According to the Articles 13 and 14 of the EU General Data Protection Regulation 2016/679 ("GDPR" or "Regulation"), and in general in accordance with the principle of transparency foreseen in the same Regulation, Pastifico Felicetti S.r.l. (the "Company") provides the following information regarding processing of personal data with respect to your online purchases (“Purchases”).
1. DATA CONTROLLER
The data controller (i.e. the person who determines the purpose and means of processing of personal data) is Pastificio Felicetti S.r.l (hereinafter Pastificio Felicetti), based in Via L. Felicetti, 9 - 38037 Predazzo (TN) Italy, VAT registration number and fiscal code 00122630221
In relation to purchases made by the user on the website, it is specified that the products of Felicetti will be sold directly by Alce Nero S.p.A.; The latter will take care of the receipt of the payment, the shipment and, where applicable, the billing of the products, subject to your consent during the purchase. Therefore, Alce Nero S.p.A. is the autonomous Controller of the data that you will insert for the purposes of the purchase. Alce Nero S.p.A. is based in Via Palazzetti, 5C, 40068 San Lazzaro di Savena BO.
2. PURPOSE OF PROCESSING
The treatment of personal data may have the following purposes:
1) Pre-contractual, contractual, administrative and accounting purposes (including management of claims and litigation) relating to online purchases, as well as for any other accounting, tax, administrative or otherwise required processing operation required by the law in relation to purchases;
2) (in case the person concerned does not express dissent) transmission, through e-mail provided by you, communications related to products or services similar to those already provided (newsletter via e-mail), provided that you, properly informed, do not refuse such use, initially or after subsequent communications;
3. TYPES OF PROCESSED DATA
The following categories of data may be processed:
- Surname, name and date of birth, residence or domicile, e-mail, delivery address of the purchased merchandise;
- Information relating to purchases, functional to the fulfilment of the contract and to the protection of contractors;
- Data on the means of payment (credit card/Paypal etc...);
- Tax code and/or VAT number (in case of invoice request);
- Telephone number,
- Product purchased;
4. LEGAL BASIS FOR PROCESSING AND TRANSFER OBLIGATION
As concerns purpose 1), there is no obligation to conferring data, but not conferring them will result in the impossibility of purchasing the products; Specifically, the data that is required to proceed to the purchase are those identified in the registration form with the asterisk (*). The legal basis for the processing of personal data is the need to implement the contract with you (Purchases) or the relevant pre-contractual measures adopted at your request. With regard to the other purposes, the transfer is optional and the processing operations will take place only with your consent as an interested party.
5. COLLECTION, PROCESSING METHODS AND STORAGE OF DATA
Data are collected from the interested party, that is the data that you will provide us, as well as those resulting (if you have expressed your consent), from the analysis of your activity during the interaction with the Controller (including the purchases and the visits to the e-commerce website). Processing will be carried out: Through the use of manual and automated systems; by entities or categories of authorized people in order to fulfil their duties; with the use of appropriate measures to ensure the confidentiality of data and to avoid access to them by unauthorised third parties.
Your data will be stored for the duration of the contractual relationship, and, after the end of it – limited to the data, which are necessary at that point – for the extinction of the contractual obligations and for the fulfilment of all possible legal requirements and for the need for protection - even contractual - related or resulting therefrom.
6. DATA COMMUNICATION
Without prejudice to the communications carried out in fulfilment of statutory and contractual obligations, all data collected and processed may be communicated, exclusively for the purposes specified above, to:
a) All entities to whom the faculty of access to such data is recognised under regulatory measures;
b) employees, collaborators, suppliers of the controller, within the relevant tasks and/or contractual obligations relating to the execution of the contractual relationship with the interested parties; among the controller's suppliers there shall be shown as an example banking and credit institutions, insurance companies, legal advisers, lawyers, tax consultants and accountants, debt collection companies, companies that detect financial risks and carry out fraud prevention activities, shipping companies, sales agents). Personal data are not subject to dissemination.
7. LOCATION OF DATA PROCESSING
The activity is carried out on the territory of the European Union. There is no intention of transferring the data outside the territory of the European Union or to an international organisation.
8. RIGHTS OF THE INTERESTED PARTY
We remind you that Chapter III of the GDPR gives you the exercise of the following rights:
a. Access to personal data (you will therefore have the right to have free information about the personal data held by the controller and about the related processing, and to obtain a copy in an accessible format);
b. Rectification of data (we will provide, on your recommendation, the correction or integration of your data – which are not an expression of evaluative elements – incorrect or inaccurate, even if they have become so, because they have not been updated);
c. Withdrawal of consent (if processing takes place on the basis of your consent, you may withdraw the consent at any time, without affecting the lawfulness of processing provided before the withdrawal.
d. Erasure (right to be forgotten) (for example, in case of withdrawal of the consent, if there is no other legal basis for processing data);
e. Right to restrict processing (in certain cases – objecting the accuracy of the data, during the time required for verification; objecting the lawfulness of processing with opposition to the erasure; need of use for your rights of defence, while they are no longer useful for processing; if there is objection to processing, while the necessary verifications are carried out- the data will be stored in such a way in order to be able to be restored, but, in the meantime, they are not available to the controller except in relation to the validity of your restriction request);
f. Right to object to processing for legitimate reasons (in certain circumstances you may however object to processing of your data, in particular, if your personal data is processed for direct marketing purposes, you have the right to object to processing at any time);
g. Data portability (at your request, your data will be transmitted to the subject suggested by you, in order to enable an easy consultation and use of the data);
h. Complaint to the supervisory authority (Garante per la protezione dei dati personali – Garante Privacy).
For contacts specifically relating to the protection of personal data, including the exercise of the rights referred to above, we indicate in particular the e-mail address: email@example.com to which you may address any requests.
In relation to the purchases made at our site, please note that the Data Controller is Alce Nero S.p.A., therefore the exercise of the rights relating to the processing of your personal data for the purchase of our products will be directed to Alce Nero S.p.A., Via Palazzetti, 5C, 40068 San Lazzaro di Savena BO, or at the address firstname.lastname@example.org.