Information on the processing of personal data pursuant to Legislative Decree 196/2003 as amended by the Legislative Decree of 10 August 2018, n. 101 ("Privacy Code") and art. 13 of EU Regulation No 2016/679 ("GDPR 2016/679"), laying down provisions to protect individuals and other subjects with respect to the processing of personal data.
1. Nature of the data processed and purposes of the processing
In order to allow registration on the www.shop.sacchitartufi.it Site (the "Site") and to purchase the products for sale on the same, sacchi tartufi International s.r.l ("Sacchi Tartufi"), as the data controller, must be able to process the user's personal data.
When registering on the Site, the user's name, surname and e-mail address will be requested. If the user makes a purchase on the Www.shop.sacchitartufi.it, postal address, telephone number, possible VAT number will also be requested. Sensitive or judicial data of users are not subject to processing.
The user's personal data will be used exclusively for purposes connected and strictly functional to the registration on the www.shop.sacchitartufi.it Site and the conclusion of online contracts of sale related to the products offered for sale on the Site itself. As well as to carry out related operations of shipping products, management of any return operations and related administrative, accounting and tax obligations.
The processing of data is also necessary for the pursuit of the legitimate interest of the data controller. This happens when the data controller processes the user's data in order to: prevent computer fraud, send "service" messages to the user such as emails containing invoices or notifications regarding payment and respond to requests sent by the user through the appropriate section "Contact us". The processing of your data is necessary to satisfy the legitimate interests of the data controller assessed as not prevalent with respect to the interests or fundamental rights and freedoms of the user.
The data collected could also be processed in the context of any corporate events (sale of the company or business branches), due diligence, in case of defense of a right in court and in relation to the related prodromic activities. These processings will be carried out on the basis of the legitimate interests of the owner in the continuation of his business activities and for the protection of his rights.
For these purposes, the processing of the personal data listed above is mandatory and does not require the prior consent of the data subject, as it is necessary for the fulfillment of the obligations deriving from the online purchase made by the user. Any refusal by the user to provide the data in question will make it impossible to conclude the contract of online sale.
In the event that the user intends to make the payment of the chosen product by credit card, Sacchi Tartufi will request the entry of the 16 credit card numbers and the expiration date of the same. The data will be immediately transferred to the acquirer, PayPal, for the execution of the payment order, in encrypted format and according to security requirements. After purchase, Sacchi Tartufi will not keep your credit card details.
2. Commercial communications
With the consent of the data subject, Sacchi Tartufi may use the e-mail address provided by the user when registering on the Site to send periodic commercial information relating to the services or products of Sacchi Tartufi and/or of commercial partners of the same.
The user can at any time object to such sending by selecting the link present in each advertising communication ("Undescript", placed in the footer) or he can change the contact settings from the Site by clicking on "My Account > My Area", within the section "Your data" and removing or pining the check mark on the box "Enter me in the mailing list", or write to email@example.com.
The lack of consent of the data subject, in this case, will not result in any consequences on the fulfillment of the obligations deriving from the online purchase made by the same or on the possibility of registering on the Site or making purchases on the Site itself.
In addition, even in the absence of registration on the Site, the user may express his consent to the sending of commercial communications by e-mail, by Sacchi Tartufi, by registering for the mailing list of Sacchi Tartufi, through the insertion of his e-mail address and/or name and / or surname in the appropriate boxes that may from time to time be present on the home page of the Site or on subsequent pages. The user will then receive a double opt-in email containing the information of the request to subscribe to the newsletter in which he will again be asked to confirm the intention to subscribe.
By entering the aforementioned data, the user authorizes Sacchi Tartufi to send, to the e-mail address thus provided, commercial communications related to offers from Truffle Bags and/or third parties, as appropriate.
Failure to provide the personal data indicated above for the purposes described in this paragraph will make it impossible for the user to receive the information and advertising material described above.
The user can always revoke the consent previously provided and oppose the sending of advertising material by selecting the link present in each advertising communication ("Undescript", placed in the footer) or write to firstname.lastname@example.org
3. How to treat
The data are collected electronically, directly to the user and processed through registration, consultation, communication, storage, deletion operations, also carried out with the help of electronic tools, ensuring the use of appropriate measures for the security of the data processed and ensuring the confidentiality of the same.
The user's data, stored electronically, is stored and stored on a server located in France. In particular, Sacchi Tartufi declares that the data recorded on the server is protected against the risk of intrusion and unauthorized access and that it has also taken appropriate security measures to ensure the integrity and availability of data as well as the protection of areas and premises relevant for their custody and accessibility.
4. Data communication
For the purposes referred to in point 1 and 2, the user's personal data will be processed by sacchi tartufi employees or collaborators as data controllers or data controllers.
Sacchi Tartufi may communicate the user's data to specific subjects, appointed by the owner of the provision of instrumental services or necessary for the execution of the obligations related to registration, purchase on the Site, or execution of the e-mailing service referred to in point 2 above, within the limits and in accordance with the instructions given, such as, but not limited to, the carriers responsible for the delivery of the products purchased , company or internet providers in charge of sending information and advertising material on behalf of Sacchi Tartufi, PayPal, which manages the online payment system for all payments made by credit card, company or consultants possibly in charge of the installation, maintenance and updating and, in general, the management of the hardware and software of Sacchi Tartufi, legal and tax consultants of the owner.
A complete list of subjects or categories of subjects to whom personal data can be communicated is available at Sacchi Tartufi, writing to email@example.com.
5. Data retention period
Personal data is processed and stored for as long as is required by the purposes for which it was collected. Therefore:
- Personal data collected for purposes related to the execution of an online purchase and sale contract between the owner and the user will be kept until the execution of such contract is completed and the periods of limitation of the related rights provided for by law will be completed.
- Personal data collected for purposes attributable to the legitimate interest of the data controller will be stored until this interest is satisfied. You may obtain further information about the legitimate interest pursued by the holder in the relevant sections of this document or by contacting the holder at the e-mail address firstname.lastname@example.org
- The personal data collected on the basis of your consent will be stored for five years from the last positive action that confirms the user's interest in such processing, unless such consent is revoked.
In addition, the data controller may be obliged to keep personal data for a longer period in compliance with a legal obligation or on the orders of an authority. At the end of the retention period, personal data will be deleted or aggregated or anonymized in order to prevent their unique reference to the user. Therefore, at the end of this period, all rights in the field of the protection of personal data can no longer be exercised.
6. Rights of the data subject
In accordance with Regulation (EU) 2016/679, you have the right to obtain, at all times, confirmation of the existence of the data concerning you and the purposes for which they are used.
The user also has the right to request access to his data, updating or rectification, obtaining the limitation of the processing, erasing or blocking the data.
You have the right to object, in whole or in part: (i) for legitimate reasons, to the processing of data concerning you, even if they are relevant to the purpose of collection; (ii) the processing of data concerning him for the purpose of sending advertising or direct sales material or for the purpose of carrying out market research or commercial communication.
To exercise the above rights, as well as to receive information about the subjects where the data is stored or to which the data are communicated or about the subjects who, as managers or in charge, may become aware of your data, the user can contact Sacchi Tartufi International s.r.l., via Avogadro, 19b - 61032 (PU); tel. 0721 830733; email: email@example.com