Privacy Policy
This Website collects some Personal Data from its Users.
This document can be printed using the print function in any browser settings.
Data Controller
Rebel Grains S.r.l.
Corso di Porta Nuova 11, 20121 Milan, MI, Italy
Email of the Controller: info@rebelgrains.com
Types of Data Collected
Among the Personal Data collected by this Website, either independently or through third parties, are: first name; last name; email address; various types of data; usage data; tracking tools; username; telephone number; payment information; purchase history; billing address; device information; identity card; identification document; store-related data; tax identification number; profession; company name; biometric data; profile image; IP address; browser information; geographic location; order ID; shipping address; operating systems; time zone; latitude (of the city); longitude (of the city); social media accounts; data communicated while using the service; user-generated content; contents of messages or emails; clicks; pageviews; interaction events; date of last email sent; message date; message send time; message receive time; message sender; message importance; email openings; prefix; city; state/province; postal code; country; language; user ID; financial information; number of users; session statistics.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or through specific explanatory texts displayed prior to the data collection.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible for this Website to provide the requested service. In cases where this Website specifically states certain Data as optional, Users are free to refrain from communicating such Data without any consequences on the availability or operation of the Service.
Users who are unsure about which Personal Data is mandatory are encouraged to contact the Controller.
The use of Cookies—or other tracking tools—by this Website or by the third-party services used by this Website is intended to provide the Service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.
Methods and Place of Data Processing
Methods of Processing
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The Data processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) appointed, if necessary, as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.
Place of Processing
The Data is processed at the Data Controller’s operational offices and in any other place where the parties involved in the processing are located. For more information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country different from the one in which the User is located. To obtain further information about the location of data processing, the User can refer to the section containing details on the processing of Personal Data.
Retention Period
Unless otherwise specified in this document, Personal Data is processed and stored for the time required to fulfill the purposes for which it was collected and may be retained for a longer period in accordance with legal obligations or based on the User’s consent.
Purposes of the Processing of Collected Data
User Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, and for the following purposes:
- Contacting the User
- Displaying content from external platforms
- Payment processing
- Platform and hosting services
- Advertising
- Managing contacts and sending messages
- Collecting privacy preferences
- Statistics
- Tag management
- Optimization and distribution of traffic
For detailed information about the purposes of the processing and the specific Personal Data used for each purpose, the User may refer to the section “Details on the Processing of Personal Data.”
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and by using the following services:
– Contacting the User:
Contact form (this Website)
By filling in the contact form with their Data, the User authorizes the Website to use these details to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header.
Personal Data processed: last name; usage data; email address; first name; tracking tools; various types of Data.
– Managing contacts and sending messages:
This type of service allows the management of a database of email contacts, telephone contacts, or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as the User’s interaction with it, such as information on clicks on links included in the messages.
GoDaddy Professional Email (GoDaddy.com, LLC)
GoDaddy Professional Email is an address management and email messaging service provided by GoDaddy.com, LLC.
Personal Data processed: email openings; last name; message date; email address; message importance; message sender; first name; time the message was sent; tracking tools; time the message was received; last email sent date.
– Payment Processing:
Unless otherwise specified, this Website processes all payments by credit card, bank transfer, or other means through external payment service providers. In general—and unless otherwise stated—Users are requested to provide their payment details and personal information directly to such payment providers.
This Website does not collect or process such information itself but only receives a notification from the relevant payment service provider confirming that the payment has been completed.
PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: identity card; tax ID code; last name; purchase history; biometric data; usage data; store-related data; identification document; email; time zone; order ID; profile image; billing address; shipping address; payment information; browser information; device information; IP address; city latitude; city longitude; first name; phone number; geographical location; profession; company name; operating systems; tracking tools; username; and various types of data as specified in the service’s own privacy policy.
Place of processing: Please refer to PayPal's Privacy Policy.
Mastercard (Mastercard Inc.)
Mastercard is a payment service provided by Mastercard Inc. that allows the User to make online payments.
Personal Data processed: Tracking Tools.
Place of processing: United States – Privacy Policy
Visa (Visa Inc.)
Visa is a payment service provided by Visa Inc. that allows the User to make online payments.
Personal Data processed: Tracking Tools.
Place of processing: United States – Privacy Policy
– Tag Management:
This type of service is used for the centralized management of the tags or scripts used on this Website. The use of such services involves the flow of User Data through these services and, if applicable, their retention.
Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC. To learn how Google uses your data, please consult their Partner Policy and Commercial Data page.
Personal Data processed: Tracking Tools.
Place of processing: United States – Privacy Policy
– Traffic Optimization and Distribution:
This type of service allows this Website to distribute its content using geographically distributed servers and to optimize its performance. The Personal Data processed depends on the characteristics and implementation methods of these services, which by their nature filter communications between this Website and the User’s browser.
Due to the distributed nature of this system, it is difficult to determine the exact locations to which content may be transferred—these may include the User’s Personal Data.
Google Hosted Libraries (Google LLC)
Google Hosted Libraries is a traffic optimization and distribution service provided by Google LLC.
Personal Data processed: Usage data; Tracking tools.
Place of processing: United States – Privacy Policy
– Advertising:
This type of service allows the use of the User’s Data for the purpose of commercial communication. These communications are displayed on this Website in the form of banners and other advertisements, potentially based on the User’s interests.
This does not mean that all Personal Data is used for this purpose. Specific data and usage conditions are outlined below.
Some of the services listed below may use Tracking Tools to identify the User or apply behavioral retargeting techniques—that is, showing personalized advertisements based on the User’s interests and behavior, including those detected outside this Website. For more information, please refer to the privacy policies of the respective services.
Generally, such services offer the possibility to opt out of this tracking. In addition to any opt-out feature offered by the services listed in this document, Users can learn more about how to disable interest-based advertising in the section "How to opt out of interest-based advertising" within this document.
GoDaddy Digital Marketing Suite (GoDaddy.com, LLC)
GoDaddy Digital Marketing Suite is a digital marketing service provided by GoDaddy.com, LLC.
Personal Data processed: social media account information; clicks; last name; message or email content; user-generated content; data provided during use of the service; email; interaction events; profile image; first name; pageviews.
Place of processing: United States – Privacy Policy
Meta Ads Conversion Tracking (Meta Pixel) (Meta Platforms, Inc.)
Meta Ads Conversion Tracking (Meta Pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta advertising network with actions performed on this Website. The Meta Pixel tracks conversions that can be attributed to ads on Facebook, Instagram, and the Audience Network.
Personal Data processed: Usage data; Tracking tools.
Place of processing: United States – Privacy Policy – Opt-out
– Collection of Privacy Preferences:
This type of service allows this Website to collect and store User preferences regarding the collection, use, and processing of their personal information, as required by applicable privacy regulations.
Iubenda Cookie Solution (iubenda srl)
The Iubenda Cookie Solution enables the Controller to collect and store User preferences related to the processing of personal data, particularly regarding the use of Cookies and other Tracking Tools on this Website.
Personal Data processed: Tracking tools.
Place of processing: Italy – Privacy Policy
Iubenda Consent Solution (iubenda srl)
The Iubenda Consent Solution allows for the storage and retrieval of records of User consent to the processing of Personal Data, as well as any related information and preferences.
To do so, it uses a Tracking Tool that temporarily stores pending information on the User's device until it is processed via the API. This Tracking Tool (a browser feature called localStorage) is then deleted.
Personal Data processed: Data provided while using the service; Tracking tools.
Place of processing: Italy – Privacy Policy
– Platform and Hosting Services:
These services are intended to host and operate key components of this Website, making it possible to provide the Website from a single platform. These platforms offer the Controller a wide range of tools such as analytics, user registration management, comment and database management, e-commerce functionality, payment processing, and more. The use of these tools involves the collection and processing of Personal Data.
Some of these services operate through geographically distributed servers, making it difficult to determine the exact location where the Personal Data is stored.
Shopify
Shopify is a platform provided by Shopify Inc. or Shopify International Limited, depending on how the Controller manages Data Processing. It enables the Controller to build, operate, and host an e-commerce website.
Personal Data processed: last name; usage data; email; billing address; shipping address; payment information; device information; first name; phone number; tracking tools.
Place of processing: Canada – Privacy Policy; Ireland – Privacy Policy
GoDaddy Web Hosting (GoDaddy.com, LLC)
GoDaddy Web Hosting is a hosting service provided by GoDaddy.com, LLC.
Personal Data processed: postal code; city; last name; data provided during use of the service; usage data; email; user ID; billing address; financial information; device information; language; country; first name; prefix; state; tracking tools; username.
Place of processing: United States – Privacy Policy
– Statistics:
The services contained in this section allow the Data Controller to monitor and analyze web traffic data and are used to track User behavior.
Google Analytics (Universal Analytics) (Google LLC)
Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, to compile reports, and to share them with other services developed by Google.
Google may use the collected Personal Data to contextualize and personalize ads in its advertising network. For a better understanding of how Google uses data, please consult Google’s Partner Policy.
Personal Data processed: Usage data; Tracking tools.
Place of processing: United States – Privacy Policy – Opt Out
Google Analytics 4 (Google LLC)
Google Analytics is a statistics service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize advertisements within its advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. For more information, please refer to Google’s official documentation. To understand how Google uses data, please consult Google’s Partner Policies.
Personal Data processed: Usage Data; number of Users; session statistics; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out.
Google Analytics (Universal Analytics) with anonymized IP (Google LLC)
Google Analytics (Universal Analytics) is a web analytics service provided by Google LLC (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize advertisements within its advertising network.
This Google Analytics integration anonymizes your IP address. Anonymization works by shortening Users’ IP addresses within the territory of European Union Member States or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States. To understand how Google uses data, please consult Google’s Partner Policies.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out.
Meta Events Manager (Meta Platforms, Inc.)
Meta Events Manager is a statistics service provided by Meta Platforms, Inc. By integrating the Meta pixel, Meta Events Manager allows the Data Controller to receive information about traffic and user interactions on this Website.
Personal Data processed: Tracking Tools.
Place of processing: United States – Privacy Policy – Opt-out.
Displaying Content from External Platforms
This type of service allows content hosted on external platforms to be displayed directly from the pages of this Website and enables interaction with such content.
This type of service may still collect web traffic data relating to the pages where the service is installed, even when Users do not actively use it.
Google Fonts
Google Fonts is a font style visualization service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages data processing. It allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Instagram Widget (Meta Platforms, Inc.)
Instagram is an image display service managed by Meta Platforms, Inc. that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: United States – Privacy Policy.
Information on How to Disable Interest-Based Advertising
In addition to any opt-out features provided by the services listed in this document, Users may read more about how to disable interest-based advertising in the relevant section of the Cookie Policy.
Additional Information About the Processing of Personal Data
• Online Sale of Goods and Services
The Personal Data collected is used to provide services to the User or to sell products, including payment processing and, where applicable, delivery. The Personal Data collected to complete payments may include data related to credit cards, bank accounts used for wire transfers, or other available payment methods. The payment data collected by this Website depends on the payment system used.
COOKIE POLICY
This Website makes use of Tracking Tools. To learn more, Users may consult the Cookie Policy.
Further information for Users
Legal basis of processing
The Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
- processing is necessary to comply with a legal obligation to which the Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Controller or by third parties.
In any case, it is always possible to request that the Controller clarify the specific legal basis for each processing activity and, in particular, to specify whether the processing is based on law, required by a contract, or necessary to enter into a contract.
Further information on retention periods
Unless otherwise stated in this document, Personal Data are processed and stored for as long as required by the purpose for which they were collected and may be retained for a longer period due to legal obligations or based on the User’s consent.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Controller and the User shall be retained until the contract has been fully performed.
- Personal Data collected for purposes related to the legitimate interest of the Controller shall be retained until such interest has been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.
Where processing is based on the User’s consent, the Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Controller may be required to retain Personal Data for a longer period in order to comply with a legal obligation or by order of an authority.
Once the retention period has expired, Personal Data shall be deleted. Therefore, upon expiration of such period, the rights of access, erasure, rectification, and data portability can no longer be exercised.
Details on the Right to Object
Where Personal Data are processed in the public interest, in the exercise of official authority vested in the Controller, or for the purposes of the legitimate interests pursued by the Controller, Users have the right to object to such processing on grounds relating to their particular situation.
Users are informed that, where their Personal Data are processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, the Personal Data shall no longer be processed for such purposes. To determine whether the Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to Exercise User Rights
Any requests to exercise User rights may be addressed to the Controller using the contact details provided in this document. Requests are free of charge and the Controller shall respond as soon as possible and in any event within one month, providing the User with all information required by law. Any rectification, erasure, or restriction of processing shall be communicated by the Controller to each recipient, if any, to whom the Personal Data have been disclosed, unless this proves impossible or involves a disproportionate effort. The Controller shall inform the User of such recipients upon request.
Further Information on Data Processing
Legal Defense
The User’s Personal Data may be used by the Controller in legal proceedings or in the preparatory stages thereof for the purpose of defending against misuse of this Website or the related Services by the User.
The User acknowledges that the Controller may be required to disclose Personal Data by order of public authorities.
Specific Notices
Upon the User’s request, and in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual notices concerning specific Services, or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.
Information Not Contained in This Policy
Further information regarding the processing of Personal Data may be requested at any time from the Controller using the contact details provided.
Changes to This Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where possible, on this Website and, where technically and legally feasible, by sending a notice to Users through any contact details available to the Controller. Users are therefore encouraged to consult this page regularly, with reference to the date of the last modification indicated at the bottom.
Where the changes affect processing activities whose legal basis is consent, the Controller shall collect the User’s consent again, where required.
Definitions and Legal References
Personal Data (or Data)
Any information that, directly or indirectly, including in connection with any other information, such as a personal identification number, makes a natural person identified or identifiable.
Usage Data
Information collected automatically through this Website (including by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User connecting to this Website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the features of the browser and operating system used by the visitor, the time-related details of the visit (such as the length of time spent on each page), and details relating to the path followed within the Application, with particular reference to the sequence of pages visited and parameters related to the User’s operating system and IT environment.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refer.
Data Processor (or Processor)
The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures relating to the operation and use of this Website. Unless otherwise specified, the Data Controller is the owner of this Website.
This Website (or this Application)
The hardware or software tool by which Users’ Personal Data are collected and processed.
Service
The service provided by this Website as defined in the relevant terms (if any) on this website/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union in this document shall be deemed to include all current Member States of the European Union and the European Economic Area.
Cookie
Cookies are Tracking Tools consisting of small portions of data stored within the User’s browser.
Tracking Tool
A Tracking Tool refers to any technology — such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting — that enables the tracking of Users, for example by collecting or storing information on the User’s device.
Legal References
Unless otherwise specified, this privacy policy applies exclusively to this Website.