Privacy Policy

PRIVACY AND COOKIE POLICY PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679 OF APRIL 27, 2016


This policy is provided pursuant to and for the purposes of Art. 13 of EU Regulation No. 2016/679 of April 27, 2016 (hereinafter also the “GDPR”) regarding the protection of natural persons with regard to the processing of personal data. Specifically, Laboratorio Niko Romito S.r.l., as the Data Controller, wishes to inform you that, in compliance with the obligations deriving from the GDPR, it is required to provide certain information regarding the methods and purposes of the processing of personal data that it may come into possession of following the user's consultation and use of the website.

1. DATA CONTROLLER

The Data Controller for all personal data collected, processed, and used in relation to the management of the website is the company Laboratorio Niko Romito S.r.l., owner of the “Laboratorio Niko Romito” website and the Laboratorio Niko Romito Shop, with registered office at Strada Statale 17 km 149+790 SNC Castel di Sangro (AQ) 67031

Website: https://www.laboratorionikoromito.it 

E-mail: info@laboratorionikoromito.it 

The data collected on the Laboratorio Niko Romito Shop are processed by the data processor, which uses the data solely for the purpose of carrying out the operations underlying the purchase and shipment tracking procedures:

Shopify Inc.

151 O’Connor Street 
Ground floor, 
Ottawa, ON K2P 2L8 
Canada

Data processed: personal data and Usage Data.

Place of processing: Ireland (Shopify Ltd) and the United States – Privacy Policy

2. DATA PROCESSED AND PURPOSES OF PROCESSING

2.1 TYPE OF DATA PROCESSED:

  1. a) Data provided voluntarily by the user.

During the optional, explicit, and voluntary use of the e-commerce service and the services connected to the Website (such as account registration and newsletter subscription), the following will be acquired:

- Personal data: any information that, directly or indirectly, including in connection with any other information, including a personal identification number, makes a natural person identified or identifiable;

- Sensitive data: only if voluntarily provided by the data subject in notes or an accompanying message;

- Usage Data: information collected automatically through this Website (also by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User connecting to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (for example, the time spent on each page), and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, and parameters relating to the User's operating system and IT environment.

- All content voluntarily entered by the user will be visible to the Data Controller and its appointees.

The personal data of the Data Subject, collected and recorded to access e-commerce and newsletter services, will be processed in a strictly confidential manner by the Controller and by persons appointed by them, and may be used solely for the purposes indicated above and for statistical purposes in an aggregate form or in a manner that renders them anonymous.

  1. b) Navigation data: the IT systems and software procedures used to operate the e-commerce service acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters related to the user's operating system and IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct functioning. The data could be used to ascertain liability in the event of hypothetical cybercrimes against the e-commerce service and the Data Controller, only at the request of the relevant supervisory bodies.


2.2 PURPOSES OF PROCESSING.

2.2 a) Personal data will be processed for the proper execution of the e-commerce platform and the operations requested by the data subjects. The personal data collected are processed in order to allow the use of the online purchasing service. Such data may also be processed for the fulfillment of all obligations imposed by law (such as, by way of example and not limitation: tax purposes, anti-money laundering purposes L. 231/07 and subsequent amendments).

2.2 b) Personal data, specifically your e-mail address and mobile phone number, will be processed only subject to your specific and distinct consent (Art. 23 and 130 of the Privacy Code and Art. 7 of the GDPR), for the following Marketing Purposes:

  • to send you newsletters, commercial communications and/or advertising material regarding products or services offered by the Controller and to measure customer satisfaction regarding the quality of services;
  • to send you marketing SMS messages containing commercial communications and offers on products or services offered by the Controller;
  • identification, including through electronic processing of consumption behaviors and habits, in order to improve the services and products offered, meet specific needs, and target commercial proposals of interest.

Please note that the personal data processed for direct marketing purposes are: name, surname, e-mail address, telephone number. In the event that the data subject has expressed their consent at the time of subscription to the newsletter or SMS marketing, or expresses it subsequently and until such consent is revoked, the personal data may also be processed by the Controller for direct marketing purposes, i.e., for sending informative, advertising, and/or promotional e-mails, for sending similar informative, advertising, and/or promotional SMS messages, and, more generally, for sending commercial communications. Such processing will be carried out using automated contact methods, specifically via e-mail and SMS (where consent has been given).

2.3 The Controller retains the right to process the aforementioned data in an anonymous and aggregate form, in compliance with the measures prescribed by the EU Regulation and the guidelines of the Privacy Guarantor and by virtue of the specific exemption from consent provided by the same Authority, for analysis and electronic processing (for example, the classification of the entire class of users into homogeneous categories by service levels, consumption, spending, etc.) aimed at periodically monitoring the development and economic performance of Spazio S.r.l.'s activities for the purpose of improving services and optimizing the e-commerce service.

2.4 The data acquired to make payments via PayPal will be processed by PayPal (Europe) s.à.r.l. et Cie, S.C.A., 22-24-Boulevard Royal, L-2449, Luxembourg. We remind you, in fact, that Spazio S.r.l. does not process your data necessary to make the payment, but only receives notification of the payment made from the Data Controller, PayPal. 2.5 Regarding the disabling of cookies, Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it

3. LEGAL BASIS FOR PROCESSING

3.1 The legal basis for the processing of the personal data indicated above is:

- regarding point 2.1 letter a), Types of data processed, the necessity to perform the services requested by the User making a purchase through the e-commerce service, and compliance with legal obligations related to invoicing;

- regarding point 2.1 letter b), Types of data processed, the necessity to allow navigation on the site;

- regarding point 2.2 letter a), Purposes of processing, compliance with legal obligations and the necessity to perform the services provided by the Data Controller. Therefore, the provision of data is mandatory, and any failure to provide it may result in the non-execution or suspension, or even the interruption, of the services offered;

- regarding point 2.2 letter b), Purposes of Processing, the legitimate interest of the Data Controller.

3.2 Regarding the disabling of cookies, Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it

4. PROCESSING METHODS

Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it

5. DATA RETENTION PERIOD

5.1 The data necessary for the provision of the service will be kept by the Controller for the time necessary to provide the services rendered or until the service itself is completed by the Controller. The Controller may also retain the user's personal information even after the provision of the services if such retention is reasonably necessary to comply with legal and tax obligations, meet regulatory requirements, resolve disputes between users, prevent fraud and abuse, or enforce this privacy policy. Except in cases where data retention is required to fulfill tax and/or legal purposes, in other cases the data will be kept for a maximum period of 24 months from the placement of the order.

5.2 Navigation data: will be kept for the technical time necessary for the fulfillment of the functions for which they were collected and in any case for a maximum period of 6 months. The Data Controller will retain the e-mail address for sending the newsletter until the data subject withdraws their consent.

5.3 In both cases described, upon the relative expiry, such data will be automatically deleted or rendered anonymous in a permanent and irreversible manner.

6. COOKIES

Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it

7. COMMUNICATION OF DATA - RECIPIENTS AND CATEGORIES OF RECIPIENTS

Please refer to the privacy and cookie policy of the site www.laboratorionikoromito.it


8. RIGHTS OF THE DATA SUBJECT

8.1 In your capacity as a data subject pursuant to Art. 13 and with reference to Art. 15 et seq. of the GDPR, you have the right:

- to access, rectify, erase, restrict, and object to the processing of data;

- to obtain from the Data Controller without hindrance the data in a structured, commonly used, and machine-readable format to transmit it to another data controller;

- to withdraw consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal.

8.2 In this regard, please be informed that the deadline for responding to the data subject for all rights is one month from receipt of the request, extendable up to three months in cases of particular complexity.

8.3 The exercise of the aforementioned rights can be carried out by written communication to be sent via e-mail to the address: spaziosrl@casellapec.com or by registered letter with return receipt to the address: Spazio S.r.l., Contrada Santa Liberata snc, Castel di Sangro (AQ) - 67031.

9. COMPLAINT TO THE GUARANTOR AUTHORITY

9.1 The data subject has the right to lodge a complaint with the Data Protection Authority.

9.2 A complaint is the instrument that allows the data subject to turn to the Guarantor to report a violation of personal data protection rules pursuant to Art. 77 of the GDPR and to request a verification by the Authority.

9.3 The complaint may be lodged by the Data Subject to the Supervisory Authority of the place where they reside, or in the place where they work, or in the place where the alleged violation occurred.

9.4 The Data Subject also has the right to bring a judicial appeal before the ordinary Court if they believe that their rights have been violated as a result of processing.