Adelchisa informs that, for the data provided through the site http://www.adelchisa.com is the owner of your data qualified as personal data pursuant to the GDPR EU Regulation 679/2016 of 27 April 2016. In accordance with the provisions of the aforementioned Regulation in Articles. 13 and 14, below is the information on personal data. This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy, together with the Terms and Conditions, any other documents referred to in it and the Cookie Policy, establish the basis on which the Personal Data of the Data Subject will be processed. The aforementioned provisions will be based on the principles of lawfulness, correctness, transparency, limitations of purposes and storage, data minimization, accuracy, integrity and confidentiality.
Data Controller
The Data Controller of the Data collected from this Website is Adelchisa di Nicoletta Cardin, with registered office in Sovicille (SI), zip code 53018, via Pò n. 2 interno 34, VAT 01564380523, email: info@adelchisa.com
Personal data
Personal Data means any information relating to an identified or identifiable natural person (Data Subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, one or more factors specific to his or her physical identity.
Category of Personal Data processed
Among the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as: Cookies, Usage Data, name, surname, email address, telephone number, Tax data useful for the purchase (including tax code) and Personal Data useful for the delivery of the purchased Product.
Methods and Purposes of Personal Data Processing and Legal Basis
The Personal Data provided or acquired will be processed by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
Personal Data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of Users, of a technical-IT nature, the transmission of which is inherent to the normal functioning of the Internet. These Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning and will be deleted immediately after processing.
The Data that the interested party chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness pursuant to art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be kept for the time necessary to fulfill the aforementioned Purposes.
The purposes of the processing are:
a) Information and pre-contractual obligations
The Data will be processed in order to be contacted or follow up on the specific requests addressed to the Data Controller by the interested party for communications of an informative nature and / or for the interest in purchasing the Products of the same Data Controller, by e-mail messages or by filling out the contact form and other communication tools such as telephone. Legal basis: this processing is optional and based on the consent of the interested party, however the provision of data is necessary for the pursuit of the indicated purpose. Data retention period: until consent is revoked by the interested party.
b) Processing necessary under a contract
The Data will be processed in order to fulfill the obligations deriving from the contract stipulated between the interested party and the Data Controller for the sale of the Products on the Website, to contact the interested party in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management and termination of the Contract itselfLegal basis: this processing is necessary for the execution of the contract of which the interested party is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.Data retention period: 10 (ten) years or different legal obligation.
c) Fulfillment of any obligations under applicable laws
The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial uses and tax / tax matters, including also for the purposes provided for by the anti-money laundering legislation d.lgs. 231/2007 and subsequent amendments. Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.Data retention period: 10 (ten) years or different legal obligation.
d) Soft spam
The Data will be processed to allow the Data Controller to send by e-mail to the interested party commercial and promotional communications concerning Products and / or Services similar to the Products / Services being sold without the need for the express and prior consent of the interested party, as required by art. 130, paragraph 4, Privacy Code as amended by Legislative Decree no. 101 of 2018, and provided that the interested party does not exercise the right to object. Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to art. 6, lett. F and Recital n. 47 of the GDPR. Data retention period: until the interested party objects.
e) Direct marketing
The Data will be processed for direct sale of Products / Services, market research, sending communications and promotional, commercial and advertising material or concerning initiatives and events, through newsletters, e-mails, SMS, WhatsApp, Chat, Direct Messaging from social media, social networks or through phone calls, paper mail and other informative material. Legal basis: this treatment is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lett. A of the GDPR. Data retention period: until consent is revoked by the interested party.
(f) Statistics
The Data will be processed to perform statistical analysis on aggregate and anonymous data to analyze the behavior of the interested party to improve the products and services provided by the Data Controller as well as meet the expectations of the interested party. Legal basis: this treatment is based on the consent freely expressed by the interested party. Data retention period: until consent is revoked by the interested party.
g) Profilazione
The Data will be processed for the analysis and evaluation of interests, habits, consumption choices, including the creation of profiles in order to send personalized information and promotional material on the Services / Products offered by the Data Controller.Legal basis: this treatment is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, lett. A of the GDPR. Data retention period: until consent is revoked by the interested party.
h) Satisfaction of the interested party
The Data will be processed to send surveys to verify the degree of customer satisfaction in order to improve the offer on the Owner’s Products / Services and without marketing purposes.
Legal basis: this processing is based on the legitimate interest of the Data Controller pursuant to art. 6, lett. F and Recital n. 47 of the GDPR.
Data retention period: until the interested party objects.
Communication of Data
In addition to the Data Controller, in some cases, the following may have access to the Data:
a) categories of specially trained Appointees involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators);
b) external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
c) public or private subjects that can access the Data in compliance with legal obligations;
d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Data Controller.
Treatment times
As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the interested party, or required by the Purposes described above in this document.
At the end of the retention period, Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data can no longer be exercised.
Cookie
This Website uses cookies. Cookies are small text files that can be used by websites to make the experience more efficient for the interested party and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy.
Place of processing and transfer of data abroad
The Data are processed at the operational headquarters of the Data Controller. For further information you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the event that the Data are transferred outside the EEA, the Data Controller will adopt all appropriate contractual measures to guarantee adequate data protection.
Exercise of the rights of the interested party
The interested party has the right to exercise the faculties provided for in Articles. 7, 15-22 of European Reg. 679/2016. In particular, you have the right to revoke your consent at any time and, upon simple request to the Data Controller, you may request access to Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit them to another Data Controller without hindrance (so-called portability), obtain the updating, limitation of processing, rectification of Data and cancellation of those processed in contrast to current legislation. You have the right, for legitimate reasons, to object to the processing of personal data concerning you and to the processing for the purpose of sending advertising material, direct selling and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as a supervisory authority regarding the protection of personal data or to take the appropriate judicial offices. The interested party may exercise his rights by contacting the Data Controller by e-mail at: info@adelchisa.com.
Tools used for the Processing of Personal Data
Contact form
By filling in the contact form with their Data, the interested party consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through contact forms: Email, Name and Telephone.
Email Address Management
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the interested party. These services may also allow the collection of data relating to the date and time of display of messages by the interested party, as well as the interaction of the interested party with them, such as information on clicks on links inserted in messages.
Newsletter
By registering for the newsletter, the email address of the interested party is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The email address of the Data Subject may also be added to this list as a result of registering on this Site or after making a purchase. The interested party can choose at any time to unsubscribe from the newsletter by clicking on a specific button that will be found in the emails. After clicking on the delete button, the Data of the interested party will be deleted immediately by the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by: MailChimp.
Security measures taken
This Website, to secure the moment in which Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted on the websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.
Website registration
With the registration service, the interested party allows the Site to identify him and give him access to dedicated services.
Registration and authentication services can also take place with the help of third parties. In this case, the application will be able to access some Data stored by the third-party service used for registration and identification.
Simple Direct Registration
The interested party registers directly on the site by filling out the form and providing their data.
Statistics
Statistical services allow the Data Controller exclusively to monitor and analyze traffic data and are used to keep track of the behavior of the interested party.
Payment management
Payment management services allow this Website to process payments by credit card, bank transfer or other means. The Data used for payment are acquired directly by the payment service provider requested without being in any way processed by this Site. Some of these services may also allow the scheduled sending of messages to the interested party, such as emails containing invoices or notifications regarding payment. This Website uses the following services: PayPal.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Please therefore consult this page often, taking as reference the date of last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the interested party is required to cease using this Website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that time. The Owner is not responsible for updating all links visible in this Privacy Policy, therefore whenever a link is not working and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the websites referred to by this link.
Last updated: 28 March 2023.
