INFORMATION FOR THE PROCESSING OF PERSONAL DATA FOR USERS
BARBATI WERTHER (ALEXANDER)
With the EU Regulation 679/2016, containing provisions for the protection of individuals with regard to the processing of personal data, the Company Barbati Werther based in Rimini, Corso D’Augusto,34, Tax Code BRBWTH51M30F257Y (hereinafter called "Company"), is required to provide certain information regarding the use of personal data. Barbati Werther is the person of the legal representative.
It should be noted also that the user at the time of the provision of data for the adhesion will be the person concerned about that processing.
- DATA PROTECTION OFFICER
The DPO designated by Barbati Werther who will represent the contact point for the interested parties, can be reached through the following contact channels:
Personal data (name, surname, city, e-mail address)) will be processed by Barbati Werther in order to provide the requested service.
Refuse to provide such data will make it impossible to use the service offered by Barbati Werther.
- SOURCES OF DATA AND TYPES OF DATA PROCESSED
The personal data of subjects who, for various reasons, have contractual relationships can be collected:
directly to the interested user
by entering their data on the platform called Alexander Boutique, which is accessed by registering and entering data in the form on the site www.alexanderboutique.it, by doing so you are registered as a user of the platform and you can get all the services offered by the platform.
The data can also be provided by associations / organizations / companies external to the Alexander Boutique’s platform of which the user belongs.
For data collected not directly from the interested person, this information is provided at the time of their registration and in any case no later than the first possible communication.
The data processed, where the existing relationship requires it, are personal data relating to people and possibly particular data but with the exclusion of sensitive ones.
- LEGAL BASIS
The data are processed for the explicit purposes of this information as well as on the legal basis of consent, also in order to comply with a contractual obligation deriving from the contractual adhesion.
- PROVISION OF DATA AND CONSEQUENCES OF FAILURE TO PROVIDE
The provision of data must be considered mandatory with regard to the treatments that the Company must carry out to fulfill its obligations towards the interested person on the basis of the relationship (or contract) in place, as well as legal obligations, rules, regulations. Failure to provide such data may make it impossible for the Company to proceed with the existing relationship. Consent is not mandatory for all other purposes and, if given, it can be revoked at any time by the interested person.
- PURPOSE OF DATA PROCESSING
The data are processed within the normal activity of the Company and according to the following contractual and legislative purposes, including the periodic updating of offers and services relating to the platform, which is part of the contractual obligations, as well as for technical and functional access to the website www.alexanderboutique.it, and also for statistical purposes and navigation analysis of the website. If the owner intends to further process personal data for a purpose other than that for which they were collected, he will provide to the interested person in advance any necessary information.
Provision of services requested by the interested party in the context of the existing relationship (or contract), in particular to access the site, obtain concessions, discounts, including the purposes of related legitimate interest or the fulfillment, implementation and management of obligations provided for law. For these purposes, in the case of a foreign customer, it may possibly be possible to transfer / communicate data abroad;
Market surveys, marketing activities, sending of material containing commercial information relating to products / services / courses already acquired or newly proposed, in any way (even with automated methods) and by any means carried out (eg by email, fax, telephone, post, social network, etc ...); with the clarification that where the interested person does not intend to accept the sending of newsletters which is necessary for the performance of the Company's business, it will not be possible to have any service from the Company itself.
Communications made through textual material / photos / audio / video via the internet, mailing, web and social media (eg Facebook, Linkedin, Instagram, Twitter, Youtube, etc ...) or on traditional media relating to the activities / initiatives managed by the Company that they may contain data and images of the interested party collected through interviews, narration of case studies, events, etc ...
It should be noted that the direct marketing activity (carried out by Barbati Werther) aims to collect and use relevant data limited to what is necessary with respect to the purpose for which they are processed, to process studies or research, market statistics, send advertising material and information, carry out direct activities or placement of products or services, send commercial information, make interactive commercial communications. The profiling activity, on the other hand, consists in the collection of information on commercial behavior and habits in order to improve the services offered based on the needs of customers who have given specific consent. With reference to marketing and profiling activities, it should be noted that, in the event of a lack of specific consent to the processing by the user, it will not be possible to carry out the aforementioned activities.
- DATA CONSERVATION PERIOD
Personal data will be kept for the period of time strictly necessary to pursue the specific purposes of the processing for which the user has given his consent and, specifically
For contractual purposes (provision of services) for the time necessary for the fulfillment of contractual obligations and, in any case, no later than 10 years from the time of the collection of your data for the fulfillment of regulatory obligations and, in any case, not beyond the terms established by law for the prescription of rights;
For the purposes of direct and indirect marketing and market research for 24 (twenty-four) months from the time the consent to treatment is given;
For profiling purposes for 12 (twelve) months from the moment of the release of the consent to the processing.
It is expected that a periodic check is made out on the data processed and the possibility of being able to delete them if no longer necessary for the intended purposes. The data are stored at the Barbati Werther company, based in Rimini, Corso D'Augusto, 34.
- METHOD OF DATA PROCESSING
The processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and in any case in such a way as to guarantee the security and confidentiality of the data. Documentation is archived both electronically and on paper. The collection and storage of personal data is limited to the minimum necessary for each specific purpose of the processing and only for the purposes for which they were collected. Personal data and any sensitive data are collected and processed electronically in encrypted form. No data is provided to third parties, without the prior consent of the user.
- SCOPE OF DIFFUSION AND CATEGORIES OF SUBJECTS
Personal data will be known and processed, in compliance with current legislation on the subject, by the staff of Barbati Werther identified as the person in charge of processing, in service at the relevant offices. The personal data collected by the Company may be communicated, within the limits strictly relevant to the aforementioned purposes, also to the following subjects or categories of subjects:
Subjects to whom communication is required by law, by regulation or by national and community legislation (for example public administrations and entity whose duties include those of protection and safety in the workplace) as well as, for the execution of contractual or pre-contractual obligations (Credit Institutions, Insurance Companies and similar entities); the consultants the company addresses as well as the Authorities.
To all potential recipients of the Company's communication campaigns.
- MAIN REGULATORY SOURCES
The data is processed for the performance of economic and contractual purposes through the use of the Barbati Werther alexanderboutique platform within the terms provided for by national and EU laws, rules and regulations to which the Company must comply. Pursuant to EU Regulation 2016/679, the updated explicit regulatory references that provide the obligations or tasks in basis of which could possibly be made out the processing of sensitive and judicial data are available from the Owner of this processing.
- RIGHTS OF THE INTERESTED PARTY
At any time, the interested party may exercise his rights towards Barbati Werther pursuant to EU Regulation 2016/679 by contacting the Data Protection Officer (RPD - DPO) using the following contact details: PEC email@example.com. To ensure the correct exercise of rights, the interested party must make himself identifiable in an unequivocal manner. Barbati Werther undertakes to provide feedback within 30 days and, in the event of inability to meet these deadlines, to justify any extension of the deadlines. The reply will be free of charge except in cases of groundlessness. The interested party can also lodge a complaint with the supervisory authority. In the event of a violation of personal data suffered by the Company, the owner will proceed to notify the violation to the competent supervisory authority within 72 hours of the occurrence and will also communicate the event to the interested party, except in cases of exclusion provided by the law. . The DPO designated by Barbati Werther is Mr. Barbati Werther, who will represent the contact point for the interested parties, can be reached through the following contact channels:
The user may, at any time, exercise the following rights:
- Access to personal data: obtain confirmation or not that data concerning you are being processed and, in this case, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right to request the rectification or cancellation or limitation of the processing or opposition to the processing itself as well as the existence of an automated decision-making process;
- Request for rectification or cancellation of the same or limitation of the treatments that concern him; "limitation" means the marking of stored data with the aim of limiting their processing in the future;
- Opposition to processing: oppose for reasons related to your particular situation to the processing of data for the performance of a task of public interest or for the pursuit of a legitimate interest of the owner;
- Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data in a structured format, commonly used and readable by an automatic device; in particular, the data will be provided to you by the owner in .xml format, or similar;
- Withdrawal of consent to processing for marketing purposes, both direct and indirect, market research and profiling; the usage of this right does not in any way affect the lawfulness of the processing carried out before the revocation;
- Submit a complaint pursuant to art. 77 GDPR to the competent supervisory authority based on his habitual residence, workplace or place of violation of his rights; for Italy, the Guarantor for the protection of personal data, which can be contacted via the contact details listed on the website www.garanteprivacy.it;
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in this information. Requests relating to the exercise of user rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this deadline be extended by a further 2 (two) months.