Information on the processing of personal data pursuant to art. 13 of the Legislative Decree n. 196/2003 and EU Regulation 679/2016
B.Z. SRL, as Data Controller pursuant to Legislative Decree n. 196/2003 and EU Regulation 679/2016 – considers privacy and the protection of personal data one of the main objectives of its business.
It is intended for the site https://www.zanieri.com and is an integral part of the Site and the services we offer;
It is made pursuant to art. 13 of the Legislative Decree. n. n. 196/2003, and of EU Regulation 679/2016, to those who interact with the web services of the site, both through simple consultation and through the use of specific services made available through the site (by way of example, the purchase of products, filling in the online forms to request information or to subscribe to the Newsletter service).
The processing of your personal data will be based on principles of correctness, lawfulness, transparency, purpose limitation and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Regulation. Your personal data will therefore be processed in accordance with the legislative provisions of the Regulation and the confidentiality obligations set forth therein.
By processing of personal data we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
HOLDER OF THE TREATMENT
The data controller is B.Z. SRL based in San Mariano di Corciano (PG) – Italy, Via Giolitti 13, tax code and VAT number 03224890545.
The Data Protection Officer of B.Z. SRL can be contacted at the headquarters of the Data Controller at the address indicated above and / or by email at the address: email@example.com
PERSONAL DATA OBJECT OF TREATMENT
We inform you that the personal data being processed may consist of an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of your physical, physiological, psychological, economic identity. , cultural or social suitable to make the interested party identified or identifiable, depending on the type of services requested.
Below we list the processing of personal data through this site:
- Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URL notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site to check its correct functioning, to identify anomalies and / or abuses; in any case they are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties.
- Data voluntarily provided by the user
- Third party data voluntarily provided by the user
In using the services of the Site, the processing of personal data of third parties may occur, which you have communicated to B.Z. SRL such as, for example, in the case of the purchase of our goods to be sent to third parties. With respect to this hypothesis, you act as an independent data controller, assuming all the obligations and responsibilities of the law. In this sense, you grant the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from treatment, etc. that should reach the Data Controller from third parties, whose personal data have been processed through its use of the Site services in violation of the applicable rules on the protection of personal data. IIn any case, if you provide or otherwise process personal data of third parties in the use of the Site, you guarantee from now – assuming all related responsibility – that this particular hypothesis of treatment is based, where necessary, on the previous acquisition – by Yours – of the consent of the third party to the processing of information concerning him.
- Cookies and other tracking technologies
PURPOSE OF THE TREATMENT
Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:
· Allow navigation of the Site and the provision of the services made available there by the Data Controller, including the management of the Site’s security, as well as contractual and administrative accounting relations;
· Find specific requests addressed to the Data Controller, including requests for Customer Assistance sent by filling in the “Contact” form;
Fulfill any obligations established by applicable laws, regulations or community legislation, or satisfy requests from the authorities;
· Carry out direct marketing via e-mail for products similar to those purchased by you, pursuant to art. 130, paragraph 4 of the Code, unless your express refusal to receive such communications, which you may express when registering on the Site or on subsequent occasions;
Send you promotional and marketing communications, including the sending of newsletters and market research, through automated tools (sms, mms, email, push notifications, fax) and not (paper mail, telephone with operator); it is specified that the Data Controller collects a single consent for the marketing purposes described here, pursuant to the General Provision of the Guarantor for the Protection of Personal Data “Guidelines on promotional activities and the fight against spam” of 4 July 2013; if, in any case, you wish to oppose the processing of your data for marketing purposes carried out with the means indicated here, you can do so at any time by contacting the Data Controller at the addresses indicated in the Contact section of this information, without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
Analyze your preferences, habits and consumption choices, in order to be able to send you personalized commercial communications and proposals as well as, to carry out general analyzes for purposes of strategic orientation and commercial intelligence;
Communicate your personal data to other companies of the B.Z. SRL for sending their promotional and marketing communications, including the sending of newsletters and market research, through automated tools (sms, mms, emails, push notifications, faxes).
For statistical purposes, without it being possible to trace your identity.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The legal basis for the processing of personal data for the aforementioned purposes is art. 6 (1) (b) of the Regulation ([…] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same), as the treatments are necessary to the provision of services. IThe provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The purpose of fulfilling any obligations under the laws in force represents a legitimate processing of personal data pursuant to art. 6 (1) (c) of the Regulation ([…] the processing is necessary to fulfill a legal obligation to which the data controller is subject). In fact, once the personal data has been provided, the processing is indeed necessary to fulfill legal obligations to which the Data Controller is subject.
The treatments performed for the purposes of marketing, profiling and communication to third-party companies of the B.Z. SRL are based on the release of your consent pursuant to art. 6 (1) (a) ([…] the interested party has given consent to the processing of their personal data for one or more specific purposes) and art. 222 (2) (c) of the Regulation. The provision of your personal data for these purposes is therefore entirely optional and does not affect the use of the services. If you wish to object to the processing of your data for marketing, profiling or communication purposes, you can do so at any time by contacting the Data Controller at the addresses indicated in the “Contact” section of this statement. With reference to the purpose of direct marketing via e-mail, it is specified that if the Data Controller uses, for the purpose of direct sales of its products or services, the e-mail coordinates provided by the interested party in the context of the sale of a product, may, pursuant to art. 1130, paragraph 4 of the Code, do not request the consent of the interested party, provided that the products are similar to those being sold and the interested party, adequately informed, does not refuse such use, initially or on the occasion of subsequent communications. It is also specified that the processing for statistical purposes is not performed on personal data and therefore can be freely carried out by the Data Controller.
RECIPIENTS OF PERSONAL DATA
Your personal data may be shared with:
· Subjects who typically act as data processors pursuant to art. 29 of the Code and 28 of the Regulation, namely: i) people, companies or professional firms that provide assistance and consultancy to B.Z. SRL in accounting, administrative, legal, tax and financial matters; ii) subjects delegated to carry out technical maintenance activities; iii) credit institutions, insurance companies and brokers;
Subjects, bodies or authorities to whom it is mandatory to communicate your personal data by virtue of the provisions of the law or orders of the authorities;
· Persons authorized by the Data Controller, pursuant to art. 30 of the Code and 29 of the Regulation, to the processing of personal data necessary to carry out activities strictly related to the provision of services, which are committed to confidentiality or have an adequate legal obligation of confidentiality;
These subjects are, hereafter, collectively defined as “Recipients”. The complete list of data processors is available by sending a written request to the Data Controller at the addresses indicated in the “Contacts” section of this statement.
TRANSFER OF PERSONAL DATA
Some of your personal data are shared with Recipients who could be found outside the European Economic Area. The Data Controller ensures that your personal data are processed by the Recipients in compliance with art. 43 and 44 of the Code, as well as art. 44 – 49 of the Regulation. The transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. More information is available by sending a written request to the Data Controller at the address indicated in the “Contact” section of this statement.
STORAGE OF PERSONAL DATA
Personal data processed for the aforementioned purposes will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Data Controller will keep the personal data for the period of time envisaged and allowed by Italian law to protect its interests (Article 2946 of the Italian Civil Code and subsequent amendments).
Personal data processed for the purposes described above will be kept until the time required by the specific obligation or applicable law.
For the purposes of carrying out direct marketing, your personal data will be processed until you have opposed the processing.
For the purposes of sending you communications and analyzing your preferences, your personal data will instead be processed for a maximum period of seven years, starting from their registration, in accordance with the provisions of the provision issued by the Guarantor for the protection of personal data following request for preliminary verification pursuant to art. 17 of the Code presented by the Data Controller. Further information regarding the data retention period and the criteria used to determine this period can be requested in writing from the Data Controller via the contact details indicated in the “Contacts” section of this statement. In any case, the possibility is reserved for the Data Controller to keep your personal data for the period of time envisaged and permitted by Italian law to protect their interests (Article 2947 (1) (3) of the Italian Civil Code).
RIGHTS OF THE INTERESTED PARTY
Pursuant to art. 7 of the Code, you have the right at any time to obtain confirmation of the existence or otherwise of your personal data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification; has the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Starting from 25 May 2018 you also have the right to request access to your data, to oppose the processing, to request the limitation of processing in the cases provided for by art. 18 of the Regulation, where technically possible, as well as to obtain the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the Regulation.
Requests must be sent in writing to the Data Controller at the addresses indicated in the “Contacts” section of this statement.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.
To exercise the above rights or for any other request, you can write to the Data Controller at the physical address indicated above, or preferably to the email address firstname.lastname@example.org,inserting the words “Request for privacy rights” in the subject of the communication.