Information on the processing of personal data pursuant to Art. 13 GDPR Last update: 30-05-2025
This notice is provided pursuant to Article 13 of EU Regulation 2016/679 ("GDPR") and describes the methods of collection, use, retention, and protection of personal data of users interacting with the La Costa Group website (https://lacostagroup.it/).
To inform you about how REA - S.R.L collects and processes your personal data through this website.
The information collected includes data provided when you:
Purchase a product or service;
Subscribe to a newsletter;
Send a support request.
This website is not intended for children.
Please read this policy carefully, along with any other privacy statements we may provide.
The Data Controller is REA - S.R.L, with registered office at Via dei Prati Fiscali 291/B - 00141 Rome (RM), tax code (codice fiscale) 15330781004, e-mail: daniela.menchetti@digitalservicesrea.it.
Responsible for the processing of personal data in compliance with GDPR.
A. Data provided directly by the user:
Newsletter data: E-mail address, subject to specific consent.
User communications: Name, e-mail, and content of messages sent via customer support.
B. Data collected via automated means:
Navigation data: Anonymized IP, timestamps, pages visited, time spent on site, browsing behavior (Google Analytics).
Location information: Approximate estimation based on IP.
Cookies and similar technologies: Technical and analytical cookies (see Cookie Policy).
C. Data received from third parties:
Partners and providers: Analytics services, hosting (Hosting Solutions, Genesys Informatica srl), mailing (Brevo), social networks, advertisers.
Aggregated Data (statistical or demographic) that does not identify the user, but if combined with personal data, will be treated as such.
We do not collect special categories of personal data such as: Race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic, or biometric data.
We do not collect data regarding criminal convictions or offenses.
We process data when:
It is necessary to perform a contract with you;
It is necessary for legitimate interests, provided that your rights do not override them;
To comply with legal or regulatory obligations.
Consent is required only for sending direct marketing communications and may be revoked at any time.
Sending newsletters → Explicit Consent (Art. 6.1.a)
Anonymous statistical analysis (Google Analytics) → Legitimate Interest (Art. 6.1.f)
Customer support, administration, business protection → Legitimate Interest (Art. 6.1.f) / Contract
User experience profiling → Legitimate Interest (Art. 6.1.f)
Optional for: Newsletter subscription, analytical tracking.
Lack of consent → No consequence on the functioning of the website.
Processing is carried out using manual, IT, and telematic tools, with security procedures in compliance with the GDPR. Collection, recording, retention, consultation, deletion, and destruction of data follow the provided technical and organizational measures.
Data may be communicated to external processors (hosting providers, analytics, newsletter services, payment processors).
Authorized personal access by the Data Controller.
Extra-EEA Transfers (Google Analytics, payment processors) are protected by adequacy decisions, Standard Contractual Clauses, and supplementary measures.
Registration and activity data: Until deletion/deactivation of the account + 12 months.
Newsletter data: Until consent is revoked.
Google Analytics data: Anonymized and retained for up to 14 months.
You may exercise the following rights at any time:
Access (Art. 15)
Rectification (Art. 16)
Erasure ("Right to be forgotten", Art. 17)
Restriction of processing (Art. 18)
Data Portability (Art. 20)
Objection (Art. 21)
Revocation of consent (Art. 7)
Not to be subject to automated decision-making (Art. 22)
To exercise your rights: contact the Data Controller at daniela.menchetti@digitalservicesrea.it. You also have the right to lodge a complaint with the Supervisory Authority (Garante per la protezione dei dati personali - www.garanteprivacy.it).
Please consult the Cookie Policy for details on tracking tools and consent management.
The site is not directed at minors under the age of 14. If you become aware that a minor has provided data without authorization, please contact us for immediate cancellation.
We adopt technical, physical, and organizational measures to protect personal data. No system is infallible; we cannot guarantee the total absence of breaches.
For questions, contact us at daniela.menchetti@digitalservicesrea.it.
