PRIVACY POLICY UNDER ARTICLE 13 EU REGULATION 679/2016
SIMPLIFIED PRIVACY POLICY
The purpose of this privacy policy is to ensure maximum transparency regarding the personal information this website collects and to explain how this information is used.
This privacy policy also specifies how customers’ personal information, collected offline by the data controller, Pietrolu’ Italia Srl a Socio Unico, at its stores is processed.
In compliance with obligations under the European Data Protection Regulation No. 679/2016 (GDPR), this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe on the rights of users.
This site does not publish advertisements, does not use data for the purpose of sending advertisements, however it does make use of third-party services in order to improve the use of the site. These may collect user data and then use it to send personalized advertisements on other sites. Nevertheless, this site is designed and set up to protect user privacy as scrupulously as possible and minimize the collection of personal data. For example:
- As for social plugins to make it easier to share articles on social networks, these are configured to send cookies (and thus possibly collect data) only after the user clicks on the plugin.
- As for the collection of analytics data through the Google Analytics service, this service, by special agreement with the provider, is anonymized and the data collected in aggregate form only are not cross-referenced with those of other Google services.
For further clarification you can read the full policy below.
FULL PRIVACY POLICY
INDEX
DATA CONTROLLER
TYPES OF DATA COLLECTED
LEGAL BASIS.
PURPOSE OF PROCESSING
DATA CONTROLLER
DURATION OF DATA RETENTION
MODE OF TREATMENT
TRANSFER OF COLLECTED DATA TO THIRD PARTIES
PLACE OF PROCESSING
RIGHTS OF THE DATA SUBJECT
DETAILS OF THE RIGHT TO OBJECT
HOW TO EXERCISE YOUR RIGHTS
CHANGES TO THIS PRIVACY POLICY
DATA CONTROLLER
The data controller i.e. the entity that establishes the means and purposes of the processing of personal data is the sole proprietor Pietrolu’ Italia Srl a Socio Unico with registered office in Via Schiavonesca Marosticana, 14, 31011 Asolo TV, Italy, email: boutique181@gmail.com.
TYPES OF DATA COLLECTED
This website collects data in two ways:
- Data provided voluntarily: through filling out the contact form or through subscription to the newsletter, for example: e-mail address, first and last name or other information in the content of the message sent by the user.
- Automated data collection: through the Website, which collects it itself or on behalf of third parties, e.g., usage data and cookies.
- For Usage Data means the information automatically collected through this Web Site (including by third party applications integrated into this Web Site), including: the IP addresses or domain names of the computers used by the User who connects with this Web Site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the User’s operating system and computer environment.
- Cookies, or markers, are small text files (basically packets of information) that are automatically placed on the surfer’s PC or DEVICE within the browser (Google Chrome, Internet Explorer, Mozilla Firefox, Microsoft Edge Safari) and automatically sent back to the server each time the site is accessed. They contain basic information about Internet browsing and thanks to the browser are recognized each time the user visits the site. They allow this site to check whether you have already visited http://boutique181.it. In particular, cookies allow us to understand which pages of the site are most visited as they allow us to see which pages are visited and for how long. Through this data we are able to make the site more adherent to your requirements and easier to navigate.
In turn, cookies are divided into three categories:- Technical cookies: are package of information necessary for viewing the website. Such cookies by law do not require consent.
- Analytical cookies: these are equated by law with technical cookies and therefore also in this case do not require consent; they can be the site’s own (used, for example, to know the number of pages visited within the site itself) or third-party (i.e. generated by other sites to deliver content on the site visited by users).
In any case, users/visitors have the possibility to inhibit the use of Google Analytics and prevent its storage on their Device through the appropriate Browser add-on for the deactivation of Google Analytics, made available by Google at https://tools.google.com/dlpage/gaoptout. To activate such a component that inhibits the system of sending information about the user/visitor’s visit it will be sufficient to install it by following the instructions on the screen, close and reopen the Browser. - Profiling cookies: these are aimed solely and exclusively at understanding the preferences of individual users so as to submit to them while browsing targeted content that is plausibly of interest to them.
This site does not release first-party profiling cookies, however third parties may release this type of cookie: for example you may receive cookies of this type using youtube video embeds, facebook’s like button, through google Analytics or even by making use of the interactive maps provided by Google Maps.
Most popular browsers provide the ability to block third-party Cookies only.
To disable this type of cookie, simply follow the instructions provided on the following pages:
- as for Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disable%20i%20cookie
- As for Microsoft Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
- As for Microsoft Edge: https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies
- As for Google Chrome: https://support.google.com/chrome/answer/95647?hl=it
- As for Opera: https://help.opera.com/en/latest/web-preferences/
- As for Apple Safari: https://support.apple.com/it-it/HT201265
This site uses cookies from the following third parties.
- Google Ireland Ltd
For information about Google’s use of data and its processing, it is recommended that you review Google’s privacy policy on the following pages:
https://policies.google.com/privacy?hl=it - Google Analytics: used to analyze user use of the site, compile reports on site activity and user behavior, see how often users visit the site, how the site is tracked, and which pages are visited most frequently. The information is combined with information collected from other sites in order to create a comparative picture of site usage compared to other sites in the category.Data collected: browser identifier, date and time of site interaction, page of origin, IP address. Place of data processing: European Union being active anonymization of the service. When they are anonymized, as in the case of this site, the Data Protection Authority has clarified that they are equivalent to technical cookies and therefore do not require the user’s consent.
The data collected do not allow for the personal identification of users and are not cross-referenced with other information about the same person. They are processed in aggregate form and anonymized (truncated to the last octet). Under a special agreement (DPA), Google Ireland (data controller) is prohibited from cross-referencing such data with data obtained from other services.More information about Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
The user can selectively disable (opt-out) the collection of data by Google Analytics by installing the appropriate component provided by Google on their browser (opt out) that can be downloaded at the following page: https://tools.google.com/dlpage/gaoptout - Social Network Plugins
This website also incorporates plugins and/or buttons in order to enable easy sharing of content on your favorite social networks. When you visit a page on our website that contains a plugin, your browser connects directly to the servers of the social network from where the plugin is loaded, which server can track your visit to our website and, where appropriate, associate it with your social account, particularly if you are logged in at the time of your visit or if you have recently browsed one of the websites containing social plugins. If you do not want the social network to record data about your visit to our website, you should log out of your social account and, most likely, delete the cookies that the social network has installed in your browser.Plugins with advanced privacy protection features for Users are installed on this site, which do not send cookies or access cookies on the User’s browser when the page is opened but only after the plugin is clicked.The collection and use of information by such third parties is governed by their respective privacy policies to which please refer.
Facebook (cookie policy link): https://www.facebook.com/policies/cookies/ – Twitter (cookie policy link): https://help.twitter.com/it/rules-and-policies/twitter-cookies
Instagram (cookie policy link): https://help.instagram.com/1896641480634370?ref=ig
According to the GDPR, moreover, every website must offer the possibility to easily and immediately disable and/or inhibit Cookies, even when they are anonymous, i.e., do not involve the recording of personal identifying data such as, for example, IP addresses. ).
As already specified in the paragraph “legal basis” the use of profiling cookies is allowed or can be disabled by expressing your preference also by clicking on the dedicated banner that appears by accessing the website.
LEGAL BASIS.
The provision of data sent through the contact form is based on the consent of the person concerned, which is free and optional. Failure to provide consent will result in the impossibility of sending your data and your request and the inability on our part to provide you with feedback.
The collection of browsing data (cookies) is also carried out with the free consent of the user if profiling (marketing) cookies are involved. Profiling cookies may also be processed by third parties. The use of profiling cookies is permitted only with the consent of the interested party, which is expressed by clicking on the dedicated banner that appears when accessing the website or navigating the site. Some cookies (technical and anonymized analytical cookies), however, cannot be disabled without affecting navigation. Moreover, for such cookies it is not necessary to acquire consent.
In specific cases, personal data are processed to fulfill a legal obligation.
Customer data collected at the stores are freely conferred by the data subjects, subject to the delivery of a simplified information notice, which refers for any further details to this one. The legal basis for the processing of said data is the legitimate interest of the data controller.
Having achieved the purpose for which it was collected, data may be further processed if there is a legal obligation or legitimate interest of the data controller.
PURPOSE OF PROCESSING
- Contact form
It has the sole purpose of allowing visitors to the site to contact, should they so desire, the Company that owns the processing, by sending them through the above form an e-mail. In fact, the purpose of the collection and processing of personal data is exclusively to be able to eventually re-contact the user through the references sent through the “Request for Information” forms, in order to process any requests contained in the message sent by the user. This type of services allows for the management of a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.These services allow for the collection of data relating to the date and time of viewing of messages by the User, as well as the User’s interaction with them, such as information on clicks on links included in the messages. - Newsletter Subscription
The purpose of this type of service is to enable the Data Controller to send promotional or informative emails intended for customers to users who have subscribed. To send newsletters, the Data Controller uses the Mailchimp platform. At any time the user has the right to exercise the right not to receive further emails and to be deleted from the Data Controller’s database. To exercise this right (opt out) the user can send an email to the data controller’s email address: boutique181@gmail.com. - Interaction with social networks and external platforms
The purpose of this type of service is to enable the Owner to carry out interactions with social networks, or other external platforms, directly from the pages of this Website. Interactions and information captured by this Web Site are in each case subject to the User’s privacy settings related to each social network. In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it will collect traffic data related to the pages where it is installed. - Statistics
The purpose of these types of services is to enable the Owner to monitor and analyze traffic data and serve to track User behavior. - Google Analytics
The purpose of this type of service is to enable the Owner and third parties to track and examine the use of this Website, compile reports and share them with other services developed by Google. The latter, i.e. Google may use Personal Data to contextualize and personalize ads in its advertising network. - Security
Collection of data and information in order to protect the security of the website (spam filters, firewalls, virus detection) and Users and to prevent or unmask fraud or abuse to the detriment of the website. The data are automatically recorded and may possibly include personal data (Ip address) that could be used, in accordance with the relevant laws, in order to block attempts to damage the website itself or to harm other users, or otherwise harmful or criminal activities. Such data are never used for User identification or profiling and are deleted periodically.
DATA CONTROLLER
The company Scintille S.r.l. is appointed as external data controller as the Service Provider that provides the web-hosting service and, in this capacity, processes the data on behalf of the data controller. Scintille S.r.l. is located in the European Economic Area and acts in accordance with European standards.
Google Ireland Ltd is also appointed as a data controller, as it processes data on behalf of the owner (in relation to the Google Analytics service).
In case of subscription to the newsletter service, Mailchimp is also appointed as external manager. You can read Mailchimp’s privacy policy at the following link https://mailchimp.com/legal/privacy/
DURATION OF DATA RETENTION
Personal data will be retained, including in digital format, for a for a period of time not exceeding the fulfillment of the purposes unless there is a legal obligation or legitimate interest of the Data Controller prescribing a longer retention period.
MODE OF TREATMENT
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out both by means of computer and/or telematic and/or paper tools, with organizational methods and logics strictly related to the indicated purposes.
TRANSFER OF COLLECTED DATA TO THIRD PARTIES
The data collected by the site are generally not provided to third parties, except in specific cases and namely: a legitimate request by the judicial authority and only in cases provided by law; if it is necessary for the provision of a specific service requested by the User; for the performance of security checks or optimization of the site.
In addition to the Data Controller, in some cases other subjects involved in the organization of this Website (administrative staff, lawyers, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) appointed, when necessary, as Data Processors by the Data Controller may have access to the data. The updated list of Data Processors can always be requested from the Data Controller.
PLACE OF PROCESSING
The processing carried out will mainly take place in the European Economic Area and, in particular, mostly at the data controller’s premises.
Should any transfers of personal data take place outside the European Economic Area, this will only be permitted in the following cases:
- when The transfer of personal data is intended to a third country e.g. on the Mailchimp Platform, or an international organization that in the opinion of the European Commission ensures an adequate level of protection.
- In the absence of the European Commission’s decision, when the said country or international organization provides adequate safeguards and data subjects can exercise their rights and there is a possibility of appeal.
- when the transfer is necessary for the performance of a contract concluded between the data subject and the data controller or for the performance of pre-contractual activities, such as the sending of a quotation or for a legal obligation.
RIGHTS OF THE DATA SUBJECT
Users may exercise certain rights with reference to the Data processed by the Data Controller, as provided by EU Regulation 679/2016 in Articles 15, 16, 17, 18, 20, 21.
The User has the right to:
- Revoke consent at any time. The User may revoke the previously expressed consent to the processing of his/her Personal Data.
- Object to the processing of their Data. You may object to the processing of your Data when it is done on a legal basis other than consent. Further details on the right to object are provided in the section below.
- Access to your Data. You have the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing and to receive a copy of the Data processed.
- verify and request correction. Users may verify the accuracy of their Data and request that it be updated or corrected.
- Obtain restriction of processing. When certain conditions are met, the User may request the restriction of the processing of its Data. In this case, the Data Controller will not process the Data for any purpose other than its preservation.
- Obtain the deletion or removal of their Personal Data. When certain conditions are met, the User may request the deletion of their Data by the Data Controller.
- Receive their Data or have their Data transferred to another owner. The User has the right to receive his or her Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller. This provision is applicable when the Data are processed by automated means and the processing is based on the User’s consent, a contract to which the User is a party or contractual measures related thereto.
- propose complaint. The User may bring a complaint to the relevant data protection supervisory authority or take legal action.
DETAILS OF THE RIGHT TO OBJECT
Users are advised that if their Data were processed for direct marketing purposes, they may object to the processing without providing any reasons. To find out whether the Data Controller processes Data with direct marketing purposes, Users can refer to the respective sections of this document.
HOW TO EXERCISE YOUR RIGHTS
To exercise the User’s rights, Users may address a request to the contact details of the Controller indicated in this document: boutique181@gmail.com. Requests are filed free of charge and processed by the Holder as soon as possible, in any case within one month.
CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page. Therefore, please consult this page regularly, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this privacy policy, you must cease using this Web Site and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.