The Data Controller is LA FABBRICA SPA with headquarters in Castelbolognese (RA) in via Emilia Ponente 95, firstname.lastname@example.org, tel (+39) 0546 659911
Following reference to this site, data relating to identified or identifiable natural persons and/or legal entities may be processed.
PLACE OF DATA PROCESSING
The processing operations connected to the web services of this site take place at the aforementioned head office and are only handled by personnel in charge of processing, or by persons in charge of occasional maintenance and secretarial operations. The personal data provided by those who request dispatch of informative material are used only to perform the requested service and are communicated to third parties only if this is necessary for such purpose.
TYPE OF DATA PROCESSED
Navigation data: The computer systems and software procedures used to operate this website acquire, during their normal operation, a number of personal data the sending of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified parties, but by its very nature could, through processing and association with data held by third parties, enable users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, and any other personal data included in the message or registration form to the reserved area. Subscription to the newsletter service involves the processing of provided contact data.
In the registration and contact form, the Company asks for consent for the profiling through which the Company intends verifying the user’s preferences based on the sections of the site visited and, where present, based on the interests expressed through purchases and contacts with the Company.
OPTIONAL NATURE OF DATA PROVISION
Apart from whatever specified for navigation data, the user is free to provide personal data contained in the application forms, registration reserved area or otherwise indicated in contacts. Failure to provide such data may make it impossible to obtain what has been requested. The user is always free to revoke consent to the sending of newsletters through the unsubscribe procedure which is indicated at the bottom of each email sent. The user is also always free to revoke consent for profiling by contacting the Company at the indicated addresses; revocation of consent makes it impossible for the Company to send ad hoc commercial communications based on the preferences expressed, but does not result in automatic cancellation from the generic newsletter, so the procedure is valid indicated at the bottom of the email.
Personal data are processed by computer for the time strictly necessary to achieve the purposes for which they were collected, and are compared with any data already in the possession of the Company for the performance of activities or services. In case of disagreement, the person in charge may contact the sender to verify the integrity of the data or correct it if necessary. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
FURTHER INFORMATION ON PROCESSING
Defence in court
The User’s Personal Data may be used for the defence of the Data Controller in court or in the stages leading up to possible proceedings, against abuse in the use of the same or related services by the User.
The User declares being aware that the Data Controller may be required to disclose the Data at the request of public authorities.
Specific privacy notices
System logs and maintenance
For needs related to operation and maintenance, this Site and any third-party services used by it may collect system logs, i.e., files that record interactions and may also contain Personal Data, such as User IP addresses.
The personal data will be kept in accordance with legal obligations and for the time strictly necessary to achieve processing purposes.
The personal data will not be disseminated. Personal data provided when purchasing and ordering products can instead be communicated to
1. entities to which such communication must be made in order to fulfil or demand the fulfilment of specific legal obligations, regulations and/or community provisions;
2. external natural persons and/or legal entities which provide services instrumental to the Data Controller’s business activities for the purposes indicated at point 1 above (e.g., call centres, suppliers, consultants, companies, institutes, professional firms). Such entities will operate as data processors.
Information not contained in this policy
More information regarding Personal Data processing may be requested at any time from the Data Controllers using the contact details.
EXERCISING OF RIGHTS BY USERS
The entities to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know their content and origin, to verify their accuracy or request their supplementing, erasure, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in breach of the law, and to object in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller, who can be contacted at email@example.com. It is also possible to lodge a complaint with the Supervisory Authority for the protection of personal data (www.garanteprivacy.it).