1. HOLDER OF THE TREATMENT
This information is given in relation to the processing of personal data collected through the website www.ivanavesprini.com. The data controller is the individual company Vesprini Ivana, with headquarters in Via Duca degli Abruzzi, 10/14, 62012 CIVITANOVA MARCHE (MC ) Tax Code VSPVNI59M56E783U (also called "Owner").
2. TYPE OF DATA PROCESSED
a. Data collected automatically from the site
The computer systems and software procedures used to operate this website may automatically collect certain information such as IP addresses and other data whose transmission is implicit in the use of Internet communication protocols. These data, although not used to identify users, may, because of their characteristics and if associated with other data, allow users to be identified (eg IP address, domain names of computers used by users connecting to the site, etc.). These data are used only to obtain statistical and aggregate information and to check the correct functioning of the site. These data are deleted immediately after processing, except for any verification of computer crimes against the site. No data deriving from the web service will be communicated or disseminated, except to fulfill the obligations established by laws, regulations or community regulations.
b. Data provided voluntarily by the user
In order to purchase the goods through the site, the user must provide the personal data requested in the registration and payment forms, including the name, surname, address of residence and shipment, e-mail address, and payment data.
3. PURPOSE OF THE TREATMENT
a) The Owner will process the personal data of the users for purposes instrumental to the execution of the contract and the provision of the service ("contractual purposes and execution of the service"), including proceeding with the sale and shipment of the products sold on the website www.ivanavesprini.com, managing any customer requests and other activities instrumental to service delivery.
b) Subject to user consent, the Data Controller may process personal data received also for direct marketing activities such as market research and opinion polls, sending commercial communications either automatically or manually ("direct marketing purposes"). Limited to sending commercial communications by e-mail, this latter activity may take place without the user's prior express consent if it falls within the limits of the provisions of art. 130 paragraph 4 of the Code and the provision of 20 December 2012 of the Privacy Guarantor, provided that the communications in electronic form are related to products or services, however, similar to those covered by the previous purchase and without prejudice to the possibility for the user to refuse to receive of such communications at any time by clicking on the "unsubscribe" link on any commercial communication or alternatively by contacting the owner directly, without the possibility that such refusal may entail any consequence other than not being able to receive such communications;
c) The Site provides the opportunity to subscribe to the newsletter service with advertising content. The user can unsubscribe from the newsletter service at any time by clicking on the link available in each e-mail.
4. OBLIGATORY OR OPTIONAL NATURE OF CONFERRAL
The provision of personal data for processing operations relating to the contractual purposes and for the execution of the service referred to in Article 3 paragraph a) is necessary for the proper fulfillment of the contract and the provision of the services requested. The provision of data for direct marketing purposes also through the newsletters referred to in Article 3 paragraph b) and c) above is optional and failure to provide the data will have the sole consequence of the impossibility for the interested party to receive commercial communications and for the Owner to process the data for direct marketing purposes.
5. SCOPE OF COMMUNICATION AND METHOD OF TREATMENT
The user's personal data may also be available to third parties, for accessory purposes and related to the provision of services requested by the user (for example, for transactions relating to purchases or shipment of products). The personal data collected will be processed at the Data Controller's Italian headquarters using both manual and automated tools and for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access. The Data Controller may transfer the processed data both in Italy and abroad, within the European Union, in accordance with and within the limits set by art. 42 of Legislative Decree n. 196/2003 both in countries outside the EU within the scope and within the limits established by art. 43 of Legislative Decree n. 196/2003.
6. EXERCISE OF RIGHTS
Pursuant to art. 7, Legislative Decree 196/03 the user, as interested in processing, in relation to the processing of his personal data, has the right to obtain confirmation of the existence or not of Personal Data concerning him, even if not yet registered, and their communication in an intelligible form. The data subject has the right to obtain information in relation to:
a. data source;
b. purpose of processing;
c. processing logic;
d. identification details of the data controller and data processors;
e. the subjects to whom the data can be communicated.
The interested party also has the right to obtain:
a. updating, rectification or integration of the data collected;
b. the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c. the attestation that the operations referred to in the previous points have been made known to those to whom such data have been communicated or disseminated, except in the event that such fulfillment proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right. The interested party also has the right to object, in whole or in part:
a. for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purpose of sending advertising material. The user may exercise the above listed rights pursuant to art. 7 of Legislative Decree n. 196/2003 by contacting the data controller by sending an email to firstname.lastname@example.org
Last update 05 September 2017
Adaptation to the GDPR EU Regulation 2016 679.
In accordance with the provisions of the European Regulation concerning the protection of personal data, the individual company Vesprini Ivana (hereinafter Vesprini) guarantees registered users of this site the following rights:
Right of access (art. 15)
• The right of access provides in any case the right to receive a copy of the personal data being processed.
• The "methods" of the treatment do not fall among the information that the owner must provide, while it is necessary to indicate the expected retention period or, if this is not possible, the criteria used to define this period, as well as the guarantees applied in case of transfer of the data to third countries.
The "registered" user can view all his data stored on this website by logging in to the GDPR area (link).
From this web page the user can obtain, by pressing the appropriate buttons, a copy of all the data stored by Vesprini on this site; these data can be exported both in pdf format and in csv format.
The extraction of data in csv format also guarantees the right to portability provided by the GDPR regulation in art. 20.
Unregistered users (commonly referred to as "guests") who have made a purchase on this site do not have a personal reserved area.
These users may also request, using the contact form (link), information on personal data stored on this site.
Vesprini undertakes to respond quickly to requests made by such users.
Right of cancellation (right to oblivion) (art.17)
• The so-called "oblivion" right is defined as a right to cancel one's personal data in a strengthened form. In fact, it is mandatory for holders (if they have "disclosed" the personal data of the interested party: for example, by publishing them on a website) to inform other owners that process deleted personal data, including "Any link, copy or reproduction" (see art. 17, paragraph 2).
• It has a wider field of application than the one referred to in art. 7, paragraph 3, letter b) of the Code, since the interested party has the right to request the deletion of his / her data, for example, even after revocation of the consent to treatment (see art. 17, paragraph 1).
All registered "users" and even "guest" users can at any time request, using the contact form (link), the deletion of their data stored on this site.
Vesprini undertakes to satisfy requests for data deletion within a reasonable time.
Before the final cancellation the applicant will be notified, via email, of the start of the cancellation procedure.
From that moment on, Vesprini will not be able to transmit further communications to the user as its data - and in particular the requestor's email - is definitively and irretrievably deleted from the database of this site.
Except in cases where the user specifically requests the deletion of his / her data from the database of this site, all data relating to the individual user and his purchases are stored on this site for a period equal to 26 months (twenty six) from last purchase made.
This data retention period corresponds to the validity period of the "Legal Compliance Guarantee" provided by the Consumer Code (articles 128 et seq.), This Guarantee protects the consumer in case of purchase of defective products, malfunctional products or products that do not respond to the use declared by the seller or to which that good is generally intended.
The deletion of data from this site does not imply the elimination of any tax documents issued (invoices, receipts, delivery notes, etc.) which will be stored according to the provisions of the civil and fiscal regulations in force, or for 10 years (ten) from the date of emissions.
If you would like more information on the GDPR legislation you can download them from our site in pdf format:
• "EU Regulation 2016 679. With references to the recitals" (link)
• the "Guide to the application of EU Regulation 2016 679" (link)
Last update 25 May 2018