GDPR Information

Last updated: August 14, 2024

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data. As a data subject in the European Union, you have the following rights:

Right to Access

You have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation as to whether or not we are processing your personal data and, where we are, to access that data along with certain supplementary information.

Right to Rectification

You have the right to request that we correct any personal data we hold about you that is inaccurate or incomplete. We will respond to your request within one month.

Right to Erasure

Also known as the "right to be forgotten," you have the right to request the deletion of your personal data in certain circumstances, including:

• The personal data is no longer necessary for the purpose for which it was collected
• You withdraw your consent and there is no other legal ground for processing
• You object to the processing and there are no overriding legitimate grounds
• The personal data has been unlawfully processed

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from us.

Right to Object

You have the right to object to our processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation that makes you want to object to processing on this ground.

Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of your personal data infringes GDPR.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us at:

Bottega Fatto a Mano
Via della Ceramica 47
50125 Florence, Italy
[email protected]

We will respond to your request within one month of receipt. In some cases, such as complex requests, we may extend this period by two further months, in which case we will inform you of the extension and the reasons for it.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you have given us explicit consent to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we need to process your data to comply with legal obligations
• Legitimate Interests: When processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at [email protected]

International Transfers

When we transfer your personal data outside of the European Economic Area, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements, including through the use of standard contractual clauses approved by the European Commission.