Information on the processing of personal data
Pursuant to Article 13 of the EU Regulation 2016/679
Flli Ciolini Srl, con sede in Via Bologna 178, 59025 Cantagallo (PO), p.iva 02531770978, mail amministrazione@flliciolinisrl.com, pec flliciolinisrl@pec.it,, the data controller, would like to inform you of the means that the website https://www.pasticceriaciolini.it/ uses to process your personal data, while respecting your rights. This information is also provided pursuant to art. 13 of the Regulation (EU) 2016/679, General Data Protection Regulation.
PURPOSES
We may process the following categories:
- Personal data provided by the user: contact details such as name, billing address and access credentials provided during the account subscription and/or during a product purchase, specifically: Identity details (name, surname, address, delivery address, tax code, VAT number), and contact details (e-mail address and phone number);
- Data collected during the browsing of our website: your internet protocol (IP) address, number of cookies, searched and/or displayed products and/or contents and they shall be processed in electronic and paper format for the following purposes:
A) The creation and management of the account, if the interested party has filled in the section regarding the creation of a new account
B) The processing of orders and payments and the communication with the interested party about the order status regarding the goods and services which are the subject of the transaction.
C) The fulfilment of legal obligations such as for tax, accounting and legal.
D) The management of the contract requests made by compiling the appropriate form in the “Contacts” section.
E) Sending discounts, promotion or any other kind of advertising material published though our newsletter
F) Sending targeted advertising materials using costumer profiling
LEGAL GROUND FOR THE PROCESSING
The legal ground which legitimizes the process referred in section A) is compliance with the law and fulfilment of pre-contractual obligations with the interested party, given that the account creation is needed for the submission and the order fulfilment.
The legal ground which legitimizes the process referred in section B) is the contractual relationship between the data controller and the person concerned
The legal ground which legitimizes the process referred in section C) is the fulfilment of legal obligations such as tax and accounting.
The legal ground which legitimizes the process referred in section D) is the response to a request made by the data controller about a possible pre-contractual relationship
The legal ground which legitimizes the process referred in section E) and F) is the consent of the interested party
NATURE OF THE PROCESSING
The provision of data for the purposes referred to sections A) B) C) is necessary for the correct processing of the pre-contractual and contractual duties with the data controller, therefore the absence of data blocks the conclusion of the contracts between the person involved and the data controller.
The provision of data for the purposes referred to sections D) E) F) is optional, as the absence of data will preclude the chance to give feedback on submitted requests and the chance of sending marketing communications, even the targeted ones.
The processing described in section F) might entail automated processing through the use of profiling. Specifically, we will be processing the information regarding your purchase history in order to send advertising information about the products of our own production. Please refer to the website Cookie Policy for details.
DISCLOSURE OF PERSONAL DATA
The processing will only go through our specifically trained staff. If necessary to the performance of the stated purposes, the collected data might be processed by third-party providers, appointed external data processors and sub-processors, such as unaffiliated partners and companies that perform services connected to the purposes mentioned above (among others: site hosting, newsletter, payment transaction processors). The updated list of the external data processors and sub-processors is available by contacting us through e-mailamministrazione@flliciolinisrl.com.
DATA RETENTION PERIOD
Personal data will be stored for as long as necessary to the performance of the stated purposes and once this period have expired, they will be stored for the period required by the Italian law regarding contracts preservation and for what concerns the security of the stored data. Apart from the cases just mentioned, it will be possible to delete your personal account at any time. The removal of the account does not result in automatic deletion of data stored in the Company’s system because of the purposes mentioned above.
The data processed for the purposes mentioned in section D) are stored until the execution of the purpose of replying to requests for information.
The data processed for the purposes mentioned in section E) are stored until the withdrawal of consent and no later than 2 years after the last expression of interest in our advertising communication material sent (click on the e-mail or on internal links)
The data processed for the purposes mentioned in section F) will be processed for the period mentioned in the cookie policy.
RIGHT OF THE INTERESTED PARTY
The interested party shall have the right to exercise any of the rights referred to in art. 15-22of Reg. European 679/2016
For consent-based processing, the interested party has the right to withdraw consent at any time through an easy request to the data controller via e-mailamministrazione@flliciolinisrl.com where it will be possible to ask for the access to personal data and, if desired, to transmit them to another data controller (s.c Portability), obtain the update, limitations, the correction of any personal information and the cancellation of the data treated in a way non complying with current legislation. In particular, the withdrawal of consent is valid for processing carried out for the purpose of sending advertising, direct sales material or for carrying out market research. The interested party has the right to lodge a complaint with the Supervisory Authority of personal data protection.