PRIVACY POLICY
pursuant to EU Regulation no. 679/2016 ("GDPR") and of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018
This information (hereinafter "Information") is provided pursuant to EU Regulation 679/2016 and the subsequent national adaptation legislation (hereinafter, collectively "GDPR") and describes how the company identified in point 2. below collects and processes the Personal Data (the term "Personal Data" will mean all the categories listed in point 3. below, jointly considered) of users or customers and covers data collection activities - both online and offline - through the various channels, such as websites web in particular www.loveforsicily.com (hereinafter "Site") the apps, social networks, physical stores, and, more generally, all collection activities in which express reference is made to this Privacy Policy.
The company "Intex srl" (hereinafter "Intex") - as identified below - may modify, supplement or periodically update this Information, also in consideration of any changes to the applicable legislation or provisions of the Guarantor for the Protection of Personal Data. Substantial changes and updates to the Information will be applied and brought to the attention of the interested parties as soon as they are adopted by updating the link to the Privacy Information in the footer of the Site. Intex invites the user to consult this Information regularly to know the latest. updated version in order to always be informed about the way in which Personal Data is collected and used by the same. In the event of changes that significantly affect the rights of the registered user, Intex will inform registered users via e-mail and the communication will be made with reasonable notice.
WHO WE ARE
Intex S.r.l. as the owner of the processing of personal data (hereinafter also the "Controller"), in carrying out its activities it pays the utmost attention to the security and confidentiality of personal data.
Intex deals with:
- manage the website www.loveforsicily.com (e.g. website operation, cookies, e-commerce)
- organize activities related to virtual stores and manage the purchase of products and services from the virtual store.
WHAT PERSONAL DATA CONCERNING YOU MAY BE COLLECTED
The Data Controller may independently collect some categories of personal data concerning you for its business (the term "Personal Data" will mean all the categories listed below, considered jointly). In particular, Intex can collect:
- Contact details - name, surname, address, telephone, e-mail address and any other data you voluntarily provided within the Sites to proceed with online orders and to register.
- Demographics and interests - data describing your demographic characteristics or habits, such as date of birth, age or age group, gender, geographic origin (postcode / zip code), preferred products, hobbies and interests and information about family or lifestyle.
- Payment data - information relating to the purchase made by you and the related payment (e.g. credit / debit card number, IBAN). These data will be processed to the extent necessary in the event of periodic payments, and if you have not opposed the processing by changing your settings from "My account" of the Site, from the "Payment Methods" section saved for subsequent purchases.
- Use of the website - information relating to the ways in which you use the Site, open or forward our communications, including information collected through cookies (you can find our Cookie Policy, which regulates the details); Data provided by third parties (ex: postal service companies, couriers, data entry companies) - all Personal Data that Intex receives from other sources to perform its services.
- Social Log-In - information relating to your Social account as well as other data you have provided to the Social Network used to log in to the Site, which can be communicated based on the privacy preferences you have set on this Social Network .
As a rule, Intex will not process Personal Data concerning personal beliefs, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, information relating to health, sexual life or sexual orientation (hereinafter "Special Categories of Data"). In the event that it is necessary to process the Special Categories of Data, Intex undertakes to process such data in accordance with the applicable legislation. The legal basis of this processing is, as a rule, the fulfillment of a legal obligation, it being understood that Intex will ask for your explicit consent if there is no concreto legal obligation for the processing of such data.
HOW WE COLLECT YOUR PERSONAL DATA
The Data Controller may collect and process your Personal Data in the manner described below.
Intex collects your Personal Data:
- if you register on the Sites or if you register via apps, social networks or other websites in the ownership or availability of Intex;
- if you make online purchases or sign up for loyalty programs, or prize events, or for the release of Intex;
- if you subscribe to the newsletter relating to the virtual store.
- if you contact Customer Service;
If you provide Personal Data on behalf of someone else, you must always ensure, in advance, that the interested parties have read this Privacy Policy and that they have given their consent where necessary. The Owner asks you to help keep your Personal Data updated, informing you of any changes.
COMPULSORY OR OPTIONAL NATURE OF THE CONFERRAL OF DATA AND CONSEQUENCES OF ANY REFUSAL TO PROVIDE DATA
The Personal Data required for registration on the Site are necessary to allow the registration itself, as well as the data required to allow you to use the purchase and / or booking and / or online order functionality. Unnecessary Personal Data are not identified with an asterisk in the various forms and may not be returned without any consequence.
FOR WHAT PURPOSES MAY YOUR PERSONAL DATA BE USED
The Data Controller may process your Personal Data for one or more of the purposes listed below and on the basis of the legal prerequisite indicated from time to time.
A) Fulfillment of purchase orders formulated through the Site and activities related to order management (eg: providing e-commerce services, sales and after-sales customer assistance, communications with the customer on the status of the order, receiving requests for information regarding the products purchased, payment management, reporting, home delivery, etc.), as well as to ensure the correct fulfillment of the obligations established by law;
Your contact details and payment details may be processed by the Data Controller in order to fulfill your purchase order formulated by filling in the appropriate form on the Site.
Prerequisite for processing: execution of a contract of which the interested party is a party and fulfillment of the legal obligations related to this contract. The provision is mandatory to process your order; failing that we will not be able to give you course.
B) Registration on the Site, also through the Social Log-In system - to simplify registration operations using the information already provided to your Social Network
Intex may process the contact details to allow you to complete the registration procedure on the Site and allow you to access your Personal Area in order to: (i) download documents relating to the services you have purchased from your Personal Area; (ii) to process other requests made through the website. Registration on the Site may take place, if you voluntarily decide to use it, also with the mechanism of the Social Log-In. In this way you will not have to enter the data necessary for registration (such as contact data), which will instead be communicated by the Social Network through which the Log-In is made. It should be noted that in this case Intex will be able to process the Social Log-In data, i.e. not only those relating to your Social account but also any other personal data that could be made visible according to the preferences you set or based on the privacy policy. of the same Social Network. We therefore invite you to read the privacy policy of your Social Network, also for further information regarding these preferences.
Prerequisite for processing: fulfillment of contractual obligations, to allow you to register on the Site, it being understood that you are not obliged to use the Social Log-In to complete the registration.
C) Account management in case of registration on the Sites for the use of the related services
The use of the Sites does not require the creation of a personal account; however, to access some pages reserved for registered users, you will have to create one and become, in this way, a registered user.
The Personal Data you provide may be processed by Intex for the management of your personal account on the Site.
Prerequisite for processing: execution of pre-contractual measures requested by the interested party and execution of a contract of which the interested party is a party. The provision is mandatory for the creation and management of the account; failing that we will not be able to give you course.
D) Join and execute the loyalty programs launched by the Owner (eg cashback) and / or the agreements stipulated between Intex. and various entities (both public and pr ivati) and to proceed with the release and management of the relative cards necessary to take advantage of the relative prizes and / or discounts connected to these programs and / or agreements.
Your contact details and payment details may be processed by Intex for the purpose of managing the loyalty programs and / or to adhere to the aforementioned agreements, as well as for the issue of the relative card and allow you to take advantage of the relative rewards and / or discounts associated with these programs and / or agreements. The conferment is mandatory to allow participation in these programs and conventions.
Prerequisite for processing: execution of a contract of which the interested party is a party and fulfillment of the legal obligations related to this contract.
The provision is mandatory to implement the aforementioned loyalty programs; failing that we will not be able to give you course.
E) Marketing activities
Your contact details may be processed by Intex for marketing and advertising communication purposes (also personalized, in the event of consent given pursuant to point G below), made through automated contact methods (e-mail, sms and other messaging tools mass, etc.) and traditional methods of contact (for example, paper mail, telephone call with operator) or for market research and statistical surveys, where you give us specific consent and within the limits of what is described in the relative formula.
Your contact details may also be processed by Intex for the periodic sending of direct communications to inform you about promotional sales initiatives, including periodic ones (eg. Newsletters aimed at keeping you updated on products and services or initiatives promoted by the owners).
Prerequisite for processing: the consent of the interested party.
Failure to give consent to marketing activities does not have consequences on contractual relationships. The consent can be revoked at any time by means of the contacts indicated below in the section "Your rights regarding data protection". Furthermore, you may at any time indicate the contact method you prefer among those listed above and may oppose the receipt of promotional communications through all or only some of these contact methods.
F) Sending newsletters for the promotion of products and services similar to that of a previous purchase.
Your contact details relating only to e-mail coordinates may be used by Intex for promotional purposes relating to products and services similar to those of your purchase. After making a purchase on the Site, the user will receive the Newsletter relating to similar products or services offered on the Sites.
Prerequisite for processing: Intex's legitimate interest in maintaining an effective contractual relationship with you.
Your right to object to this treatment remains valid immediately (i) through the specific link at the end of each e-mail, (ii) by changing your preferences from the "My account" section on the Sites, or (iii) to by means of the contacts indicated below in the section "Your rights regarding data protection". The user can also modify or enrich his preferences at any time through the appropriate link on the website www.lovefortaste.it, expressing his consent to be contacted regarding offers on products of interest.
G) Profiling activity
The Data Controller may use the Personal Data for profiling purposes including, by way of example, the processing of Personal Data relating to your choices, purchasing habits and preferences, the geographical area of reference, analysis of data relating to any registration to the Site and use of the same, goods or services purchased, consumption range, level of expenditure incurred, active services, frequency of use, as well as for the creation of profiles (individual and / or aggregated) for the improvement of services and / or products offered by Intex, as well as to propose personalized commercial communications that could be of interest to you in the event of consent pursuant to point E) above. The profiling activity can also be carried out using the data collected for the purposes referred to in point D) above.
Prerequisite for processing: the consent of the interested party.
Failure to give consent to profiling activities does not have consequences on contractual relationships. The consent can be revoked at any time by means of the contacts indicated below in the section "Your rights regarding data protection", also in relation to the methods of processing your data.
H) Defense of rights during judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered
Your Personal Data may be processed by Intex for di violate your rights or act or even make claims against you or third parties.
Prerequisite for processing: Intex's legitimate interest in protecting its rights.
You have the right to object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The objection request must be addressed to the following address: info@loveforsicily.com
I) Analysis and improvement of services
Your Personal Data may be processed by the Data Controller to analyze and improve its services with a view to customer satisfaction by measuring the degree of customer satisfaction with regard to the services and / or products provided (e.g. purchases, courses, events etc. ) and to collect other useful information in order to adapt their processes to what will emerge from the survey itself.
Prerequisite for processing: Intex's legitimate interest in maintaining an effective contractual relationship with you.
You have the right to object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The objection request must be addressed to the following address: info@loveforsicily.com
HOW WE KEEP YOUR PERSONAL DATA SECURE
Intex uses appropriate security measures in order to improve the protection, security, integrity and accessibility of your Personal Data. All your Personal Data are stored on our protected servers (or paper copies suitably stored) or on those of our suppliers, and are accessible and usable according to our standards and security policies (or equivalent standards for our suppliers) .
HOW LONG WE KEEP YOUR DATA
The Data Controller keeps your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose.
Your personal data that are no longer necessary, or for which there is no longer a legal prerequisite for its conservation, will be irreversibly anonymised or securely destroyed.
Below are the storage times in relation to the different purposes listed above:
to. Fulfillment of purchase orders formulated through the website and activities related to order management: the Personal Data processed for the execution of the purchase order through the Sites will be held by Intex for the time necessary to manage contractual obligations and subsequently for 10 years.
b. Account management in case of registration on the Sites for the use of the related services: the Personal Data processed to manage the accounts on the Sites will be kept by Intex for 24 months from the date of your registration on the Sites.
c. Adhere and execute the loyalty programs launched by Intex (e.g. cashback) and / or the agreements stipulated between the Data Controller and various entities (both public and private): the Personal Data processed for the execution of loyalty programs and / or conventions will be held by Intex for the time necessary to manage the contractual obligations and subsequently for 10 years.
d. Promotion of products similar to that of a previous purchase: the Personal Data processed for this purpose may be kept by the Data Controller for 24 months from the date of your previous purchase (unless you object to it previously).
is. Marketing activities to provide promotional offers: the Personal Data processed for this purpose may be kept for 24 months from the date on which the Data Controller obtained your last consent for this purpose (unless you have revoked it earlier).
f. Profiling Activity: the Personal Data processed for this purpose may be kept for 12 months from the date on which the Data Controller obtained your last consent for this purpose (unless you have revoked it earlier).
g. Defend your rights during the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered: the Personal Data processed for this purpose will be kept by the Data Controller for 10 years.
h. Analyze and improve your services: the Personal Data processed for this purpose will be kept by the Data Controller for 12 months.
WITH WHO WE CAN SHARE YOUR PERSONAL DATA
Your Personal Data may be accessed by duly authorized employees of the Data Controller, as well as external suppliers, appointed, if necessary, as data processors, who provide support for the provision of services, including those necessary for the operation of the Site.
Please contact us at the address below if you wish to ask to be able to view the list of data processors and other subjects to whom we communicate the Personal Data: info@loveforsicily.com
CONTACTS
The contact details of the Data Controller of personal data are as follows:
- Intex Srl, with registered office in Gravina di Catania (CT), via Giuseppe simile n. 21, ZIP Code 95030, Tax Code / VAT Number: 05077180874, PEC address societaintexsrl@pec.it He can be contacted by the Data Controller via the email address info@loveforsicily.com (appointed DPO).
YOUR RIGHTS REGARDING DATA PROTECTION AND YOUR RIGHT TO MAKE COMPLAINTS BEFORE THE SUPERVISORY AUTHORITY
Under certain conditions you have the right to ask:
- access to your personal data;
- the copy of the personal data you have provided us (so-called portability),
- the correction of the data in our possession;
- the cancellation of any data for which the Owners no longer have any legal basis for processing;
- the withdrawal of your consent, in the event that the processing is based on consent;
- the limitation of the way in which the Data Controllers process your personal data, within the limits established by current legislation.
Right to object: You have the right to object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The objection request must be addressed to the following address: info@loveforsicily.com
The exercise of the aforementioned rights is subject to some exceptions aimed at safeguarding the public interest (for example the prevention or identification of crimes) and the interests of the Owner. In the event that you exercise any of the aforementioned rights, it will be the responsibility of the Data Controller to verify that you are entitled to exercise it and you will usually be notified within one month.
For any complaints or reports on the methods of processing your data, the Data Controller will make every effort to respond to your concerns. However, if you wish, you can forward your complaints or reports to the authority responsible for data protection, using the relevant contact details: Guarantor for the protection of personal data - E-mail: garante@gpdp.it - Certified mail: Protocol@pec.gpdp.it