PERSONAL DATA PROCESSING POLICY
Vannucci S.p.A.
Vannucci S.p.A.
Pursuant to art.13 of the EU Reg. 2016/679 (GDPR) (below as “Regulation”), we gladly inform you that the personal data supplied by You, will be processed in compliance with the rights.
Data controller
The data controller is Vannucci S.p.A., in the person of the pro tempore legal representative, settled in Todi, Frazione Pantalla, Vocabolo Caselle n. 286/I, to Whom You can relate directly at the email address: info@vannuccichocolates.com
Kind of processed data
Personal data that will be processed: identification data (name, surname, e-mail address, phone number, address, tax code), economic data (for purchases), user’s passwords and codes.
Purpose of the data processing
Personal data will be processed with the purpose of contact You for what concerns Your requests about the user’s registration and purchases.
The legal basis of such treatment lies in the execution of a contract of which the interested party is a party either in the execution of pre-contractual measures adopted at the request of the same (Article 6, paragraph 1, letter B) of the Regulation) or in the prosecution of the legitimate interest of the data controller (Article 6, paragraph 1, letter f) of the Regulations)
Methods of the data processing
Data will be processed by automated or manual means (art. 32 of the Regulation), in matter of security measures, only authorized staff has access to your personal data (art. 29 del Regulation).
Your data will be processed following the principles of fairness, lawfulness, transparency for Your confidentiality and rights protection.
Place of the data processing
Data are collected at Vannucci S.p.A registered office. They could be, anyway, transmitted to other companies, if these work on our behalf as our service providers and we have contractually committed them to the same extent as our external service providers (art. 28 del Regulation).
All Your personal data will be processed in the EU territory.
Transmission of your data to third parties
We inform that Your personal data will not be subject to any disclosure without your specific consent. They could be, anyway, transmitted to other companies, if these work on our behalf as our service providers and we have contractually committed them to the same extent as our external service providers (art. 28 del Regulation).
Personal data shall only be disclosed towards government institutions and authorities within the framework of mandatory legal provisions.
Mandatory or optional nature of the data provision
Some data are essential for the establishment and execution of contractual relationship, while others can be defined as accessory. The data provision to the data controller is mandatory only for the data for which a contractual obligation is needed.
Consequences of an eventual deny of provision
When the data provision is expected by contractual obligations, the eventual deny would prevent the data controller from starting or proceeding with the contract, since it would be an unlawful treatment. Otherwise, the deny would not have the same consequences even if it would prevent the execution of the accessory operations.
The provision of Your data (name, surname, e-mail address, phone number, tax code, address) is necessary in order to answer to Your questions and/or to complete the web site registration process and/or to process You order. Failure to provide data determines, for the data controller, the impossibility for these operations to be completed.
Storage time of data
We inform that, according to art. 5 of the Regulation, your personal data will be stored for the necessary time for which they have been collected and processed.
Therefore, personal data stored with the purpose of registration, will be kept until the user will not ask for them to be erased, while data related to purchases will be kept for ten years, starting from the last order.
At the expiration of the above mentioned retention period or when the data controller could not proceed with the processing, your data will be erased or anonymized, expect for those essential to meet law obligations.
Existence of an automated decision-making, profiling included
The data controller does not adopt any automated decision-making, profiling included (art. 22 of the Regulation).
Your rights
By any moment, (art. 15 to 22 of the Regulation), You have the right to:
a) Ask for confirmation of the existence of your personal data;
b) Ask for some information concerning processing aim, personal data categories, recipients or recipients categories to whom personal data have been or will be transferred and, if possible, the storage time;
c) rectification or erasure of personal data;
d) get the restriction of data processing;
e) get data portability;
f) opporsi al trattamento in qualsiasi momento ed anche nel caso di trattamento per finalità di marketing diretto;
g) oppose to a automate decision-making process related to physical persons, profiling included;
h) revoke your consent to the processing of your personal data at any time in the future without prejudging the processing lawfulness, based on the consent given before its withdrawal.
i) lodge a complaint with the Data Protection Supervisory Authority.
For any further information or question, please do not hesitate to contact our privacy office at the e-mail address: info@vannuccichocolates.com
