In order to make your visit to our website as comfortable as possible, we use cookies to present our product range. These are small text aggregates recorded locally in the temporary memory of your browser, and therefore in your computer, for variable periods of time depending on the need and generally ranging from a few hours to a few years, with the exception of profiling cookies whose maximum duration is 365 calendar days.
By means of cookies it is possible to semi-permanently record information relating to your preferences and other technical data which allow easier navigation and greater ease of use and effectiveness of the site itself. For example, cookies can be used to determine if a connection has already been made between your computer and our sites to highlight news or maintain “login” information. For your guarantee, only the cookie stored on your computer is identified.

Types of Cookies

This site uses three different types of cookies:

1. Essential technical cookies

These cookies are necessary for the site to function properly. They allow browsing of the pages, sharing our content, storing your login credentials to speed up access to the site and to keep your preferences and credentials active while browsing. Without these cookies we could not provide the services for which users access the site.

2. Statistical and performance cookies

These cookies allow us to know how visitors use the site, in order to be able to evaluate and improve its functioning and favor the production of content that best meets the information needs of our users. For example, they let you know which pages are the most and least visited. They take into account, among other things, the number of visitors, the time spent on the site by average users and the methods of arrival of these. This way, we can know what works well and what to improve, as well as make sure that the pages load quickly and are displayed correctly. All information collected by these cookies is anonymous and not linked to the user’s personal data. To perform these functions on our sites we use third-party services that anonymize the data making them not attributable to single individuals (so-called “single-in”).

3. Functional and third-party profiling cookies

This category includes cookies provided by third parties who are not directly controlled or controllable.

Cookies from third parties allow us to offer advanced features, as well as more information and personal functions. This includes the ability to share content through social networks, access video streaming services and CDN networks on which we host our content. These services are mainly provided by external operators. If you have an account or if you use the services of these subjects on other websites, they may be able to know that the user has visited our sites. The use of the data collected by these external operators through cookies is subject to the respective privacy policies and therefore these cookies are identified with the names of the respective subjects indicated in the cookie management tool available in the appropriate section of this Information. These include the cookies registered by the main social networks that allow you to share the articles on our sites and to publicly express your approval of our work.

Cookies are conveyed by third parties who are able to intercept the user during his navigation even outside the site. These cookies, typically for profiling, are not directly controllable by us and therefore we cannot guarantee the use that the third-party owners make of the information collected.

Cookie management

In the event that you have doubts or concerns regarding the use of cookies, you can always intervene to prevent their setting and reading, for example by changing the privacy settings within your browser in order to block certain types or using the tool that we make available to you in this Policy.

Since each browser – and often different versions of the same browser – also differ significantly from each other, if you prefer to act independently through your browser preferences, you can find detailed information on the necessary procedure in your browser guide. For an overview of the modes of action for the most common browsers, you can visit www.cookiepedia.co.uk

Advertising companies also allow you to opt-out of receiving targeted ads if you wish. This does not prevent the setting of cookies, but interrupts the use and collection of some data by these companies.

By continuing to browse this site by closing the information folder or clicking on any part of the page or scrolling to highlight further content, you accept the Cookie Policy and cookies will be set and collected. In case of non-acceptance of cookies by abandoning navigation, any cookies already registered locally in your browser will remain registered there but will no longer be read or used until a subsequent and eventual acceptance of the Policy. You will always have the option to remove these cookies at any time through the methods described on the sites mentioned in the “Management of cookies” paragraph.

INFORMATION PURSUANT TO ARTS. FROM 13 TO 22 OF REG. EC 679/16 ON THE PROVISION OF ELECTRONIC COMMUNICATION SERVICES

General regulation on the protection of personal data and legal basis of the treatment

With this deed, and pursuant to articles from 13 to 22 of EC Reg. 679/2016, Mario Noferini, as Data Controller, wishes to inform you of the way in which he processes the personal data of website visitors in relation to electronic communication services via contact form.

The Data Protection Officer is Mario Noferini, who can be reached at info@coffeewords.eu.

The treatments are carried out pursuant to art. 6 paragraph I letters b), e), f) Reg. CE 679/2016 in order to provide the Customer with the services requested and to comply with legal obligations exclusively on the following legal bases:

  • Law 633/41 – Copyright law
  • Legislative Decree 68/03 – Implementation of DIR 29/01/EU
  • Legislative Decree 70/03 – Implementation of DIR 31/00/EU
  • Legislative Decree 196/03 – Personal data code
  • Legislative Decree 259/03 – Code of electronic communications
  • Legislative Decree 206/05 – Consumer Code
  • Legislative Decree 30/05 – Industrial property code
  • Legislative Decree 82/05 – Digital Administration Code
  • Law 40/2007 – Urgent measures for the protection of consumers (Bersani Law)
  • Law 48/08 – Implementation of the European Convention on computer crime
  • Reg. CE 679/16 – General regulation on the protection of personal data
  • Civil Code
  • Code of Civil Procedure
  • Penal Code
  • Code of Criminal Procedure
  • Provisions of the ordinary and administrative judicial authorities
  • Provisions of the Autonomous State Monopolies Company
  • Provisions of the Communications Regulatory Authority
  • Provisions of the Competition and Market Authority
  • Provisions of the Authority for the protection of personal data.

Who we are

IL CUCCO S.R.L.

Legal/operating/administrative office = Via di Vezzano, 193 – 50039 Vicchio (FI) – VAT number / Tax code 06681230485 – Tel. 3204299622

email info@coffeewords.eu

Our website address is: https://www.coffeewords.eu

1 – Type of data processed and retention period

1.1 The types of data processed are:

  • Name surname
  • Place and date of birth
  • Fiscal code/VAT number
  • Residence/Registered office
  • Email
  • Authentication credentials for accessing the control panel
  • IP Numbers
  • Analytical traffic data

1.2- Storage period

IL CUCCO S.R.L. retains the visitor’s personal data for the duration established by the civil code, the penal code and the laws, regarding liability, prescription and cooperation with the Judicial Authority. After this term, the data is destroyed.

2 – Purpose of the treatment

2.1 – Mandatory purposes by law, essential for the fulfillment of contractual obligations, protection of company rights in relation to Customers and Users

  • Management of communications reports via email
  • Fulfillment of regulatory obligations
  • Fulfillment of orders from the Judicial Authority and/or independent Authorities.

3 – Types of treatments performed on personal data

  • Collection by filling in contact forms inserted on the site.
  • Communication to public bodies and Authorities after processing (selection, research, extraction) of traffic data (for example Verifications by the Guarantor Authorities and Judicial Authorities).
  • Selective blocking of connections to network resources made unreachable by order of the public authorities (unauthorised online gaming sites, e-commerce sites indicated as fraudulent by the authorities, etc.).
  • Automatic storage of contents (insofar as this is stipulated in the contract and/or the Customer has not deleted the contents himself).
  • Sending and receiving emails.
  • Cancellation at the request of the interested party.

4 – Localization of data

IL CUCCO S.R.L. For the hosting service of the website, it relies on the VPS (Virtual Personal Server) of Giuseppe Porzilli – Internet Press Office which are located at the headquarters of Hetzner Online GmbH, Gunzenhausen, Germany while the DNS of the domains are managed by IRIDEOS S.p.A., Rome , Italy, in the European Union.

5 – Scope of communication and dissemination

The Client is informed that:

  • due to the very nature of the TCP/IP protocol (Transmission Control Protocol / Internet Protocol) and to the technical and organizational structure of an Internet network, the data (and therefore also general data) that the Customer sends and receives can also transit outside of the EU, for example because the routing of information packets is defined by the managers of the networks that make up the “great Internet”
  • the data you enter when requesting the assignment of IP numbers can be published by European entities (such as RIPE, the European Register of Network Numbering Assignments)
  • the data entered when registering a domain name can be made available through the Registry’s Whois services for the ccTLD.it (country code Top Level Domain) and .EU even outside the EU, or through the Whois services of others domain name registration service providers located outside the EU.

IRIDEOS is unrelated to these treatments and the Customer must contact the individual Data Controllers directly also to activate, where available, the contact information masking functions

  • the data generated by browsing is managed locally by the Client’s computer and software. The Customer must therefore manage these technological components, adopting adequate measures to control and limit the personal data he enters on the network through the use of secure protocols, VPNs and other available technologies
  • DNS (Domain Name Server) systems automatically manage the IP/domain name conversion to follow up on the connection request originating from the Client’s systems.

The Customer can freely choose which DNS to use, even different from those provided by Giuseppe Porzilli – Internet Press Office. Access to the DNS of Giuseppe Porzilli – Internet Press Office can be monitored and blocked by Giuseppe Porzilli – Internet Press Office on behalf of the judiciary and/or independent authorities by virtue of specific provisions

  • the anti-spam systems commonly used in the sector involve the use of blacklists managed by third parties. The Client’s IP and/or domain could be included – for reasons beyond the control of Giuseppe Porzilli – Internet Press Office – in the blacklists in question, making it impossible to send/receive e-mails.

Giuseppe Porzilli – The Internet Press Office has no legal entitlement to intervene on blacklist managers, who can also be located outside the EU

  • the Italian National CERT (Computer Emergency Response Team) of the Ministry of Economic Development carries out Info Sharing activities continuously and in total autonomy with the other CERTs of the European Union involving the public IPs of the Italian network, and therefore also those of the Client . The results of the activities on the Clients’ IP are communicated to Giuseppe Porzilli – Internet Press Office, but there is no information on who else has access to the data in question.

Giuseppe Porzilli – Internet Press Office is completely extraneous to these activities, to the results produced, as well as to the times and methods of the same

  • e-mail hosting and transport services do not prevent the Client from using cryptographic technologies, and the prior delivery of the decryption keys is not required. This does not mean that in the event of an order from the competent Authorities, the data stored by the Customer can still be delivered even if encrypted.
  • activities for justice purposes – interceptions, access to traffic data and other technical interventions – are covered by preliminary investigation secrecy and, without a specific order from the Judicial Authority, cannot be disclosed to the Customer.
  • the logs generated by the Customer’s systems are its property and therefore the Customer has the right to obtain a copy.

6 – Security measures

6.1 – Technical measures

The software and databases used are audited for compliance with the principles of data-protection by design and data-protection by default

The electronic traffic data processed for justice purposes are managed through separate servers, physically isolated, with biometric access based on strong-authentication and access log monitoring

The corporate network is protected by a firewall

There is an anti-spam and antivirus system

6.2 – Protection measures

A Data Protection Officer (RPD or DPO, Data Protection Officer) is appointed

System administrators have been identified

Authorized data processors are identified

The processing and organizational/technical choices affecting personal data security involve the Data Protection Officer

Vulnerability tests of information systems and network infrastructure are performed and planned

There is a computer emergency management procedure

There is a Data-Breach management procedure.

7 – Exercise of the rights referred to in articles 13-25 of EC Reg. 679/2016

The EC Reg. 679/16, in articles from 13 to 22 guarantees the interested party various rights including those to obtain the rectification of the data processed by IL CUCCO S.R.L. and the cancellation of the same or the blocking of the treatments.

The same rights can be exercised against IL CUCCO S.R.L. also following the termination, for any reason, of any type of relationship.

The rights can be exercised by contacting the Data Protection Officer, who can be reached at the address info@coffwords.eu, indicating exactly the personal data involved in the request and the reason for the request for modification, updating, cancellation, blocking and portability.

The request must be addressed to info@coffeewords.eu – Data Controller, together with an identity document of the applicant.

Within thirty days of receiving the request, IL CUCCO S.R.L. will communicate the acceptance of the request or its refusal (in the latter case, analytically motivating the reasons for the decision).

In case of exercise of the rights through delegates, the request must also contain a proxy with specific attribution of the power to request and receive the answers and a copy of the identity document of the delegate.

Within thirty days of receiving the request, IL CUCCO S.R.L. will communicate the acceptance of the request or its refusal (in the latter case, analytically motivating the reasons for the decision).