INFORMATION MADE ACCORDING TO THE ART. 13 OF REGULATION (EU) 679/2016 FOR THE TREATMENT OF PERSONAL DATA OF PHYSICAL PERSONS
In this statement, the concrete methods for managing the website in relation to the processing of personal data of the users connected are represented. Data processing is always carried out according to the principles of lawfulness, transparency and correctness and appropriate security measures are adopted to guarantee protection. Further and specific information on the processing of personal data may be obtained by sending a request to the Data Controller using the contact form.
HOLDER OF THE TREATMENT
The data controller of the users' personal data browsing the website https://pontenero.com is Pontenero s.r.l. with registered office in Turin, Via Magenta, 35 – P.Iva 12262400018. The Data Controller can be contacted at the registered office or at no. +39 02 40031640; mail: email@example.com
The processing of data for "Contractual Purposes" is mandatory as it is necessary for the purposes of supplying the products purchased or the services you requested, including the creation of personal accounts within the website.
The provision of data for the "Purpose of the Law" is also mandatory as required by applicable regulations such as compliance in tax matters or to defend the rights of the Owner or third parties in court.
The processing of data for specific purposes such as, for example, subscription to the newsletter, use of contact forms or for Marketing purposes is optional and is only allowed with your consent (which can be revoked at any time) without which it will not be possible for pontenero srl following up the services or requests made by the user.
Legitimate interest of the Owner:
The Data Controller may process the data collected for its legitimate interest and within the limits set by the Regulation. The user may object at any time to the processing for purposes of legitimate interest of the Owner and subject to the limits imposed by the law.
TYPE OF DATA PROCESSED
pontenero s.r.l. to provide the services or products on the website it collects and treats only "personal identification data" such as, by way of example, the name and surname, date and place of birth, e-mail, etc ...).
Additional data collected
The computer system on which the operation of this website is based acquires some personal data during its operation. These data are not collected to be associated with identified users, but by their nature through the processing / association with data held by third parties could allow the identification of the user. This category of data includes, by way of example, the IP address, domain name, access time, parameters relating to the operating system used by the user, etc. ...). These data are collected for the sole purpose of obtaining statistical information on the use of the website and on its correct functioning or to ascertain any computer crimes against the website.
pontenero s.r.l. does not collect or process special categories of personal data, or sensitive data, health data (including genetic or biometric data) and criminal data.
METHOD AND PURPOSE OF THE TREATMENTS
The processing of personal data is necessary to manage relations with the users of the website, including the purchase of products and / or services. The data collected is processed using computer, telematic and paper methods and is protected by appropriate security measures designed to guarantee confidentiality, integrity and restoration. In particular, organizational and procedural measures are adopted (eg distribution of roles between staff, internal / external controllers / processors) as well as technical measures (eg backup, antivirus, firewall).
The purposes for which we collect and process personal data are many, in any case we treat the data provided exclusively for the purposes strictly pertinent to each individual service requested or used, in particular:
Newsletter subscription: the newsletter is a promotional / commercial communication sent to all interested parties who request it by registering for the service. The data provided for registration to the newsletter will be retained until we receive a cancellation request from you also using the appropriate "Cancel registration" button, in which case we will delete your data from our databases within 72 hours of cancellation request from the service. The newsletter will be sent only after collecting your consent which will constitute the legal basis with which we will process your data.
Contact Form / Information: the data you provide us using this service we use them exclusively to give a precise response to what you requested and, to this end, we expressly collect your consent. The data you have provided will be kept for a period of 24 months and then deleted from our systems.
Customer Care: The Data Controller provides the website users with an assistance service (mainly provided through and live-chat, telephone, email) aimed at supporting its customers before, during and after the purchase of a product / service or to provide information on our activities. In some cases, to use the Customer Care service we may need to ask you for your personal data when this is necessary to respond to requests for clarification, information on purchases, shipments, withdrawal, legal guarantee of compliance, payments, products and / or services, manage complaints, manage loyalty programs, etc.
Loyalty Programs: for customers who wish to use it, we offer discounts, benefits and reserved services, which can only be used by adhering to specific loyalty programs and / or becoming holders of a "Loyalty Card". Adherence to these programs involves the provision of personal data such as name, surname, nationality, date of birth, details of purchases made, data relating to financial transactions, etc. The processing of the consumer's personal data in the case of loyalty programs will be limited to the activities strictly necessary for the provision of the requested service (eg attribution of the advantages connected to joining the loyalty program, communications via e-mail concerning the performance of the program). Adherence to the loyalty program will therefore be the legal basis with which we will process your data. In the cases in which you will adhere to our loyalty programs the data provided will be kept for a maximum of 24 months from the termination of the program, after which the data will be automatically deleted or permanently made anonymous.
Purchase of Products / Services: the data you provide will be used to process your purchase orders and related activities (product dispatch and delivery, invoicing, payment management and related activities, etc.). The completion of the on-line sales contract will therefore constitute the legal basis with which we will treat your personal data that will be stored for the time necessary to fulfill the obligations imposed by law in relation to the performance of the sales activity.
Account registration: only after collecting your consent, we will use your personal data to allow you to create your own reserved area on our website that will allow you to make purchases, participate in initiatives promoted by us for our customers (eg creation of wish list , purchase history, etc.)
We communicate your personal data to third parties only when this is necessary and functional to the achievement of the processing purpose pursued according to the product purchased or the requested service, in any case we proceed to the communication only after having informed you and having collected your consent to do so where expected. In general, the data collected through the individual services and for the purposes pursued in this statement can be communicated to the following categories of subjects:
Any Public Authority to which the right to access them is attributed by law
physical sales points of the Data Controller;
data processing and IT services companies (eg web hosting, data entry, management and maintenance of IT infrastructures and services, web agency, etc.);
companies and firms providing consultancy services to comply with legal provisions or to protect the legitimate interests of the Data Controller;
In particular, some specific services provided through our website also include communication to additional categories of subjects, such as:
purchase of products: credit institutions, shipping companies, companies that perform mailing and correspondence sending services
Some browsing data is collected by third parties such as social networks when the user decides to use the relevant interaction key and, in some cases, even without using the interaction service. The processing of these data is left to the privacy policies of each individual third party.
DATA TRANSFER TO OTHER COUNTRIES
The personal data collected through the website is stored and stored within the national territory or in other European Union countries. The data is not transferred to non-EU countries or to international organizations. If the user wants information on the place of data storage, he can obtain it by making a request to the Data Controller.
DATA STORAGE PERIOD
We retain, by adopting the appropriate security measures, the data provided by the user for the period necessary to achieve the purposes for which they were collected, in particular:
the data collected and processed to fulfill the purposes of the law are kept for the period envisaged by the individual legal provision;
the data collected to execute a product sales contract are kept for the period necessary to cover the warranty period provided for by law and to fulfill all the obligations set forth by other regulatory provisions.
the data collected during the opening of a user account are kept until the user decides to proceed with its deletion (c.d. oblivion right).
the data collected when the user subscribes to the newsletter are kept until the user decides to unsubscribe from the service.
The data collected in case of use of the contact form is kept for 24 months.
PROFILING AND AUTOMATED DECISION-MAKING PROCESSES
pontenero s.r.l. does not process data collected for purposes or profiling activities of website users and does not adopt decision-making systems based solely on automated data processing.
NATURE OF DATA CONFERRAL
Providing the requested data is always mandatory when it is necessary to execute a contract or to fulfill legal purposes. In such cases, failure to provide data will not allow the Data Controller to execute the requests received. To this end, the mandatory data entry fields in the forms on the website are marked with an asterisk.
Failure to provide the optional data in the collection forms does not affect the achievement of the requested service. The fields where it is optional to enter the data are recognizable as they are not marked by the asterisk that marks the mandatory fields.
When you spontaneously send an e-mail to one of the e-mail addresses indicated on our sites, we acquire the sender address and any other personal data that you have entered in the message and in the attachments. The e-mail boxes corresponding to the addresses indicated on our websites and any other pontenero s.r.l. e-mail address are not of a personal nature even when they mention the name and / or surname of an individual. They belong to the owner and have the primary purpose of allowing the effective performance of work activities within the company. By sending an e-mail to the e-mail addresses indicated on the website, you declare that you have read and accepted the processing conditions contained in this statement.
RIGHTS OF THE INTERESTED PARTY
At any time you can exercise the rights that the Regulation (EU) n. 679/2016 recognizes you. In particular, you can exercise by contacting the Data Controller or the Data Processor (it is possible to have a list of external managers appointed by making a specific request to the Data Controller):
Right of Access (art. 15). You will be able to obtain from the data controller the confirmation that your personal data is being processed or not, and in this case, obtain a copy of the data being processed; Right of Rectification (Article 16). You will be able to obtain the rectification (ie the modification, integration or updating) of inaccurate personal data concerning you, in case of inaccuracy, incompleteness or obsolescence; Cancellation right (art. 17) (c.d. Right to oblivion). You can obtain the deletion of your personal data. The data controller will cancel them without unjustified delay provided that one of the reasons listed in said art. 17; Right to Limitation of Treatment (Article 18). As an interested party, you have the right to obtain the limitation of the processing when one of the hypotheses listed in art. 18; Right of Opposition (art. 21). You have the right to object at any time to the processing of your personal data for reasons connected to your particular situation and if the conditions set forth in art. 21; Right to Data Portability (art. 20). You have the right to receive in a structured, commonly used and automatic device readable form your personal data provided to a Data Controller and you have the right to transmit such data to another Data Controller without impediment by the Data Controller of the treatment to which he supplied them if the conditions listed in the art. 20; Right to Revoke Consent. You have the right to revoke the consent in relation to all the treatments that are based on it. To exercise this right, without this circumstance affecting the lawfulness of the processing until then based on the consent given, you may at any time write to firstname.lastname@example.org; Right to lodge a complaint with the Guarantor. If necessary, you can lodge a complaint with the competent Control Authority for the protection of the rights guaranteed to you by Legislative Decree 196/2003 and European Regulation 679/2016 (www.garanteprivacy.it).