art. 13 EU Regulation 2016/679
This Statement is given by Io Amo Bio di Schiavone M. (hereinafter also referred to as "Company") pursuant to art. 13 of the EU Regulation 2016/679 (General Data Protection Regulation, hereinafter "GDPR") and concerns the processing of the personal data of the person concerned, which is strictly common and identifying, carried out by the Company in the exercise of its business activity, also through the website www.ioamobio.it (hereinafter, "Site").
The interested party can view the information in the appropriate section, at the URL: www.ioamobio.it/privacy.
Please read this document together with the General Conditions for the purchase of the products referred to in the appropriate section of the Website.
1. Holder of the data processing.
The Data holder is Io Amo Bio di Schiavone M. (VAT code 07820050727), with registered office in Viale Gioacchino Murat, n.48, 70017 Putignano (BA), e-mail: [email protected], tel 080 491 1892, fax 080 491 1892.
2. Purpose.
Personal data is collected and processed, either manually or through electronic systems, by personnel appointed by the Company for the following purposes: a) execution of the contract, pre-contractual measures and/or requests of the interested party in relation to the sale of products through the Site (management of orders, payments, billing, shipping, returns, etc.); b) sending commercial communications by email relating to the Company's goods and/or services similar to those covered by the contract a); c) sending newsletters with promotional, informative and / or advertising content regarding any product of the Company and any initiatives and promotions dedicated to the users registered on the Site. All in full compliance with the security and confidentiality provisions set forth by the provisions in force.
3. Legal basis.
The legal basis of the processing, depending on the cases and the purposes referred to in point 2, is at least one of the following: execution of the contract with the interested party and/or pre-contractual measures (purposes a); pursuit of a legitimate interest of the owner or of third parties, provided that the interests and rights of the interested party (purposes b and c) do not prevail; consent of the interested party (purpose c); fulfillment of legal and regulatory obligations or any orders of the Authorities (purposes a, b, c); exercise and / or defense of a right in the competent offices (purposes a, b, c).
In relation to the pursuit of a legitimate interest, it is acknowledged that the Company has assessed, in line with the reasonable expectations of the interested party, the sending of informative and commercial communications to these products referring to products similar to those already purchased.
4. Provision of data.
Upon registration on the Site, the Interested Party may purchase the Company's products, as detailed in the General Conditions of Sale. In this case, the interested party must first complete an online registration form giving the Company some personal data. This provision of data is necessary for the Data holder to create the user profile (with attribution of user id and personal password), as well as to activate the possibility of purchase of the products by the Interested Party and the possibility to receive, if requested, the newsletter.
The provision of personal data in relation to the execution of the contractual relationship with the interested party (purposes a) is mandatory; any refusal will make it impossible to activate the user profile when registering on the Site, as well as to fulfill the contractual services and/or requests of the interested party.
The provision of personal data in relation to the sending of commercial communications and newsletters (purposes b and c) is optional; any refusal has no consequence in relation to the execution of the contractual relationship with the interested party.
5. Methods of treatment with automated and non-automated tools.
Personal data are collected from the interested party. The data stored on electronic/magnetic/IT supports are stored and archived on Aruba S.p.A. servers placed in Tuscany, Italy.
The data stored on paper is stored in special registers and/or cards, the conservation of which is implemented with storage in special containers, stored at the headquarters of the holder.
Appropriate security measures are taken against the risk of intrusion and unauthorized access, to ensure the integrity, availability and confidentiality of data, as well as the protection of areas and premises relevant to their safekeeping and accessibility.
6. Communication of data and categories of recipients.
I dati personali potranno essere comunicati a soggetti (c.d. “destinatari”) per le finalità determinate dalla base giuridica di volta in volta applicabile (cfr. punto 3).
In particolare, i dati personali potranno essere comunicati alle seguenti categorie di soggetti, tutti con sede all’interno dell’Unione Europea:
-
soggetti che forniscono servizi e attività di assistenza al Titolare nella gestione dei rapporti con gli interessati (gestione degli ordini, pagamenti, fatturazione, spedizione, manutenzione del sito): necessaria all’esecuzione del contratto (obbligo contrattuale; interesse legittimo);
-
persone, società, associazioni, studi professionali che prestano servizi di assistenza e consulenza in favore del Titolare (obblighi legali ed esercizio o difesa di un diritto);
-
fornitori del Titolare: necessaria all’esecuzione del contratto (obbligo contrattuale; interesse legittimo);
I soggetti appartenenti alle categorie suddette operano in totale autonomia come distinti Titolari del trattamento.
I dati trattati non sono oggetto di diffusione.
7. Logica del trattamento e tempi di conservazione.
The data are processed with logic related to the purposes indicated above, so as to ensure the security and confidentiality of the data.
The data is stored at the headquarters of the Data holder for a period of time not exceeding that necessary for the purposes for which they were collected and subsequently processed. In particular:
-
in relation to the purpose of managing contractual relations with the interested party: for the entire duration of the contract;
-
in relation to the purpose of sending commercial communications: for two years from the registration of data or in any case up to the possible opposition by the interested party;
-
in relation to the fulfillment of legal obligations: for the entire duration envisaged by the related obligations;
-
in relation to the exercise and/or defense of a right: up to the prescription of legal rights and actions.
The data will be subsequently deleted and/or anonymised.
8. Data collected automatically via the website. Cookies.
The Data holder is committed to protecting the privacy of visitors and users.
The computer systems and procedures used to operate the Site acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the computer environment of the interested party.
These data are used for the sole purpose of obtaining anonymous information on the use of the Site, as well as to check its correct functioning. The data could be used to ascertain responsibility in case of commission of offenses.
It also uses log files that collect and store information in an automated manner relating to the acceptance by the party concerned of the contractual clauses, the display of this information and, in the case, the release of the consent requested. The information collected is: IP address; visit date and time; name of the Internet service provider (ISP); type of browser and device parameters used to connect to the Site.
The interested party is invited to read also the "cookie policy" published on the Website.
9. Rights of the interested party. Opposition to treatment. Complaint.
The interested party can exercise against the Holder the rights provided for by articles 15-22 of the GDPR, as applicable. In particular, he has the right to request access to data concerning him/her, updating, integration, rectification, deletion, limitation, portability of data in an open format (eg CSV), to revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
For legitimate reasons, the interested party may object, in whole or in part, to the processing of personal data (Article 21 of the GDPR), by sending the request to the Data holder by ordinary mail, e-mail or fax. In particular, the interested party has at any time the right to object to the sending of commercial communications.
Pursuant to art. 77 of the GDPR, the interested party also has the right to lodge a complaint with the Supervisory Authority of the Member State in which he normally resides, in which he works, or of the place where the alleged violation has occurred. In Italy the Guarantor for the protection of personal data is competent, with headquarters in Rome (www.garanteprivacy.it).
10. Edit.
The Data holder may change the criteria and procedures for the processing of data at any time, or change and modify the methods of accessing the Website.
In these cases, the Owner will promptly update the Privacy Policy, to be understood by the users at the time of publication.
11. External link
This information is reported and applies only to data collected by Io Amo Bio di Schiavone M. through the Site. The Company is not responsible for the processing of data and information on privacy on websites that may be reached from the Site.
Putignano, 25 May 2018
Io Amo Bio