PRIVACY & COOKIES POLICY
THIS POLICY DESCRIBES THE INFORMATION WE PROCESS TO PROVIDE OUR SERVICES OR TO ENSURE THE MAXIMUM USEFUL SERVICE TO OUR CUSTOMERS
INTRODUCTION
As required by European Union Regulation no. 679/2016 (“GDPR”) below we provide the user (“Interested Party”) with the information required by the law regarding the processing of their personal data
1. WHO WE ARE
The Data Controller
The Data Controller and Data Processor is Fabrizia Mar – Largo del Vescovado, 6 – 06024 Gubbio (Pg)
CIN IT054024C201019421 – e-mail: fabriziamar06@gmail.com
Data Processor
The Data Controller has appointed a data processing manager who can be contacted here:
e-mail: fabriziamar06@gmail.com
Who can see the data
Third parties delegated by us to manage some of our activities may have access to and see the data present on the website. These subjects are internal people of agencies and companies that have the task of carrying out certain activities on our behalf (for example, web agency or freelancers or e-commerce managers)
However, these subjects will not be able to process this data unless there is a specific written mandate from us
2. WHAT DATA WE PROCESS
Personal personal data
Name, surname, physical address, nationality, province and municipality of residence, landline and/or mobile telephone number, tax code, email address(es), social network contacts
Social data of companies, associations, public bodies, freelancers
Company name or VAT number, VAT number, Tax code, registered office and administrative office, Name and Surname of the Contact Persons, Address(es), email address of the contact persons, telephone number(s), social network contacts
Data relating to traceable traffic
Log, IP address of origin, generic statistical data, social network connection data
THE DATA CONTROLLER DOES NOT REQUIRE THE INTERESTED PARTY TO PROVIDE SO-CALLED DATA “SPECIAL”, THAT IS, IN ACCORDANCE WITH THE PROVISIONS OF THE GDPR (ART. 9), PERSONAL DATA THAT REVEALS RACIAL OR ETHNIC ORIGIN, POLITICAL OPINIONS, RELIGIOUS OR PHILOSOPHICAL CONVICTIONS, OR TRADE UNION MEMBERSHIP, AS WELL AS GENETIC DATA, BIOMETRIC DATA INTENDED TO UNIQUELY IDENTIFY A NATURAL PERSON, DATA RELATING TO THE HEALTH OR SEXUAL LIFE OR SEXUAL ORIENTATION OF THE PERSON.
3. WHY WE NEED YOUR DATA
FOLLOW UP ON THE REQUEST FOR REGISTRATION AND THE CONTRACT FOR THE SUPPLY OF THE CHOSEN SERVICE AND/OR THE PURCHASED PRODUCT
In this case, the processing of the interested party’s personal data is necessary for us to register you in our customer list and to follow up on the legal obligations to which we must submit.
Such data will also be used to send invoices or other documents necessary for the correct performance of our task as suppliers of services or products.
Such data will be entered into our management database and will be used only and exclusively to follow up on our collaborative relationship with the interested party
MANAGE AND EXECUTE THE CONTACT REQUESTS SENT BY THE INTERESTED PARTY AND PROVIDE ASSISTANCE
The processing of such data occurs upon your explicit request and consent to answer your questions. These are data that are processed only following a request from the interested party
The legal basis for such processing is the fulfillment of the services inherent to the request for registration, information and contact and/or sending of information material and compliance with legal obligations.
PROVIDE SUGGESTIONS ON ADDITIONAL ACTIVITIES CONCERNING SERVICES/PRODUCTS SIMILAR OR COMPLEMENTARY TO THOSE PURCHASED BY THE INTERESTED PARTY (ART.47 GDPR)
The data controller, even without the explicit consent of the interested party, may use the contact details communicated only for Services/Products similar to those being sold, unless the interested party explicitly objects.
PROVIDE SUGGESTIONS ON ADDITIONAL ACTIVITIES DIFFERENT FROM THE SERVICES/PRODUCTS PURCHASED
In this case, the data will be processed only and exclusively if the interested party has provided consent.
The processing may take place through automatic systems for sending emails, text messages or telephone contact
THE DATA PROVIDED BY THE INTERESTED PARTY WILL NOT BE TRANSFERRED TO THIRD PARTIES
IDENTIFICATION DATA NOT PROVIDED (ART. 13 GDPR)
If the Interested Party does not provide the identification data necessary to follow up on the requests received or following the completed form, the Data Controller will not be able to follow up on the processing related to the management of the requested services and/or the contract and the Services/Products connected to it, nor to the obligations that depend on them.
CONSENT DENIED FOR OTHER USES OTHER THAN THOSE RELEVANT TO THE MANAGEMENT OF THE CONTRACTUAL RELATIONSHIP
If the interested party does not give his/her consent to the use of the data in order to receive information or specifications on promotional activities, the consent remains for the performance of those activities necessary for the management of the contractual relationship
4. HOW WE COLLECT DATA
THROUGH AUTOMATIC DATA COLLECTION SYSTEMS THAT TRACK INFORMATION ON THE NAVIGATION OF OUR WEBSITE IN AN AGGREGATE WAY.
This helps us to carry out statistics and analyses on all those who are interested in our services. This information can also be collected through software or plugins external to our website
(so-called “Cookies” –> See point 9. of this text)
THROUGH FORMS THAT THE USER OF THE SITE CAN FREELY DECIDE TO LEAVE IN ORDER TO BE CONTACTED OR INFORMED
THROUGH FORMS NECESSARY FOR OUR ECOMMERCE IN ORDER TO BEST CARRY OUT OUR ONLINE SALES ACTIVITY
THROUGH ONE TO ONE MEETINGS AT FAIRS, EVENTS, INITIATIVES OR CONTACTS
In all these methods, explicit consent is requested. In the case of offline data collection, consent will be countersigned, in the case of online data collection, consent occurs when you click on the “Send” link (or similar words)
5. WHERE THE DATA IS STORED
The data collected through our website will be entered into a database within the website and on servers provided by the Maintainer of our web services
6. HOW THE DATA IS PROTECTED
Data collected from the website
The data collected by us through the website are protected by access passwords for the website administrators only.
The website has two protection systems in itself.
The first is an encryption system of the website through the https protocol.
The second is a website protection system inserted within it, which:
Prevents entry to any unauthorized person
Blocks access in the case of use of “banned” passwords because they are considered “hacked”
The data is all located on servers owned by our maintainer
7. HOW LONG WE KEEP THE DATA
In general, the personal data of the Interested Party will be retained until they are necessary with respect to the legitimate purposes for which they were collected, except for legitimate and specific requests for deletion.
In the case of data provided to the Data Controller for the purposes of commercial promotion for services other than those already acquired by the Interested Party, for which he initially gave consent, these will be retained for 48 months, always unless the consent given is revoked.
Regardless of the Interested Party’s determination to remove them, the personal data will in any case be retained according to the terms established by current legislation and/or national regulations, for the exclusive purpose of guaranteeing the specific fulfillments, specific to some Services (by way of example but not limited to, Certified Electronic Mail, Digital Signature, Replacement Storage – in this regard see the relevant section).
Furthermore, personal data will in any case be retained for the fulfillment of obligations (e.g. tax and accounting) that remain even after the termination of the contract (art. 2220 c.c.); for these purposes the Data Controller will retain only the data necessary for the related pursuit.
This is without prejudice to cases in which the rights deriving from the contract and/or from the registration in the registry office should be asserted in court, in which case the personal data of the interested party, exclusively those necessary for these purposes, will be processed for the time necessary for their pursuit.
8. RIGHTS OF THE INTERESTED PARTY
The interested party has the right to obtain from the data controller, if requested, the data available to the Data Controller regarding the interested party (so-called right to “portability” of data)
Furthermore, the interested party may request to be deleted from any database or other place of data storage, or the possible correction of some of this data, at any time and without having to provide any justification for such request.
For any information or need, however, the interested party may directly contact the Data Controller or the Data Processor at the contact details indicated in point 1. of this document.
The maximum time limits established by the legislation for the Data Controller to be able to carry out requests in this sense are 1 month
Furthermore, the interested party may submit a complaint to the competent supervisory authority in Italy (Data Protection Authority) or to the one that carries out its duties and exercises its powers in the Member State where the violation of the GDPR occurred.
9. COOKIES AND SERVICES PROVIDED BY THIRD PARTIES
Cookies are data that are sent from the website and stored by the internet browser on the user’s computer or other device (for example, tablet or mobile phone). The interested party can manage and disable the management of cookies directly from the browser he uses.
Below you can see the cookie management methods of the most popular browsers on the web:
Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Opera: http://help.opera.com/Windows/10.00/it/cookies.html
Safari: https://support.apple.com/kb/PH19255
Technical cookies and third-party cookies may be installed from our website or from its subdomains.
In any case, the user may manage, or request the general deactivation or deletion of cookies, by changing the settings of their internet browser. However, this deactivation may slow down or prevent access to some parts of the site.
THREE TYPES OF COOKIES
TECHNICAL COOKIES – THIRD PARTY COOKIES – PROFILING COOKIES – TECHNICAL COOKIES
These are all those cookies that allow the safe and efficient use of our site.
Technical cookies, in fact, are essential for the correct functioning of our website and are used to allow users normal navigation and the possibility of using the advanced services available on our website.
The technical cookies used are divided into session cookies, which are stored exclusively for the duration of navigation until the browser is closed, and persistent cookies that are saved in the memory of the user’s device until they expire or are deleted by the user.
THIRD PARTY COOKIES
Some of the services listed below collect statistics in aggregate form and may not require the User’s consent or may be managed directly by the Owner – depending on what is described – without the help of third parties.
If among the tools indicated below there are services managed by third parties, these could – in addition to what is specified and also without the knowledge of the Owner – perform tracking activities of the User. For detailed information on this, it is advisable to consult the privacy policies of the listed services.
LINKS TO THE FACEBOOK SOCIAL PAGE (FACEBOOK, INC.)
The “Like” button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Facebook Policy
GOOGLE ANALYTICS (GOOGLE INC.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Google Policy
The user can selectively disable the action of Google Analytics by installing on their browser the opt-out component provided by Google. To disable the action of Google Analytics, please refer to the link indicated below Disabling Analytics
GOOGLE MAPS WIDGET (GOOGLE INC.)
Google Maps is a map viewing service managed by Google Inc. that allows this Application to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Google Policy
YOUTUBE (GOOGLE INC)
YouTube is a map viewing service managed by Google Inc. that allows this Application to integrate such content within its web pages
Personal data collected: Cookies and Usage data.
Place of processing: USA – YouTube Policy
Instructions for managing or disabling cookies: Disable YouTube Cookies
FACEBOOK PIXEL (FACEBOOK IRELAND LIMITED)
The Facebook Pixel is a widget that allows tracking of visits and activities carried out by the user within the website, when access to the Facebook APP is open. This widget allows data to be analyzed in an aggregate manner and targeted advertising campaigns to be created
Personal data collected: Cookies and Usage data.
Place of processing: Ireland
To set your privacy on Facebook differently, just click here Facebook Policy
PROFILING COOKIES
Profiling cookies may be installed by the Owner(s), using so-called web analytics software, which are used to prepare detailed and real-time analysis reports relating to information on: visitors to a website, search engines of origin, keywords used, language of use, most visited pages.
The same may collect information and data such as IP address, nationality, city, date/time, device, browser, operating system, screen resolution, navigation source, pages visited and number of pages, duration of the visit, number of visits made.
WITHOUT PREJUDICES, THE OWNER INFORMS THAT THE USER CAN USE YOUR ONLINE CHOICES FROM THIS LINK HTTP://WWW.YOURONLINECHOICES.COM.
italiano
