Datenschutzerklärung

PRIVACY AND COOKIES POLICY PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 OF 27 APRIL 2016 AND COOKIES

This privacy policy is provided pursuant to and for the purposes of Art. 13 of EU Regulation no. 2016/679 of 27 April 2016 (hereinafter also referred to as the "GDPR") concerning the protection of natural persons with regard to the processing of personal data. Specifically, Laboratorio Niko Romito S.r.l., as Data Controller, wishes to inform you that, in accordance with the obligations under the GDPR, it is required to provide certain information regarding the methods and purposes of the processing of personal data that it may obtain following the consultation and use of the website by the user.

1. DATA CONTROLLER

The Data Controller for all personal data collected, processed, and used in connection with the management of the website is Laboratorio Niko Romito S.r.l., owner of the website "Laboratorio Niko Romito" and the Laboratorio Niko Romito Shop, with registered office at Via Degli Abruzzi 204, Castel di Sangro (AQ) 67031, Italy.

Website: https://www.laboratorionikoromito.it
Email: info@laboratorionikoromito.it

The data collected on the Laboratorio Niko Romito Shop is processed by the Data Processor, which uses the data solely to execute the operations underlying purchase procedures and shipment tracking:

Shopify Inc.
151 O’Connor Street
Ground floor,
Ottawa, ON K2P 2L8
Canada

Data processed: Personal data and Usage Data.
Place of processing: Ireland (Shopify Ltd) and the United States – Privacy Policy.

2. DATA PROCESSED AND PURPOSES OF THE PROCESSING

2.1 TYPES OF DATA PROCESSED:

a) Data provided voluntarily by the user.

Through the optional, explicit, and voluntary use of the e-commerce service and related services on the Website (such as account registration and newsletter subscription), the following will be collected:

  • Personal Data: any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable;
  • Sensitive Data: only if voluntarily entered by the data subject in the notes or accompanying message;
  • Usage Data: information collected automatically through this Website (including by third-party applications integrated into this Website), including: IP addresses or domain names of the computers utilized by the User connecting to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the visitor, the various time details per visit (e.g., the time spent on each page), and details concerning the path followed within the Application, with particular reference to the sequence of pages visited, and other parameters regarding the device operating system and IT environment of the User.
  • All content voluntarily entered by the user will be visible to the Data Controller and its authorized staff.

The personal data of the Data Subject, collected and registered to access e-commerce and newsletter services, will be processed in strict confidence by the Data Controller and persons authorized by the same, and may be used solely for the purposes indicated above and for statistical purposes in aggregate form or in a manner that renders them anonymous.

b) Browsing data: computer systems and software procedures used to operate the e-commerce service acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful outcome, error, etc.), and other parameters related to the user's operating system and computer environment.

This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning. The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the e-commerce service and the Data Controller, only upon request by the competent supervisory authorities.

2.2 PURPOSES OF THE PROCESSING

2.2 a) Personal data will be processed for the correct execution of the e-commerce platform and the operations requested by the data subjects. The personal data collected is processed to enable the use of the online purchasing service. Such data may also be processed to fulfill all obligations required by law (such as, by way of example but not limited to: tax purposes, anti-money laundering obligations under Italian Law 231/07 and subsequent amendments and additions).

2.2 b) Personal data, specifically email address and mobile phone number, will be processed only with your specific and distinct consent (Articles 23 and 130 of the Italian Privacy Code and Article 7 of the GDPR), for the following Marketing Purposes:

  • to send you newsletters, commercial communications, and/or advertising material regarding products or services offered by the Data Controller, and to conduct customer satisfaction surveys on the quality of services;
  • to send you marketing text messages (SMS) containing commercial communications and offers on products or services offered by the Data Controller;
  • to identify, including through electronic processing, consumption behaviors and habits in order to improve the services and products offered, meet specific needs, and target commercial proposals of interest.

It is specified that the personal data processed for direct marketing purposes are: name, surname, email address, phone number. If the data subject has granted consent upon subscribing to the newsletter or SMS marketing, or provides it at a later date, until such consent is revoked, personal data may also be processed by the Data Controller for direct marketing purposes—namely, for sending informational, promotional, and advertising emails, informational, promotional, and advertising SMS, and more generally, commercial communications. Such processing will be carried out via automated contact methods, specifically via email and SMS (where consent has been provided).

2.3 The Data Controller reserves the right to process the aforementioned data in anonymous and aggregated form, in compliance with the measures established by the EU Regulation and the Guidelines of the Data Protection Authority, and by virtue of the specific exemption from consent provided by the same Authority, for electronic analyses and processing (e.g., classification of the entire user base into homogeneous categories by service level, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic trend of the activities of Laboratorio Niko Romito SRL, with a view to improving services and optimizing the e-commerce platform.

2.4 Data collected to make payments via PayPal will be processed by PayPal (Europe) s.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Please note that Laboratorio Niko Romito SRL does not process payment data directly, but only receives confirmation of successful payment from PayPal.

2.5 Regarding the disabling of cookies, please refer to the privacy and cookie policy of the website www.laboratorionikoromito.it.

3. LEGAL BASIS FOR PROCESSING

3.1 The legal basis for processing the personal data mentioned above is:

  • regarding section 2.1 letter a) (Types of data processed): the necessity to perform the services requested by the User who completes a purchase via the e-commerce platform, and compliance with statutory invoicing requirements;
  • regarding section 2.1 letter b) (Types of data processed): the necessity to allow website navigation;
  • regarding section 2.2 letter a) (Purposes of processing): compliance with legal obligations and the necessity to execute the services provided by the Data Controller. Therefore, the provision of data is mandatory, and failure to provide it may result in the failure to execute, suspension, or interruption of the services offered;
  • regarding section 2.2 letter b) (Purposes of processing): the legitimate interest of the Data Controller.

3.2 Regarding the disabling of cookies, please refer to the privacy and cookie policy of the website www.laboratorionikoromito.it.

4. PROCESSING METHODS

Please refer to the privacy and cookie policy of the website www.laboratorionikoromito.it.

5. DATA RETENTION PERIOD

5.1 Data necessary for service delivery will be retained by the Data Controller for the time necessary to provide the requested services or until the service itself is completed. The Data Controller may also retain the user's personal information after service provision if reasonably necessary to comply with legal and tax obligations, meet regulatory requirements, resolve disputes between users, prevent fraud and abuse, or enforce this privacy policy. Except where retention is required for legal and/or tax compliance, data will be kept for a maximum period of 24 months from order placement.

5.2 Browsing data: retained for the technical time necessary to fulfill the functions for which it was collected, and in any case for a maximum period of 6 months. The Data Controller will retain the email address for newsletter distribution until consent is withdrawn by the data subject.

5.3 In both cases described, upon expiration of the respective terms, such data will be automatically deleted or permanently and irreversibly anonymized.

6. COOKIES

Please refer to the privacy and cookie policy of the website www.laboratorionikoromito.it.

7. COMMUNICATION OF DATA - RECIPIENTS AND CATEGORIES OF RECIPIENTS

Please refer to the privacy and cookie policy of the website www.laboratorionikoromito.it.

8. RIGHTS OF THE DATA SUBJECT

8.1 In your capacity as a Data Subject pursuant to Art. 13 and with reference to Articles 15 et seq. of the GDPR, you have the right:

  • to access, rectify, delete, restrict, and object to the processing of personal data;
  • to obtain without hindrance from the data controller data in a structured, commonly used, and machine-readable format to transmit them to another controller;
  • to withdraw consent to processing at any time, without prejudice to the lawfulness of the processing based on consent before its withdrawal.

8.2 In this regard, you are informed that the deadline for replying to the data subject is, for all rights, one month from receipt of the request, which may be extended up to three months in particularly complex cases.

8.3 The exercise of these rights may be performed by written communication sent via email to: laboratorionikoromito@pecimprese.it or by registered letter with return receipt to: Laboratorio Niko Romito SRL, Via Degli Abruzzi 204, Castel di Sangro (AQ) - 67031, Italy.

9. COMPLAINT TO THE SUPERVISORY AUTHORITY

9.1 The data subject has the right to lodge a complaint with the Data Protection Supervisory Authority.

9.2 A complaint is the instrument that allows the data subject to contact the Supervisory Authority to report a breach of personal data protection regulations pursuant to Art. 77 of the GDPR and to request an audit by the Authority.

9.3 The complaint may be lodged by the Data Subject with the Supervisory Authority in the place where they habitually reside, work, or where the alleged violation occurred.

9.4 The Data Subject also has the right to bring judicial proceedings before the competent ordinary court if they consider that the rights to which they are entitled have been violated as a result of processing.