Privacy information

a) General information

In compliance with the current regulation (article 13 of Legislative Decree 196/2003 and subsequent amendments and European Regulation 679/2016), Users are informed about the Personal Data collected during and on the occasion of browsing our website beb-lemagnolie-modena.it (hereinafter abbreviated as ‘Website’). The Controller may be update or modify this Notice and the changes will be effective as soon as they are published on the Website. Users are therefore invited to view the Privacy Policy information on each new access to the Website. In case of non-acceptance of this information, the User is required to cease browsing the Website and, in the case previously provided, may request to the Controller to remove their Personal Data.

b) The Controller and the Representatives

The Controller of Personal Data is Mr. Alessandro Corradini, reachable as indicated on the page Contacts. In addition to the Controller, some processing operations of Personal Data may be performed by third parties connected to the web management services of the Website. In this case the same subjects will be appointed as Representatives with obligation of confidentiality and the Personal Data of the User will not be disclosed to third parties.

c) Types of data collected

The Controller collects the following types of data: the Personal Data voluntarily provided by the User and the anonymous navigation data.

The Personal Data that may be provided voluntarily by the user are: name, surname, email and body text for the Contact Form and email for the Mailing-list service. Denying by the User the only mandatory data, such as the email address, will prevent the Website from providing the services requested. The sending of the data is subject to the acceptance of this information. The Data referred above, once transmitted to the Website, will be delivered, in electronic form, directly to the mailbox of the Controller, who has the obligation of confidentiality and will not remain stored in the Website structure. The User can withdraw the consent of processing the Personal Data at any time by notifying to the Controller. The User assumes full responsibility for the Personal Data transmitted by him to the Website, freeing the Controller from any liability in the event of Personal Data of third parties.

The anonymous navigation data are acquired automatically during use of the Website and are generally described as: technical data, usage data, geolocation data and cookies.

The technical data are data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature, could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, domain names, URI (Uniform Resource Identifier) addresses, request time, server access protocol, etc.

The usage data are related to the use of the Website by the User, such as the visited pages, the actions performed, the features and the services used.

The geolocation data are data relating to the position attributed to the origin of the internet communication made and can be precise or inaccurate. They can be for example the physical position declared by the server of the provider on which the user is connected, the GPS (Global Positioning System) or GNSS (Global Navigation Satellite System) or other protocols with location-based features.

The cookies are small text files that are sent to the browser during the browsing session on the Website. The Website uses cookies and other similar technologies to collect data on pages, links visited and other actions related to our services. They are stored on the User’s browser and then re-transmitted to the Website on the next visit of the same. The User can view the complete Cookies Policy for our Website on the Cookie Policy page.

d) Optional submission of data

Apart from what has been specified for navigation data, the User is free to provide his personal data to request the sending of informative material or other communications. However, denial of this information and / or denial of the User’s email address may make it impossible to obtain what is requested.

e) Processing Purposes of the of collected Data

The User’s data are collected to allow the Controller to contact the User when requested and provide his services through the Website. To obtain further detailed information on the purposes of the processing and on the Personal Data that are specifically relevant to each purpose, the User may refer to the relevant sections of this document.

f) Processing methods and security measures

The processing is carried out using IT and/or telematics tools, with organizational methods and logic strictly related to the purposes indicated and in compliance with the regulations in force on the subject. The processing is also carried out in a manner and with appropriate tools to guarantee the security and confidentiality of the Personal Data themselves, as the Controller adopts adequate technical and organizational measures that guarantee, and allow to demonstrate, that the treatment is carried out in compliance with the regulations of reference.

g) Duration of treatment

The User’s Personal Data will be kept for a period not exceeding that necessary for the fulfillment of the requests made by the User, as well as to fulfill the legal obligations in tax and civil matters.

h) Place

The Data are processed at the Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, contact the Controller.

i) Transfer of personal data outside the EU area

The management of Personal Data will take place on servers located within the European Union of the Data Controller and/or third-party companies duly appointed. The data will not be transferred outside the European Union. In any case, it remains understood that the Owner, if necessary and after updating the documentation required by EU Regulation 679/2016 (GDPR), will have the right to move the location of the servers in non-EU countries. In this case, the Data Controller ensures from now on that the data will be transferred in compliance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection.

l) Legal basis of the processing

The Controller processes the User’s Personal Data in the event of one of the following conditions:

• The User has given consent for one or more specific purposes.
• The processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures.
• Processing is necessary to fulfill a legal obligation to which the Owner is subject.
• Processing is necessary for the performance of a task of public interest or for the exercise of public powers vested in the Data Controller.
• Processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

In any case It is always possible to ask the Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

m) User Rights

Users can exercise certain rights with reference to the Data processed by the Controller. In particular, the User has the right to:

• withdraw consent at any time.
• object to the processing of your data.
• access your data.
• check and ask for rectification.
• obtain the treatment limitation.
• obtain the cancellation or removal of your Personal Data.
• receive your data or have it transferred to another owner.
• lodge a complaint with the supervisory authority for the protection of personal data and / or act in court.

To exercise their rights, Users can send a request to the contact details of the Controller indicated in this document. Requests are made free of charge and processed by the Controller as soon as possible, in any case within 30 days.

n) Changes to this privacy policy

The Controller reserves the right to make changes to this privacy statement at any time by informing Users on this page, or, if technically and legally feasible, by sending a notification to Users through the contact email address held by the User. If the modifications involve processing whose legal basis is consent, if necessary the Controller will collect the consent again. Please therefore consult this page regularly, referring to the last update date, currently indicated on 07/15/2019.