PRIVACY NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 679/2016 ("PRIVACY REGULATION")
Protecting the security and privacy of your personal data is important to Giolina and Angelo S.R.L., VAT number IT05668640963, registered with the Companies Register of Milan (Italy) under number 1839168, with registered office at Via Solferino 22/A, 20121 Milan (Italy) - email: firstname.lastname@example.org (hereinafter referred to as the "Data Controller"), which operates in compliance with the current laws on the protection and security of personal data. We trust that the information provided below will help you understand what kind of data the Data Controller usually collects, how it uses and safeguards it, and with whom it shares it.
Pursuant to articles 13 and 14 of EU Regulation 679/2016 ("Privacy Regulation"), we hereby inform you that the processing of your personal data will be based on the principles of fairness, lawfulness, and transparency, while ensuring your privacy and rights and complying with the current legislation on the security and protection of personal data.
In particular, we inform you of the following:
a. Source of Personal Data The personal data we possess are those provided by you at the time of registration and/or when you submit a request for information about our products by filling out the appropriate forms on the Website, or when you request to subscribe to our newsletter service on the same Website. The categories of data processed are your name, surname, address, and email address. All personal data will be processed in compliance with the Privacy Code, Privacy Regulation, and the confidentiality obligations that have always guided Giolina e Angelo's activities.
b. Purposes of Processing and Legal Basis The purposes for which your data will be processed by us are as follows:
b.1) Purpose of Managing Your Requests By processing your data, we will be able to respond to your requests for information regarding the characteristics and nature of products in which you have expressed interest, or related products if those of your interest are temporarily or permanently unavailable. Additionally, we will manage product orders placed by you. In this case, the legal basis for such processing is the performance of pre-contractual measures taken at your request.
b.2.1) Contractual Purposes If you are our customer and intend to purchase our products through our website, the purpose of the data processing we will carry out in this regard is to fulfill all obligations towards you following the conclusion of the contract for the purchase of our products by the customer. In this case, the legal basis for the processing is the contract concluded between us and you as the customer.
b.2.2) Contractual Purposes If you are the recipient of a product purchased from us by one of our customers, the purpose of the data processing we will carry out in this regard is to process and fulfill the order, as well as to deliver the product to you.
In this case, the legal basis for the processing is the contract concluded between us and our customer.
b.3) Purpose of Sending Newsletters With your prior consent, by processing the data provided by you, we may also send you periodic newsletters containing information about our business activities, including our products. Even if you have given your consent, you can revoke it at any time by requesting it from Giolina e Angelo using the methods indicated in the following point h. You can also easily opt out of receiving further newsletters by exercising the right to opt-out, using the methods provided in each communication through which the newsletters are sent. Upon revocation of your consent, you will receive confirmation of the receipt of such revocation communication from Giolina e Angelo. However, we would like to inform you that, even after exercising this right of revocation, it is possible that, due to technical and operational reasons (e.g., the completion of contact lists just before the Data Controller's receipt of the revocation), you may continue to receive some additional newsletters. If you continue to receive newsletters despite exercising the aforementioned right, please report the issue to Giolina e Angelo using the contact information provided in the following point h. In this case, the legal basis for the aforementioned processing is your consent to the processing of your data, which you expressed at the time of subscribing to our newsletter service in the dedicated section of the website.
c. Data Processing Methods The data will be processed using electronic means suitable to ensure their security, in relation to the purposes for which they were communicated and collected, and to prevent unauthorized access by third parties, while complying with national and European regulations.
d. Nature of Data Provision The provision of data for the purposes stated in points b.1, b.2.1, and b.2.2 is necessary for the conclusion of the contract with our company or for the execution of pre-contractual measures related to the purchase and/or receipt of our products. Therefore, if you fail to provide the requested data, the consequences of your refusal will be the inability to receive information about our products in which you have expressed interest, the inability to enter into a purchase contract for our products, or the inability to receive our products.
The provision of data for the purpose stated in point b.3 is optional but necessary to receive newsletters from Giolina e Angelo. If you do not give your consent, it will not affect your ability to browse the Website or submit information requests to the Data Controller, except that you will not be able to receive newsletters.
We kindly ask you not to provide sensitive/particular data during the use of interactive services. This includes data that may reveal, among other things, racial or ethnic origin, religious beliefs, political opinions, membership in parties, trade unions, associations, or organizations of a religious, philosophical, political, or trade union nature, as well as health status. Any sensitive data provided will be promptly deleted.
e. Data Processors and Data Disclosure Your personal data may be accessed by employees and/or collaborators of Giolina e Angelo who are responsible for carrying out activities necessary to achieve the processing purposes stated in sections b.1, b.2.1, and b.2.2, and - if you have given your consent - b.3.
Furthermore, IT and logistics service providers, outsourcing service providers, professionals, consultants, and companies responsible for sending newsletters (if you have given your consent) may also become aware of your data.
These individuals, formally appointed by the Data Controller as Processors, Data Controllers, and/or System Administrators, will process your data in compliance with and exclusively for the purposes indicated in this statement, under the control and supervision of the Data Controller.
Your data may also be disclosed to third-party providers, such as shipping companies, who will process the data as Data Processors appointed by Giolina e Angelo or, depending on the case, as independent Data Controllers, solely for the purpose of contacting you, provided you have given your consent.
The complete and up-to-date list of entities to which your data has been disclosed can be requested from the Data Controller by contacting them at the email address indicated in point h).
f. Data Disclosure The Data Controller will not engage in any activities involving the dissemination of your personal data.
g. Data Transfer Abroad Your personal data may be transferred to the headquarters of MailChimp, a mailing service provider appointed as a Data Processor, located in the United States.
In this case, in order to verify the conditions and legal basis of such transfers, please refer to the following link: https://mailchimp.com/legal/privacy.
h. Data Subject Rights Finally, we inform you of the possibility to exercise the rights granted to you by law at any time. These rights include:
• Access to the provided data. • Obtaining the rectification, erasure, anonymization, blocking of data processed in violation of the law, or the limitation of data processing concerning you. • Objecting to the data processing. • Withdrawing your consent. • Obtaining the portability of your data. • Obtaining confirmation of the existence of your data, knowing its content and origin, verifying its accuracy, or requesting its integration or updating. You may also know the purposes and methods of the processing, the logic applied in case of processing carried out with electronic means, the identification details of the Data Controller, Data Processors, individuals in charge, and the Data Protection Officer (if appointed). • Filing a complaint with the supervisory authority (Garante Privacy). • Objecting to automated decision-making processes concerning individuals, including profiling. • Being promptly informed of any breaches of your personal data.
Requests should be addressed:
via email, to the following address: email@example.com
or by mail, to the following address: Via Solferino 22/A, 20121 Milan, Italy.
i. Data Retention Period The data provided by you for the purposes described in sections b.1, b.2.1, and b.2.2 above will be stored for the time necessary to process your information request and subsequently for the duration of the contract, if concluded, as a result of your information request. Afterward, the data provided by you may be retained for a period of ten years in order to comply with legal obligations, particularly those specified in Article 2214 of the Civil Code.
Any further retention of your data may occur for the purpose of asserting or defending our rights, including in legal proceedings, until the expiration of the applicable statute of limitations, as provided by current legislation, but in any case not exceeding ten years from the date of your product order.
Only if you have also provided your consent for the purpose described in section b.3) above, your data will be retained for a period of two years.
In the event of withdrawal of your consent and/or if, for any reason, the retention of your personal data is no longer justified based on assessments considering the principles of necessity, proportionality, adequacy, and relevance of the processing, the Data Controller will promptly proceed with the deletion or anonymization of your data.
l. Data Controller The Data Controller is Giolina e Angelo S.R.L., VAT number IT05668640963, registered with the Companies Register of Milan (Italy) under number 1839168, with headquarters at Via Solferino 22/A, 20121 Milan (Italy) – email: firstname.lastname@example.org.
With this document, in accordance with Articles 13 and 122 of the Privacy Code, as well as the General Provision of the Privacy Guarantor dated May 8, 2014, and the Privacy Regulation (Article 95, in particular), the Data Controller provides you with the following information regarding the cookies used on the website.
The following cookies are used:
Cookie Category Description Duration PHPSESSID Necessary for the functioning of the website _GPSLSC Necessary for the functioning of the website displayCookieConsent Necessary for the consent popup pll_language Necessary for saving the language used by the user on the website woocommerce_cart_hash Necessary for the functioning of the shopping cart woocommerce_items_in_cart Necessary for the functioning of the shopping cart
Technical cookies: These cookies are used solely for "carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary to the provider of an information society service explicitly requested by the subscriber or user to provide that service." They are used for navigation or to provide a service requested by the user. They are not used for any other purposes and are usually installed directly by the website owner. Without these cookies, certain operations may not be possible or would be more complex and/or less secure. They can be divided into: (i) navigation or session cookies, which ensure the normal navigation and use of the website (e.g., allowing a purchase or authentication to access restricted areas); they are necessary for the proper functioning of the website; (ii) analytics cookies, similar to technical cookies when used directly by the website manager to collect information, in aggregated form, about the number of users and how they visit the website, in order to improve the website's performance; (iii) functionality cookies, which allow the user to navigate based on selected criteria (e.g., language, products selected for purchase) to improve the service provided to the user.
Session duration 12 hours 1 year 1 year Session duration Session duration
For any inquiries or requests related to cookies, you can contact:
Address: Via Solferino 22/A, 20121 Milan, Italy
Google Analytics uses "cookies," which are text files placed on your computer, to allow the website to analyze how users utilize the site.
The information generated by the cookie about your use of the website (including your anonymous IP address) will be transmitted to and stored on Google servers in the United States. Google will use this information to examine your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.
You can prevent Google from tracking a cookie generated by and related to your use of this website (including your IP address) and the processing of such data by downloading and installing this browser plugin: http://tools.google.
What are cookies?
A "cookie" is a small text file created on the user's computer when they access a specific website, with the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer running the visited website) to the user's browser (Internet Explorer, Mozilla Firefox, Google Chrome, Opera, etc.) and stored on their computer. They are then resent to the website during subsequent visits.
Types of cookies used by the Website
As listed in the table above, the Website only uses technical and analytical cookies from Google. Regarding these cookies, no consent is required from you, as stated in Article 122 of the privacy code, the Authority's Provision of May 8, 2014, and the Privacy Regulation (Article 95, in particular).
You can find more information about the cookies mentioned in the table above at the following links:
The processing is carried out using automated tools designed to ensure the security and prevent unauthorized access by third parties, in accordance with the purposes for which the data was collected, and in compliance with national and European regulations. The processing is performed by the Data Controller, External Data Processors, and specifically authorized Data Processors. No data dissemination is carried out.
Provision of Data
With the exception of technically necessary cookies for normal navigation, as well as Google analytical cookies for which you can find more information at the link https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008, the provision of data is subject to your willingness if you decide to browse the Website after having read the brief information contained in the appropriate banner and to use third-party services that require the installation of cookies.
You can avoid the installation of cookies by keeping the banner (refraining from closing it by clicking the "Accept and Close" button) and by using the appropriate functions available in your browser.
In addition to what is stated in this document, you can manage your cookie preferences directly within your browser and prevent, for example, third parties from installing them. Through the browser preferences, you can also delete previously installed cookies, including the cookie that may have stored your consent to the installation of cookies by the Website.
The Internet browser provides instructions on how to carry out these deletion procedures, and you are encouraged to consult it if interested.
Data Transfer to Foreign Countries
The Website may share some of the collected data with services located outside the European Economic Area (EEA). In particular, with Google, Facebook, and Instagram through social plugins and the Google Analytics service. This transfer is authorized based on specific decisions of the European Union and the Privacy Authority, particularly Decision 1250/2016 (Privacy Shield - see the informative page of the Italian Privacy Authority), so no further consent is required. The aforementioned companies ensure their adherence to the Privacy Shield.
Each browser has different procedures for managing settings. You can obtain specific instructions through the links below.
Internet Explorer: http://windows.microsoft.com/en-us/windows7/block-enable-or-allow-cookies
Apple Safari: https://www.apple.com/legal/privacy/en-ww/cookies/
For information about cookies stored on your device and how to disable them individually, please refer to the link: http://www.youronlinechoices.com/
Suggested retention period for marketing data based on the indications of the Italian Privacy Authority. It is necessary to implement a consent tracking system for verification and deletion of data/refresh on a 24-month basis.