Skip to content

Privacy policy

1. Data protection at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. Their contact details can be found in the section “Controller” of this privacy policy.

How do we collect your data?

Some of your data is collected when you provide it to us, for example the data you enter when placing an order.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g. web browser, operating system or time of the page request). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website works correctly. We use other data to process your orders.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this and any other questions on data protection.

Analytics and third-party tools

If you agree in the cookie banner, your browsing behaviour is statistically analysed with Google Analytics. Without your consent, no analytics tool is loaded. We do not use advertising tools. Details can be found below in the section “Google Analytics”.

2. Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access and other data generated via a website.

The host is used to fulfil our contracts with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

We use the following host: [add name and address of the host]

Data processing agreement

To ensure processing in compliance with data protection law, we have concluded a data processing agreement with our host (Art. 28 GDPR).

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted over the internet (e.g. when communicating by e-mail) may be subject to security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Eder Thomas & Pineider Hannes S.r.l.
Via Enrico Toti 1
39012 Merano, Italy

Phone: +39 0473 338724
E-mail: info@mannis-meran.com
PEC: eder-pineider.ohg@pec.it

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you make a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons cease to apply.

Transfer of data to the USA and other third countries

Our website includes, among other things, tools from companies based in the USA or other third countries that are not safe under data protection law (e.g. Google, PayPal, Stripe). When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence services) process, analyse and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. In Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome (https://www.garanteprivacy.it). The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, deletion and correction

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time about this and other questions on personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from its storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

4. Data collection on this website

Cookies and local storage

This website uses technically necessary cookies and similar technologies and – only with your consent – analytics cookies from Google Analytics. These are small text files or entries in your browser’s storage; they do not harm your device. We use them for:

  • the cart and the chosen order type (delivery or pickup), stored in your browser’s local storage,
  • the chosen language (cookie “mn_lang”, 1 year),
  • your choice in the cookie banner (cookie “mn_consent”, 6 months),
  • ordering through our online shop (WooCommerce session and cart cookies, for the duration of the session or up to 48 hours),
  • payment processing, if you pay online (cookies of the payment provider).

We only set analytics cookies (Google Analytics) if you agree in the cookie banner (Art. 6(1)(a) GDPR, Art. 122 Italian Legislative Decree 196/2003); we do not use advertising cookies. All other cookies are stored on the basis of Art. 6(1)(b) and (f) GDPR; no consent is required for technically necessary cookies. You can delete or block cookies in your browser at any time. Without these cookies, however, the cart and ordering will not work.

Server log files

The host of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data is not combined with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; for this purpose, the server log files must be recorded.

Orders through our online shop

When you order from us, we process the data you enter in the order form: first and last name, phone number, e-mail address, delivery address (street, postcode, town), requested delivery or pickup time, your notes, the products ordered and the chosen payment method. For orders containing alcohol, you confirm that you are at least 18 years old; ID may be requested on delivery.

We use this data to prepare your order, deliver it or have it ready for pickup, contact you if we have questions and send you an order confirmation by e-mail. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). We only pass the data on to our drivers and, for online payments, to the payment provider you chose.

We keep order data for as long as tax and commercial retention obligations require (in Italy usually 10 years, Art. 2220 Italian Civil Code). After that it is deleted.

Payment providers

If you pay online, your payment data is processed directly by the respective payment provider. We do not receive complete card or account details. The legal basis is Art. 6(1)(b) GDPR.

If you pay in cash or by card on site, no payment data is processed via the website.

Enquiries by e-mail or phone

If you contact us by e-mail or phone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested.

The data you send us by e-mail or phone remains with us until you ask us to delete it, withdraw your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been handled). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Plugins and tools

Fonts

The fonts on this website (Anton, DM Sans) are stored locally on our server. No connection to Google or other font providers is made when you visit the site.

Google Maps

In our contact section you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded when you click “Load map”. Only then is your IP address transmitted to Google and may be transferred to the USA; Google may set cookies. Without this click, no data is transmitted to Google.

The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR). It applies only to that page visit; on your next visit the map is not loaded automatically. Alternatively, you can open our location directly on Google using the link “Open in Google Maps”. More information: https://policies.google.com/privacy?hl=en.

Google Analytics

If you agree in the cookie banner, this website uses the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Purpose and data: Google Analytics shows us how visitors use our website so that we can improve our menu and ordering. It records, for example, the pages viewed, time spent, clicks, device, browser and operating system, the referring page and your approximate location (country, region). For this, Google sets the cookies “_ga” and “_ga_<ID>” (stored for up to 2 years), which recognise your browser on later visits. The information is transmitted to Google servers and analysed there. We only receive aggregated statistics and do not combine this data with your order data.

IP address: Google Analytics 4 does not store IP addresses. Your IP address is only used for the transmission and to determine your approximate location and is then discarded. Google signals and the use of the data for advertising are switched off.

Storage period: analytics data is deleted automatically after 14 months.

Legal basis and withdrawal: Google Analytics is only loaded once you click “Accept” in the cookie banner (Art. 6(1)(a) GDPR, Art. 122 Italian Legislative Decree 196/2003 – Privacy Code). Without your consent, no data is transmitted to Google. You can withdraw your consent at any time with effect for the future via the link “Cookie settings” at the bottom of every page. The Google Analytics cookies are then deleted.

Data processing agreement and transfer to the USA: we have concluded a data processing agreement with Google (Art. 28 GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 GDPR). More information: https://policies.google.com/privacy?hl=en and https://business.safety.google/adsprocessorterms/.

6. Social media

Our website links to our pages on Facebook and Instagram. These are simple links, not embedded plugins: only when you click a link are you taken to the provider’s page, where its privacy policy applies. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (https://www.facebook.com/privacy/policy/).

Source: https://www.e-recht24.de (adapted)