2.1 In compliance with the provisions of EU Reg. 2016/679, of Legislative Decree 196/2003 (as amended by Legislative Decree 101/2018), of the Provisions and indications of the Guarantor Authority and, in general, of the legislation regarding the confidentiality of personal data, this website processes navigation data and use of the site (in addition to any other information deriving from cookies and similar tools). Furthermore, in particular for commercial promotion and / or in the product purchase procedure and / or in the contact form, to personal / identification data of the user (name, surname, residence, identification numbers, carrying out economic activities etc. ), to their contact details (by way of example, the e-mail address or telephone number) and, in the case of purchase of products, to bank details or in any case relating to payment systems.
2.2 The data entered in the appropriate contact form (personal data, e-mail address, any data entered by the user in the notes) are functional to respond to requests sent by e-mail to the Data Controller, as well as for the exercise of any rights of the interested party also in terms of privacy. Once contacted spontaneously by the user, the Data Controller will be able to acquire and process the data entered for the aforementioned purpose.
2.3 The collection of common personal data (any personal data, e-mail) can be finalized with the specific consent of the interested user through the appropriate functionality of the site, to commercial promotion activities with the sending of advertising material, direct sales, fulfillment of commercial research and commercial communication, with particular reference to the processing of the e-mail address, also for newsletter purposes.
2.4 The collection of common personal data (such as name, surname, residence, identification and billing numbers, carrying out economic activities, e-mail address, telephone number, bank data or in any case relating to payment systems, any data entered in the accompanying message) may be aimed at measures related to the execution of the purchase contract for the products offered on the e-commerce site. This, in particular, with reference to payment operations and indication of useful data for shipping, billing and contact with the customer (functional to the execution of the contract). The personal data collected will also be processed for purposes related to legal obligations and defense of the Data Controller or third parties in court or comparable.
3.1 The processing can be carried out with or without the aid of electronic or automated tools, always in accordance with the provisions of the legislation on the confidentiality of personal data, with particular reference to the provisions of art. 32 EU Reg. 2016/679 which requires the adoption of technical / organizational measures appropriate to the risk. The processing is carried out by individual data processors specifically appointed / authorized and / or by the various specifically appointed data processors, in any case under the supervision and according to the indications of the Data Controller.
3.2 With reference to the data transmitted to the Data Controller through the contact form, the legal bases reside in the execution of a contract to which the interested party is a party (if any) or pre-contractual measures at the request of the interested party (Article 6 Reg . EU 2016/679 letter B). In the marginal case in which the contact of the interested party does not fall within the previous provisions, the processing will take place on the legal basis of the legitimate interest of the Data Controller (Article 6 of EU Reg. 2016/679 letter F).
3.3 With reference to the purpose of marketing / commercial promotion through newsletters, the legal basis of the processing can be found in the specific consent of the interested party, issued through the specific functionality of the site (Article 6 of EU Reg. 2016/679 letter A).
3.4 With reference to the personal data collected / managed on the occasion of the purchase of the products offered by this website, the legal basis of the processing is the execution of the contract with the interested user (Article 6 EU Reg. 2016/679 lett. . B). With regard to the execution of legal obligations (such as those of a fiscal nature), the legal basis of the processing concerns precisely the fulfillment of these obligations (Article 6 EU Reg. 2016/679 letter C) while with regard to the defense of rights of the Data Controller or third parties in court or comparable, the legal basis of the processing is the legitimate interest of the Data Controller, the relevant public interest and the corresponding right of defense (Article 6 of EU Reg. 2016/679 letter E and art. 9 EU Reg. 2016/679 letters F and G).
3.5 With reference to cookies, the legal basis of the processing lies in the legitimate interest of the Data Controller who has taken care to diligently apply the provisions of articles 13 EU Reg. 2016/679 and 122 Legislative Decree 196/2003 (as specified in the Provision of ‘Guarantor Authority May 8, 2014).
4.1 The provision of common personal data referred to in this information, in relation to personal data collected through the form is not mandatory (either contractually or legally) but it is necessary / functional to respond to requests for information. Any refusal by the interested party to provide the related personal data, or the incorrect communication of such data, makes it impossible to carry out the aforementioned activities (if the data entry fields were marked with “*”) or the reduced operation of the same (if the data entry fields were not marked with “*”).
4.2 With reference to the personal data collected / managed for commercial promotion purposes by means of the newsletter, the provision is not mandatory (neither contractually nor legally) but it is necessary for the performance of these purposes. It will always be possible for the interested party to revoke the consent originally provided (for the newsletter) at any time, resulting in an immediate interruption of the processing of the data provided.
4.3 With reference to the personal data collected / managed when purchasing the products offered by this website, the provision is not mandatory (either contractually or legally) but it is necessary / functional for the conclusion of the contract. Any refusal by the interested party to provide the related personal data, or the incorrect communication of such data, makes it impossible to carry out the aforementioned activities (if the data entry fields were marked with “*”) or the reduced operation of the same (if the data entry fields were not marked with “*”).
5.1 With reference to the contact form, in the case of mere pre-contractual measures or not relating to an already concluded contract of which the interested user was a party or in whose execution he was also indirectly involved, if the cancellation / opposition was not legitimately requested, the data will be kept only for the period necessary to provide the requested service and, in any case, to an extent and for a period not exceeding that necessary to guarantee the Data Controller any defense of his rights. For the interested party, it will be possible to request the Data Controller, at any time, for the immediate interruption of the processing of the data provided (except for any legitimate interest of the Data Controller in conservation for the defense of their rights). In the event that the processing takes place in execution of a contract of which the interested user was a party or participant, if the cancellation / opposition is not legitimately requested, the data will be kept for a period of 10 years from the moment of termination / conclusion, for any reason, of the mutual contractual relationship. In case that, after the termination / conclusion of the relationship, further processing of the data is necessary for similar purposes or related to them, the data will be kept until the achievement / end of the purposes referred to in the new processing and for a further 10 years.
5.2 For marketing purposes (newsletter), in the case that the deletion of data / opposition to the processing / termination of the service is not requested, the data will be kept, for the purposes set out above, for a period equal to the duration of the corresponding service.
6.1 Personal data may be disclosed for the aforementioned purposes to consultants and freelancers, also in associated and specifically appointed form (business consultants, law firms, etc.), public / private subjects for whom communication is mandatory or necessary in fulfillment of legal or functional obligations for the execution of the contract, if existing or even potential (such as, by way of example, the agencies of newsletter and e-commerce service managers). The personal data collected are not subjected to disclosure.
6.2 The personal data collected through cookies or similar tools, can be communicated to consultants and freelancers, also in associated and specifically appointed form, and to public / private subjects for which communication is mandatory or necessary in compliance with legal obligations. The aforementioned data may then come to the attention of any third party owner of the cookies and of those who collaborate in the organization and management of this website. The personal data collected in this way are not subject to disclosure.
EU Reg. 2016/679 grants the data subject specific rights, including the right to access their personal data and make them available in an intelligible form; the interested party also has the right to obtain the updating, rectification (if erroneous), integration (if incomplete) or cancellation of data (in case of unlawful processing), data portability (right to receive or have transmitted data to another holder in a structured format, commonly used and readable by automatic device) revocation of consent (if legal basis for the processing), transformation into anonymous form or blocking / limitation of data processed in violation of the law; the interested party has the right to object, for legitimate reasons, to the processing of data. With reference to the processing of the data provided, in the event that the interested party identifies violations of the privacy legislation, he will have the right to lodge a complaint with the Privacy Guarantor. The interested party may exercise his rights by making a request to the Data Controller (also by requesting them to receive the complete list of the appointed Managers).