Before communicating any type of personal data to us, we invite you to carefully read this privacy policy.
This privacy policy is intended for:
- The website www.gigliodorato.it
- The Facebook page www.facebook.com/giglio-dorato-101262341966074
- The Instagram page www.instagram.com/gigliodorato
but not for other external websites that may be consulted by the user via links.
This information is provided pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”) to users who interact with the website and the pages on the social networks mentioned above.
The Data Controller of the data relating to identified or identifiable persons who have consulted the websites www.gigliodorato.it and, is Sara Iollo with registered office in via Località Sant’ Antonino 40, 52043 Castiglion Fiorentino – AREZZO. He can be contacted at info@gigliodorato.it.
As regards the Facebook page www.facebook.com/loscrignodinebbia, Sara Iollo is Co-Data Controller of statistical data together with Facebook Ireland Limited (“Facebook Ireland”).
1) Lawfulness of processing
The processing of personal data occurs on the basis of the principle of lawfulness of the consent expressed by the interested party for one or more specific purposes. (ref. Art. 6 paragraph a) of the GDPR).
2) Purpose of processing
The personal data voluntarily provided will be processed for the following purposes: - Response to a commercial request, to follow up on your requests
- Browsing the websites and social pages mentioned on this page
- Response to a request for assistance or information
- Completion of a purchase made on the site
- Sending promotional codes
3) Type of Data Processed and Method of Collection
Browsing data – log file
Access to the Site can occur without the user being asked to provide any personal data. The computer systems and applications dedicated to the operation of this website collect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) not associated with directly identifiable users. The data collected includes the IP addresses of users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request and the numerical code indicating the status of the response given by the server (successful, error, etc.).
This data is processed for the time strictly necessary in accordance with the law in force and could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The voluntary and explicit sending of electronic mail to the addresses indicated in the different access channels of this site entails the subsequent acquisition of the address and data of the sender/user, necessary to respond to the requests produced and/or provide the requested service.
Completing a purchase involves the acquisition of a series of data necessary to provide the requested service. These data are: email address, name, surname, address, any VAT number or tax code.
However, it is ensured that such processing will be based on the principles of correctness, lawfulness and transparency and protection of confidentiality as indicated in the GDPR. - Specific functions and services
- Stripe
- Stripe is a service that allows the website manager to receive online payments. No sensitive data regarding the transaction is stored on this website. The data that is stored is the transaction ID and the payment method.
- Personal Data collected: Cookies; Transaction ID, payment method.
- Place of processing: United States – Privacy Policy
- Google fonts
- Google Fonts is a service that allows you to upload fonts to improve the appearance of the site through the use of style sheets. The service is managed by Google Inc. The use of Google Fonts does not require authentication.
- Personal Data collected: Cookies.
- Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
- Subject adhering to the Privacy Shield.
- Google Maps
- Google Maps is a map viewing service managed by Google Inc. that allows this Site to indicate the place where the company is located.
- Personal Data collected: Cookies.
- Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy.
- Subject adhering to the Privacy Shield.
- Optionality of Providing Data
- Apart from what is specified for navigation data, the provision of personal data by the interested party, for the purposes described in the previous paragraph is to be considered optional. Failure to provide them may make it impossible to use certain services provided by the site.
- Methods of Data Processing
- Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they are collected in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR and in compliance with the mandatory times prescribed by law. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
- Communication and/or Dissemination of Data
- Your personal data, subject to processing, will not be disclosed but may be communicated to companies contractually linked to Sara Iollo, in accordance with and within the limits of the GDPR.
- Personal data may be communicated to third parties belonging to the following categories:
- subjects that provide services for the management of the information system used by Sara Iollo and telecommunications networks (including email);
- studies or companies in the context of assistance and consultancy relationships;
- competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request;
- subjects that provide services for the performance of shipping services (for example express couriers).
The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in complete autonomy as separate Data Controllers. The list of data processors is constantly updated and available at the headquarters of Sara Iollo. Any further communication or dissemination will only take place with your explicit consent.
Data Retention Period
The retention period for the data collected with the contact request form is strictly limited to the time necessary to follow up on the need that the user is expressing with his request and in any case not exceeding 6 months from the last expression of interest by the user.
The data collected through the order form necessary to make a purchase on the Site will be retained for the period necessary to carry out the requested service. However, such data may be retained for a longer period to comply with legal obligations and to be able to make them available to the competent authorities.
Minors
This Site and the Data Controller’s Services are not intended for minors under 18 years of age and the Data Controller does not intentionally collect personal information relating to minors. In the event that information on minors is inadvertently recorded, the Data Controller will delete it promptly, upon request of users.
Rights of the Interested Parties
The “interested parties”, i.e. the natural persons, legal persons, entities or associations to whom the data refers, have the right, at any time, to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification pursuant to EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Interested Party. Pursuant to the same articles, the interested parties also have the right to request the cancellation, transformation into anonymous form or blocking of data concerning them, processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. - Any communications can be sent to the email address: info@gigliodorato.it
- Right of rectification: contact us directly to have your data modified or rectified.
- Right to erasure: send us a request to erase all data concerning you and we will process your request within 30 days.
- Right to portability: if you request it, we will export your data so that it can be transferred to third parties.
- Right to object: you can unsubscribe at any time from all specific uses we make of your data.
- Right of access: we are transparent about the data we collect and how we use it. You can contact us at any time to access the information in our possession and request its modification.
- Right to restriction: you can ask us to suspend the processing of your data, if there are legitimate reasons.
4) Joint controllership of statistical data with Facebook
For Pages, Facebook offers Page Insights, a feature that provides aggregated data that helps understand how people interact with Facebook Pages.
For the Facebook page www.facebook.com/giglio-dorato-101262341966074, Sara Iollo is joint controller of statistical data together with Facebook Ireland Limited (“Facebook Ireland”).
At this link you can consult the controller appendix for Facebook Page Insights, which indicates the division of responsibilities of Facebook Ireland and Active121 as administrator of the page www.facebook.com/giglio-dorato-101262341966074.
On this page you can consult Facebook’s data policy and find, among other things, the following information:
What types of information Facebook collects
How Facebook uses this information - How this information is shared
- The legal bases for data processing
- How to exercise the rights provided for by the GDPR
- Facebook Ireland’s contact details for questions relating to the protection of personal data
- The contact details of the Data Protection Officer for Facebook Ireland
- Facebook visitor rights provided for by the GDPR
- The data retention period
On this page you can consult Facebook’s cookie policy.
5) Other information on gigliodorato’s social channels
Instagram
Sara Iollo manages the Instagram account reachable at www.instagram.com/gigliodorato
On this page you can consult Instagram’s privacy policy.
On this page you can consult Instagram’s cookie policy.
6) Company information
Sara Iollo, Località Sant’ Antonino 40, 52043 Castiglion Fiorentino – AREZZO.
C.F.: LLISRA86E65L682W
