Data Protection Memo

This page explains how the website is managed as far as the processing of visitors’ personal data is concerned.

This memo regards personal data processing and is also issued pursuant to section 13 of Legislative Decree No. 196/03 (hereinafter Data Protection Act) for the users of the web services that we provide.

The Data Controller

The Controller of the personal data relating to identified or identifiable persons processed after browsing our site is SPEZIERIE PALAZZO VECCHIO DOTT.GIOVANNI DI MASSIMO E C. SAS Sede Legale: Via Vacchereccia 9r, 50122 Firenze, Partita IVA 04500110483, Iscrizione Registro Imprese FI 04500110483

Place and purpose of data processing

Processing connected with web services provided by is carried out at SPEZIERIE PALAZZO VECCHIO DOTT.GIOVANNI DI MASSIMO E C. SAS place of business with content handled by its employees/consultants.

No data relating to the web service will be disclosed or passed on to third parties.

Personal data supplied by users requesting services is utilised for the sole purpose of providing such service and is not disclosed to third parties unless required by law or strictly necessary for the fulfilment of the requests received.

The personal information we collect is for two main purposes: to fulfil your orders and offer products and services best suited to your requirements, interests and expectations. The messages we send to users may contain offers prepared by our employees who are responsible for making such offers and managing our catalogue.

The gradual increase in the amount of information in our possession enables us to improve quality of service.

Visiting our website regularly and subscribing to our e-mails will allow you to improve your shopping experience automatically and at no cost.



Browsing data

Under normal circumstances, the computer systems and software procedures used to operate this website acquire certain personal details whose transmission when using Internet communication protocols is implied. This information is not collected in order to be associated with identified interested parties, but its very nature could allow users to be identified by way of processing and association with data held by third parties. This type of data includes the IP addresses or domain names of computers used by site visitors, URI (Uniform Resource Identifier) addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response, numeric code indicating the status of the reply given by the server (success, error, etc.) and other parameters relating to the user’s operating system and environment. This data is used for the sole purpose of obtaining anonymous statistical information regarding use of the site, as well as checking its correct operation, and is immediately deleted after processing. Data could be used to ascertain responsibility in the event of suspected cybercrimes against the site.


Data provided voluntarily by users

The optional, express and voluntary sending of e-mails to the addresses specified on this website will result in acquisition of the sender’s address, this being needed to answer the request made, and any other personal data included in the message. Abridged data protection memos will gradually appear on website pages offering special services.

A cookie is a packet of text that is stored on a computer’s hard drive only after permission has been granted. Cookies are designed to speed up web traffic analysis or record visits to a specific site and allow web applications to send information to individual users. The website acquires no data about its users. No use is made of either cookies for the transfer of personal details or any kind of so-called persistent cookie used to track users’ browsing.


Optional data disclosure

Apart from that stated as regards browsing history, the user is free to provide personal details in order to request the services that the company offers. Failure to provide such details may make it impossible to receive the service requested.


Data processing methods

Personal data is processed by automated computer systems for the time required to achieve the purpose for which it was collected.

Specific security measures are implemented in order to prevent data loss, unlawful or improper use and unauthorised access.


Rights of data subjects 

Data subjects enjoy the rights specified by section 7 of the Data Protection Act that include entitlement to receive confirmation of the existence of such data and obtain its erasure, correction and updating by contacting the Data Controller, i.e. SPEZIERIE-ERBORISTERIE “PALAZZO VECCHIO”, at the above-mentioned address.

This site uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Find out more here.