Privacy and Cookie Policy

PRIVACY NOTICE

 

In accordance with the purposes of the European Union General Data Protection Regulation (EU) 2016/679 of 27 April 2016, published in the Official Journal of the European Union on 4 May 2016, and the provisions of Italian Legislative Decree No. 196 of 30 June 2003 still in force as of this date (Personal Data Protection Code), as subsequently amended, we inform you that our company respects and protects the confidentiality of visitors and users and fulfils all legal requirements necessary to safeguard their privacy rights. The data you provide will therefore be processed in compliance with the above legislation.

 

We therefore invite you to read carefully and accept the contents of this notice provided pursuant to Article 13 of Regulation (EU) 2016/679.

 

PRIVACY POLICY

This privacy policy and the information it contains apply exclusively to online activities and relationships with users of this website and are valid for its users and visitors.

 

PERSONAL DATA

“Personal data” means any information relating to an identified or identifiable natural person (data subject). A natural person is identifiable if they can be identified directly or indirectly as provided for in Article 4(1) of Regulation (EU) 2016/679.

Personal data will be processed in accordance with the conditions for lawfulness set out in Article 6 of Regulation (EU) 2016/679.

 

PARTIES INVOLVED IN DATA PROCESSING

The Data Controller, pursuant to Articles 4 and 24 of Regulation (EU) 2016/679, is Alex Alberghiera, represented by its owner and signatory Mr Alessandro Siccardi, with registered office at Via Mazzini 2, Massa e Cozzile (PT) (email: info@alexalberghiera.com) (certified email/PEC: alexalberghiera@legalmail.it)

 

PURPOSES AND LEGAL BASIS OF PROCESSING

 

A)    Legal basis for processing under Article 6(1)(b) of Regulation (EU) 679/2016

 

Your personal data are collected and processed for the following purposes:

1.     browsing this website;

2.     commercial purposes, to conclude and perform contracts for the sale and shipment of goods;

3.     administrative purposes and compliance with legal obligations, including accounting and tax obligations and responding to requests from judicial authorities. Processing for administrative and accounting purposes includes operations related to and necessary for organisational, administrative, accounting and financial activities. In particular, these include internal organisational activities, activities required to fulfil contractual and pre-contractual obligations, and information activities.

Providing personal data for the above purposes, on the legal basis of Article 6(1)(b) of Regulation (EU) 679/2016, is necessary in order to use the services offered by the website and the data processor. Failure to provide the data may make it impossible to use the website services.

 

B)    Legal basis for processing under Article 6(1)(b) of Regulation (EU) 679/2016

 

With your prior consent, and until you withdraw it or object, your data will be processed for promotions, services, benefits and similar initiatives, marketing and commercial communications, including through subscription to our newsletter, in order to send advertising and promotional materials relating to products and services offered by Alex Alberghiera.

Providing personal data and consenting to processing for the purposes described in this section is optional. 

 

The data will be entered into the information system used by the company.

 

RECIPIENTS OF PERSONAL DATA

The personal data provided may be disclosed to recipients referred to in Article 28 of Regulation (EU) 679/2016, such as processors or natural persons acting under the authority of the Data Controller.

In particular, data may be disclosed to professional firms or companies providing assistance or consultancy, competent authorities for compliance with legal obligations, and logistics service providers.

The list of Data Processors may be consulted at the offices of Alex Alberghiera S.r.l., which will keep it updated.

 

PLACE OF PROCESSING

Data collected through the website are processed at the Data Controller’s premises and at the data centre of Passepartout S.p.A.

 

 

INTERNATIONAL TRANSFERS AND DATA IN NON-EU COUNTRIES

The personal data provided may be  transferred abroad, to European Union countries and to countries outside the European Union, within the limits and subject to the conditions laid down in Articles 44 et seq. of Regulation (EU) 2016/679.

Data may be transferred: - to third parties collaborating with the Data Controller to fulfil contractual and pre-contractual obligations between the parties, pursuant to Article 49(1)(b) and (c) of Regulation (EU) 2016/679; - to third countries covered by an adequacy decision pursuant to Article 45 of Regulation (EU) 2016/679, and to third parties contractually bound to comply with the applicable principles pursuant to Article 46(2)(c) of Regulation (EU) 2016/679; - to third countries or international organisations that have provided appropriate safeguards under Article 46 of Regulation (EU) 2016/679.

 

RETENTION PERIOD AND CRITERIA

This website processes user data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data. Processing is carried out manually or by automated means by specifically authorised persons.

The personal data collected will be stored in a form that permits identification of data subjects for no longer than necessary for the purposes for which they were collected and processed.

 

RIGHTS OF DATA SUBJECTS

Data subjects may, in the manner and within the limits laid down by applicable legislation, exercise the following rights:

-         the right to access personal data concerning them;

-         the right to request updates, rectification, completion, restriction of processing, erasure, anonymisation or blocking of unlawfully processed data, including data no longer necessary for the purposes for which they were collected;

-         where processing is based on consent, the right to receive the data provided to the Data Controller, at no cost other than any cost of the medium used, in a structured, commonly used and machine-readable format;

-         the right to lodge a complaint with the supervisory authority (Italian Data Protection Authority), without prejudice to any administrative or judicial remedy;

-         the right to withdraw consent to processing, without affecting the lawfulness of processing carried out before its withdrawal.

In any event, data subjects may exercise all rights recognised under applicable law.

The exercise of the above rights may be notified to the Data Controller in writing at the following certified email (PEC) address: alexalberghiera@legalmail.it

Data subjects also have the right to object to the processing of their data at any time. This right may be exercised by sending a request to the Data Controller at the following certified email (PEC) address: alexalberghiera@legalmail.it

 

CHANGES TO THE PRIVACY NOTICE

The Data Controller reserves the right to amend, update, add or remove parts of this privacy notice at its discretion and at any time.

Data subjects are therefore responsible for checking periodically for any changes.

The notice will indicate the date of the latest update.

 

Last updated: 16/06/2020