PRIVACY AND COOKIE POLICY PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 OF APRIL 27, 2016 AND COOKIES
This policy is provided pursuant to and for the purposes of Art. 13 of EU Regulation no. 2016/679 of April 27, 2016 (hereinafter also “GDPR”) regarding the protection of natural persons with regard to the processing of personal data. Specifically, Laboratorio Niko Romito S.r.l., as the Data Controller, wishes to inform you that, in compliance with the obligations arising from the GDPR, it is required to provide certain information regarding the methods and purposes of the processing of personal data, which it may obtain following the consultation and use of the website by the user.
1. DATA CONTROLLER
The Data Controller for all personal data collected, processed, and used in relation to the management of the website is the company Laboratorio Niko Romito S.r.l., owner of the "Laboratorio Niko Romito" site and the Laboratorio Niko Romito Shop, with registered office in Via Degli Abruzzi 204 Castel di Sangro (AQ) 67031
Website: https://www.laboratorionikoromito.it
E-mail: info@laboratorionikoromito.it
The data collected on the Laboratorio Niko Romito Shop are processed by the data processor, which uses the data solely for the purpose of carrying out operations related to purchasing procedures and shipment tracking:
Shopify Inc.
151 O’Connor Street
Ground floor,
Ottawa, ON K2P 2L8
Canada
Data processed: personal data and Usage Data.
Place of processing: Ireland (Shopify Ltd) and the United States – Privacy Policy
2. DATA PROCESSED AND PURPOSES OF PROCESSING
2.1 TYPE OF DATA PROCESSED:
- a) Data provided voluntarily by the user.
In the optional, explicit and voluntary use of the e-commerce service and services connected to the Website (such as account registration and newsletter subscription), the following will be acquired:
- Personal data: any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable;
- Sensitive data: only if voluntarily entered by the data subject in notes or accompanying messages;
- Usage Data: information collected automatically through this Website (also by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User who connects to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of the visit (for example, the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, and parameters relating to the user's operating system and IT environment.
- All content voluntarily entered by the user will be visible to the Data Controller and its appointees.
The personal data of the Data Subject, collected and recorded to access e-commerce and newsletter services, will be processed in a strictly confidential manner by the Controller and by those appointed by them, and may be used solely for the purposes indicated above and for statistical purposes in an aggregated form or in such a way as to make them anonymous.
- b) Navigation data: the computer systems and software procedures used to operate the e-commerce service acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical cybercrimes against the e-commerce service and the Controller only at the request of the competent supervisory authorities.
2.2 PURPOSES OF PROCESSING.
2.2 a) Personal data will be processed for the correct execution of the e-commerce platform and the operations requested by the data subjects. The personal data collected are processed in order to allow the use of the online purchasing service. Such data may also be processed for the fulfillment of all obligations imposed by law (such as, by way of example and not limitation: tax purposes, anti-money laundering purposes L. 231/07 and subsequent amendments).
2.2 b) Personal data, and specifically e-mail address and mobile phone number, will be processed only with your specific and distinct consent (Arts. 23 and 130 of the Privacy Code and Art. 7 of the GDPR), for the following Marketing Purposes:
- sending you newsletters, commercial communications and/or advertising material on products or services offered by the Controller and detecting the level of satisfaction with the quality of the services;
- sending you marketing SMS containing commercial communications and offers on products or services offered by the Controller;
- identification, including through electronic processing of consumption behaviors and habits, in order to improve the services and products offered, satisfy specific needs, and target commercial proposals of interest.
It is specified that the personal data processed for direct marketing purposes are: name, surname, e-mail, telephone number. In the event that the data subject has given their consent at the time of subscription to the newsletter or SMS marketing, or expresses it subsequently and until the revocation of the same, the personal data may be processed by the Controller also for direct marketing purposes, i.e., for sending informative, advertising and/or promotional e-mails, sending SMS also of an informative, advertising and/or promotional nature, and, more generally, for sending commercial communications. This processing will be carried out via automated contact methods, specifically through e-mail and SMS (where consent has been provided).
2.3 The Controller retains the right to process the aforementioned data in an anonymous and aggregated form, in compliance with the measures prescribed by the EU Regulation and the Guidelines of the Privacy Guarantor and by virtue of the specific exemption from consent provided by said Authority, for analyses and electronic processing (for example, the classification of the entire class of users into homogeneous categories by levels of service, consumption, spending, etc.) aimed at periodically monitoring the development and economic performance of Laboratorio Niko Romito SRL's activities for the purposes of improving services and optimizing the e-commerce service.
2.4 The data acquired to make payment via PayPal will be processed by PayPal (Europe) s.à.r.l. et Cie, S.C.A., 22-24-Boulevard Royal l 2449, Luxembourg. We remind you, in fact, that Laboratorio Niko Romito SRL does not process your data necessary to make the payment but exclusively receives notification of the payment made from the Data Controller PayPal.2.5 Regarding the disabling of cookies, Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it
3. LEGAL BASIS FOR PROCESSING
3.1 The legal basis for the processing of the personal data indicated above is:
- regarding point 2.1 letter a), Types of data processed, the need to perform the services requested by the User who makes a purchase through the e-commerce service, and compliance with legal obligations regarding invoicing;
- regarding point 2.1 letter b), Types of data processed, the need to allow navigation on the site;
- regarding point 2.2 letter a), Purposes of processing, compliance with legal obligations and the need to perform the services provided by the Data Controller. Therefore, the provision of data is mandatory and any failure to provide it could result in the non-execution or suspension, or even the interruption, of the services offered;
- regarding point 2.2 letter b), Purposes of Processing, the legitimate interest of the Data Controller.
3.2 Regarding the disabling of cookies, Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it
4. PROCESSING METHODS
Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it
5. DATA RETENTION PERIOD
5.1 Data necessary for the provision of the service will be kept by the Controller for the time necessary to provide the services rendered or until the service itself is completed by the Controller. The Controller may also retain the user's personal information even after the provision of the services if this retention is reasonably necessary to comply with legal and tax obligations, meet regulatory requirements, resolve disputes between users, prevent fraud and abuse, or enforce this privacy policy. Except in cases where data retention is required to fulfill tax and/or legal purposes, in other cases the data will be stored for a maximum period of 24 months from the submission of the order.
5.2 Navigation data: will be kept for the technical time necessary for the fulfillment of the functions for which they were collected and in any case for a maximum period of 6 months. The Data Controller will keep the e-mail address for sending the newsletter until the revocation of consent by the data subject,
5.3 In both cases described, upon the relative expiration, such data will be automatically deleted or made anonymous in a permanent and non-reversible manner.
6. COOKIES
Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it
7. COMMUNICATION OF DATA - RECIPIENTS AND CATEGORIES OF RECIPIENTS
Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it
8. RIGHTS OF THE DATA SUBJECT
8.1 In your capacity as a data subject pursuant to Art. 13 and with reference to Art. 15 et seq. of the GDPR, you have the right:
- to access, rectify, delete, limit, and oppose the processing of data;
- to obtain without hindrance from the data controller the data in a structured, commonly used and machine-readable format to transmit them to another data controller;
- to revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation.
8.2 In this regard, please be informed that the deadline for responding to the data subject is, for all rights, one month from receipt of the request, extendable up to three months in cases of particular complexity.
8.3 The exercise of the aforementioned rights can be carried out by written communication to be sent via e-mail to the address: laboratorionikoromito@pecimprese.it or by registered letter with return receipt to the address: Laboratorio Niko Romito SRL, Via Degli Abruzzi 204, Castel di Sangro (AQ) - 67031.
9. COMPLAINT TO THE GUARANTOR AUTHORITY
9.1 The data subject has the right to lodge a complaint with the Data Protection Authority.
9.2 A complaint is the instrument that allows the data subject to contact the Guarantor to complain about a violation of the regulations regarding the protection of personal data pursuant to Art. 77 of the GDPR and to request a verification by the Authority.
9.3 The complaint may be lodged by the Data Subject with the Supervisory Authority of the place where they reside, or in the place where they work, or in the place where the alleged violation occurred.
9.4 The Data Subject also has the right to lodge a judicial appeal before the ordinary Court if they believe that their rights have been violated as a result of processing.