Privacy EU Regulation 2016/679 GDPR and
Legislative Decree no. 196/2003
Pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter, " Privacy Code ") and art. 13 EU Regulation 2016/679 (hereinafter, " GDPR "), which will process the data of the users (hereinafter "User" and / or "Users") collected through the website www.lachiccasiena.com (hereinafter also " Site ") in the manner and for the following purposes.
Types of personal data through the Site
The Data Controller is the following types of personal data (hereinafter, "data") awarded by the Users of the Site at their consultation and navigation, and in particular:
Data obtained during the navigation of a user on the site
The information systems, cookie technology and software procedures used to operate the web site acquire, during their normal operation, some data whose transmission is implicit in the Internet. This information is not collected to be associated with identified data subjects, but by their very nature could, through processing and associations with data held by third parties, to identify users navigators. This category of data includes, for example, the IP addresses or domain names the computers used by users who connect to the site, the pages visited by users within the same, domain names and addresses of Internet sites from which the user is logged in (via referrals) to the Site, the URI (Uniform resource Identifier) of requested resources, time of request, the method used to submit the request to the web server, the size of the file obtained in reply, the numerical code indicating the status of the response from the web server and other browser type parameters (eg. Internet Explorer, Chrome, Firefox ...), operating system (eg. Macintosh, Windows) and computer environment.
These data are collected through technical cookies owners of the first part and analytical cookies third party.
Personal Data provided by Users
The site is available to the User without the need for its identification for consultation. It did, however, if you want, the right to provide their holder identification data which may include name, e-mail address in order to receive information on the structure and commercial activities on the products / services on the site and this either directly, or by filling the contact form or form of subscription to the newsletter.
Purpose of treatment:
The information you provide will be treated, without the prior consent of the User in accordance with art. 24 lett. b) Privacy Code and art. 6 letter. b) GDPR, for the following purposes Service:
for the management and processing of statistical surveys on the use of the Site;
to carry out the maintenance and technical assistance needed to ensure the proper functioning of the Site and services connected to it;
to improve the quality and structure of the Site and to create new services, features and / or features of it;
to enable the User to find information to increase his knowledge on the topics on the site and the products and services offered by it;
to process any contact request submitted by you through filling out the form or by email;
to allow the holder to exercise their rights in court and suppress illegal activities;
to fulfill legal obligations or regulations.
- Nature of: necessary - Consequences of refusing data transfer : Failure to provide the data will prevent the Data Controller to run the business from 'user request. - Measures Data Protection: The server operating system, which is allocated to the website and the database is installed on a cloud-based hardware infrastructure provided by wix.com can ensure high levels of integrity, availability and confidentiality of information.
The data held by the owner of the site (email and names of any contacts) are kept within the computer and are accessible only to the holder and password protected access and external antivirus and anti-intrusion systems.
The information you provide will be processed prior consent User pursuant to art. 23 Privacy Code and art. 6 letter. a) GDPR, for the following commercial purposes:
to allow the User sending of commercial communications by e-mail about products, initiatives and / or services offered through this website and / or newsletter containing information on services offered by the property.
Nature of: optional
Consequences of refusing data transfer: Failure to grant consent, although it will similarly to the data controller to execute processing required activity, prevent the Data Controller to identify services compliant and better suited to their needs.
Nature of Data Conferment
The provision of data by the user is required for service purposes referred to in point 1 of the preceding paragraph and optional for service purposes referred to in point 2. The refusal to provide such data may result in the impossibility to provide the services.
Mode, Place and Duration of Treatment
The processing of data of users is achieved by means of the operations indicated in art. 4 Privacy Code art. 4 n. 2) GDPR and in particular: collection, recording, organizing, storing, retrieving, processing, modification, selection, retrieval, comparison, access, use, interconnection, block, communication, cancellation and destruction of data.
The Holder is the Personal Data of the Users taking all necessary security measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of Personal Data.
The treatment is done by computer and / or internet tools, With organizational and strictly related to the purposes indicated mode. In addition to the data, in some cases, may have access to data external parties (such as third party technical services, hosting providers, IT companies, communications agencies) appointed, if necessary, in charge of by the Data Processing.
The updated list of Managers may be requested from the Data Controller.
The data are processed at the headquarters of the owner and in any other place where those involved in the treatment are located. For more information, contact the owner. Duration of treatment : only for the time strictly necessary to achieve the purposes for which they were collected and, in any event no later than two years from their collection for service purposes of paragraph 1, section II and no later than one year after their collection for commercial purposes of paragraph 2 of paragraph II.
Details on the processing of personal data:
In order to contact you
Contact form in the site
The User, by filling with your data in the contact form, you agree to use them for responding to requests for information, estimate, or any other kind indicated by the form.
Contact by phone
Users who have provided their phone number could be contacted to provide more information on the service requested, or, following the consent, for commercial or promotional purposes related to this activity, as well as to satisfy requests for support.
Personal Data collected: phone number.
To manage site statistics
The services contained in this section allow the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses Personal Information collected for the purpose of evaluating the use of this website, compiling reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its own advertising network.
Personal data collected: Cookie and data usage.
Google Tag Manager (Google Inc.)
Google Tag Manager is a statistical service provided by Google Inc.
Personal data collected: Cookie and data usage.
To display content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this site and to interact with them.
If it is possible that even a service of this kind, is installed if the Users do not use the service, the same collect traffic data on pages where it is installed.
Widgets Google Maps (Google Inc.)
Google Maps is a display mapping service run by Google Inc. that allows this application to integrate those contained within its pages.
Personal data collected: Cookie and data usage.
The data will be made available exclusively for the purposes mentioned above to the following parties:
Data processor (owner of the site) in his capacity as appointed / authorized and / or responsible for internal treatment and / or system administrator and any additional charge / interior authorized specifically indicated by the Holder.
Company or other third parties who carry out outsourcing activities on behalf of the owner, (eg. Email service manager, web agency, advertising agency, webmaster) in their capacity as external controllers in accordance with Article 29 of the Code on protection of personal data.
Without the User's express consent (art. 24 lett. A), b), d) Privacy Code art. 6 letter. b) and c) GDPR), the data processor can communicate the user data for the purposes of service of art. II.1) to supervisory bodies, judicial authorities as well as to all other persons to whom disclosure is required by law for the fulfilment of those purposes, as autonomous controllers. Users' data will not be disclosed.
The personal information you provide can only be used to allow the sending of communications related to the service requested, via e-mail or telephone to initiatives and / or services offered on the site and / or, in the case of specific consent, newsletters containing in-depth than the main topics related to the services offered.
Third Party Websites
It should be noted from the outset that, if the Site may contain links to websites of third parties, the data controller cannot exercise any control over the content of such web sites or have any access to personal data of the visitors of such users .
The owners of the aforementioned web sites will, therefore, the sole and exclusive owners and controllers of personal data of its users, remaining, the data processor stranger to this activity as well as to any liability, damage, cost, which may arise by its failure or incorrect completion.
Rights of Users
The User shall be entitled to exercise the rights under Art. 7 Privacy Code and to ' art. 15 GDPR .
In particular, the User has the right at any time to obtain from the confirmation of the existence or otherwise of personal data concerning him, though not yet recorded and their communication in intelligible form.
In relation to the treatments described in this Disclosure, l 'interested party may, under the conditions provided for in GDPR, exercise the rights set out in Articles 15 to 21 of GDPR and, in particular, the following rights:
access rights - Article 15 GDPR : the right to obtain confirmation of whether or not the current processing of personal data in this case concerning him, and gain access to your personal information, including a copy of the same.
right of reply - Article 16 GDPR : the right to obtain, without undue delay, correction of inaccurate personal data concerning him and / or completion of incomplete personal data;
Cancellation right ( right to oblivion ) - Article 17 GDPR : the right to obtain, without undue delay, cancellation of personal data concerning him.
right to treatment limitation - Article 18 GDPR : the right to limitation of treatment when:
the applicant disputes the accuracy of the personal data, for the period necessary to the owner to verify the accuracy of such data;
the processing is unlawful and the data subject opposes deletion of personal data and would instead suggest that the use is limited;
personal data is necessary to the person to ascertain, the exercise or defence of a legal claim;
the person concerned is opposed to treatment pursuant to art. 21 GDPR, in the waiting period of the verification on the possible reasons for the prevalence of the legitimate holder of the treatment compared to those concerned.
right to data portability - Article 20 GDPR : right to receive, in a structured format, common and readable use by an automatic device, the personal data concerning him provided to the Owner and the right to send it to another holder without hindrance, if the treatment is based on consensus and is carried out by automated means.
right of objection - Article 21 GDPR: Right to object, at any time for reasons relating to his particular situation, to the processing of personal data relating to him based on the condition of legitimate interest legality or performance of a public interest task or the exercise of official authority, including profiling, unless there are legitimate reasons for the owner to continue treatment that prevail on interest, on the rights and freedoms of or for the establishment, exercise or defence of a legal claim. In addition, the right to object at any time to treatment if personal data are processed for direct marketing purposes, including profiling, to the extent that is connected to this direct marketing.
The above rights may be exercised against the data by contacting the references described above.
The exercise of the rights as an interested party is free under Article 12 GDPR . However, in the case of requests manifestly unfounded or excessive, even for their repetitiveness, the Owner may charge a reasonable contribution expenses, in light of the administrative costs to handle the request, or deny the satisfaction of his request.
RIGHT OF WITHDRAWAL:
The individual has the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on consent before the withdrawal.
How to exercise the rights
To exercise the rights of the article above, the User may, at any time, please contact the site owner via email firstname.lastname@example.org
The data controller is Dario Salezzari
Date last modified
This information was last updated on 20/05/2018.