Privacy Policy

PRIVACY POLICY

In this section, in accordance with the new European legislation introduced by the EU Regulation 679/2016 and with the Italian legislation (Legislative Decree No. 196/2003), information is provided regarding the processing of personal data of Users who consult the pages of the website (hereinafter: "Site") or who use the purchase services made available on it (hereinafter "Users" or "Interested").

The information is provided exclusively for the Site and not for other websites that may be consulted by the user through the links present on the Site.

A - Type of data processed

1. Identification data

In accordance with the new European legislation introduced by the EU Regulation 679/2016 and with the Italian legislation (Legislative Decree No. 196/2003), the consultation of the Site and the possible purchase of products sold on the Site, can involve the processing of data suitable for directly or indirectly identifying a natural person such as: name, surname, residential address, e-mail address, telephone number, IP address.

The Site does not require the interested party to provide so-called data "Particular", or, according to the provisions of the GDPR (Article 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person. In the event that the requested service requires the processing of such data, the interested party will receive specific information in advance and will be required to give explicit consent.

1. Bank data

By purchasing the products on the Site, bank details will also be processed, such as card or bank account number indicated to make the payment, cardholder and bank account holder.

III. Navigation data

The navigation data are data acquired automatically by the systems and programs used to operate the Site and are necessary for the use of web services [eg. IP addresses, browser used, domain names of the systems used by users to connect to the web portal, the addresses in URI notation ( Uniform Resource Identifier ) of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment] .

These data are acquired even in the absence of registration on the Site or request for information.

The navigation data are used exclusively in an aggregate manner to process anonymous statistics on the consultation of the Site and to check its correct functioning and do not allow the identification of the users concerned, being also deleted immediately after processing in anonymous form.

They can, however, be used to ascertain responsibility in case of computer crimes committed against the website.

1. Data provided voluntarily by the user

The personal data provided voluntarily by the User (such as name, surname, e-mail address) for the purpose of sending messages to the Site and / or purchasing the products made available, are used only to meet the needs by the interested party and to comply with legal obligations.

The legal basis of these treatments is the fulfillment of the services related to the requests made and the purchases made, as well as compliance with legal obligations

The information that the User of the Site deems to make public through the services and tools made available to it, is provided by the User knowingly and voluntarily, exempting the Site from any responsibility for any violations of laws.

It is up to the User to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.

1. 
   Data collected through analytical cookies

The Site also acquires user data, through the use of cookies.

For more information on the data processed by cookies, on the types of active cookies and how to disable them, please refer to the cookie policy.

These cookies are used to track the user's browsing preferences and to collect statistical data. The user can disable these cookies by accessing the settings of their browser, as indicated in the cookie policy of the Site.

***

B - Purpose of the processing

The personal data collected are used for:

• to allow the shipment of products purchased by the User;
• to obtain anonymous statistical information on the use of the web portal;
• to check the correct functioning of the web portal;
• the sending of communications and newsletters, both in paper and electronic format, to the e-mail address provided by the user;
• ascertaining responsibility in the event of hypothetical computer crimes against the website;
• compliance with any other legal obligation not included in the previous purposes.

The communication of data can only be carried out following a request by the Judicial Authority within the terms of the law.

***

C - Legal basis of the processing

1. Execution of a contract

Legal basis for the processing of personal data is the fulfillment of the services inherent to the relationship established with the purchase of products, the signing of the Terms and Conditions, compliance with legal obligations and the legitimate interest of the Site to carry out necessary treatments for these purposes.

1. Consent of the interested party

The optional, explicit and voluntary sending of e-mails, messages or any type of communications addressed to the addresses indicated on this Site entails the subsequent acquisition of the sender's address, telephone number or any other personal data that will be used to respond to requests. This processing takes place on the basis of the consent of the interested party.

It is ensured that this treatment will be based on the principles of lawfulness, correctness, transparency, adequacy, relevance and necessity pursuant to art. 5, paragraph 1 of the GDPR. Specific summary information will be progressively reported or displayed on the pages of the sites set up for particular services on request.

III. Fulfillment of legal obligations

The processing of personal data may take place without the consent of the interested party in the event that the Data Controller must fulfill a legal obligation.

1. Optional supply of data

Apart from what is specified for the fulfillment of the contract or legal obligations, for cookies and navigation data, the user is free to provide their personal data or not.However, failure to provide the data could make it impossible to obtain the execution of the

service

***

D - Method and duration of treatment

Personal data are processed using IT tools and in compliance with EU Regulation no. 679/2016 and Legislative Decree n. 196/2003.

The retention of the processed data will last for the time necessary for the purposes described in this information and, therefore, for the minimum time necessary or until an explicit request by the interested party and in any case in compliance with the time limits imposed by law.

The Data Controller undertakes to take all appropriate security measures to prevent the loss and alteration of personal data, as well as any illegal and unauthorized use of the same.

The data will be processed exclusively by subjects authorized by the Data Controller, including any data processors, representatives and public subjects for the fulfillment of the obligations established by law, who carry out their respective processing activities as independent data controllers.

The subjects authorized by the Data Controller who may process the data include, by way of example: commercial and legal department collaborators, as well as third party technical service providers, hosting providers and IT companies (this list is not to be considered mandatory). The processed data will not, however, be disclosed to undetermined recipients.

Finally, the data may also be managed by third-party companies for the shipment of products.

Rights of the interested parties

In constant treatment, the interested party can exercise, at any time, the following rights:

• obtain confirmation of the existence or otherwise of the same data and, if so, know its content and origin;
• verify its accuracy request the correction of inaccurate data, the integration of incomplete data or the updating of outdated data;
• obtain the limitation of the processing, where one of the hypotheses provided for by article 18 GDPR occurs;
• request the cancellation of data processed in violation of the law, or in the presence of one of the other conditions provided for by article 17, paragraph 1, lett. a), b), c), e) and f) GDPR;
• to oppose in any case, for legitimate reasons, to their treatment, or to oppose the treatment in the other cases provided for by article 21, paragraphs 2 and 3 and 22 GDPR;
• revoke your consent freely given to the processing of personal data for the purposes specified below at any time;
• to obtain the release of personal data being processed in a format compatible with standard IT applications, to allow their transfer to other platforms of your choice, without impeding the direct transmission of the data processed to another Data Controller, where such direct transmission is technically feasible (so-called right to data portability).

Requests relating to the exercise of the aforementioned rights must be addressed to the Data Controller via e-mail (infolacasadifido@gmail.com).

.