Privacy and Cookie Policy

DATA CONTROLLER AND CONTACT DETAILS

LISCIANI GIOCHI S.P.A. is the Data Controller of the personal data processed through the Website www.liscianigroup.com.

The registered office is in Via Giacomo Ruscitti, Zona Ind.le Sant’Atto, 64100 Teramo (Te), VAT 0072303672. For all privacy matters, please contact the following email address: [email protected], or the telephone number +39 0861 2311.

The Company Website has the following address: https://www.liscianigroup.com

DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS

Personal data collected through the compilation of the “Contacts” section on the Website will be processed in full compliance with the applicable legislation, guaranteeing the security, confidentiality and protection of the data in its possession, respecting the fundamental rights and freedoms that are recognised to the Data Subjects, in accordance with European Regulation 2016/679, hereinafter GDPR.

TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA

The personal data processed are those provided voluntarily and directly by the user by filling in the online forms. i form on-line.

Personal data collected: SURNAME, NAME, EMAIL AND PHONE NUMBER.

PURPOSES OF DATA PROCESSING

Personal data are processed to fulfil requests for information regarding the products/services offered and any commercial or other requests made by filling in the forms.

LEGAL BASIS

The legal basis for the processing is the execution of pre-contractual measures or the contract with regard to the fulfilment of requests made by filling in the form, and personal data are acquired by the Data Controller exclusively to manage users’ requests for assistance and information.

RECIPIENTS AND CATEGORIES OF RECIPIENTS

The personal data processed by the Data Controller will not be disclosed.

On the other hand, the data may be communicated to the Data Controller’s employees and to external parties who collaborate with the same, designated as Data Processors (such as third party technical service providers, postal couriers, hosting providers, IT companies) or authorised to process the data as they operate under the authority of the Data Controller, or other parties involved in the organisation of this Website (administrative, sales, legal and system administrator personnel).

Finally, the data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes against the Website, the data may be communicated to, or allocated to, third parties.

The updated list of the Data Processors can always be requested from the Data Controller.

This is without prejudice to the obligation of LISCIANIGIOCHI S.p.a. to communicate data to Public Authorities upon specific request.

TRANSFER ABROAD

The data are processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or to international organisations.

However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR 2016/679. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller’s employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated.

DURATION OF PROCESSING

Data provided voluntarily by the user will be stored for a period of time not exceeding the fulfilment of the purposes for which they are processed or in accordance with the deadlines provided for by law.

In this case, the data entered in online forms will be stored for a maximum of 12 months or for the duration of the product warranty (as requests may also relate to technical support for products during the warranty period).

METHODS AND NATURE OF PROVISION

The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.

Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.

SECURITY MEASURES

The transfer, retention and processing of the Data Subject’s data collected through the Website are ensured through appropriate technical and security measures, specifically:

All the information of the Data Subject is protected with the access keys that the user has chosen himself, passwords are not recorded in clear text.

The Website has an encrypted HTTPS connection.

A secure e-commerce platform is used, with built-in security protocols.

Strong passwords are used.

Data is collected, stored and maintained on a secure server, protected by a firewall and physically located in an access-controlled web farm in the EU.

RIGHTS OF THE DATA SUBJECTS

In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 21), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.

In particular, the Data Subject has the right to:

· Revoke consent at any time (where required)

· Oppose the processing of their data

· Access to their own Data

· Verification and rectification

· Restriction of processing

· Deletion or removal of their personal data

· Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.

How to exercise your rights

If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing to [email protected] using the “Exercise of Personal Data Protection Rights Form“. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

AUTOMATED PROCESSING

The Data Controller does not, under any circumstances, carry out processing operations consisting of automated decision-making processes on the data of natural persons with regard to the processing operations indicated below.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 14/10/2021

DATA CONTROLLER AND CONTACT DETAILS

LISCIANI GIOCHI S.P.A. is the Data Controller of the personal data processed through the Websitewww.liscianigroup.com.

The registered office is in Via Giacomo Ruscitti, Zona Ind.le Sant’Atto, 64100 Teramo (Te), VAT 0072303672. For all privacy matters, please contact the following email address: [email protected] ,or the telephone number +39 0861 2311.

The Company Website has the following address: https://www.liscianigroup.com

DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS

Personal data collected by filling in the registration form for the reserved area or by requesting assistance from the helpdesk, present on the Website will be processed in full compliance with the applicable legislation, guaranteeing the security, confidentiality and protection of the data in its possession, respecting the fundamental rights and freedoms that are recognised to the Data Subjects, in accordance with European Regulation 2016/679, hereinafter GDPR.

TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA

The data are collected from the Data Subject and are provided directly when creating an account in the reserved area.

Data collected with REGISTRATION IN THE RESERVED AREA: name, surname, email, telephone, address, type of user, VAT number, tax code, date of birth.

PURPOSES OF DATA PROCESSING

Personal data is processed for the following purposes:

1. to authorise access to the Reserved Area and provide the services requested;

2. to inform the Data Subject that content and documents of interest are available in the Reserved Area;

3. to provide customer assistance on its products/services;

4. fulfilment of administrative and accounting requirements strictly related to the service, such as the purchase of products;

5. fulfilment of specific obligations laid down by law, regulation or Community legislation;

6. in the event of loss of access credentials, activate the procedure that allows the recovery of the password and its reset;

7. to pursue the legitimate interests of the Data Controller, including, where necessary, to assert or defend a right in court.

LEGAL BASIS

The processing of data for the purposes referred to is necessary for the performance of a contract or pre-contractual measures (Article 6, paragraph 1, letter b of the GDPR) and the pursuit of the legitimate interest of the Data Controller (Article 6, paragraph 1, letter f of the GDPR) to possibly assert or defend a right in court.

With reference to the purposes referred to in paragraph 1 above, the provision of personal data is optional but is a necessary requirement for the provision of the service; in fact, failure to provide such data makes it impossible to receive access credentials to the reserved area.

RECIPIENTS AND CATEGORIES OF RECIPIENTS

The personal data processed by the Data Controller will not be disclosed.

On the other hand, the data may be communicated to the Data Controller’s employees and to external parties who collaborate with the same, designated as Data Processors (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies, website management and development service providers, support services and maintenance of servers and networks, intra-structure supplier of the online shop, customer assistance services) or authorised to process the data as they operate under the authority of the Data Controller, or other parties involved in the organisation of this Website (administrative, sales, marketing, legal and system administrator personnel).

Finally, the data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes against the Website, the data may be communicated to, or allocated to, third parties.

The updated list of the Data Processors can always be requested from the Data Controller.

This is without prejudice to the obligation of LISCIANIGIOCHI S.p.a. to communicate data to Public Authorities upon specific request.

TRANSFER ABROAD

The data are processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or to international organisations outside the EU.

However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller’s employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools will be applied.

DURATION OF PROCESSING

The Data Controller retains and processes personal data for the time necessary to fulfil the purposes indicated, i.e. for the period for which the Data Controller will maintain the service active.

The data will be kept for as long as the account is active unless regulatory obligations introduce higher processing.

In the event of legal disputes, for the entire duration of the dispute, until the time limit for appeals has expired.

METHODS AND NATURE OF PROVISION

The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.

Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.

The provision of data for the aforementioned purposes is entirely optional. Any refusal by the Data Subject to provide personal data, the lack of consent or its revocation for one or more purposes, will make it impossible to use the services related to them.

SECURITY MEASURES

The transfer, retention and processing of the Data Subject’s data collected through the Website are ensured through appropriate technical and security measures, specifically:

All the information of the Data Subject is protected with the access keys that the user has chosen himself, passwords are not recorded in clear text.

The Website has an encrypted HTTPS connection.

A secure e-commerce platform is used, with built-in security protocols.

Strong passwords are used.

Data is collected, stored and maintained on a secure server, protected by a firewall and physically located in an access-controlled web farm in the EU.

RIGHTS OF THE DATA SUBJECTS

In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 21), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.

In particular, the Data Subject has the right to:

· Revoke consent at any time (where required)

· Oppose the processing of their data

· Access to their own Data

· Verification and rectification

· Restriction of processing

· Deletion or removal of their personal data

· Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.

How to exercise your rights

If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing to [email protected] using the “Exercise of Personal Data Protection Rights Form“. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

AUTOMATED PROCESSING

The Data Controller does not, under any circumstances, carry out processing operations consisting of automated decision-making processes on the data of natural persons with regard to the processing operations indicated below.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 14/10/2021

DATA CONTROLLER AND CONTACT DETAILS

LISCIANI GIOCHI S.P.A. is the Data Controller of the personal data processed through the Website www.liscianigroup.com.

The registered office is in Via Giacomo Ruscitti, Zona Ind.le Sant’Atto, 64100 Teramo (Te), VAT 0072303672. For all privacy matters, please contact the following email address: [email protected], or the telephone number +39 0861 2311.

The Company Website has the following address: https://www.liscianigroup.com

DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS

The personal data of users who make purchases online (e.g. management of orders, sale and delivery of products via third party courier, management of returns and warranties and other activities necessary for the sale of products via e-commerce) with or without access to the reserved area, collected by filling in the relevant forms, present on the Website, will be processed in full compliance with applicable legislation, guaranteeing the security, confidentiality and protection of the data in its possession, respecting the fundamental rights and freedoms that are recognised to the Data Subjects, in accordance with European Regulation 2016/679, hereinafter GDPR.

TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA

The personal data processed are those provided voluntarily by the user by filling in the online registration forms in the RESERVED AREA or by making a purchase WITHOUT REGISTRATION.

In particular:

1. data collected with REGISTRATION IN THE RESERVED AREA: name, surname, email, telephone, address, VAT number, tax code, date of birth, system log, data relating to purchases made and other non-specific data.

2. data collected for ON-LINE PURCHASES WITHOUT REGISTRATION: name, surname, company/company name, VAT number, tax code, data relating to purchases made.

The data are collected from the Data Subject and are provided directly by the Data Subject at the time of purchase.

PURPOSES OF DATA PROCESSING

Personal data are processed to allow customers to make online purchases, with the following purposes:

a. to allow registration to e-commerce and manage access to the relevant services;

b. to allow and facilitate the purchase of products online and the eventual conclusion of the purchase contract through e-commerce;

c. to maintain and manage the account created following registration;

d. to allow the products to be placed in the shopping cart and to conclude and execute the purchase contract via e-commerce;

e. to deliver the products sold by courier;

f. to fulfil all legal obligations connected with the relative administrative, accounting, fiscal and financial processes connected with the provision of the product or service supplied;

g. to protect contractual rights or rights arising from relations between the parties;

h. internal reporting and controls.

i. to manage and possibly block fraudulent or illegal uses of e-commerce;

j. to ensure compliance with the Data Controller’s contractual rights and related legitimate interests (e.g.: to demonstrate that it has fulfilled its obligations under the contract with the Data Subject or imposed by law).

LEGAL BASIS

The legal bases of the processing consist of:

· performance of a contract or pre-contractual measures (Article 6, paragraph 1, letter b of the GDPR) for the purposes a) to e);

· fulfilment of a legal obligation (Article 6, paragraph 1, letter c of the GDPR) for the purpose f);

· pursuit of a legitimate interest (pursuant to Article 6, paragraph 1, letter f of the GDPR) for the purposes g) to j).

RECIPIENTS AND CATEGORIES OF RECIPIENTS

The personal data processed by the Data Controller will not be disclosed.

On the other hand, the data may be communicated to the Data Controller’s employees and to external parties who collaborate with the same, designated as Data Processors (such as third party technical service providers, postal couriers, hosting providers, IT companies, website management and development service providers, support services and maintenance of servers and networks, intra-structure supplier of the online shop, customer assistance services) or authorised to process the data as they operate under the authority of the Data Controller, or other parties involved in the organisation of this Website (administrative, sales, marketing, legal and system administrator personnel).

Finally, the data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes against the Website, the data may be communicated to, or allocated to, third parties.

The updated list of the Data Processors can always be requested from the Data Controller.

For credit card data, the Stripe platform is used (https://stripe.com/it), the data are not processed by Lisciani Spa, but solely by that platform.

For transactions made by the User/Data Subject through the Stripe platform, see the Privacy Policy: https://stripe.com/it.

In case of payment on delivery, specific processing will be carried out by the courier.

This is without prejudice to the obligation of LISCIANIGIOCHI S.p.a. to communicate data to Public Authorities on specific request.

TRANSFER ABROAD

The data are processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or to international organisations outside the EU.

However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller’s employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools will be applied.

DURATION OF PROCESSING

The Data Controller retains and processes personal data for the time necessary to fulfil the purposes indicated, i.e. for the period for which the Data Controller will maintain the service active:

– Registration data will be processed until the account is closed, taking into account the technical time required for this;

– The retention period of personal data for the purposes of legal obligations is 10 years from the end of the contractual or commercial relationship.

– The retention period of personal data for the purpose of pre-contractual activities, in case of non-finalisation of the purchase, is 5 months from the acquisition of the data.

At the end of this period, the data will be deleted or made anonymous, unless their further retention is necessary to fulfil contractual obligations, legal obligations or to comply with orders issued by Public Authorities and/or Supervisory Bodies, as well as to prevent fraudulent activities or in the event of litigation.

METHODS AND NATURE OF PROVISION

The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.

Il trattamento dei dati personali avviene mediante strumenti manuali, informatici e telematici con logiche strettamente correlate alle finalità stesse e, comunque, in modo da garantirne la sicurezza e la riservatezza.

Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality. The provision of data takes place in the fields of the registration form in the personal area of e-commerce; or in the fields of the order form when purchasing without registering. The provision of data for the aforementioned purposes is entirely optional. Should the Data Subject refuse to provide the data, it will be impossible to proceed with the purchase and, therefore, to conclude the contract and receive the products selected through e-commerce.

SECURITY MEASURES

The transfer, retention and processing of the Data Subject’s data collected through the Website are ensured through appropriate technical and security measures, specifically:

All the information of the Data Subject is protected with the access keys that the user has chosen himself, passwords are not recorded in clear text.

The Website has an encrypted HTTPS connection.

A secure e-commerce platform is used, with built-in security protocols.

Strong passwords are used.

Data is collected, stored and maintained on a secure server, protected by a firewall and physically located in an access-controlled web farm in the EU.

RIGHTS OF THE DATA SUBJECTS

In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 21), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.

In particular, the Data Subject has the right to:

· Revoke consent at any time (where required)

· Oppose the processing of their data

· Access to their own Data

· Verification and rectification

· Restriction of processing

· Deletion or removal of their personal data

· Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.

How to exercise your rights

If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing to [email protected] using the “Exercise of Personal Data Protection Rights Form“. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

AUTOMATED PROCESSING

The Data Controller does not, under any circumstances, carry out processing operations consisting of automated decision-making processes on the data of natural persons with regard to the processing operations indicated below.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 14/10/2021

DATA CONTROLLER AND CONTACT DETAILS

LISCIANI GIOCHI S.P.A. is the Data Controller of the personal data processed through the Website www.liscianigroup.com.

The registered office is in Via Giacomo Ruscitti, Zona Ind.le Sant’Atto, 64100 Teramo (Te), VAT 0072303672. For all privacy matters, please contact the following email address: [email protected], or the telephone number +39 0861 2311.

The Company Website has the following address: https://www.liscianigroup.com

DESCRIPTION OF THE PROCESSING AND CATEGORIES OF DATA SUBJECTS

The personal data of newsletter subscribers are collected through the newsletter subscription form.

The processing is carried out in full compliance with the applicable legislation, guaranteeing the security, confidentiality and protection of the data in its possession and the fundamental rights and freedoms that are recognised, in accordance with the rules set out in the GDPR.

TYPES OF DATA COLLECTED AND ORIGIN OF THE DATA

The personal data processed are those provided voluntarily by the user by filling in the online forms and subscribing to the newsletter. Only the Data Subject’s EMAIL is collected.

PURPOSES OF DATA PROCESSING

– Newsletter/Direct marketing activities of the Data Controller:personal data are processed for sending e-mail newsletters, technical or commercial information concerning the services and products offered by LISCIANIGIOCHI S.p.a.

By subscribing to the mailing list/newsletter, the Data Subject’s email address is automatically included in a list of contacts to whom email messages containing information, informative messages also of a commercial, promotional and/or advertising nature may be sent periodically.

– Customer satisfaction surveys: personal data are processed for the purpose of sending customer satisfaction questionnaires by email.

LEGAL BASIS

The legal basis of the processing consists of the consent expressed by a statement regarding the sending of newsletters and sending questionnaires on your satisfaction (Article 6, paragraph 1, letter a GDPR). With reference to Article 7 of the GDPR, the Data Subject may revoke any consent given at any time. The revocation of consent, which can be carried out by means of the appropriate link in the footer of the email newsletter, results in the suspension of the sending of the newsletter. Any revocation shall not affect the lawfulness of the processing provided before the revocation.

RECIPIENTS AND CATEGORIES OF RECIPIENTS

The personal data processed by the Data Controller will not be disclosed.

On the other hand, the data may be communicated to the Data Controller’s employees and to external parties who collaborate with the same, designated as Data Processors (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies, website management and development service providers, support services and maintenance of servers and networks, intra-structure supplier of the online shop, customer assistance services) or authorised to process the data as they operate under the authority of the Data Controller, or other parties involved in the organisation of this Website (administrative, sales, marketing, legal and system administrator personnel).

Finally, the data may be communicated to the subjects entitled to access them under the provisions of the law, regulations, Community regulations. In order to comply with legal obligations or to ascertain responsibility in the event of computer crimes against the Website, the data may be communicated to, or allocated to, third parties.

The updated list of the Data Processors can always be requested from the Data Controller.

In particular, the infrastructure for managing and sending the newsletters is entrusted to Sendinblue S.p.a., registered office at 55 rue d’Amsterdam, 75008 Paris, France.

The updated list of the Data Processors can always be requested from the Data Controller.

This is without prejudice to the obligation of LISCIANIGIOCHI S.p.a. to communicate data to Public Authorities on specific request.

TRANSFER ABROAD

The data are processed at the Data Controller’s operational headquarters and in any other place where the parties involved in the processing are located, therefore the Data Controller does not transfer this personal data to third countries or to international organisations outside the EU.

However, the Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 of the GDPR. The equivalent levels of protection adopted for the processing of the personal data of the Data Controller’s employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided will be applied.

DURATION OF PROCESSING

The Data Controller retains and processes personal data for the time necessary to fulfil the purposes indicated, i.e. for the period for which the Data Controller will maintain the service active unless the Data Subject revokes consent. In each message, the User will be reminded that he/she has the right to unsubscribe from the service with a special link in the footer of each email.

METHODS AND NATURE OF PROVISION

The data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles of lawfulness and provisions of Article 5, paragraph 1 of the GDPR.

Personal data processing is carried out by means of manual, computerised and telematic tools with logic strictly related to the purposes and, in any case, in such a way as to guarantee security and confidentiality.

The provision of data for the aforementioned purposes is entirely optional. Any refusal by the Data Subject to provide personal data, the lack of consent or its revocation for one or more purposes, will make it impossible to use the services related to them

Failure to provide an email may make it impossible for you to receive the newsletter.

SECURITY MEASURES

The transfer, retention and processing of the Data Subject’s data collected through the Website are ensured through appropriate technical and security measures, specifically:

All the information of the Data Subject is protected with the access keys that the user has chosen himself, passwords are not recorded in clear text.

The Website has an encrypted HTTPS connection.

A secure e-commerce platform is used, with built-in security protocols.

Strong passwords are used.

Data is collected, stored and maintained on a secure server, protected by a firewall and physically located in an access-controlled web farm in the EU.

AUTOMATED PROCESSING

The Data Controller does not, under any circumstances, carry out processing operations consisting of decisions based on automated processes on the data of natural persons with regard to the processing operations indicated below.

RIGHTS OF THE DATA SUBJECTS

In accordance with, within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of Data Subjects (Articles 15 to 22), with regard to the processing operations covered by this Privacy Policy, as Data Subjects, users may exercise certain rights with reference to the data processed by the Data Controller.

In particular, the Data Subject has the right to:

· Revoke consent at any time (where required)

· Oppose the processing of their data

· Access to their own Data

· Verification and rectification

· Restriction of processing

· Deletion or removal of their personal data

· Portability

Furthermore, the Data Subject has the right to lodge a complaint with the competent Data Protection Supervisory Authority or take legal action if he/she considers that the processing operations concerning him/her are in breach of the GDPR, pursuant to Article 77 of the GDPR.

The Data Subject may revoke any consent given at any time by using the appropriate link in the footer of each newsletter email, resulting in the suspension of the sending of the newsletter.

How to exercise your rights

If you wish to request further information on the processing of your personal data or to exercise your rights, you may do so in writing to [email protected]using the “Exercise of Personal Data Protection Rights Form“. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users by email and on the Website. The Data Controller will collect the consent of the Data Subject again, if necessary.

Last modified: 14/10/2021