INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
Welcome to Spumanti Valdo S.r.l. website (the “Website”).
Pursuant to art. 13 of the Regulations (EU) 2016/679 (hereinafter the “GDPR”), this page provides information on how we process your personal data that we collect when you visit the Website and interact with the website services.
The information is provided only for the Website and possible sub-domains and not for the other websites that can be visited by the User via hypertextual connections or links.
Please read this information carefully before providing your personal details.
1. DATA CONTROLLER
Spumanti Valdo S.r.l., with registered office in Valdobbiadene, Via Foro Boario, 20, e-mail: firstname.lastname@example.org and DIANA E-COMMERCE CORPORATION SRL, with registered office in Torreglia (PD) at via San Daniele n. 137/139, 35038, VAT No. 05097740285, e-mail: email@example.com ("Diana") are joint controllers of personal data for all activities related to the sale of products offered on the Website, such as the order execution and after-sales assistance ( e.g. for returns and complaints). You can know more about the essential content of the agreement pursuant to art. 26 GDPR between Diana and Spumanti Valdo S.r.l. by sending an email to firstname.lastname@example.org.
Spumanti Valdo S.r.l. is also the independent data controller for the purposes of managing the Website and your registration on the Website (i.e. personal account), as well as for marketing and profiling as described in the next paragraph.
Hereinafter, when we use the expression "Joint Controllers", we will be referring jointly to Spumanti Valdo S.r.l. and Diana. Conversely, you will find the reference to Diana or Spumanti Valdo S.r.l. in the event that the information refers to only one of the two data controllers.
2. PERSON IN CHARGE OF THE PERSONAL DATA PROTECTION (DPO)
Diana has appointed a data protection officer (DPO) who a concerned person can contact by writing to email@example.com.
3. CATEGORIES OF COLLECTED PERSONAL DATA
a. Navigation data
Browsing the Website and accessing the related services involve the acquisition of some personal data relating to your browsing, such as, for example, the IP addresses or domain names of the computers you use to connect to the Website, the addresses in notation URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error , etc.) and other parameters relating to the operating system and the IT environment that you use.
b. Personal data that you voluntarily provide to us
Spumanti Valdo S.r.l. and Diana process the personal data that you voluntarily provide to us when you register on the Website, access its services, purchase a product or interact with the customer support service, such as, for example, personal data, contact data, data relating to the purchases and banking data.
4. PURPOSES, LEGAL BASES AND PRESERVATION PERIOD
Your personal data will be processed by Spumanti Valdo S.r.l. as follows:
|#||PURPOSE||LEGAL BASE||PRESERVATION PERIOD|
|A||Registration on the Website* (personal account): to allow you to create your personal account on the Website and to access and use the related services||Execution of the contract or pre-contractual measures you have requested||Until your request for cancellation of the account or the termination of the service|
|B||New product availability update*: acknowledgment of your request for the update on the availability of the requested product on the Website||Execution of the contract or pre-contractual measures you have requested||For the period of time necessary to reply to your request|
|C||Marketing: for sending information and commercial communications, including promotional ones, regarding the products and services of Valdo Spumanti S.r.l.||Consent||For 24 months following the last communication sent|
|D||Profiling: for analyzing the tastes, preferences, habits and behaviors of the interested party in order to transmit personalized commercial communications based on his/her commercial and behavioral profile.||Consent||For 12 months from the collection|
Your personal data will be processed by Spumanti Valdo S.r.l. and Diana as follows:
|#||PURPOSE||LEGAL BASE||PRESERVATION PERIOD|
|E||Sale of products*: for the conclusion and execution of the sales agreement for the products offered on the Website, including the management and processing of purchase orders, the delivery of the products, the communication of any information relating to the order, the management of payments and anti-fraud controls||Execution of the contract or pre-contractual measures you have requested||For the time necessary to process the purchase order (without prejudice to further preservation, where necessary, for the following purposes)|
|F||After-sales assistance*: for the management and response to the requests you send us in relation to the products purchased on the Website, including returns, complaints and refunds.||Execution of the contract or pre-contractual measures you have requested||For the time necessary to reply your request (without prejudice to further preservation, where necessary, for the following purposes)|
|G||Fulfillment of legal obligations*: for the fulfillment of legal obligations (particularly in civil and fiscal subjects as well as public security, banking and personal data protection matters)||fulfillment of legal obligations||For the period required by the law. The billing data is kept for 10 years from the date of issue of the invoice.|
|H||Contents and prevention of offenses*: to defend or assert a right of Diana and/or Spumanti Valdo S.r.l. and/or for the detection and prevention of fraud and other crimes or offenses||Legitimate interest of the Data Controller||For the period necessary for the purpose for which the data is collected in accordance with applicable law (for example, regarding prescription)|
5. NATURE OF THE DATA PROVISION
The provision of data in the fields marked with an asterisk (*) for the purposes given in the previous art. 4, I), letters A), B) and II) is necessary to register in the Website and use the relevant services as well as to purchase the Website’s products; failure to provide the data will make it impossible to obtain the products and services you have required. On the other hand, the provision of data in the fields not marked with an asterisk, although it may be useful to facilitate relations with Diana and Spumanti Valdo S.r.l., is optional and not providing it does not affect the possibility to obtain the products and the required services.
With reference to marketing and profiling purposes given in the previous art. 4, I), letters C) and D), the provision of data is optional and your refusal will make it impossible for Spumanti Valdo S.r.l. to process the provided data for marketing and profiling purposes, but it will not prevent you from logging onto the Website, purchasing products and using the relevant services according to the provisions given in art. 4, I), letters A), B) and II).
6. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS (PROFILING)
Spumanti Valdo S.r.l. intends to pursue the purposes referred to in art. 4, I) letter D (profiling) by analyzing information on the interested party (derived, for example, from the purchases made), in order to send personalized commercial communications, as well as to carry out targeted promotional and business intelligence actions. The processing will be carried out with data and/or information processing tools which, once crossed, will create a commercial profile of the interested party on the web. For the same purpose, moreover, such data and/or information will be associated with data and/or information subsequently conferred by the interested party or already in possession of Spumanti Valdo Srl, also following the possible adhesion to the services made available by Spumanti Valdo.
7. PROCESSING METHODS
Your data will be processed by the Data Joint Controllers using mainly IT and telematic methods.
Specific security measures are adopted to minimize the risk of destruction or loss of personal data, unauthorized access. The Collector has adopted all suitable security measures given by the law.
Your data will be processed by Valdo Spumanti S.r.l. with mainly IT and telematic methods in compliance with the technical and organizational rules aimed at preventing illicit, incorrect or authorized use.
8. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND DISTRIBUTION OF DATA
In order to achieve the purposes that the personal data is collected for, the Joint Collectors and Valdo Spumanti can appoint other responsible parties for processing the personal data such as the following:
- IT service providers, i.e. direct marketing, internet service and cloud computing,
- subjects that are in charge of the warehouse logistics, as well as promotion, sale and delivery of the products and services of the Collector,
- customer care,
- companies and other subjects that provide customers with legal, fiscal, accountancy, financial, technical-organization, data processing and communication services;
- subjects that provide bank services, i.e. financial, insurance and credit recovery services;
- subjects that control anti-fraud on payments
- controlled companies and subsidiaries;
- public authorities and supervising bodies;
Personal details can be also known by the Joint Controllers’ staff in charge of dealing with orders and authorized by the Joint Controllers.
No data collected by the Website can be diffused.
9. TRANSFER OF DATA BOTH TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION
Your personal data may be transferred, for the purposes for which it is collected, to the United States of America (USA) which is a country not belonging to the European Union.
The transfer of personal data to subjects located in the USA will take place exclusively in accordance with the agreement between Valdo Spumanti S.r.l. and the non-EU recipient and in accordance with the standard contractual clauses adopted or approved by the European Commission (art. 46, paragraph II, letters C and D of the GDPR).
To obtain a copy of this data, please contact Valdo Spumanti S.r.l., as given in the paragraph 12.
10. SOCIAL BUTTONS AND WIDGETS
The Website is equipped with Social buttons/widgets. These icons are the social network icons such as Facebook, Twitter, Instagram, Pinterest, Google+, Youtube, Linkedin and Instagram and they allow you to interact with the relevant networks by simply clicking on the icon. By entering the social networks, you can share content or recommend the Website products.
After clicking the Social buttons/widgets, the social network might collect the data relevant to your visit to the Website. As given in the introduction, this privacy information note does not consider the processing of your personal data performed by social networks. Please refer to the social network’s privacy information for further information about this topic.
Outside of cases where you voluntarily shares your navigation data with the social networks chosen by clicking on the social button/widgets, the Joint Collectors will not share or diffuse any detail of yours with the social network.
The Website and the services are intended for the sale of products and services to adults. Therefore, the Joint Controllers do not intentionally collect the personal data of persons under the age of 18. If you access the services of the Joint Controllers, you are declaring that you are of age.
12. RIGHTS OF THE CONCERNED PERSON
With reference to the provided data, you have the right at any time to ask for the following:
- the confirmation that personal data is being processed and, in this case, to access your personal data and obtain a copy of it (see Article 15 of the GDPR);
- the correction of inaccurate personal data, as well as the integration of it if it is incomplete, provided that the purposes of the processing are met (see Article 16 of the GDPR);
- the cancellation of personal data in accordance with the cases given in art. 17 of the GDPR;
- the limitation of data processing in the cases given in art. 18 of the GDPR;
- to prevent the processing of personal data in the cases given in Art. 21 of the GDPR;
- data portability if the processing is based on your content or on a contract and it is carried out with automated means (see Art. 20 of the GDPR);
To exercise these rights, you can write to firstname.lastname@example.org
However, you can exercise your rights towards each Joint Controller by writing to the respective references indicated in paragraph 1.
Finally, you have the right to claim to the Guarantor Authority for the protection of personal data as the Guarantor is the control authority of the established procedures.