Privacy policy

Who is the Data Controller?

Uncle food S.r.l., with registered office at Via Alcide De Gasperi, 33 – 80133 Naples (NA) (VAT number: 08710071211) (hereinafter, the "Controller")

How can I contact them?

The company's contact details are:  

Email: info@unclefood.com

Certified email: unclefoodsrl@pec.it

Address: Via Alcide De Gasperi, 33 – 80133 Naples (NA)

1. Introduction

Pursuant to the European regulation on personal data protection (GDPR), legal entities are not considered data subjects and therefore the European regulation does not apply. However, if in the context of collecting company data personal data relating to a natural person are included, this person shall be considered a data subject pursuant to the aforementioned regulation with consequent applicability of the relevant legislation.


2. What processing is carried out through the site? What are the legal bases, purposes, and retention periods?


REGISTRATION

PURPOSE

The purpose is to register on the site and be able to make purchases.

LEGAL BASIS

Contractual fulfillment.

Legitimate interest in case of dispute.

RETENTION PERIOD

Data will be processed until the account is deleted.
If the account remains inactive for 7 years, we will send you an email to ask if you are still interested in keeping it active; otherwise, the account will be deleted.
Data may be processed for a longer period in case of dispute (arising before data deletion) which corresponds to the legitimate interest of the data controller to defend or take legal action and in the phases prior to the possible initiation of such action deemed prevailing over the interests of the data subject. 

OTHER INFORMATION

Providing data is mandatory, as refusal to provide them will make it impossible to make purchases.





PURCHASE

PURPOSE

The main purpose of data processing is to allow you to purchase and receive the purchased product. The data are also necessary to fulfill legal obligations (including accounting and tax obligations).

Finally, they may be needed in case of disputes regarding the proper fulfillment of the contract.

LEGAL BASIS

Execution of a contract and consequent fulfillment of the legal obligations incumbent on the data controller.

In in case of dispute, the data will be processed to act or defend oneself in court, and this corresponds to the legitimate interest of the data controller.

RETENTION PERIOD

The data will be deleted 10 years after the fulfillment of the contract.

They may be kept longer only in case of disputes and therefore to exercise or defend a right based on the legitimate interest of the data controller.

OTHER INFORMATION

Providing the data is mandatory and in case of refusal to provide it, it will not be possible to purchase the requested products.



TRANSACTIONAL EMAILS

PURPOSE

The purpose of data processing is to send you information related to the purchase made.

LEGAL BASIS

Contractual execution.

In case of dispute, the legal basis is found in the legitimate interest of the data controller.

RETENTION PERIOD

Until the delivery of the order or for a longer period in case of dispute

OTHER INFORMATION

Transactional emails are sent to allow better order management and to provide the customer with confirmation regarding the purchase and shipment.



NEWSLETTER/
DEM
also by automated methods (email, sms, whatsapp, social) or traditional 

 

PURPOSE

The purpose of data processing is to send you newsletters and DEM through traditional methods or also through automated methods (email, sms, WhatsApp, social networks).

LEGAL BASIS

Consent given by the Data Subject pursuant to Articles 6, paragraph 1, letter a) GDPR and 130 paragraphs 1-2 Legislative Decree 196/03

RETENTION PERIOD

5 years from the last sending.

OTHER INFORMATION

Consent can be revoked at any time. The user has full freedom to provide the requested data, as there is no legal obligation to provide them. However, if the user chooses not to provide the data marked as essential, the data controller will not be able to achieve the indicated purpose.



NEWSLETTER/
DEM “Softspam” 
also by automated methods (email, sms, whatsapp, social) or traditional 

PURPOSE

The purpose of data processing is to send you newsletters and DEM through traditional methods or also through automated methods (email, sms, WhatsApp, social networks)..

In case of purchase of our product, your data will be exported to a CRM for sending commercial information about products similar to those purchased.

LEGAL BASIS

In case of purchase, your consent is not required pursuant to art. 130 para. 4 Legislative Decree no. 196/03.

RETENTION PERIOD

5 years from the last sending.

OTHER INFORMATION

You can exercise the output at any time.







MARKETING AND PROFILING THROUGH DIGITAL PLATFORMS

PURPOSE

The purpose of data processing is to show marketing content based on your interests, as identified by your interactions on our website or social media. This includes the use of digital platform retargeting tools to disseminate targeted advertising messages.

LEGAL BASIS

Consent that can be obtained through various methods:

  1. Through Cookies on our Site: Your consent to marketing and profiling cookies is collected through the cookie settings on our site.

  2. For Custom Audience CRM Campaigns (Prospecting and Retargeting): For these campaigns, we obtain your explicit consent to use your contact data (e.g. email address) for marketing purposes.

Interaction with Social Pages: If you have given consent to the use of profiling cookies on our Site, we may process your contact data and information communicated during interaction with Social Pages. We use this information, in accordance with your privacy settings on social media, to show personalized marketing ads.

RETENTION PERIOD

Data will be retained until consent is revoked through cookie settings.

OTHER INFORMATION

  1. Consent obtained through Cookies on our Site: The User can manage or revoke this consent at any time, as described in our Cookie Policy. We also inform you that cookies may be both first and third party and therefore installed, on our behalf, directly by Meta.

  2. Consent obtained for Custom Audience CRM Campaigns (Prospecting and Retargeting): This consent allows us to process your data to identify similar audiences (lookalike) and to show targeted advertising on social media and other digital platforms.

  3. Profiling cookies and advertising identifiers are used for ad personalization (personalized and non-personalized advertising), including remarketing and retargeting campaigns. For information on how Google uses personal data when providing its services to our partners, see the page: Google's Responsibility for Business Data.

In the case of simple User segmentation, your consent is not required.



ABANDONED CART

PURPOSE

The purpose of data processing is to send up to 3 emails to invite the user to complete the purchase interrupted on the site.

LEGAL BASIS

Legitimate interest of the Data Controller in completing the purchase.

RETENTION PERIOD

72 hour

OTHER INFORMATION

Providing data is automatic and follows partial completion of the shopping cart.




REVIEW

PURPOSE

The purpose is to share one's experience and advertise the products offered on the e-commerce site.

LEGAL BASIS

Legitimate interest of the Data Controller and consent of the data subject to the tool managing the review.

RETENTION PERIOD

Reviews will be published on the site until they become obsolete and/or consent is revoked.

OTHER INFORMATION

Consent can be revoked at any time. 



BROWSING DATA

PURPOSE

Site security

LEGAL BASIS

We will process data based on the company's legitimate interest in cybersecurity and compliance with legal obligations. The legal basis for processing cookies other than necessary ones is consent

RETENTION PERIOD

24 months

OTHER INFORMATION

For the cookie policy, please refer to the dedicated information.



3. What else do I need to know?

The data will be processed lawfully, fairly, and with the utmost confidentiality, respecting appropriate security measures as provided by the Code and the Regulation. The processing will be carried out using digital means. The data will not be publicly disclosed, except for those related to reviews. Furthermore, the user will not be subjected to automated decision-making processes such as profiling unless they consent to this through the installation of cookies or other tracking tools, for which the relevant information notice applies.


4. To whom will my data be communicated?

The Data Controller may communicate the data to all entities to whom communication is mandatory by law for the fulfillment of purposes provided by law. 

The Data Controller also makes use of certain companies or IT tools that perform data processing activities on the personal data of the data subjects exclusively in the interest of the Data Controller, all properly appointed as data processors pursuant to art. 28 GDPR.

The data will also be communicated to payment gateways as independent controllers.

The list of data processors is available on site. 

In case of merger, sale, or any other corporate change and/or in case of organizing one of these operations, your data may be shared. Furthermore, if the company owned by the Data Controller or part of it is sold to a third party, the latter may continue to use your data, always in the manner provided by this privacy notice.


5. What is the place of storage and transfer of data?

The management and storage of personal data will take place on servers located inside and outside the EU. The Data Controller guarantees that the extra-EU transfer takes place in compliance with Articles 44-47 Chapter V of the GDPR through the signing of standard contractual clauses and/or through adequacy decisions.


6. What are my rights and how can I exercise them?

a) Rights of the data subject

The user, as the data subject, has the rights referred to in art. 15 et seq. of the Regulation, specifically:

1. RIGHT OF ACCESS (art. 15 GDPR)

The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and to receive such data in an intelligible form.

2. RIGHT OF RECTIFICATION (art. 16 GDPR)

The data subject has the right to obtain the rectification of inaccurate personal data concerning them and also the completion of incomplete data.

3. RIGHT OF ERASURE (art. 17 GDPR)

The data subject has the right to obtain the erasure of personal data in the presence of specific reasons such as withdrawal of consent, objection to processing, or if the data are no longer necessary for the purposes for which they were collected and processed, or in case of unlawful processing. Not It will always be possible to proceed with deletion, but it will certainly be the responsibility of the data controller to provide an adequate justification.

4. RIGHT TO RESTRICTION OF PROCESSING (art. 18 GDPR)

The data subject has the right to obtain restriction of processing in specific cases such as, for example, in the case of a request for rectification or objection during the time of evaluating the requests.

5. RIGHT TO DATA PORTABILITY (art. 20 GDPR)

If the processing is based on consent or contract and is carried out with automated means, the data subject can receive the data in a structured, commonly used and machine-readable format or request to have them transmitted to another controller.

6. RIGHT TO OBJECT (art. 21 GDPR)

The data subject has the right to object, in whole or in part:

a) for legitimate reasons to the processing of personal data concerning them, even if relevant to the purpose of the collection;

b) to the processing of personal data concerning them for purposes not covered by art. 2.

The user can submit a request to object to the processing of their personal data pursuant to article 21 of the GDPR in which they provide evidence of the reasons justifying the objection: the Controller reserves the right to evaluate the request, which would not be accepted if there are compelling legitimate reasons to proceed with the processing that prevail over the interests, rights, and freedoms of the user.

7. RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the competent supervisory authority pursuant to article 77 of the GDPR if they believe that the processing of their data is contrary to the applicable legislation.


b) Methods of exercise:

The data subject can exercise the rights referred to in the previous article at any time by contacting the data controller at the above addresses.

Last updated: March 11, 2026