This report describes how we manage the website in relation to user’s personal data treatment as well as the processing practices of data transmitted by the interested party to the Owner through this website.
In compliance with articles 13 (regarding data collected from the interested party) and 14 (regarding data not collected from the interested party) of Regulation (EU) 2016/679 (GDPR), we give the Users of this Website the following information, which are exclusively related to the processing carried out through this Website and not through other websites possibly visited through links from the present, for which it is suggested to view the relative information provided by the respective Owners.
This Website and any services offered through the Website are reserved for individuals who have reached the age of eighteen. Therefore, the Data Controller does not collect personal data relating to subjects under the age of 18. Upon request by such Users, the Data Controller will promptly delete all personal data inadvertently collected.
- Data Controller
The Data Controller reserves the right to appoint a person (Data Processor) responsible for personal data processing, handled on the purposes to face with technical assistance, maintenance, technical management and similar for the correct functioning of this website. The Responsible references may be communicated if requested to the addresses indicated below. The Data Controller and the Data Processor may delegate their own internal Appointees to process personal data. The Delegates will be prepared and instructed for the correct processing of personal data.
The person responsible for personal data protection can be contacted via email: firstname.lastname@example.org.
2. Category of processed data and sources of origin
Data provided voluntarily by the user, including:
Common data (identification data, personal data, billing data and similar) Sources: navigation, other websites, cookies and similar; user; public sources.
In first place, we could deal navigation data and cookies.
We may also process data provided voluntarily by the user, for example through the contact form or by sending a communication via e-mail, including common personal data (identifiers, personal details, billing and similar).Data could come from automatic sources or from voluntary sources, as well as from public sources.For example, data could come from the user’s navigation, which could bring with it information relating to previous consultations on other websites, including cookies and other similar technologies. The data could also be given voluntarily by the user or by somebody/something related to him. Other data could come from public sources, such as those related to researches and/or surveys, public databases and similar.
3. Purpose of data processing
The personal data of the Website’s Users, as described above, will be processed following the rules prescribed by GDPR, in order to perform all functions proper to the Website, with particular reference, but not exclusive, to the procedures described for data’s collection, contact form, eventual registration/access process to the reserved area, newsletter subscription and similar.
In particular, the personal data provided to the Data Controller will be processed for the following purposes:
- to respond to specific requests from Customer to the Owner using Website communication tools (contact form, information request forms and the like);
- for the possible subscription to the newsletter and the consequent transmission of various commercial and informative communications concerning the sector in which the Owner operates, with the appropriate User’s consent;
- for communications related to other services that the same Owner provides, following an information request via e-mail, messages or by filling in the contact form and other communication tools;
- for other purposes ancillary to, or related to those indicated above, and in any case within the scope of the Website’s activity;
- for the use of the e-mail address, provided by the interested party in the context of the sale of a product or service, also aimed at sending communications without further consent for the subsequent direct sale of products or services like those sold.
The interested party can in any case express his/her refusal and oppose to this policy, in every moment, easily and for free, following the instructions given in each subsequent communication.
The personal data treatment provided in a generic way will be carried out, also following automatic collection during navigation, for the unique purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, intended as session cookies, of features or analytics that present the requirements specified by the Guarantor.
In particular, regarding the above-mentioned analytics cookies, it is clarified that they can be assimilated to technical cookies where they are created and used directly by the Website. In any case, for analytics cookies, the Website, also in compliance with the Guarantor’s clarifications, has a system to provide the anonymization of IP addresses and the amendment to data treatment.
Data collected through the Email platform
For a complete information, we point out that sending communications via email, Arte Artigianato di Anna Barola makes use of a compliant platform, which, through statistical tracking systems, allows to detect if the User opened a message, the clicks made on the hypertext links contained within the email, from which IP address or type of browser the email is opened, and other similar details.
The collection of such data is functional to the use of the platform and constitutes an integral part of the functionality of the system for sending messages.
The User can indeed easily oppose further newsletter submissions, clicking on the appropriate link for consent’s revocation, which is present in each email containing the newsletter. Soon after the consent’s revocation, the Owner will send the User a message to confirm the consent’s revocation.
4. Legal basis of the treatment
The personal data treatment is based on the information right, on the fulfillment of contractual obligations or social contact, or where necessary, on consent given freely and consciously filling appropriate information fields in dedicated forms.
5. Legitimate Owner’s interest
The personal data treatment is also based on the legitimate interest of the Data Controller, such as the exercise of his/her rights in the context of the information society, the performance of contractual services and the implementation of direct marketing operations.
6. Mandatory transfer
The data provision relating to User’s navigation, for the purposes mentioned above, depends on the privacy set up that the User has enabled or disabled through his/her browser. In some cases, the disabling may affect the navigation on this website. For certain modules of this website, the provision of navigation data and/or the use of technical cookies is mandatory for the proper website functioning.
The provision of some personal data is necessary for the structure of the Website and its procedures. The possible request for other optional data will instead be preceded by a special check of approval. The provision of all other data is optional, in accordance with the type of information that the User wishes to give to the Website.
7. Personal data recipient
The data may be communicated to connected companies, connected or controlled by the Data Controller, as well as to consultants, or even to third parties that operate, also in the name and on behalf of the Owner, for the evasion of services connected to the purposes indicated in the present information, intra EU and non-EU (in the latter case, it will exclusively be subjects adhering to the Privacy Shield protocol).
8. Retention period
The data provided by the interested party will be retained until the revocation is expressed by the interested party, including action on his browser, cookies cleaning, customer request. The navigation data will be stored for the technical time necessary to fulfill the functions for which they were collected.
9. Rights of the interested party
Each interested party has the right of access, rectification, cancellation, limitation, receipt of notification in the event of rectification, cancellation or limitation, portability, opposition and not to be the subject of an automated individual decision, including profiling, in accordance to articles 15-22 of the GDPR. These rights can be exercised in the forms and terms set in Article 12 of the GDPR, sending a written communication to the Data Controller via e-mail at the address email@example.com.
The Owner will reply adequately as soon as possible and in any case within one month from the request’s receipt.
10. Right to revoke consent
You can revoke this consent at any time by sending an email to the of the Owner’s address: firstname.lastname@example.org or express verbal communication at the headquarters of the owner.
Each interested party has the right to submit a complaint, in accordance with articles 77 and following of GDPR, to a supervising authority, which for the Italian State is identified as the Guarantor for personal data protection.
Forms, methods and terms for complaints submissions are provided and regulated by the national legislation in force.
The complaint is without prejudice to administrative and jurisdictional actions, which for the Italian State can be proposed alternatively to the Guarantor or the competent Court.
The personal data provided will not be used for profiling purpose.