Privacy Policy

Introduction

This policy describes how Market Bottaro collects, uses, and protects your personal data when you use our website and our online ordering service with in-store pickup.

Data controller

The controller of personal data processing is:

• M.BB. di Manuel Bottaro
• Via Monticano 1, 30028 San Michele al Tagliamento (VE), Italy · P.IVA: 01164240283 · C.F.: BTTMNL65E29G224U
• Email: info@marketbottaro.it

No Data Protection Officer (DPO) has been appointed, since the processing does not fall within the cases listed in art. 37 GDPR (the activity does not amount to large-scale systematic monitoring nor to large-scale processing of special categories of data).

Data collected

We collect the following personal data when you place an order:

• Full name
• Email address
• Phone number
• Order details (products, quantities, amount, and pickup date and time)
• Pseudonymous and aggregated browsing data (only with your consent to analytical cookies)

Purpose of processing

Your data is processed for the following purposes:

• Order management and fulfillment
• Order-related communications (confirmation, preparation status, pickup)
• Customer support
• Service improvement through aggregated analytics and heatmaps
• Compliance with legal obligations (tax, accounting)

Legal basis

The processing of your data is based on:

• Contract performance: required to manage your order
• Legitimate interest: for service security and improvement
• Consent: for analytical cookies (can be withdrawn at any time)
• Legal obligation: for tax and accounting compliance

Third parties and data processors

To deliver our service, we share your data with the following providers:

• Stripe: Payment processing (payment data)
• Supabase: Database and authentication (order data)
• Vercel: Website hosting
• PostHog EU: Browsing analytics, funnels and heatmaps (PostHog EU)
• Upstash: Abuse protection (IP address only, anonymized)
• Resend: Transactional emails (email, name, order details)

International transfers

Some of our providers (Stripe, Supabase, Vercel, Upstash, Resend) are based in the United States. Data transfers to the USA are governed by the Standard Contractual Clauses (SCC) of the European Commission and, where applicable, by the EU-US Data Privacy Framework.

Data retention

Order data is kept for as long as required by tax and accounting obligations (10 years under Italian law). Incomplete orders are automatically deleted after 30 minutes. Analytics browsing data is retained for up to 12 months.

Your rights

Under the GDPR (EU Regulation 2016/679), you have the right to:

• Access: obtain a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request the deletion of your data
• Restriction: restrict processing in certain cases
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it). To exercise your rights, please contact us at the email address listed below.

Cookies

For detailed information on the use of cookies, please see our Cookie Policy.

Privacy contact

For any questions or requests regarding privacy and the processing of your personal data, please contact us at: info@marketbottaro.it

Updates

This policy may be updated from time to time. The latest version is always available on this page.