Information on the processing of personal data of visitors and users of the website amarosantoni.com
What is this page for?
If we are going to collect personal data, European Regulation 679/2016 states that we must first inform people. In our business, the protection of your data is paramount; you have placed your trust in us and we are committed to protecting and using the data provided, in your interest and in a transparent manner. In this privacy policy we describe how we collect and manage your personal data; we try to do this in the simplest, clearest and most understandable way; however, we are available to answer any doubts or questions you may have.
Recipients of the service
The use of this website is intended exclusively for persons over 18 years of age; persons under 18 years of age may not register on the site, purchase products or use the services offered.
Legal bases for processing
We will process your personal data, acquired to the minimum necessary extent, in a legitimate manner, based on some of the legal bases provided for by current privacy legislation
(a) to fulfil contractual or pre-contractual obligations, e.g. when we follow up your requests, to make the purchase of our products, etc.
b) with your consent, e.g. when you browse our site, subscribe to our newsletter, accept the use of third-party cookies, etc.
c) for legal obligations, e.g. when we have to comply with regulations or receive requests from competent authorities, etc.
d) for our legitimate interest, e.g. when we adopt tools, software, services and information platforms, including those of third parties, to make advanced functionalities available and/or make the portal work properly, or to ensure its security, etc.
Purposes of processing
Your personal data will be processed for the following purposes:
Finalità | Base giuridica |
---|---|
1. following up your request by telephone, mail, e-mail, Skype, etc; 2. registering on the site to purchase products and use services 3. receive quotations, contracts, invoices, etc.; |
fulfilment of obligations contractual and/or pre-contractual obligations |
4. browse the site; 5. use our social network channels; 6. send you newsletters, information, promotional offers and/or special offers relating to our products; 7. carry out market research on site user and/or customer satisfaction 8. propose after-sales services, such as new products, recipes or cocktails 9. customise content and advertisements, collect and analyse behaviour during browsing in order to improve usability, content and user experience; |
Your consent |
10. to fulfil obligations provided for by law, regulation, Community legislation or by order of the Authority (such as anti-money laundering); |
legal obligations |
11. make the information systems work as well as possible, analyse traffic and functions of the site, implement the necessary security measures and prevent unlawful activities; 12. to exercise the Controller’s rights, such as, for example, the right of defence in court. |
legitimate interest of the holder |
Provision of data
The provision of your personal data, for the purposes indicated in points 1-3 is necessary; without it we will not be able to carry out the related activities.
Your consent, for the purposes indicated in points 4-9 is optional; without it we will not be able to carry out the related activities and the use of the services and/or the site may be partial or impossible; we inform you that your consent may be subsequently modified or revoked, simply and immediately, as indicated at the end of the page.
Processing methods and security measures
We process your data lawfully and correctly, taking appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out mainly by means of computer and/or telematic tools, adopting appropriate organisational methods and logics strictly related to the stated purposes.
Access to personal data
Your data may be made accessible
– to our employees or collaborators, specially appointed, trained and empowered;
– to other external parties who, after being appointed as our data processors, carry out outsourced processing activities necessary to achieve the relevant purposes;
– to law enforcement agencies and other state agencies, should we receive requests to do so.
Your personal data may be disclosed to companies within our group, solely for the purposes indicated in this notice, and will not be disseminated or transferred to third parties.
Place of processing
Your personal data will be processed, by the Data Controller or by the Data Processors, within the European Union; should it be necessary, for technical and/or operational reasons, to use subjects located outside the European Union, we will take the necessary precautions in order to obtain the same level of protection guaranteed by EU Regulation 679/2016; the web servers supporting our sites are provided by Aruba Business S.r.l., with registered office in Ferrara (FE), Via Gulinelli n. 21/A. We use the services provided by Aruba Business S.r.l., with registered office in Ferrara (FE), Via Gulinelli n. 21/A, while we use Mailchimp to send newsletters.
Period of retention
Your personal data will be retained for the minimum period necessary to achieve the purposes for which they are collected, without prejudice to any further retention period that is (or may subsequently be) imposed by law. In relation only to data collected on the basis of optional consent, it will be kept for a period not exceeding that necessary to achieve the relevant purposes, or until consent is withdrawn.
Your rights
EU Regulation 679/2016 grants you the rights set out in Articles 15 et seq., in particular you have the right to obtain
– confirmation as to whether or not personal data concerning you are being processed and to obtain access to the data and the following information (purpose of processing, categories of personal data, recipients and/or categories of recipients to whom the data have been and/or will be disclosed, storage period);
– the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data, also by providing a supplementary declaration
– the cancellation of personal data, if the conditions are met;
– the restriction of processing, in the cases provided for;
– the portability of the data concerning you, if the conditions are met;
– objection to the processing of personal data for marketing and profiling purposes at any time, for reasons related to your particular situation. These rights may be exercised, in a simple and immediate manner, by sending an e-mail to the appropriate address privacy@gabriellosantoni.it.
In any event, pursuant to Article 77 of the Regulation, you are granted the right to lodge a complaint with the national supervisory authority if you consider that your personal data is being processed in breach of the law.
Data Controller
The Data Controller is Gabriello Santoni s.r.l. with registered office in Strada delle Cavine e Valli 36B, 53042 Chianciano Terme (Siena)