1. Data Controller
The data controller for the personal data collected through this website is:
Concept S.r.l. · Anhelo
Via San Biagio dei Librai 19, 80138 Napoli (NA), Italy
VAT number (Partita IVA): 07508881211
Email:
ask@anhelocaffe.com
2. Types of Data Collected
This website collects personal data only in the following ways:
- Data voluntarily provided by the user: name, email address, telephone number and details of the request sent by email message.
- Browsing and technical data: IP addresses, browser type and access times collected in anonymised form by the web servers for technical security reasons.
3. Purposes and Legal Basis of Processing
Personal data is processed exclusively to:
- Respond to commercial, supply or information requests about Anhelo products and services (Legal basis: performance of pre-contractual or contractual measures, Art. 6(1)(b) GDPR).
- Ensure the correct display and technical security of the site (Legal basis: legitimate interest of the controller, Art. 6(1)(f) GDPR).
4. Processing Methods and Retention
Processing is carried out by computer and telematic means with security measures adequate to prevent unauthorised access, disclosure, alteration or destruction of data. Data is kept for the time strictly necessary to handle the request and to fulfil legal obligations.
5. Rights of the Data Subject
Under Articles 15–22 of the GDPR, users have the right to access their data, request its rectification, erasure, restriction of processing or portability, and to object to its processing, by sending a written communication to:
Email: ask@anhelocaffe.com
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).
6. Usage Statistics (Google Analytics 4 and Microsoft Clarity)
With your consent, the data controller (Concept S.r.l., VAT No. 07508881211) uses Google Analytics 4 and Microsoft Clarity to understand how the site is used and to improve it. The data processed includes browsing data (pages visited, clicks, scrolling, device and browser type, approximate origin, at country and city level) and, for Clarity, recordings of interactions with the pages.
Legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time via “Manage cookies”.
Recipients: Google Ireland Limited / Google LLC and Microsoft Corporation, as data processors.
Transfers outside the EU: data may be transferred to the United States. The transfer takes place on the basis of the safeguards provided for by the GDPR, namely the European Commission's adequacy decision on the EU-US Data Privacy Framework or, alternatively, the standard contractual clauses.
Retention: in Google Analytics 4, user and event data is kept for 14 months and then deleted automatically. In Microsoft Clarity, session recordings are kept for 30 days and aggregated data and heatmaps for 9 months.
Rights: access, rectification, erasure, restriction, objection and portability (Arts. 15–22 GDPR), by writing to ask@anhelocaffe.com; complaint to the Italian Data Protection Authority.