Privacy disclaimer
PRIVACY POLICY WWW.BINISILVIA.COM
Last update: February 2024
Web Policy Privacy
The current legislation on the processing of personal data, defined in accordance with the provisions contained in EU Regulation 2016/679 of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data, contains provisions aimed at guaranteeing the processing of personal data in compliance with the fundamental rights and freedoms of natural persons with particular regard to the right to protection of personal data.
This information, pursuant to art. 13 of EU Regulation No. 2016/679, describes the management methods of this website owned by Bini Silvia Passeggiata Srl with reference to the processing of personal data of users who consult it.
The information is provided only for the site mentioned above.
The processing of personal data will be based on the principles of correctness, lawfulness, transparency as well as the protection of your privacy and your rights in compliance with current legislation.
Pursuant to article 13 of the GDPR (General Data Protection Regulation) 2016/679, we therefore provide you with the following information:
Data Controller and Data Protection Officer (RDP)
Data controller pursuant to art. 4, paragraph 1 n. 7 and 24 of EU Regulation 2016/679 is Bini Silvia Passeggiata Srl , a company incorporated under Italian law, with registered office in V.le Marconi, 71 - 55049 Viareggio (LU) CF/PI 01495940460, mail: customerservice@binisilvia.com, Certified e-mail: ecommerce@pec.binisilvia.it
1. Type of data processed and purpose of processing
The processing will have as its object:
1.1 Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses, browser type, operating system, information on the pages visited by users within the site, access time, time spent on a single page, internal path analysis (clickstream) and other related parameters. to the operating system and the user's computing environment. Such data of a technical/IT nature are processed in compliance with the principle of minimization of processing. For this reason Bini Silvia Passeggiata srl processes this data in a generally aggregated and anonymous format. In the event that the data collected allows, even through processing, the identification of the user, the processing is in any case carried out in compliance with the principles set out in GDPR 679/2016, Directive 2002/58 and the Provision of the Guarantor for the protection data regarding Cookies and other tracking tools dated 10 July 2021. Further information can be found in the cookie policy.
1.2 Data provided voluntarily by the user
Identification data of the interested party provided by the same when registering the account and/or when purchasing the product in "guest" mode which will be processed electronically and on paper for the following purposes:
1.2.1 Creation and management of the account, where the interested party has completed the specific section relating to the creation of a new account;
1.2.2 Processing of orders and payments, communications with the interested party regarding the status of orders concerning the products covered by the transaction;
1.2.3 Compliance with legal obligations in fiscal, accounting and tax matters;
1.2.4 . Risk and fraud prevention
1.2.5 Personalization of website content aimed at suggesting products that may be of interest to the user: we will retain the history of your purchases and the items you have clicked on and we will use this information to provide you with suggestions and/or direct advertisements for other products that we believe may interest you. The execution of these treatments could involve the adoption of automated technologies such as profiling;
1.2.6 Sending advertising campaigns via newsletter;
1.2.7 processing of requests / complaints / information / communications received from the interested party through the contact form on the site or by completing an online form, registered letter, telephone request or email to the address customerservice@binisilvia.com ;
1.2.8 Protection of the Data Controller's rights in the competent offices
2. Legal basis of the processing
The legal basis that makes the processing referred to in point 1.2.1 legitimate is the execution of pre-contractual and contractual obligations, following the request made by the interested party by completing the specific section relating to the creation of a new account on the site Internet;
The legal basis that makes the processing referred to in point 1.2.2 legitimate is the fulfillment of the contractual relationship established between the Data Controller and the interested party;
The legal basis that makes the processing referred to in point 1.2.3 legitimate is the fulfillment of legal obligations regarding fiscal, accounting and tax matters;
The legal basis that makes the processing referred to in point 1.2.4 legitimate is the pursuit of a legitimate interest of the data controller in the prevention of computer risks and fraud, with particular attention to the site's means of payment;
The legal basis that makes the processing referred to in points 1.2.5 and 1.2.6 legitimate is the freely expressed consent of the interested party;
The legal basis that makes the processing referred to in point 1.2.7 legitimate is the execution of pre-contractual and contractual obligations, better reported in the request and/or complaint and/or communication formulated and sent by the interested party;
The legal basis that makes the processing referred to in point 1.2.8 legitimate is the pursuit of a legitimate interest of the data controller in the protection of his rights in the competent bodies.
3. Nature of the processing
The provision of data for the purposes referred to in point 1.2.1 is optional but necessary for the creation, maintenance and management of a user account and any refusal to provide data for the creation of the account will not preclude the possibility of purchase the products on the website, for example in "guest" mode;
The provision of data for the purposes referred to in point 1.2.2 is mandatory as it is necessary for the correct management and fulfillment of the order and any refusal to provide such data will make it impossible to establish the contractual relationship;
The provision of data for the purposes referred to in points 1.2.3 – 1.2.4 is mandatory and any refusal to provide such data will make it impossible to establish the contractual relationship;
The provision of data for the purposes referred to in points 1.2.5 and 1.2.6 is optional and any refusal will not have effects on other contractual relationships that may exist between the interested party and the Data Controller, possibly resulting only in the impossibility of the Owner to send newsletters and advertising communications relating to the products marketed, as well as to personalize the content of the website based on browsing experiences;
The provision of data for the purposes referred to in point 1.2.7 is mandatory as it is necessary for the correct management, processing and processing of requests / complaints / information / communications received from the interested party
The provision of data for the purposes referred to in point 1.2.8 is mandatory as it is necessary not only for the fulfillment of the purposes referred to in the previous points, but also for the protection of the Data Controller's rights in the competent offices.
4. Communication and dissemination of data
The processing will take place exclusively by personnel appointed by the Data Controller and specially trained. The data collected, if it is necessary or instrumental for the execution of the indicated purposes, may be processed by third parties appointed as external data processors, including companies that carry out services connected and instrumental to the execution of the purposes indicated above, including the company that provides the online sales platform (ISP) is the one that deals with sending news letters.
The data collected may be communicated to companies that manage online payment APPs, banking and financial institutions, insurance companies, or, more generally, to companies operating in the credit sector or in fraud prevention, as well as to public bodies in fulfillment of obligations. of law.
Customer data may also be communicated to companies operating in the transport and logistics service.
The updated list of external data controllers can be consulted by contacting the data controller by email at: customerservice@binisilvia.com
The Data Controller may communicate your personal data to the competent authorities for legal compliance or to fulfill specific requests of the same.
The data collected will be processed within the European Economic Area. For reasons related to the provision of the online sales service provided by the platform (ISP), your data may also be transferred to Canada and the United States. The transfer of your data to Canada is made legitimate by the existence of the adequacy decision of the European Commission. The transfer of your data to the United States is legitimate as it is carried out in compliance with the SCC of 4 June 2021, and in addition to a series of additional technical and organizational security measures guaranteed by the provider.
Your personal data will not be disclosed.
5. Data retention period
The personal data collected for the purposes referred to in points 1.2.1 and 1.2.2 will be retained until the pursuit of the purposes indicated above and/or until the owner's rights arising from existing contractual obligations are barred.
The personal data processed for the purposes referred to in point 1.2.3 will be kept for the entire period required by fiscal and tax legislation;
The personal data processed for the purposes referred to in point 1.2.4 will be kept for the entire period necessary to pursue the purpose indicated above
The personal data collected for the purposes referred to in points 1.2.5 and 1.2.6 will be retained until the interested party exercises his or her right to withdraw consent,
The personal data processed for the purposes referred to in point 1.2.7 will be retained until the request/complaint/information/communication is processed.
The personal data processed for the purposes referred to in point 1.2.8 will be retained until the right underlying the individual relationships expires, as well as until the definition of any legal proceedings undertaken.
6. Rights of the interested party
The interested party has the right to exercise the rights referred to in the articles. 15-22 of European Reg. 679/2016 by formulating specific requests to the email address customerservice@binisilvia.com , and therefore has the right to:
- ask for confirmation as to whether or not your personal data is being processed and, if so, to obtain access (right of access) art. 15;
- request the rectification of inaccurate personal data, or the integration of incomplete personal data (right of rectification) art.16;
- request the deletion of the data itself, if one of the reasons provided for by the Regulation (right to be forgotten) art.17 exists;
- request the limitation of processing when one of the hypotheses provided for by the Regulation (right of limitation) art.18 occurs;
- receive the personal data you have provided to the owner in a structured, commonly used and machine-readable format and to transmit such data to another data controller (right to portability) art.20.
- object to the processing of personal data (right to object) art.21.
- not be subjected to a decision based solely on automated processing, including profiling (automated decision-making relating to natural persons) art.22.
The exercise of rights is not subject to any formal constraints and is free.
6.1. Exercise of rights and revocation of consent to processing
In the event of a request by the interested party for information relating to their data to be made by email to the addresses indicated above, the Data Controller must proceed without delay - unless it proves impossible or involves a disproportionate effort - and, in any case, at the latest within 1 month of receiving the application. The deadline can be extended up to 3 months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and inform you of the reasons for the extension.
6.2 Complaints procedure
Without prejudice to any other administrative and judicial action, the person in charge has the right to lodge a complaint with the competent supervisory authority.
For further information, consult the institutional website of the Privacy Guarantor: www.garanteprivacy.it