PRIVACY INFORMATION TO USERS
This Site and any services offered through the Site are reserved for individuals who have completed eighteen years of age. The Data Controller therefore does not collect personal data relating to persons under the age of 18. Upon request by Users, the Data Controller will promptly delete all personal data involuntarily collected and related to persons under 18 years of age.
The Owner takes the utmost account of the right to privacy and protection of personal data of its Users. For any information related to this privacy statement, Users may contact the Data Controller at any time, using the following methods:
-By sending a registered letter with return receipt to the registered office of the owner
-By sending an email to firstname.lastname@example.org;
1. Purpose of the processing
Users’ personal data will be processed lawfully by the Data Controller pursuant to art. 6 of the Regulations for the following processing purposes:
a) navigation of the site, in relation to the possibility of detecting data of the User necessary at a technical level, such as for example. The IP address, while browsing the site.
b) contractual obligations and provision of the service in the case of online purchases, to implement the General Conditions of Sale, which are accepted by the User during registration on the Site and comply with specific User requests. The user’s data collected by the Owner for the purpose of any registration on the Site include: Required: Email, Password, Name, Surname, Shipping address, Cap, City, Province, Country, Optional: all personal information of the User possibly and voluntarily published. Unless the User gives the Data Controller a specific and optional consent to the processing of their data for the further purposes set out in the following paragraphs, the User’s personal data will be used by the Owner for the sole purpose of ascertaining the identity of the User (also by validating the e-mail address), thus avoiding possible scams or abuses, and contacting the User solely for reasons of service (e.g., sending notifications regarding the services offered on the Website). Notwithstanding the provisions elsewhere in this privacy statement, under no circumstances will the Data Controller make the personal data of the Users accessible to other Users and / or third parties.
c) administrative-accounting purposes, or to carry out activities of an organizational, administrative, financial and accounting nature, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;
d) reply to your requests for information, received by us through the appropriate contact form.
e) registration to the reserved area of the site, through which access to the personal account Villa Sandi.
f) legal obligations, or to fulfill legal obligations, an authority, a regulation or European legislation.
The provision of personal data for the purposes of processing indicated above is optional but necessary, as failure to provide them will make it impossible for the User to browse the site, register with the Site and take advantage of the services offered by the Owner on the Site.
2. Additional processing purposes: marketing and newsletters (sending of advertising material, direct sales and commercial communication)
With the free and optional consent of the User, some personal data of the User (ie the name, surname, email address, complete shipping address, etc.) may be processed by the Owner for marketing purposes and newsletters (sending of advertising material, direct sales, commercial communication, sending of newsletters containing information in relation to news relevant to the sector related to the activities of the Site), or in order for the Data Controller to contact the User by post, email, telephone (fixed and / or mobile, with automated call or call communication systems with and / or without the intervention of an operator) and / or SMS to propose to the User the purchase of products and / or services offered by the Owner and / or by third-party companies, submit offers, promotions and business opportunities.
In case of consent, the User may at any time revoke the same, making a request to the Data Controller in the manner indicated in the following paragraph 6.
The User can also easily oppose further sending of promotional communications and e-mail newsletters by clicking on the appropriate link for the revocation of consent, which is present in each promotional email and newsletter. Once the consent has been withdrawn, the Data Controller will send an e-mail to the User to confirm the revocation of the consent. If the User intends to withdraw his consent to the sending of promotional communications by telephone, however continuing to receive promotional communications via email, or vice versa, please send a request to the Owner in the manner indicated in paragraph 6 below.
The Data Controller informs that, following the exercise of the right to oppose the sending of promotional communications and e-mail newsletters, it is possible that, for technical and operational reasons (e.g. formation of contact lists already completed shortly before receipt from part of the Holder of the opposition request) the User continues to receive some additional promotional messages and newsletters. Should the User continue to receive promotional messages and newsletters after 24 hours have elapsed from the exercise of the right of opposition, please report the problem to the Holder, using the contacts indicated in the following paragraph 6.
3. Processing methods and data retention times
The Data Controller will process the personal data of Users using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data.
The personal data of the Users of the Site will be kept for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or however as necessary for the protection in civil law of the interests of both the Users and the Data Controller. In the data referred to in paragraph 2 above, they will be kept until the data subject will oppose the processing in the manner detailed in the following paragraph 6.
4. Legal basis of the processing
With reference to the purposes set out in the points (1 / a, 1 / b, 1 / c, 1 / de 1 / e), the legal basis of the processing is in fact the execution of the services provided through the Site and requested by you ( pursuant to article 6, paragraph 1, letter b of the 2016/679 Privacy Regulation); with reference to the purpose referred to in point (1 / f) of the previous paragraph, the legal basis of the treatment is to fulfill a legal obligation to which the data controller is subject (pursuant to article 6, paragraph 1, letter c) of the 2016/679 Privacy Regulation); in relation to the purpose referred to in paragraph 2 of the previous paragraph, the legal basis of the treatment is your consent freely expressed (pursuant to Article 6, paragraph 1, letter a of the Privacy Regulation 2016/679.
5. Scope of communication and dissemination of data
The personal data of the Users may be disclosed to the employees and / or collaborators of the Controller in charge of managing the Site. Those subjects, who are formally appointed by the Data Controller as “processors”, will process the User’s data exclusively for the purposes indicated in this information and in compliance with the provisions of the Applicable Regulations.
The personal data of the Users may also be disclosed to third parties who may process personal data on behalf of the Data Controller as “External Processors”, such as, for example, IT and logistic service providers functional to the operation of the Website. , outsourcing or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of any data controllers appointed by the Data Controller, making a request to the Data Controller in the manner indicated in the following paragraph 6.
6. Rights of the interested parties
Users may exercise their rights granted by the Applicable Law by contacting the Data Controller in the following ways:
• By sending a registered letter with return receipt to the registered office of the owner
• By sending an email to email@example.com;
Pursuant to Applicable Regulations, the Data Controller informs that Users have the right to obtain indication (i) of the origin of personal data; (ii) the purposes and methods of the processing; (iii) the logic applied in the event of processing carried out with the aid of electronic instruments; (iv) of the identification details of the owner and managers; (v) the subjects or categories of subjects to whom the personal data may be communicated or who may come to know them as managers or agents.
Furthermore, Users have the right to obtain:
a) access, updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right.
Furthermore, Users have:
a) the right to withdraw consent at any time, if the processing is based on their consent;
b) the right to data portability (right to receive all personal data concerning them in a structured format, commonly used and readable by automatic device), the right to limit the processing of personal data and the right to cancel (” right to be forgotten “);
c) the right to oppose:
the. in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of the collection;
ii. in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
iii. if personal data are processed for direct marketing purposes, at any time, to the processing of their data for this purpose, including profiling in so far as it is related to such direct marketing.
d) if they believe that the treatment that concerns them violates the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the one in which they work or in the one in which the alleged violation has occurred ). The Italian Supervisory Authority is the Guarantor for the protection of personal data, located in Piazza di Monte Citorio n. 121, 00186 – Rome (http://www.garanteprivacy.it/).
Villa Sandi S.P.A. – Via Erizzo 113/A – Crocetta del Montello (TV) Italy – Tel. +39 0423 8607
Cod.Fisc. /P.I. /Nr.reg.impr.Treviso IT00321980260