Information pursuant to art 13 EU Regulation 679/16

The requested data are processed by Libellula snc, Piazza Gaetano Salvemini, 6, 50122 Firenze FI – Italia – P IVA 06724580482  as the Data Controller (address: libellulasnc@pec.it, e-mail address: info@lagazzaladragioielli.com)

The processing of personal data is carried out in compliance with the applicable laws (Legislative Decree no. 196 of 30 June 2003 and EU Regulation 679/16) and performed for the management of the business relationship between the parties and, specifically, for user registration, ordering and delivery of products, accounting, billing, communication by paper, computer or by telephone, i.e. the customer management for the satisfaction of all contractual obligations and the laws as the purpose of data collection.

 

Libellula snc will process identification data (e.g. name and surname, tax code, residence/domicile address, telephone number, e-mail address, payment data) for the purposes indicated. The data listed above are deemed necessary for the provision of the commercial service covered by this e-commerce website. The legal basis for the processing is the execution of pre-contractual measures and the contractual relationship, i.e. the fulfillment of related legal obligations (e.g. accounting and tax). In the event of disputes concerning this relationship, the legal basis shall be the legitimate interest of the Data Controller for the right of defense.

 

The above data may also be processed for profiling purposes, for the analysis of preferences or consumption choices, and consequently sent by e-mail, mail, SMS, telephone contacts, newsletters, communications relating to news, promotions, actions relating to products sold by our company. The legal basis for the processing is the consent of the interested party.

The processing of personal data consists of the collection, recording, organization, structuring, storage, processing, adaptation or alteration, retrieval, selection, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, restriction, erasure or destruction. The processing of data will be carried out with the help of paper, electronic, computer and telematic tools suitable to ensure confidentiality, in accordance with the provisions of current legislation. Personal data are processed exclusively by persons appointed by the Data Controller, who have been specially trained in the subject.

The provision of personal data is not an obligation of law, but it is necessary, therefore mandatory for our company to perform the service requested, and therefore for the purposes indicated above. In case of refusal to provide such information, Libellula snc cannot perform the contractual service requested.

Personal data may be communicated to all subjects (recipients) to whom the right of access is recognized by law and for purposes related to legal obligations, as well as employees appointed by our company to process personal data. They may also be communicated to professionals, computer experts, companies and credit institutions in charge of processing related to the fulfillment of administrative, accounting and management obligations related to the conduct of business which may be designated as data processors under Art. 28 of EU Reg. 679/16. The aforementioned personal data will not be disclosed.

The list of persons appointed as data processors is available at our registered office.

Personal data are stored on servers located in Italy, and in any case within the European Union. In any case, it is understood that the undersigned Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the undersigned assures that the transfer of data outside the-EU will take place in accordance with the applicable legal provisions and the provisions of Articles. 44 et seq. of EU Regulation 679/16.

According to EU Regulation 679/16, the interested party may exercise the following rights:

  • right to obtain from the Data Controller confirmation as to whether or not personal data are being processed and, in this case, to obtain access to the personal data and information provided for in Article 15;
  • right to obtain rectification of inaccurate personal data, as well as right to have incomplete personal data completed for the purposes of the processing (art. 16);
  • right to erasure of data (“right to be forgotten”), where one of the cases referred to in Article 17 applies;
  • right to limit the processing of personal data, in the cases provided for in Article 18;
  • right to data portability pursuant to Article 20;
  • right to object to processing pursuant to Article 21;
  • whereas consent forms the legal basis of the processing, right to revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to revocation.

The Data Controller uses automated decision-making processes, the rights set forth in Art. 22 of EU Regulation 679/16 apply to the interested party.

The data subject shall also have the right to be informed, where applicable, of the Data Controller’s intention to transfer the data to a third country or international organization and of the existence or absence of an adequacy decision by the Commission or in the event of transfers pursuant to Articles 46, 47 and 49 of the second paragraph, the reference to appropriate and adequate guaranties and the means of obtaining a copy of such data or the place where they were made available. All the above rights may be exercised, without any formalities, by submitting a request to the Data Controller.

Personal data are kept exclusively for the time strictly necessary to carry out the purposes described above and to fulfill the obligations provided for by law (e.g. administrative, fiscal and accounting – ten years pursuant to art 2220 cc), without prejudice to any issues of accounting or litigation nature that may extend this period. For profiling purposes, the data will be kept for 12 months and 24 months for direct marketing purposes. After these terms the personal data will be deleted or anonymized and used only for statistical purposes.