Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Of users consulting the websites of COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C.

pursuant to Article 13 of Regulation (EU) 2016/679

Dear Visitor, Pursuant to Articles 12 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation / General Data Protection Regulation, “Regulation” or “GDPR”), and in general in compliance with the principle of transparency provided by the same Regulation, the following information is provided on the processing of personal data (i.e., any information concerning an identified or identifiable natural person: “Data Subject”) carried out in connection with the navigation on the website www.storeutensili.it

The information contained in this notice exclusively concerns the aforementioned site and no other page or service that may be reached through hypertext links present on the sites but not owned by COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C.

DATA CONTROLLER

The data controller (i.e., the entity that determines the purposes and means of the processing of personal data) is COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C., with registered office in Caselle di Selvazzano (PD), via Ariosto n. 8 – 35030, P.IVA 02600010280, PEC compostellasas@open.legalmail.it, tel.+39 351 517 7545.

The data controller, not being obliged to do so, has not appointed a Data Protection Officer.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

In accordance with the provisions of the GDPR, the processing of personal data is based on the principles of correctness, lawfulness, transparency, protection of the confidentiality of the user as well as the protection of his/her rights and COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C. undertakes that all personal data it comes into possession of will be processed lawfully and in accordance with the cardinal principles set out above, as well as strives to comply with the regulations and laws regarding the protection of personal data in all places and for all activities in which it operates.

Data may be acquired in the following ways:

– Browsing data: by simply browsing the sites headed by COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C. no identifying data will be collected. However, for the purpose of the normal operation of the website it is possible that the computer system acquires some information whose transmission is implicit in Internet communication protocols (e.g. log files, IP addresses, URI/URL addresses of requested resources, time of requests, as well as parameters related to the user’s environmental computer and operating systems). The data acquired through navigation, which are necessary for the functioning of the website, are processed for statistical purposes (number of visitors for each website belonging to COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C., geographical area of origin of visitors, number of visitors for each time slot), as well as for the control of the normal functioning of the web services offered. The legal basis for the processing is therefore the legitimate interest of the Data Controller in the operation and security of the site and the protection of related rights and the fulfillment of regulatory provisions.

– Data communicated by the user: the sending of data by the user to COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C., through spontaneous messages to the contact addresses headed by the same company or through the compilation of contact formats, as well as all the identification data communicated by the user for the purchase of products present on the sites headed by the Data Controller, entail the acquisition of the user’s contact data necessary to respond and any other data spontaneously sent. The processing of data for these purposes does not require the consent of the Data Subject, since the processing is necessary for the performance of a contract to which he/she is a party or the execution of pre-contractual measures taken at his/her request (art. 6, paragraph 1, letter b) of the Regulations), as well as, where applicable, to fulfill a legal obligation (art. 6, paragraph 1, letter a) of the Regulations);

The processing of the aforementioned data is aimed at the correct and complete execution of the contract with COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C., from the pre-contractual phase to the post – sale phase; data collected will also be processed in order to adem.

Legal basis of the processing

The data controller, COMPOSTELLA S.A.S. DI COMPOSTELLA MAURIZIO E C., therefore processes your data lawfully and to the extent:

• Necessary to fulfill obligations imposed by law;
• Necessary for the proper execution of a contract to which you are a party, as well as for the pre-contractual phase;
• Based on your express consent;

Recipients of the data

The data collected may also be communicated, for the purposes indicated above, to:

• Consultants, accountants as well as lawyers, for functional services to comply with the obligations provided for in the tax and accounting field or for the judicial protection of the interests of the Holder;
• Couriers for the shipment of goods covered by the contract to which you are a party;
• Consultants for services functional to the execution of the contract;

Consequences of non-disclosure of personal data

With respect to personal data related to the formation or execution of a contract to which you are a party or necessary for the fulfillment of a regulatory obligation (by way of example: fulfillments related to the keeping of accounting and tax records), failure to provide personal data prevents the completion of the contractual relationship itself.

Rights of data subjects

Data subjects have the right, in the cases provided for by current legislation:

• to request from the data controller access to, rectification or erasure of their personal data (in the cases provided for in Art. 17 Gdpr) or limitation of the processing concerning them (in the cases provided for in Art. 18 Gdpr) as well as to object to their processing (Art. 13 c. 2 lett. b);
• to data portability, i.e., to request and obtain from the data controller the personal data processed by it, which must be returned in a structured and machine-readable format (art. 13 c. 2 lett. b);
• to revoke at any time and in cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g., residence, date of birth) or particular categories of data (see Art. 9 Gdrp), your consent to the processing, without affecting the lawfulness of the processing based on the consent given prior to revocation (Art. 13 c. 2 lett. c);
• to lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it)