INFORMATIVA PRIVACY AGLI UTENTI DEL SITO CAPRICCIVENEZIA.COM
Pursuant to EU Regulation no. 679/2016 ("GDPR") relating to the protection of individuals with regard to the processing of personal data, which replaced the Legislative Decree n. 196/2003, the processing of information concerning the interested party will be based on principles of correctness, lawfulness and transparency, in order to guarantee the security and confidentiality of the data.
We invite you to carefully read the Information below so that the User of the Site can be aware of and can express consciously consent to the use of the Data, allowing us to provide a high-level service in full compliance with the rights of the interested parties.
Data Controller
CAPRICCIVENEZIA.COM on behalf of the company Capricci sas di D. Milliaccio & C. registered office in Venice (VE), Italy, San Marco 1165 / c, VAT no. 00822170270 (hereinafter, the "Owner"), owner of the website (hereinafter, the "Site"), as the Data Controller of the personal data of users who browse and who are registered on the Site (hereinafter, the " Users "), provides below the Privacy Policy pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the "Privacy Code") and pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, "Regulation" - the Regulation and the Privacy Code are jointly defined as "Applicable Law") in relation to the processing of Users' Personal Data (the "Data").
This Site and any services offered through the Site are reserved for individuals who have reached the age of eighteen. The Data Controller therefore does not collect personal data relating to persons under the age of 18. At the request of the Users, the Data Controller will promptly delete all personal data involuntarily collected and relating to minors.
Type of Personal Data processed.
The following categories of Personal Data concerning Users can be collected:
Mandatory contact data in case of registration - information relating to name / surname, complete address, landline number, mobile number, e-mail address, tax code and / or VAT number.
Other personal data - information that the User voluntarily provides, by filling in the optional fields provided by the Data Controller for the purposes specified below, such as the date of birth, date of any marriage, level of education or professional situation. If Personal Data is provided on behalf of third parties, the User must first ensure that the interested parties have read this Notice;
Interests - information that the User provides regarding his interests, including the products of the Owner in which he is interested;
Use of the website - information relating to the ways in which the User uses the Site, opens or forwards our communications, including the information collected through cookies (see our specific Cookies Policy).
Purpose and legal basis of the processing
User Data will be lawfully processed by the Data Controller pursuant to art. 6 of the Regulation for the following processing purposes:
navigation of the site, in relation to the possibility of detecting User data necessary at a technical level, such as eg. the IP address, while browsing the site. These User Data will be used by the Data Controller for the exclusive purpose of ascertaining the identity of the User (also by validating the e-mail address), thus avoiding possible fraud or abuse.
contractual obligations and service provision in case of online purchases, to execute purchase requests for the products offered on the "e-commerce" section of the Site, according to the General Conditions of Sale, which are accepted by the User during registration on the Site and fulfill subsequent reports and requests from the User. The provision of contact data is in fact mandatory to fulfill contractual obligations.
administrative-accounting purposes in the case of online purchases, or to carry out organizational, administrative, financial and accounting activities, functional to the management of the contractual relationship. The provision of the User's contact data is in fact mandatory to fulfill contractual obligations.
4. legal obligations, or to fulfill obligations established by law, by an authority, by a regulation or by European legislation which the Data Controller is required to comply with. The provision of the User's contact data is in fact mandatory.
Failure to provide contact data will make it impossible for the User to browse the Site, register on the Site and use the services offered by the Owner on the Site.
The related legal basis of the processing is the execution of a contractual relationship requested by the User (pursuant to article 6, paragraph 1, letter b) of the Regulation and article 24, paragraph 1, letter. b of the Privacy Code) or the fulfillment of legal obligations (pursuant to article 6, paragraph 1, letter c) of the Regulation).
Further processing purposes: marketing (sending newsletters, advertising material and commercial communications).
With the free and optional consent of the User, the User's contact data and any other Personal Data provided may also be processed by the Data Controller for marketing and newsletter purposes (sending advertising material, direct sales, commercial communication, sending of newsletter containing information relating to news relevant to the sector relating to the activities of the Site), or so that the Data Controller can contact the User by mail, e-mail, telephone (fixed or mobile, with automated call systems or through the intervention of a operator), SMS / MMS to present the Controller's products and services to the User, communicate invitations, promotions and commercial opportunities.
The provision of Personal Data is optional and, in case of lack of consent, the possibility of registering on the Site will not be affected in any way.
The relative legal basis of the processing is any consent, freely expressed by the User, for the execution of the aforementioned marketing purposes (pursuant to article 6, paragraph 1, letter a) of the Regulation and article 24, comma1, lett. b of the Privacy Code).
In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated below.
The User can also easily oppose further sending of promotional communications and email newsletters by clicking on the appropriate link for the withdrawal of consent, which is present in each promotional and newsletter email. Once the consent has been revoked, the Data Controller will send the User an e-mail message to confirm that the consent has been revoked.
The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications and newsletters via email, it is possible that, for technical and operational reasons, the User continues to receive some additional messages. Should the User continue to receive promotional messages and / or newsletters, please report the problem to the Owner, using the contacts indicated in the paragraph "Rights of interested parties".
To revoke the consent to receive e-mails for informed and commercial purposes, the Customer is required to send an e-mail to info@capriccivenezia.com with subject: Name and surname - marketing consent revocation.
Further processing purposes: profiling
With the free and optional consent of the User, the User's Personal Data (i.e. contact data, other personal data, use of the website and information relating to the services to which the user has expressed his interest ), may also be processed by the Data Controller for profiling purposes, or to reconstruct the User's tastes and consumption habits, in order to be able to send the User commercial offers consistent with the profile identified.
The provision of Personal Data is optional and, in case of lack of consent, the possibility of registering on the Site will not be affected in any way.
The relative legal basis of the processing is any consent, freely expressed by the User, for the execution of the aforementioned
profiling purposes (pursuant to article 6, paragraph 1, letter a) of the Regulation and article 24, paragraph 1, lett. b of the Privacy Code). In case of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in the paragraph "Rights of the interested parties".
Methods of data processing
The Data Controller will process the Personal Data of Users using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data. The data spontaneously provided are collected with electronic tools directly by the Data Controller and / or through third parties expressly appointed as Data Processors or Trustees, also through computer systems related to the Site, both to offer higher quality services and, if you give your consent, for both direct and profiled marketing purposes.
Data Retention
The Users' Personal Data will be kept for the time strictly necessary to carry out the purposes for which they were collected, and until the consent is revoked by the User, and in any case this retention period will comply with the provisions of the Applicable legislation.
The contact data will be kept for the period of time necessary for non-fulfillment of contractual obligations arising with the User, to fulfill tax obligations and for the protection in civil law of the interests of both Users and the Data Controller.
The Personal Data of Users acquired for marketing or profiling purposes will be stored in accordance with the Applicable Regulations as well as with the provisions of the Authority for the Protection of Personal Data in force.
Scope of communication and dissemination of data
The Data Controller designates specific Data Processors and Trustees, each according to the respective area of ​​duties, who operate under the direct authority of the Data Controller, from whom they receive adequate operating instructions, which may have an operational headquarters both inside and outside the European Union. .
The employees and / or collaborators of the Data Controller in charge of managing the Site may become aware of the Personal Data of the Users. These subjects, who are formally appointed by the Data Controller as "data processors", will process the User's data exclusively for the purposes indicated in the this information and in compliance with the provisions of the Applicable Regulations.
Third parties who may process personal data on behalf of the Data Controller as "External Data Processors" may also become aware of the Users' Personal Data, such as, by way of example, suppliers of IT and logistics services functional to the operation of the Site. , outsourced or cloud computing service providers, professionals and consultants.
Users have the right to obtain an updated list of the Data Processors appointed by the Data Controller, by making a request to the Data Controller at the addresses indicated below.
Data transfer
In the event that the Data Controller were to communicate the Personal Data to Data Processors or Data Processors operating, on behalf of the Data Controller and by virtue of specific contractual obligations, in EU or non-EU member countries (for which there is a decision on the adequacy of the Commission to pursuant to the provisions of art.45 of the Regulation), the transfer will be limited to strictly necessary data, bound to the purposes for which they were collected, and in any case adopting every suitable measure to guarantee an adequate level of data protection , in full compliance with the Applicable Regulations.
Rights of the interested parties
Users of the Site have the right to request the exercise of the rights provided for by art. 7 of the Code, in the manner established by art. 8 of the Code. At any time, the User may exercise their rights towards the Data Controller, pursuant to EU Regulation no. 679/2016. In particular, by contacting the Data Controller indicated below, the User may request:
to know the existence of data processing that may concern him and, in this case, obtain access to his personal data pursuant to art. 15 of the EU Regulation no. 679/2016 and obtain without delay the intelligible communication of the same data and their origin, on the recipients or categories of recipients to whom the personal data are or will be communicated;
to obtain, without undue delay, the correction or integration of personal data concerning him pursuant to art. 16 of the EU Regulation n.679 / 2016;
to obtain the immediate cancellation of their personal data if the consent is revoked, they are no longer necessary for the purposes for which they were collected or otherwise processed or the legal basis for the processing has ceased, have been unlawfully processed or this obligation is imposed by law or by judicial authorities, pursuant to art. 17 of the EU Regulation n.679 / 2016;
to obtain the limitation of the processing of data concerning him if the interested party disputes the accuracy of the same or has opposed their processing or the latter is unlawful or although the Data Controller no longer needs it for the purposes of processing, the data personal data are however necessary for the ascertainment, exercise or defense of a right in court, pursuant to art. 18 of EU Regulation no. 679/2016;
to take advantage of the right to the portability of their data, understood as the right to obtain from the Data Controller in a structured format, commonly used as an automatic device, the personal data concerning him, as well as to transmit such data without impediments to another data controller treatment pursuant to art. 20 of EU Regulation no. 679/2016;
Ownership
The owner of the e-commerce site "Capriccivenezia.com" is: Capricci sas di D. Milliaccio & CP IVA 00822170270, with registered office in Venice (Ve), San Marco 1165 / c; Register REA-151555
The interested User can exercise these rights by simply sending a request via e-mail to the address: info@capriccivenezia.com
It should be noted that any corrections or cancellations or limitations of the processing carried out at the request of the User, unless this proves impossible or involves a disproportionate effort, will be communicated by the Data Controller to each of the recipients to whom the Personal Data may have been transmitted. The Owner will communicate these recipients if the User requests it.
Right to object
Applying the conditions referred to in art. 21 of the Regulations, the User will have the right to object to the processing of Personal Data concerning him, unless there are legitimate reasons of the Data Controller to continue the processing, by simply sending a request via e-mail to the address info @ capriccivenezia. com
Revocation of consent
The User has the right to revoke the consent given at any time, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation, pursuant to art. 7, par. 3 of EU Regulation no. 679/2016. This revocation may make it impossible to further proceed with the provision of the service by the Data Controller and to pursue the purposes indicated above.
Complaint to the Guarantor Authority
If the User deems that the treatment that concerns him violates the Regulation or the Code, he may lodge an appeal or complaint with the Guarantor for the protection of Personal Data (Guarantor for the protection of Personal Data, Piazza di Monte Citorio n.121 - 00186 Rome - Italy; E-mail: garante@gpdp.it )