The Data Controller collected by this Website is D’Arienzo s.r.l. with registered office in Solofra (AV), Viale Principe Amedeo n. 13, VAT number IT02365700646, email: email@example.com.
Methods of Processing Personal Data
The Personal Data provided or acquired will be processed based on the principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
Purposes of the processing of personal data and legal basis
Personal Data may be collected independently by the Owner or through third parties. In this case the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-informatic nature (e.g. IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent in the normal functioning of the internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.
The Data that the User chooses to provide spontaneously is collected to allow the Website to provide its services, as well as for the following purposes:
a) to fulfill the obligations arising from the contract concluded between the User and the Owner for the sale of the Products on the Website and to provide the information requested by the User. This processing is mandatory for the execution of the contract to which the User is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject;
B) for the possible registration procedure for the purchase of the Products and for the purchase procedure in which to enter your Personal Data and tax profiles of billing or similar. In this case, the Data is processed to execute the Contract, to contact the User in relation to the Contract and to manage the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract. This processing is mandatory for the execution of the contract to which the User is a party;
C) to fulfill any type of obligation contemplated and provided for by the current laws, regulations, related regulations, commercial uses and tax/fiscal matters. This processing is mandatory to comply with a legal obligation to which the Data Controller is subject;
D) for other purposes ancillary to or connected to those indicated above and, in any case, falling within the scope of the activities of the Website;
e) to respond to the specific requests addressed to the Data Controller by the User for informational communications relating to the Services of the same Owner, by e-mail or filling in the Contact Form and other communication tools such as telephone or instant messaging WhatsApp Business. This processing is optional and based on the consent of the User, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Owner;
F) for sending information and promotional and commercial offers also through the newsletter service, sent by email, mail or text messages. This processing is based on the consent freely expressed by the User;
g) for softspam purposes to allow the Owner to send by e-mail to the User promotional communications concerning Products and/or Services purchased without the express and prior consent of the User, as provided for by art. 130, 4 paragraph, Privacy Code, and provided that the user does not exercise the right to object; This treatment is based on art. 130, 4 paragraph, of the Privacy Code as amended by Legislative Decree no. 101 of 2018;
h) to carry out statistical analyses on aggregated and anonymous data to analyze the behaviors, of the User to improve the products and services provided by the Owner and to meet the User’s expectations;
I) for profiling activities for marketing purposes. This processing is based on the consent freely expressed by the User.
Category of Personal Data processed
Among the Personal Data processed by this Website, independently or through third parties, there is Common Data such as: Cookies, Usage data, name, email, telephone, tax data useful to purchase and Personal Data useful for the delivery of the purchased Product. The optional, explicit and voluntary sending of email via the Contact Form or through the addresses indicated on this Website, involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the email. Consent to the provision of Data by the User is necessary to be entered in the Data Controller’s databases and for the establishment and proper performance of what the Users offer to their Users, as well as to third parties for the fulfillment of the individual activity requested. Failure to provide it prevents, therefore, registration in the Data Controller’s databases, the completion of any contracts, as well as the execution of the same and any other possible activities.
Communication of Data
In addition to the Data Controller, in some cases, they may have access to the Data:
a) categories of specially trained persons involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators);
B) external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Data Processors, if appointed, may always be requested from the Data Controller;
C) public or private entities that can access the Data in compliance with legal obligations;
D) subjects who perform ancillary and instrumental tasks with respect to the activity of the Owner;
Time of Treatment
As expressly provided for by art. 5, co. 1, letter e) of the GDPR, the Data are kept for the time necessary for the processing of the same in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
— The Data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and as provided by law;
— The Data collected for tax/administrative obligations or contractual obligations will be kept for the time necessary to fulfill the aforementioned purposes and as provided by law;
— The Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is met; The User may obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.
— The Data collected on the basis of the User’s consent may be retained until such consent is revoked;
The Data may be stored by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data can no longer be exercised
Place of Processing and Transfer of Data Abroad
The Data is processed at the operational headquarters of the Data Controller. For more information you can contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Owner and by virtue of specific contractual constraints and based in EU or non-EU Member States. In the event that the Data is transferred outside the EEA, the Owner will take all appropriate contractual measures to ensure adequate protection of the Data.
Tools used for the processing of personal data
The User, by filling in the Contact Form with his Data, consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data collected through Contact Forms: E-mail.
OTHER CONTACT TOOLS
To manage requests for information with users this website uses a Chat service provided by:
Sales Manago (SALESmanago LLC)
MANAGING EMAIL ADDRESSES
These services allow you to manage a database of email contacts, telephone contacts or any other contacts, used to communicate with the User. These services may also allow you to collect Data relating to the date and time of viewing of the messages by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in the messages.
By registering for the newsletter, the User’s email address is automatically included in a list of contacts to which email messages may be transmitted containing information, including commercial and promotional information, relating to this Website. The User’s email address may also be added to this list as a result of registering for this Site or after making a purchase. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button that will be found within the emails. After clicking on the deletion button, the User’s Data will be deleted immediately from the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:
Sales Manago (SALESmanago LLC)
SECURITY MEASURES TAKEN
This Website, in order to secure the moment when personal data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted on the websites take place with the utmost security and the content of the communication is not read or manipulated in any way by third parties.
This Website uses reCAPTCHA which is a service subject to the privacy (https://policies.google.com/privacy?hl=en)
and to the Terms and conditions
of use by Google.
REGISTRATION TO THE WEBSITE
With the registration service, the User allows the Site to identify and give him access to dedicated services.
Registration and authentication services can also be carried out with the help of third parties. In this case the application will be able to access some Data stored by the third party service used for registration and identification.
1. Direct registration
The user registers directly on the site by filling out the Form and providing their Data.
2. Facebook Connect (Facebook Ireland Ltd)
3. Access your Google account (Google Ireland Limited)
4. Access your Instagram account (Facebook Ireland Ltd.)
The statistical services allow the Data Controller exclusively to monitor and analyze traffic data and serve to keep track of the User’s behavior. This Website uses the following services:
1. Google Analytics (Google Ireland Limited)
Google Analytics is an analysis service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network. Google may also transfer this information to third parties where required by law or where such third parties process this information on behalf of Google. On this site is active the function of anonymization of the IP address. The IP address transmitted by the browser for purposes connected to Google Analytics will not be incorporated to other data already held by Google.
2. Facebook pixel conversion tracking (Facebook Ireland Ltd.)
3. Hotjar (Hotjar Ltd)
INTERACTION WITH SOCIAL NETWORKS
These services allow interactions with social networks directly from the pages of this Website. The interactions and information acquired from this Website are in any case subject to the User’s privacy settings related to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if Users do not use the service, the same collects traffic data related to the pages in which it is installed.
1. Facebook (Facebook Ireland Ltd.)
2. Instagram (Facebook Ireland Ltd.)
REMARKETING AND RETARGETING
1. Facebook Remarketing (Facebook Ireland Ltd)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which links the activity of this Website with the Facebook advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel you can understand the actions that people perform on the Website. The Data that is collected can be used to:
— make sure the advertisements are shown to the right people;
— create groups of audiences to be used for adverts;
— take advantage of the additional advertising tools of the platform on which you advertise
2. Google ADS
3. Tag Manager (Google Ireland Limited)
4. Criteo (Criteo SA)
CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
In the event that a service of this type is installed, it is possible that, even if Users do not use the service, the same collects Traffic Data related to the pages in which it is installed.
This Website uses
1. Google Maps
2. YouTube (Google Ireland Limited)
MANAGEMENT OF PAYMENTS
Payment management services allow this Website to process payments by credit card, bank transfer or other instruments. The Data used for payment is acquired directly by the operator of the payment service requested without being processed in any way by this Site. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment. This Website uses the following services:
1. Scalapay (Scalapay SRL)
2. PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A. Inc.)
3. Stripe (Stripe Payments Europe Ltd.)
Exercise of the rights of the data subject
The interested party has the right to exercise the powers provided for in Articles 7, 15-22 of Regulation (EU) No 679/2016. In particular, you have the right to withdraw your consent at any time and, upon simple request to the Data Controller, may request access to the Personal Data, receive the Personal Data provided to the Owner and, where possible, transmit them to another Data Controller without hindrance (so-called portability), obtain the updating, limitation of processing, rectification of Data and cancellation of data processed in breach of current legislation. You have the right, for legitimate reasons, to object to the Processing of Personal Data concerning you and to the Processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as supervisory authority regarding the protection of personal data. The interested party can exercise his rights by contacting the Data Controller by email at: firstname.lastname@example.org.