1. DATA CONTROLLER AND DATA PROCESSOR
The data controller (hereinafter, the “Data Controller”) is the Company with registered office in Chief Executive Officer, in person of Gianluca Brozzetti, domiciled at the Company's registered office.
The Data Controller can appoint other internal or external data processors as well as persons in charge of the processing. To date, the Company has appointed Temera Srl as external data processor, with registered office in Pianvallico, Via di Pianvallico 5, since it has been charged with the maintenance of the technological part of the Site.
A complete and updated list of data processors and persons in charge of the processing can be requested to the Data Controller at the addresses above indicated.
2. PERSONAL DATA UNDERGOING PROCESSING
"Personal data" means any information concerning an identified or identifiable physical person with particular reference to an identifier such as a name, an identification number, location data or an online identifier.
The personal data collected by the Site are the following:
2.1 Navigation Data
The information systems and software procedures relied upon to operate this Site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification after being processed and matched with data held by third parties. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the User's operating system and computer environment.
These data are only used to extract anonymous statistical information on Site use, without therefore the possibility of identifying the User, as well as to check its functioning including the resolution of technical problems; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the Site.
This processing is aimed at pursuing a legitimate interest of the Company.
2.2 Data Provided Voluntarily by the User
These are all personal data voluntarily released by the User on the Site, such as: User’s contact details voluntary provided by sending e-mail to the addresses indicated on the Site in order to have a direct contact with the customer service, as well as any other personal data included in the message; data provided by sending CV (curriculum vitae) to the Company and other relevant information for personnel selection purposes; data provided in order to register and / or access the reserved area, or in order to request the newsletter or information on a specific product or service to be sent via form.
Each User can change his/her data by sending an email to email@example.com, taking care to specify in the heading "Exercise of rights regarding the protection of personal data".
Specific summary information notices will be shown and/or displayed on the pages that are used for providing services on demand.
In some cases this information may be used for the purpose of profiling the User. Where this occurs, appropriate information will be provided and free and specific consent will be obtained for marketing and / or profiling purposes.
3. DATA PROCESSING PURPOSES AND LEGAL BASIS OF DATA PROCESSING
For the purposes of access to the Site as a User, it is necessary to register by filling in the fields of the form.
Apart from what specified for the navigation data referred to in paragraph 2.1), the personal data provided by Users through the Site are processed for the following purposes:
to allow the execution of operations strictly connected with and instrumental to the management of relations with the Users, such as - merely by way of example - the answer to questions received with the contact forms, the authorization to the reserved area and the execution of sales contracts of goods and /or services and the verification of their development, the management for the selection of CV personnel (curriculum vitae) and other relevant information provided by the User;
to allow the correct execution of the contractual obligations assumed by the Company towards the Users and customers and vice versa, as well as the consequent accounting and tax obligations;
to allow the fulfillment of the obligations established by law, regulations and European legislation, or provisions issued by authorities entitled by law and by supervisory and control authorities;
the purposes necessary for the establishment, exercise or defense of a right in court or whenever the courts exercise their judicial functions;
to give information regarding other products and / or services of the Company as well as to carry out promotional, commercial and marketing activities;
to carry out User profiling activities in order to establish groups of Users through the processing of data provided by them, so as not to send generalized commercial and promotional communications to all Users in an indistinct way. This allows us to segment the Users, creating groups divided by bands of interest based, for example, on the country of origin, language, sex, previous purchases, etc. This allows us to send commercial communications that are as relevant and less invasive as possible, limiting - as far as practicable - the circumstance that the user receives unwanted messages. Finally, we remind you that the express consent for the forwarding of promotional communications extends not only to communications sent through the use of automated systems without the intervention of the operator (for example, e-mail), but also to the traditional systems, like the postal service. It is always possible to withdraw consent to the processing of your data for this purpose, even in a disjointed way. For example, it could be decided to receive advertising only by postal service and not through automated systems;
purposes of statistical research/analysis on aggregated or anonymous data, without the possibility of identifying the User, aimed at measuring the functioning of the Site and the related operational functions, including the resolution of any technical problem.
The legal basis for the processing of personal data for the purposes listed in point a) is the provision of a service or the answer to a request. Pursuant to the applicable law, the consent of the Users is not necessary for those activities.
As to the purposes listed in points b), c) and d), the processing is necessary for the pursuit of a legitimate interest of the Company.
With regards to the purposes e) and f), the processing of User’s data will be subject to the issuance of an explicit consent by the signing of summary information notices that will be progressively reported or displayed on the Site pages and drafted for particular services on request.
The purposes listed in point g) do not involve personal data processing.
It is always possible to withdraw consent to the processing of data for this purpose, even in a disjointed way. For example, Users could decide to receive advertising only by postal service and not through automated systems.
5. NATURE OF THE PROVISION OF PERSONAL DATA AND CONSEQUENCES OF ANY REFUSAL
For free registration as User of the Site, it is necessary to fill in the fields of the form with personal data.
The filling in of the form, which is optional, allows to provide the credentials for the management of online services; any failure to provide personal data, as well as any partial or inaccurate provision of personal data, makes it impossible to provide the service.
The use of passwords, identification numbers (ID) or other access keys is under the User’s responsibility.
6. MODALITIES OF THE PROCESSING AND STORAGE OF PERSONAL DATA
Personal Data will be processed by or without electronic and / or automated tools, for the period not exceeding the one strictly necessary for the purposes pursued and, in any case, for the period provided for by the Privacy Regulation and the applicable law. More information on the storage period of Personal Data can be requested to the Data Controller at the following address: firstname.lastname@example.org
Specific security measures are adopted to prevent data loss, confidentiality and unlawful or incorrect use and unauthorized access.
7. SCOPE OF COMMUNICATION AND DISCLOSURE OF DATA
For the pursuit of the purposes indicated above, the provided Personal Data will be only communicated to persons entrusted by the Company, e.g. employees, collaborators and internal and external consultants, appointed in writing as persons in charge for the processing or internal or external data processors. Specific instructions have been provided to the pre-mentioned persons.
Your Personal Data may also be communicated and transferred to subjects whose right to access is recognized by provisions of law or by instructions given by authorities legitimated by the legislation.
Finally, your Personal Data could be shared, used and transferred to Group companies Buccellati Holding Italia SpA, in relation to the purposes for which they have been collected. These Parties provide adequate protection for individuals regarding the processing of their personal data and can be contacted at the following addresses: email@example.com.
8. DATA SUBJECT’s RiGHTS
Pursuant to art. 13 of the Privacy Regulation, the Data Subject can at any time:
request from the Controller access to and rectification or erasure of Personal Data or restriction of Data processing;
object to Data processing;
exercise the right to Data portability;
withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal;
lodge a complaint with a supervisory authority;
The aforementioned rights can be exercised with a request made without formalities towards the Data Controller at the following address: by e-mail: firstname.lastname@example.org