• The categories of personal data collected and processed;
• The purposes of the processing of personal data;
• The identity of the Data Controller;
• The retention period of the Personal Data and / or the criteria used to determine this period;
• Any communication and / or dissemination of personal data;
• The rights relating to the protection of Users' personal data.
Browsing by Users and on the Site involves the collection and processing of some categories of Personal Data of Users and / or other interested parties. In particular, the Site automatically collects and processes information concerning the interaction between the Site and the User's device: for example, the IP address used for the connection, information relating to the browser, operating system and type of device used by the User, the indication of the pages visited and searches carried out on the Site, as well as other information. In this circumstance, it is strictly necessary data to allow the user to navigate on the site or to make navigation more functional. Furthermore, the Site expressly requests the User to communicate personal data when the latter activates the procedure to register on the Site and / or to execute a purchase order for products. In such circumstances, it is Personal Data necessary or useful to fulfill contractual obligations and / or provide services to the User.
In other cases, the Site asks Users for Personal Data in order to send communications of various kinds: for example, to subscribe to newsletters, to participate in prize events or to send commercial offers (on their own or by third parties), for the management of participations in loyalty programs and / or for statistical purposes related to the detection of purchasing behavior. In such cases, the prior, specific and unambiguous consent of the User is an essential condition for the collection and processing of personal data. Furthermore, on the basis of the legitimate interest in developing its relationship with customers, the Site may contact the latter via e-mail in order to offer them services and products similar to those previously purchased. Customers can, at any time, request the interruption of the processing, for example by clicking on the appropriate link in the email sent from the Site.
In all other cases, the Site will indicate from time to time whether the communication of Personal Data by the User is mandatory or optional. Failure by the User to consent to the processing of personal data for purposes unrelated to the operation of the Site and / or the conclusion of orders on the same, will not generate any significant consequences.
Holder of the treatment
The owner of the processing of personal data ("Data Controller") is
The personal data collected by the Site are processed by the personnel in charge of processing in the exercise of their duties under the direct authority of the Data Controller or service providers acting as data processors ("Data Processors").
Retention of personal data
Personal Data are stored and processed in a manner and for a proportional and congruous duration with respect to the purposes for which the Data are collected and subsequently processed. Personal data are used only where necessary with respect to the purposes for which they were collected and subsequently processed.
In particular, the Site retains Personal Data for a period of time sufficient to provide the services requested by Users, as well as to fulfill legal or tax obligations or on the basis of other legal provisions. To determine the appropriate time frame for the retention of personal data, the Site considers various factors, especially to ensure that personal data are not kept for a longer period than is necessary or appropriate. These factors also include the purposes for which the Site processes Personal Data and the type of relationship established with the User (how often the User connects to the Site, if he continues to receive commercial communications, the frequency of his purchases on the Site, etc. .). The Data Controller will delete or anonymize in a timely manner the Personal Data for which the processing or storage is no longer legitimate according to the applicable legislation.
Communication of personal data
The Data Controller communicates part of the Personal Data to subjects, including third parties, involved in the execution of purchase orders for products on the Site, both during the sale phase and after the sale. In this circumstance, the communication of personal data to suppliers is necessary to fulfill the contractual obligations resulting from the conclusion by the Users of purchase orders on the Site. Users can ask the Data Controller for an updated list of the Data Processors via email to the following address: email@example.com. In all other cases, the communication or dissemination of Personal Data is subject to the prior express and unambiguous consent of the interested party. This is without prejudice to the communication or dissemination of Personal Data when requested by the judicial authority, by other public subjects for purposes of defense or security of the State or for the prevention, detection or repression of administrative or criminal offenses, and in any case in cases in which the communication o disclosure of personal data is required by law. The Data Controller does not transfer Personal Data to places and territories located outside the European Economic Area (EEA) without an adequate level of protection of personal data without the prior, specific and univocal consent of the interested parties.
According to the provisions of the GDRP, each User has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed.
The User also has the right to obtain from the Data Controller:
a. The correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the User has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
b. The deletion of personal data concerning him without undue delay within the limits established by law ("right to be forgotten"), or the transformation into anonymous form or the blocking of personal data processed in violation of the law, including those which are unnecessary conservation in relation to the purposes for which they were collected and subsequently processed;
c. The attestation that the operations referred to in the previous letters have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
d. The suspension of the processing of personal data, in the cases provided for by law;
And. The portability of personal data, i.e. the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the data controller and has the right to transmit such personal data to another data controller unimpeded processing by the Data Controller, within the limits established by law.
The User has the right to object, in whole or in part, to the processing of personal data, for legitimate reasons, both in the event that the processing is relevant to the purpose of the collection, and in the event that the data are used for purposes advertising, communication or marketing. Within the limits established by law, the User has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way. The User also has the right to lodge complaints in relation to the collection and processing of personal data with the Privacy Guarantor or any other competent supervisory authority. For any communication on the collection or processing of personal data and to exercise their rights, the User can contact the Data Controller at the email address: firstname.lastname@example.org