Privacy policy

Who is the Data Controller?

Uncle food S.r.l., with registered office in Via Alcide De Gasperi, 33 – 80133 Naples (NA) (VAT number: 08710071211) (hereinafter, “Owner”)

How can I contact him?

The company contact details are:

Peo: info@unclefood.com

Pec: unclefoodsrl@pec.it

Address: Via Alcide De Gasperi, 33 – 80133 Naples (NA)

1. Introduction

Pursuant to the European regulation on personal data protection (GDPR), legal persons are not considered interested parties and therefore the European regulation does not apply. However, if in the context of the collection of corporate data personal data referring to a natural person is entered, this person will be considered interested pursuant to the aforementioned regulation with consequent applicability of the relevant legislation.

2. What treatments are carried out through the site? And what are the legal bases, purposes and storage times?

REGISTRATION	PURPOSE	The purpose is to register on the site and be able to make purchases.
	LEGAL BASIS	Contractual fulfillment. Legitimate interest in case of litigation.
	STORAGE TIMES	The data will be processed until the account is deleted. In the event that the account remains inactive for 7 years, We will send you an email to find out if you are still interested in keeping it active; alternatively the account will be deleted. The data may be processed for a longer period in the event of a dispute (arising before the deletion of the data) and this corresponds to the legitimate interest of the data controller in the defense or action in court and in the phases preceding the possible establishment of the same which is deemed to prevail over the interests of the interested party.
	OTHER INFORMATION	The provision of data is mandatory, since in case of refusal to provide it, it will not be possible to make purchases.

PURCHASE	PURPOSE	The main purpose of data processing is to allow you to purchase and receive the purchased product. Furthermore, the data is necessary for the fulfillment of legal obligations (including of an accounting and tax nature). Lastly, they could be useful in the event of disputes raised regarding the correct fulfillment of the contract.
	LEGAL BASIS	Execution of a contract and consequent fulfillment of the legal obligations incumbent on the data controller. In the event of a dispute, the data will be processed to take action or defend oneself in court and this corresponds to the legitimate interest of the data controller.
	STORAGE TIMES	The data will be deleted 10 years after fulfillment of the contract. They could be kept longer only in the event of disputes and therefore to exercise or defend a right based on the legitimate interest of the data controller.
	OTHER INFORMATION	The provision of data is mandatory and in case of refusal to provide it, it will not be possible to purchase the requested products.

TRANSACTIONAL EMAILS	PURPOSE	The purpose of data processing is to send you information in relation to the purchase made.
	LEGAL BASIS	Contract execution. In the event of a dispute, the legal basis is found in the legitimate interest of the Data Controller.
	STORAGE TIMES	Until the order is delivered or for a longer period in the event of a dispute
	OTHER INFORMATION	Transactional emails are sent to allow better management of orders and to provide the Customer with confirmation in relation to purchase and shipping.

NEWSLETTER/ DEM even with automated methods (email, sms, whatsapp, social) or traditional methods	PURPOSE	The purpose of data processing is to send you newsletters and DEMs through traditional methods or also through automated methods (email, SMS, WhatsApp, social networks).
	LEGAL BASIS	Consent given by the interested party pursuant to articles. 6, co. 1, letter. a) GDPR and 130 co. 1-2 Legislative Decree 196/03
	STORAGE TIMES	5 years from the last sending.
	OTHER INFORMATION	Consent may be revoked at any time. The User has full freedom to provide the requested data, as there is no legal obligation to provide them. However, if the user chooses not to provide the data reported as essential, the Data Controller will not be able to achieve the indicated purpose.

NEWSLETTER/ DEM “Softspam” even with automated methods (email, sms, whatsapp, social) or traditional methods	PURPOSE	The purpose of data processing is to send you newsletters and DEMs through traditional methods or even through automated methods (email, sms, WhatsApp, social networks).. If you purchase our product, your data will be exported to a CRM for sending commercial information on products similar to those purchased.
	LEGAL BASIS	In the case of purchase, your consent is not necessary based on the art. 130 c. 4 Legislative Decree no. 196/03.
	STORAGE TIMES	5 years from the last sending.
	OTHER INFORMATION	It is possible to exercise the output at any time.

MARKETING AND PROFILING THROUGH DIGITAL PLATFORMS	PURPOSE	The purpose of data processing is to show marketing content based on your interests, as identified by your interactions on our website or social media. This includes the use of digital platforms' retargeting tools to deliver targeted advertising messages.
	LEGAL BASIS	Consent that can be acquired through various methods: Through Cookies on our Site: Your consent to marketing and profiling cookies is collected through the cookie settings on our site. For Custom Audience CRM Campaigns (Prospecting and Retargeting): For these campaigns, we obtain your explicit consent to use your contact data (e.g. email address) for marketing purposes. Interaction with Social Pages: If you have given consent to the use of profiling cookies on our Site, we may process your contact details and the information communicated during interaction with Social Pages. We use this information, in accordance with your social media privacy settings, to display personalized marketing ads.
	STORAGE TIMES	The data will be stored until the consent is revoked through the cookie settings.
	OTHER INFORMATION	Consent acquired through Cookies on our Site: The User can manage or revoke this consent at any time, as described in our Cookie Policy. We also inform you. that cookies can be both first and third party and therefore installed, through us, directly by Meta. Consent acquired for Custom Audience CRM Campaigns (Prospecting and Retargeting): This consent allows us to process your data to identify similar audiences (lookalikes) and to show targeted advertisements on social media and other digital platforms. Profiling cookies and advertising identifiers are used for the personalization of ads (personalised and non-personalised advertising), including remarketing and retargeting campaigns. For information on how Google uses personal data when providing its services to our partners, please see: Google's responsibility for company data. In the case of simple User segmentation, your consent is not required.

ABANDONED CART	PURPOSE	The purpose of data processing is to be able to send 3 emails to invite the user to finalize the interrupted purchase on the site.
	LEGAL BASIS	Legitimate interest of the Data Controller in completing the purchase.
	STORAGE TIMES	72 hour
	OTHER INFORMATION	The provision of data is automatic and follows the partial completion of the shopping cart.
CHAT / AI ASSISTANT	INFORMATION	The chat service is managed through Kepler (Kepler AI SRL), an external provider appointed as Data Controller pursuant to art. 28 GDPR. The system uses artificial intelligence technology; the user is informed to interact with an AI assistant. The processing is based on the consent of the interested party. The data is processed to respond to requests and deleted at BEST BEFORE of the contract with the supplier, unless otherwise required by law.

REVIEW	PURPOSE	The aim is to share one's experience and advertise the products offered on e-commerce
	LEGAL BASIS	Legitimate interest of the Data Controller and consent of the interested party to the tool that handles the review.
	STORAGE TIMES	Reviews will be published on the site until they become obsolete and/or until consent is revoked.
	OTHER INFORMATION	Consent can be revoked at any time.

NAVIGATION DATA	PURPOSE	Site security
	LEGAL BASIS	We will process the data based on the company's legitimate interest in IT security and the fulfillment of legal obligations. The legal basis for the processing of cookies other than necessary ones is consent
	STORAGE TIMES	24 months
	OTHER INFORMATION	For the regulations on cookies, please refer to the specific information.

3. What else do I need to know?

The data will be processed lawfully, correctly and with the utmost confidentiality, in compliance with adequate security measures as required by the Code and the Regulations. The processing will be carried out by digital means. The data will not be publicly disclosed, with the exception of those relating to reviews. Furthermore, the user will not be subjected to automated decision-making processes such as profiling unless he consents to this through the installation of cookies or other tracking tools for the regulation of which please refer to the specific information.

4. To whom will my data be communicated?

The Data Controller may communicate the data to all subjects to whom communication is mandatory by law for the fulfillment of the purposes established by law.

The Data Controller also makes use of some companies or IT tools that carry out processing activities on the personal data of the interested parties in the exclusive interest of the owner of the same, all adequately appointed as data controllers pursuant to art. 28 GDPR.

The data will also be communicated to the payment gateways as independent data controllers.

The list of data controllers can be found on site.

In the event of a merger, sale or any other corporate change and/or in the event of the organization of one of these operations, your data may be shared. Furthermore, in the event that the company owned by the Data Controller or part of it is sold to a third party, the latter may continue to use your data, always in the manner provided for in this privacy policy.

5. Where is the data stored and transferred?

The management and storage of personal data will take place on servers located within and outside the EU. The Data Controller guarantees that the transfer outside the EU takes place in compliance with the articles. 44-47 Chapter V of the GDPR through the signing of standard contractual clauses and/or through adequacy decisions.

6. What are my rights and how can I exercise them?

a) Rights of the interested party

The user, in his capacity as interested party, has the rights referred to in the art. 15 et seq. of the Regulation and precisely:

1. RIGHT OF ACCESS (art. 15 GDPR)

The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

2. RIGHT OF CORRECTION (art. 16 GDPR)

The interested party has the right to obtain the rectification of inaccurate personal data concerning him or her and also the integration of incomplete data.

3. RIGHT OF CANCELLATION (art. 17 GDPR)

The interested party has the right to obtain the deletion of personal data in the presence of particular reasons such as revocation of consent, opposition to processing or if the data are no longer necessary with respect to the purposes for which they were collected and processed or in case of unlawful processing. It will not always be possible to proceed with cancellation but it will certainly be the responsibility of the data controller to provide adequate reasons.

4. RIGHT TO LIMITATION OF PROCESSING (art. 18 GDPR)

The interested party has the right to obtain the limitation of processing in the presence of particular hypotheses such as, for example, in the case of a request for rectification or opposition during the time of evaluation of the requests.

5. RIGHT TO PORTABILITY (art. 20 GDPR)

If the processing is based on consent or contract and is carried out with automated tools, the interested party can receive them in a structured, commonly used and machine-readable format or ask to transmit them to another owner.

6. RIGHT TO OBJECT (art. 21 GDPR)

The interested party has the right to object, in whole or in part:

a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;

b) to the processing of personal data concerning him for the pursuit of purposes not contemplated by the art. 2.

The user can formulate a request to object to the processing of his personal data pursuant to Article 21 of the GDPR in which to highlight the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in the event of the existence of compelling legitimate reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the user.

7. RIGHT TO SUBMIT A COMPLAINT

The interested party has the right to propose complaint to the competent supervisory authority pursuant to Article 77 of the GDPR if it considers that the processing of your data is contrary to the legislation in force.

b) Exercise methods:

The interested party can exercise the rights referred to in the previous article at any time by contacting the data controller at the addresses indicated above.

Latest version: March 11, 2026

Privacy policy

Categories

About us

Get in touch