Privacy Policy

Privacy policy

Regulation EU 2016/679 | GDPR

1) Object of the treatment of personal data
The Company treats personal data (in particular, name, surname, tax code, VAT number, email address, telephone number, hereinafter "personal data" or simply "data") communicated by you during registration on the website of the Company and/or when signing up for services offered.

2) Purpose of the data treatment
Your personal data are processed:
A) without your express consent (Article 6 letter b, and GDPR), for the following Purposes of Service:
- to allow you to register on the website; - and to manage and maintain the website (also for statistical and website analysis); - to allow you to sign up for any Services requested by You; - to fulfil the pre-contractual, contractual and tax obligations arising from relationships with you; - to fulfil the obligations established by law, regulation, community legislation or by an order of the Authority; - to prevent or disclose fraudulent activities or malicious activities harmful to the website; - to exercise the rights of the Company, e.g. the right to defend itself in court.

Rights of the interested party (Article 15-21 of the GDPR)
In addition to the already specified right of access as per art. 15 GDPR to know about the existence of the data treatment, its purposes, the categories of data processed, the recipients to whom the personal data have been or will be communicated, in particular if they are third countries or international organizations, the retention period or the criteria used to determine it, the interested party may request the correction or deletion of personal data or the limitation of processing and may object to the processing; he/she can also lodge a complaint with a supervisory authority, to obtain information on the data source if not provided by him/her, the existence of an automated decision-making process, including profiling pursuant to art. 22, § 1 and 4 (and in this case significant information on the logic used), the appropriate guarantees, in case of transfer to third countries, to obtain a copy of the data held by the Company, revocation of consent and portability data.
It is specified that the Company does not perform profiling activities and does not transfer data to third countries.

B) only after your specific and distinct consent (Article 7 GDPR), for the following Marketing Purposes:
  • to send you via e-mail newsletters, commercial communications and/or advertising material on products or services offered by the Company. Please note that if you are already our customer, we can send you commercial communications related to services and products of the Company similar to those you have already used, until revocation of consent or request for cancellation.

C) The Company will process personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of a Service, and for not more than 2 years from the collection of data for the purposes of Marketing, without prejudice to the exercise of the right to cancel or withdraw consent. At the end of this period your data will be completely destroyed.

3) Recipients or categories of recipients of the personal data
Your data may be processed by employees or collaborators of the Company, adequately instructed for the purposes of compliance with any obligation regarding the protection of personal data and transmitted to the Data Processors appointed by the company pursuant to the Law and always for purposes related to the contract or deriving from the Law (e.g., the accountant for accounting purposes or the computer technician who takes care of the company computer network).
Your data, always for purposes connected to the contract or deriving from the Law, may be transmitted to other subjects in the sector in which the Company operates, as commercial agents or in order to ensure all obligations, such as the carriers entrusted with the delivery of the goods to your address.
4) Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
  • To contact the user
  • To manage contacts and send messages
  • To manage payments
  • For registration and authentication
  • For platform and hosting services
  • For statistics

5) Rights of the interested party
The interested party is always entitled to access the data concerning him/herself, request correction and updating as well as cancellation or limitation, unless this conflicts with the legal obligations of the Company (e.g. related to tax and tax purposes). The interested party has the right to oppose the processing of data which is without a legal basis and is for marketing purposes only (Article 21 EU Regulation 679/2016).
The interested party has the right to the portability of data concerning him/herself for the purpose of transmitting them from one data controller to another as required by law (Article 20 of EU Regulation 679/2016).
The interested party has the right to revoke consent to the processing of their data at any time without prejudice to the lawfulness of the data treatment based on the consent previously given and in any case unless the treatment is imposed on the Company to comply with legal obligations.
The interested party has the right to lodge a complaint with the Guarantor for the Protection of personal data in any case in which he/she considers that the rights under Italian and EU legislation regarding the protection of personal data have been violated.
In the exercise of its activity and for the purpose of carrying out the contact with the interested party, the Company does not make use of automated decision-making processes that produce legal effects on the interested party or have a similar impact on his/her person.
In the exercise of its activity, the Company does not perform profiling on the interested party’s data, intended as use of such data to analyze or predict aspects concerning the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of the person concerned. Any use of the data for the purpose of generating reports or statistics by the Company takes place exclusively in an anonymous form, excluding any disclosure of data of the interested party or that may even indirectly allow identification, through management software that does not allow profiling on the individual customer.
The Company does not transfer to third parties or transfer to third countries or international organizations in whole or in part the personal data of the interested party without specific consent from the same and ensuring in any case adequate data protection in accordance with the relevant legislation protection of personal data, explaining the reasons/purposes of the assignment or transfer. In this case, the Data Subject is informed of the appropriate safeguards adopted by the Company to ensure constant data protection and to guarantee the interested party the exercise of their rights, as well as the place where the data are available and the means to obtain a copy.

6) Security Policy
The Company has adopted a security policy of its own company adequate to ensure that data processing takes place through the use of tools - including information technology - able to reduce to a minimum the risks derived from the processing itself and guarantee confidentiality on a permanent basis, the integrity, availability and timely restoration of data, together with access to them in the event of a physical or technical accident.