When Users access or browse the Site, various categories of Personal data belonging to the Users and/or to other data subjects are automatically collected by the Site. In particular, the Site processes information regarding the interaction between the Site and the User's device: for instance, the IP address, various information about the browser, operating system and type of device used, the pages visited and the searches performed, etc.
In this case, the processing of Personal data is necessary to enable User browsing or to make it smoother.
Furthermore, the Site expressly requires Users to communicate their Personal data during the procedure to sign up to the Site and/or to complete a purchase order on the Site. In these cases, the processing of Personal data will be necessary for registration or ordering purposes.
In other circumstances, the Site will ask Users for their Personal data in order to send them various types of communications by e-mail: e.g., to sign up for newsletters, to participate in contests, for the delivery of promotional offers, to join loyalty programs or for statistical purposes related to the purchasing behaviour of Users.
Every time, the Site will clearly indicate whether the submission of Personal data is required or optional for a specific purpose.
The User's denial of consent to the processing of Personal data for purposes other than registration to the Site and/or the completion of orders on the Site will not have any significant consequences.
Based on the legitimate interest to improve its relationship with customers, the Site may send to customers email communications including product suggestions, discounts, feedback requests or other updates relating to products and services similar to those already purchased on the Site. Customers are always free to unsubscribe from such email communications (for instance, by clicking on the “unsubscribe link” at the bottom of every email).
Personal data is processed in a manner that ensures appropriate security and confidentiality of Personal data, including for preventing unauthorised access to or use of Personal data and the equipment used for the processing. Personal data is used only when necessary for the purposes for which such Personal data is collected and subsequently processed.
The Data Controller of the Personal data (“Controller”) is:
Argenterie Giovanni Raspini SpA
L.go Torricelli 1
52041 Pieve al Toppo (AR)
E-mail address: firstname.lastname@example.org.
The processing of all Personal data is performed within the Controller's organization or by third-party suppliers (or partners) under the strict instructions of the Controller.
Retention of Personal data
The Controller will retain Personal data for as long as it is needed to provide Users with the required services or to meet legal or tax obligations or for the minimum period prescribed by the law.
In order to determine the appropriate retention period for Personal data stored by the Site under user consent, the Controller will take into account multiple factors to ensure that Personal data is not stored for longer than necessary. Such factors will also include the purposes of the processing of Personal data and the type of relationship with the concerned user or customer (how often the User logs into their Site account, whether users continue to receive marketing communications, how regularly they browse or buy on the Site, etc.).
The Site will promptly delete or anonymize personal information that is no longer needed or retained according to the law.
Disclosure of Personal data
The Controller discloses part of the Personal data to other subjects, including third parties, involved in the fulfilment of purchase orders or in the after-sale process.
The Controller may transfer Personal data of customers to primary third-party suppliers, acting as “data processors” (the “Processors”), for the main purpose of performing business operations in order to fulfil their contractual obligations (e.g., courier service providers, etc.).
The Controller will make its best effort to ensure that all Processors will apply their industry best practice to protect Personal data and they will not use Personal data for any other purposes than those agreed with the Controllers.
Users may request a full and updated list of the Processors to the Controller by email at: email@example.com.
The foregoing is without prejudice to disclosure of Personal data where required by law, police forces, judicial authorities, information and security agencies or other government bodies for national security or defence or for the prevention, detection and repression of administrative or criminal offenses, even in cases in which the disclosure or distribution of the Personal data is prohibited by law.
In all other cases, the disclosure or distribution of Personal data is subject to User’s prior, express and unequivocal consent.
The Controller will not transfer any Personal data outside the European Economic Area (EEA), unless the concerned User has explicitly authorized such transfer or the transfer of personal information outside the EEA is allowed by the GDPR on another legal basis.
The rights of data subjects
Under the GDPR, Users have the right to obtain from the Controller confirmation as to whether or not Personal data concerning them are being processed.
Moreover, each User has the right to obtain:
The User has the right to oppose, for legitimate reasons, any or all of the processing of the Personal data, regardless of whether the Personal data is relevant to the purposes for which they were collected or are used for advertising or marketing purposes.
The User has also the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Furthermore, the User has the right to file complaints related to the collection and processing of Personal data to the competent supervisory authority.
For all communications and enquiries regarding the processing of their Personal data and to exercise their own privacy rights, as indicated above, Users may contact the Controller by e-mail at the following address: firstname.lastname@example.org.