processed for the purposes described in these points.

Unless otherwise specified, all data requested for website navigation are mandatory. If the User/Data Subject refuses to provide them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain data as optional, Users are free to refrain from communicating such data, without this having any consequence on the availability or operation of the Service. Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.

4. Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes.

If consent is given for the processing of personal data for profiling purposes, processing will take place with data processing tools which, following cross-referencing, will create your commercial and behavioral profile. The processing thus carried out has, as expected consequences, by way of example, the sending of highly profiled commercial communications, the sending of discounts, the sending of invitations to events deemed of interest, etc.

The User/Data Subject has, in any case, the right to obtain human intervention in the decision-making process by the Data Controller, to express their opinion, to obtain an explanation of the decision reached, and to challenge the decision itself.

5. Recipients

Your data may be communicated, in addition to the personnel in charge of processing, also to the following subjects, also appointed, if necessary, as Data Processors by the Data Controller:

1. Partners and Consultants and companies that assist the Company from an IT and infrastructural point of view;
2. Partners, other Companies, Professionals, and Agents collaborating with the Company for the provision of services;
3. Company's commercial partners;
4. Employees and collaborators of the company responsible for communications, bookings, and reception;
5. Employees and collaborators responsible for accounting and administrative services.

The updated list of Processors can always be requested from the Data Controller.

The data will not be subject to other methods of dissemination.

6. Place of processing

The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located.
For further information, please contact the Data Controller.

The data provided directly by the User/Data Subject and those collected automatically may be transferred to a country other than where the User/Data Subject is located, including outside the European Economic Area.

In such a case, LA MOLINA S.r.l. ensures that the processing of your Personal Data by the subjects to whom the data are transferred takes place in compliance with European Regulation (EU) 2016/679 (GDPR), in accordance with the principles indicated:

  • in Article 45 of the GDPR, in the presence of an adequacy decision by the European Commission;
  • in the absence of such a decision, in Article 46 of the GDPR, relating to transfers subject to appropriate safeguards;
  • or in Article 49, paragraph 1, letter b), relating to transfers necessary for the performance of a contract concluded between the Data Subject and the Data Controller or for the implementation of pre-contractual measures taken at the request of the Data Subject.

 

Data provided directly by the User/Data Subject

The Personal Data provided directly by the Data Subject, collected for the purpose of responding to specific requests and/or for the performance of pre-contractual or contractual negotiations, will be processed and stored for the period of time necessary to achieve the aforementioned purposes and in any case no longer than 2 years from their collection.

Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. In the event of pending litigation, the data will be further processed until its resolution.

The Data Controller may also be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an Authority.

Personal Data collected for direct and indirect marketing purposes and market research, for sending newsletters, communications, and advertising and informational material, will be processed and stored for the period of time necessary to achieve the aforementioned purposes and in any case no longer than 2 years from their collection.

Personal Data collected for profiled marketing purposes will be processed and stored for the period of time necessary to achieve the aforementioned purposes and in any case no longer than 1 year from their collection.

Automatically collected data will be retained for the period specified in the cookie policy.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, erasure, rectification and the right to data portability can no longer be exercised.

Data collected automatically through the website

Automatically collected data will be retained for the period specified in the cookie policy.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, erasure, rectification and the right to data portability can no longer be exercised.

8. User/Data Subject Rights

Pursuant to Articles 15–22 of the GDPR, each User/Data Subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed, even if not yet recorded, and their communication in an intelligible form.

In particular, the Data Subject has the right to obtain from the Data Controller the indication of:

  1. the origin of the Personal Data;
  2. the purposes and methods of processing;
  3. the logic applied in case of processing carried out with the aid of electronic or IT tools;
  4. the identification details of the Data Controller, Processors, and the designated Representative;
  5. the subjects or categories of subjects to whom the data may be communicated or who may become aware of them as designated Representative, Processors, or persons in charge of processing.

Furthermore, the Data Subject has the right to obtain from the Data Controller:

  1. the update, rectification or integration of their data;
  2. the erasure, anonymization or blocking of data processed in violation of the law;
  3. access to their data, i.e., confirmation of whether or not personal data concerning them is being processed;
  4. restriction of processing and data portability, i.e., the right to receive in a structured format the Personal Data concerning them;
  5. the right to lodge a complaint with the supervisory authority.

Finally, the Data Subject has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection. In particular, the Data Subject has the right to object to the processing of personal data concerning them for the purpose of sending advertising material or for commercial communication purposes.

The rights listed above can be exercised by writing to the contacts indicated in point 1 of this privacy policy.

Please note that the Data Subject has the right to access their data at any time, by addressing their request to the designated Data Processor for the response, by sending a registered letter with return receipt or PEC communication to the addresses indicated below:

  1. Data Protection Officer – LA MOLINA S.R.L.
    Via Bologna 21, 51039 Quarrata (PT)
  2. PEC: lamolina@pec.it

9. List of linked websites and applications

Below is a list of websites and applications linked to www.lamolinasghop.it, which can be accessed directly from the website pages, with reference to the privacy document of each service.

Facebook
PURPOSE: We collaborate with Facebook for the dissemination of landing pages, products, services and multimedia content, as well as to acquire information on how you use and interact with our website through behavioral metrics, in order to improve and market our products and services.
PRIVACY URL:
https://www.facebook.com/about/privacy/previous

Google
PURPOSE: We collaborate with Google for the dissemination of landing pages, products, services and multimedia content and to analyze interaction with the website through behavioral metrics.
PRIVACY URL:
https://policies.google.com/privacy

Instagram
PURPOSE: We collaborate with Instagram for the dissemination of landing pages, products, services and multimedia content and to analyze interaction with the website through behavioral metrics.
PRIVACY URL:
https://help.instagram.com/519522125107875/

TikTok
PURPOSE: We collaborate with TikTok for the dissemination of landing pages, products, services and multimedia content and to analyze interaction with the website through behavioral metrics.
PRIVACY URL:
https://www.tiktok.com/legal/privacy-policy-eea?lang=it

WhatsApp
PURPOSE: We collaborate with WhatsApp for access to messaging groups, direct messaging, instant messaging and sending multimedia content.
PRIVACY URL:
https://faq.whatsapp.com/general/security-and-privacy/

Microsoft
PURPOSE: We collaborate with Microsoft Clarity and Microsoft Advertising to analyze interaction with the website through behavioral metrics, heat maps and session recordings.
PRIVACY URL:
https://privacy.microsoft.com/privacystatement

LinkedIn
PURPOSE: We collaborate with LinkedIn for the dissemination of landing pages, products, services and multimedia content and to analyze interaction with the website through behavioral metrics.
PRIVACY URL:
https://it.linkedin.com/legal/privacy-policy

Last updated: 08/01/26