Privacy Policy

The purpose of this document is to inform the natural person (hereinafter “Data Subject”) regarding the processing of his personal data (hereinafter “Personal Data”) collected by the controller, Rocca SRL, with registered office in Via Purgatorio snc, 03034 Casalvieri FR, CF/VAT number IT02573850605, email address info@roccagiant.it (hereinafter “Controller”), via the website roccagiant.it (below “Application”).

Changes and updates will be binding as soon as they are published on the Application. In the event of non-acceptance of the changes made to the Privacy Policy, the Data Subject is required to cease using this Application and may request the Data Controller to delete their Personal Data.

  1. Categories of Personal Data processed

The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

  1. Contact details: name, surname, address, email, telephone, images, authentication credentials, any further information sent by the interested party, etc.

The failure of the Data Subject to provide Personal Data for which there is a legal, contractual obligation or if they constitute a necessary requirement for the conclusion of the contract with the Data Subject, will result in the Data Subject being unable to establish or continue the relationship with the Data Subject.

The Data Subject who communicates to the Data Controller Personal Data of third parties is directly and exclusively responsible for their provenance, collection, processing, communication or dissemination.

  1. Cookies and similar technologies

The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data of the Data Subject on the pages, links visited and other actions that are performed when the Data Subject uses the Application. They are stored and then transmitted to the next visit of the Interested Party.
In particular this site uses the following cookies:

Name Domain Expiration Path Description
wordpress_[hash] roccagiant.it / Used to store the authentication data of the user who logs in. Its use is limited to the site administration area, /wp-admin/.
wordpress_logged_in_[hash] Used to indicate that the user is logged in and identify them while browsing areas of the site that require authentication.
wp-settings-[UID] Used to customize the display of the admin interface and, in some cases, even the main site interface.
wp-settings-time-[UID] Used in conjunction with the wp-settings-[UID] cookie to store when user preferences were set.
wordpress_test_cookie Temporary cookie used to check if the user's browser supports cookies.
wp_lang Session cookie used to store the language selected by the user on the login screen.
woocommerce_cart_hash session Help WooCommerce determine when cart content or data changes.
woocommerce_items_in_cart session Help WooCommerce determine when there are products in the cart and when the cart contents change.
wp_ It contains a unique code for each customer, which is necessary to associate the user with the cart data stored in the database.
woocommerce_recently_viewed session Allows the widget or functionality related to recently viewed products to work.
store_notice[notice id] session Allows the user to close any alerts or communications in the store.
woocommerce_snooze_suggestions__[suggestion] 2 days Used in the admin area to allow enabled users to snooze or ignore marketplace suggestions, if that feature is enabled.
woocommerce_dismissed_suggestions__[context] 1 month Used in the admin area to record the number of times certain suggestions have been ignored, if that feature is enabled.
tk_ai session Used in the admin area to store a randomly generated anonymous identifier, used for usage tracking if enabled.

  1. Legal basis and purpose of processing

Processing of Personal Data is necessary:

  1. for the execution of the contract with the interested party and precisely:
    1. fulfillment of any obligation arising from the pre-contractual or contractual relationship with the Interested Party
    2. registration and authentication of the Data Subject: to allow the Data Subject to register on the Application, access and be identified also through external platforms
    3. support and contact with the Interested Party:to respond to the Interested Party's requests
  2. by legal obligation and precisely:
  3. the fulfilment of any obligation under current legislation,laws and regulations, in particular, in tax and fiscal matters
  4. based on the legitimate interest of the Owner, to:
  1. management, optimization and monitoring of the technical infrastructure:to identify and solve any technical problems, to improve the performance of the Application, to manage and organize information in a computer system (e.g. servers, databases, etc.)
  2. security and anti-fraud: to ensure the security of the Owner's assets, infrastructure and networks
  3. based on the consent of the Interested Party, to:
  4. marketing purposes of the Owner's products and/or services: to send commercial and/or promotional information or materials, to carry out direct sales activities of the Owner's products and/or services or to carry out market research using automated and traditional methods

The Personal Data of the Data Subject can also be used by the Data Controller to protect himself in court before the competent judicial bodies.

  1. Methods of processing and recipients of Personal Data

The processing of Personal Data is carried out using paper and IT tools with organizational methods and logic closely related to the indicated purposes and through the adoption of appropriate security measures.

Personal Data is processed exclusively by:

  1. persons authorized by the Data Controller who have committed to confidentiality or have an adequate legal obligation of confidentiality;
  2. entities operating independently as separate data controllers or by entities designated as data controllers by the Data Controller in order to carry out all the processing activities necessary to pursue the purposes set out in this notice (for example, business partners, consultants, IT companies, service providers, hosting providers);
  3. subjects or entities to whom it is mandatory to communicate Personal Data by legal obligation or by order of the authorities.

The parties listed above are required to use the appropriate safeguards to protect Personal Data and can only access those necessary to perform the tasks assigned to them.

Personal Data will not be disseminated indiscriminately in any way.

  1. Place

Personal Data will not be the subject of any transfer outside the territory of the European Economic Area (EEA).

  1. Period of retention of Personal Data

Personal Data will be kept for the period of time necessary to fulfill the purposes for which it was collected, in particular:

  1. for purposes relating to the performance of the contract between the Holder and the Interested Party, they will be retained for the duration of the contractual relationship and, after termination, for the ordinary limitation period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the expiration of the time limits for the admissibility of the appeal actions
  2. for purposes relating to the legitimate interest of the Holder, they will be retained until such interest is fulfilled
  3. for the fulfillment of a legal obligation, by order of an authority and for protection in court, they will be maintained in compliance with the timescales established by the said obligations, regulations and in any case until the completion of the prescriptive period established by the rules in force
  4. for purposes based on the consent of the interested party, they will be retained until the consent is revoked

At the end of the storage period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.

  1. Rights of the Interested Party

Interested parties may exercise certain rights with reference to the Personal Data processed by the Owner. In particular, the Data Subject has the right to

  1. be informed about the processing of your Personal Data
  2. revoke consent at all times
  3. limit the processing of your Personal Data
  4. object to the processing of your Personal Data
  5. access their Personal Data
  6. verify and ask for the rectification of your Personal Data
  7. obtain the restriction of the processing of their Personal Data
  8. obtain the deletion of your Personal Data
  9. transfer your Personal Data to another holder
  10. lodge a complaint with the authority for monitoring the protection of your Personal Data and/or take legal action.

To exercise their rights, Interested parties may address a request to the following email address info@roccagiant.it. Requests will be taken over by the Owner immediately and processed as quickly as possible, in any case within 30 days.

Last updated: May 11, 2026