INFORMATION ON THE PROCESSING OF PERSONAL DATA WITHIN THE MEANING OF ART 13 OF REGULATION (EU) 2016/679 (“GDPR”) AND THE NATIONAL LEGISLATION REGARDING THE PROTECTION OF PHYSICAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA (“APPLICABLE LAW”).
Dear User, Excellence of Umberto Sercecchi is the owner of the Vignaz site (“Website”). Excellence of Umberto Sercecchi informs you that the information you provide when you access the site and how it interacts with it will be treated in accordance with the provisions of the information below.
1. DATA CONTROLLER – DATA PROCESSING MANAGER
Data Protection Officer The Data Controller of personal data is Excellence of Umberto Sercecchi, with registered office in Via Felice Orsini, 5 – 40026 Imola (BO), Tax Code: SRCMRT84M24C265V, VAT number: 03650071206.
2. PURPOSE AND METHOD OF TREATMENT – DATA STORAGE TIMES
Excellencies of Umberto Sercecchi processes the personal data of Users for the following purposes:
(a) to register on the Site, or to proceed to purchase the Excellence goods or services of Umberto Sercecchi through the Site and, therefore, carry out any activity related, in particular, to the selection of products or services, the sending of orders and / or its acceptance, shipment, delivery and / or possible exercise of the right of withdrawal and the consequent withdrawal of the goods or any other fulfillment provided for in the general conditions of sale of Excellence by Umberto Sercecchi;
(b) to allow the use of the services reserved for registered Users as per the conditions of use of the Site in which provision is made of the services upon request of the User such as the alert service, the sending of messages to receive assistance customers, for the booking of goods and services, for the release of reviews and comments by Users in special online forms;
(c) for the performance of any administrative and accounting activity connected with the registration on the Site, the making of a purchase through the Site as well as to fulfill legal obligations;
(d) to send communications aimed at the promotion and / or direct sale of products or services similar to those already purchased / used by the User (so-called “soft spamming”), without prejudice to the User’s right to object in any time;
(e) for sending commercial communications about products and services on the Site, special offers, promotions and news, coupons and for conducting market research (c.d. marketing purposes);
Personal data is processed by manual and electronic means and is stored in the appropriate electronic database. The personal data contained in the aforementioned automated information system, as well as those kept in the electronic archives of the Data Controller, are processed in accordance with the provisions of the current legislation and by the GDPR regarding security measures, so as to minimize the risk of destruction, loss, modification, unauthorized disclosure or access, in an accidental or illegal manner, or of processing not in accordance with the purposes of the collection. Furthermore, personal data is kept for the time necessary to achieve the aforementioned purposes, as well as to fulfill the legal obligations imposed for the same purposes.
3. TYPE OF PERSONAL DATA PROCESSED
Excellence of Umberto Sercecchi treats personal data freely entered by the User on the Site, or entered by the User through connection to social platforms (such as, in particular, personal data, tax codes, contact details, telephone and / or fax numbers, addresses and -mail, data contained within comments or reviews, etc.), as well as data of a technical nature autonomously generated (in particular, IP addresses, log files relating to navigation on the Site, purchases made, etc.). Excellencies of Umberto Sercecchi will keep, within the terms of the law, the log files and the IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions.
DATA RELATING TO CREDIT CARD
To make a payment on the Website by credit card, the User must enter confidential credit card information (card number, cardholder, expiration date, security codes). These data will be acquired by the payment service provider who will act as an independent data controller, without passing through the server of Excellencies of Umberto Sercecchi.
The data will be acquired in encrypted format and according to the security requirements provided by the PCI certification. Excellence of Umberto Sercecchi will only keep track of the last four digits that make up the credit card number and the expiration date thereof solely and exclusively to prevent fraud in online payments. The payment service provider uses the TLS Protocol (Transport Layer Security).
4. PROVISION OF DATA AND CONSENT TO ITS TREATMENT – CONSEQUENCES IN CASE OF FAILURE
The provision of data for the purposes referred to in points (a), (b) and (c) of art. 2 above is necessary and, therefore, failure to provide the personal data in question will make it impossible for the User to conclude the procedures for purchasing, selling, delivering and / or returning goods, to use the services reserved to registered Users or requested by the latter from time to time as indicated in the conditions of use of the Site, as well as the performance of administrative and accounting activities by the Excellence of Umberto Sercecchi. Consent to the processing of personal data for the aforementioned purposes is not required, in particular, pursuant to art. 6, par. 1, lett. b) of the GDPR and the current legislation. With reference to the purpose referred to in point (d) of the art. 2 above, the consent to the processing is not necessary under the current legislation, however the User has the right to object at any time to the sending of communications according to the methods indicated below. With reference to the purpose of the processing referred to in points (e), (f), (g), consent to the processing of personal data is purely optional, it being understood that failure to provide it will make it impossible (i) for the User to receive communications informative and / or commercial relating to products and / or services of Excellence of Umberto Sercecchi and to benefit from any promotions from these offers, (ii) for Excellencies of Umberto Sercecchi to analyze the User’s consumption habits in order to elaborate and send specific offers based on the User’s tastes and preferences.
5. SCOPE OF DATA COMMUNICATION
The personal data provided by the User for the purposes described in art. 2 above, may be brought to the attention of or communicated to the following recipients: – Company of the Excellence group of Umberto Sercecchi (controlling, controlled, connected), employees and / or collaborators any title of Excellence of Umberto Sercecchi and / or of the Companies of the group for the performance of administration, accounting and IT support and logistics; – public and / or private subjects, natural and / or juridical persons (legal, administrative and tax consultancy offices, shippers and couriers, any computer companies and any other subject) of which Excellence of Umberto Sercecchi makes use in the performance of the activities of which in points (a), (b) and / or (c) of art. 2; – to private individuals, natural or legal persons also operating outside the Italian territory (and, in particular, in the USA, without the recourse in contracts stipulated with third parties to the standard contractual clauses for the transfer of personal data to designated data processing operators in third countries established by the European Commission with its own decisions, of which Excellencies of Umberto Sercecchi may be used for the performance of the activities referred to in points (d), (e), (f) of Article 2 above (eg .: companies that send information and / or promotional communications, companies that process users’ consumption habits, etc.), and, with reference to the purposes referred to in point (g) of article 2, to all those subjects (including the Public Authorities) who have access to the data by virtue of legislative or administrative provisions All the personal data provided by the Users in relation to the registration on the Site and / or to the acq Used through the Site are not subject to disclosure.
6. RIGHTS OF THE INTERESTED PARTIES
Pursuant to articles 15 and ss. of the GDPR and current legislation, the User has the right, in addition to proposing a complaint to the Italian Guarantor for the protection of personal data and to revoke any consent given at any time, to: a) obtain confirmation of existence or not of personal data concerning him and their communication in an intelligible form, receiving them in a structured, commonly used and legible format with the possibility of transmitting them to another holder (“Right to portability”); b) obtain indications: (i) on the origin of personal data, on the purposes and methods of processing, on the logic applied in the case of processing carried out with the aid of electronic means; (ii) on the identification details of the Data Controller, the Data Processor (s) and the Data Protection Manager; (iii) on the subjects or categories of subjects to whom the data may be communicated or who may become aware of the same as designated representative in the territory of the State, of managers or designated. c) obtain (i) the updating, rectification or integration of data concerning him or, in the event of a dispute regarding the correctness of the data, the limitation of the processing of the same for the time necessary for the appropriate checks, (ii) the transformation into anonymous form or blocking of data processed in violation of the law, including those which need to be kept in relation to the purposes for which the data were collected or subsequently processed, (iii) the attestation of the fact that the operations referred to in the preceding points have been brought to the attention also as regards their content, those to whom the data have been communicated or disseminated, except in the event that such fulfillment proves impossible or involves the use of manifestly disproportionate means with respect to the protected right. d) object, in whole or in part (i) to the processing of data concerning him, even if pertinent to the purpose of collection, (ii) to the processing of personal data concerning him, provided for the purposes of commercial information or sending material advertising or direct sales or for carrying out market research or commercial communication. e) obtain the cancellation without unjustified delay (“Right to be forgotten”) in the event that the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed, have been unlawfully processed or in the event that the User (i) requests it or (ii) objects to the processing in whole or in part. f) obtain the limitation of the processing if the data (i) are unlawfully processed but the User objects to the cancellation of the same, (ii) are necessary for the User to ascertain, exercise or defend a right, (iii) an assessment is pending regarding the legitimate reasons of processing by the Owner. The above rights may be exercised by request to the Owner, to the e-mail address firstname.lastname@example.org or, with reference to the rights under d), also through a special link at the bottom of any e-mail with promotional content or information sent by Eccellenze di Umberto Sercecchi or by accessing, after logging in to the Site, the “My data” section and deselecting the treatment not requested.