Privacy Policy

Data Controller
Torrefazione El Miguel S.r.l.
VAT No. 02010970123
Via Molini Trotti 13, 21100 Varese (VA) – Italy
Email: info@elmiguel.it

1. Types of Data Collected

  • Personal and contact data (name, email, address, phone number);
  • Order and payment data (billing and shipping details, payment method);
  • Data provided via contact forms or email communications;
  • Browsing data (IP address, browser type, pages visited, session time);
  • Tracking data from analytics and advertising tools (Google Analytics, Meta Pixel).

2. Purposes of Processing

  • To manage and process online orders, shipments and payments;
  • To respond to user requests submitted via the contact form or email;
  • To comply with legal, accounting and tax obligations;
  • To analyse website traffic (via Google Analytics with anonymised IP);
  • To perform promotional and remarketing activities using Meta Pixel (subject to consent);
  • To ensure website security and proper technical functioning;
  • To send newsletters and promotional offers (subject to consent).

3. Legal Basis for Processing

The processing of personal data is based on:

  • the performance of a contract or pre-contractual measures (Art. 6.1.b GDPR);
  • compliance with legal obligations (Art. 6.1.c GDPR);
  • the user’s explicit consent (Art. 6.1.a GDPR) for marketing and tracking cookies;
  • the legitimate interest of the Controller (Art. 6.1.f GDPR).

4. Processing Methods and Data Security

Data are processed using electronic and manual tools in accordance with principles of lawfulness, fairness and transparency. Appropriate technical and organisational measures are adopted to prevent unauthorised access, loss or misuse.

5. Third-Party Services

Google Analytics (Google Ireland Ltd.)
Used for anonymous statistical analysis of website traffic. IP addresses are anonymised.
Privacy Policy

Meta Pixel (Meta Platforms Ireland Ltd.)
Used to track conversions and optimise Meta (Facebook/Instagram) advertising campaigns.
Cookie Policy

Contact Form (Avada / WordPress)
Personal data provided through forms are used solely to respond to user enquiries.

WooCommerce eCommerce System
Data entered during the order process are used to manage purchases, invoices and deliveries. Payment data are processed directly by secure gateways (e.g. PayPal, Stripe).

6. Data Disclosure

Data may be shared with technical, logistic and IT providers, accounting or legal consultants, and public authorities if required by law. Data are not sold or disclosed to third parties for marketing purposes.

7. International Data Transfer

Some services (Google, Meta) may transfer data outside the EEA. Such transfers are carried out under the EU Standard Contractual Clauses ensuring adequate protection.

8. Data Retention

  • Order and billing data: up to 10 years (legal obligation);
  • Contact form data: as long as necessary to respond to the request;
  • Newsletter/marketing data: until consent is withdrawn;
  • Browsing and tracking data: as stated in the Cookie Policy.

9. User Rights

Users have the right to access, rectify, delete, restrict or object to the processing of their personal data, and to withdraw consent at any time by writing to info@elmiguel.it. They may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Last update: 10 November 2025