GDPR Compliance Statement

Effective Date: August 14, 2026

Overview

Caffè Torrefazione Milano is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This document outlines how we comply with GDPR requirements when processing personal data of individuals in the European Union.

Data Controller

Caffè Torrefazione Milano
Via Tortona 31, 20144 Milano, Italy
Email: info at ochre-tide.cyou

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: You have given clear consent for us to process your personal data for specific purposes
Contract: Processing is necessary for the performance of a contract with you
Legal Obligation: Processing is necessary to comply with legal obligations
Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override those interests

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access: You can request copies of your personal data
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data under certain conditions
Right to Restrict Processing: You can request that we limit the processing of your data
Right to Data Portability: You can request transfer of your data to another organization or directly to you
Right to Object: You can object to our processing of your personal data
Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, please contact us at info at ochre-tide.cyou. We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by two additional months, and we will inform you of such extension.

Data We Collect

We collect and process the following categories of personal data:

Contact information (name, email address)
Order information (service selections, quantities, delivery preferences)
Technical data (IP address, browser type, device information)
Usage data (pages visited, time spent on site)

How We Use Your Data

We use your personal data for:

Processing and fulfilling orders
Communicating with you about your orders and inquiries
Improving our website and services
Complying with legal obligations

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Order information is typically retained for seven years to comply with tax and accounting regulations.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit and at rest
Regular security assessments
Access controls and authentication measures
Staff training on data protection

International Data Transfers

Your personal data is primarily processed within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Cookies and Tracking

We use cookies and similar tracking technologies. You can manage your cookie preferences through our cookie banner or your browser settings. For more information, see our Cookies Policy.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in your country. In Italy, the relevant authority is:

Garante per la protezione dei dati personali
Piazza Venezia, 11
00187 Roma, Italy
Website: www.garanteprivacy.it

Updates to This Statement

We may update this GDPR Compliance Statement from time to time. Any changes will be posted on this page with an updated effective date.

Contact Us

For questions about GDPR compliance or to exercise your rights, contact us at:

Email: info at ochre-tide.cyou
Address: Via Tortona 31, 20144 Milano, Italy