PRIVACY POLICY
This information is provided for visitors and users of this site owned by PREMIATA S.r.l. and not for any other websites that may be consulted by the user through internal links.
Pursuant to Art. 13 of EU 2016/679 Regulation (hereinafter "Regulations" or "GDPR"), we wish to inform you that, using the website, PREMIATA Srl, as Data Controller (hereinafter "PREMIATA" or "Data Controller") is necessarily aware of personal data relating to you.
1. WHO IS THE HOLDER OF THE PROCESSING?
The data controller is PREMIATA S.r.l., with registered office in Via Friuli, 64 - 20135 Milan (MI) and administrative headquarters in via Veregrense, 64 - 63812 Montegranaro (FM), C.F. and P.I. IT01467490445.
2. DATA PROTECTION OFFICER (DPO)
Premiata has appointed a DPO who can be contacted at dpo@premiata.it
3. WHAT IS THE LEGAL BASIS OF YOUR DATA PROCESSING?
In the processing of data that can, directly or indirectly, identify the User, PREMIATA complies with the principle of strict necessity.
Users' data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary to implement the obligations assumed contractually or for purposes established by law for the pursuit of which is not required the consent of the User; in such cases, the data may be made available to third parties who will process them independently and solely for the aforementioned purposes. Any further processing purpose from the specific one for which the User has provided the personal data will be highlighted in dedicated informative documents and will be pursued by PREMIATA only upon acquisition of the User's express consent.
The purposes of processing personal data of Users and the relevant legal bases applicable are the following:
Contractual obligations: to manage purchases and the provision of services offered and requested by the user, manage the account created by the user and verify and fulfill the financial transactions relating to payments made; Legitimate interest of the data controller to improve their services: for reviewing and downloading site data, identifying visitors, performing analysis and market research;
Consent expressed by the customer: for contact with the customer, sending communications to the customer;
Legitimate interest of the data controller to improve their services and the customer's expressed consent: to customize the customer experience and improve the services offered, if also provided through profiling.
4. WHERE DO WE PROCESS YOUR DATA?
The processings connected to the web services of this site take place at the aforementioned PREMIATA headquarters or at appointed third parties and are only handled by technical controller or processer, or by any managers or subjects in charge of occasional maintenance operations.
5. ARE YOUR DATA TRANSFERRED ABROAD?
PREMIATA currently processes your data without transferring it to foreign countries other than those belonging to the European Union or which do not ensure adequate levels of personal protection.
The privacy policy allows the transfer of personal data abroad with prior consent of the user or where there is another legal justification and an adequate level of data protection is guaranteed.
PREMIATA undertakes to ensure that, if the data is transferred abroad, this is done in full compliance with the principles and requirements of local law and the European Union, and that appropriate security measures are adopted for the protection of personal data in these countries / territories.
6. HOW AND HOW LONG ARE YOUR DATA PROCESSED FOR?
Personal data are processed with automated tools no longer than necessary to achieve the purposes for which they were collected.
Your data will be kept by the Company for such a period, as is strictly necessary, to ensure the correct provision of the purchased services, without prejudice to the need for conservation for a longer period in compliance with the applicable, also accounting, regulation.
The data we acquire for the purposes of the users’ registration will be processed in relation to the services offered by PREMIATA through its portal, exclusively for the purposes that fall within the institutional tasks of the company or for the obligations required by law or regulations. As part of these purposes, the processing also relates to data regarding subscriptions/ registrations required for the management of relations with PREMIATA, as well as to enable effective institutional communication and to comply with any legal, regulatory or contractual obligations;
Your personal data, processed for the creation of your Personal Account, shall be retained and processed until you delete your Personal Account. We would like to inform you that your personal data shall be automatically erased (or anonymized) once seven years have passed since your last interaction with your Personal Account (i.e. when you log in to or update your personal data, place new purchases, and the like).
The data processed for the purposes of marketing will be stored in compliance with current legislation and up to the possible revocation of your consent to the personal data processing.
Should you provide your consent to the processing of your personal data for profiling purposes, said processing shall be performed for no longer than 7 years since the date when you provided your consent, and be automatically renewed each time you make a purchase at our E-Store.
At the time of expiry or revocation of consent, data will be automatically deleted or permanently made anonymous and you may be asked to renew consent to the processing. In any case, you will have the possibility to revoke your consent to the data processing for the aforementioned purposes, including marketing and profiling purposes: in any communication there will be a section that will allow you to easily revoke the given consent. The data transmitted to any service providers will be processed by them no longer than necessary for the execution of the tasks entrusted to them. Specific security measures are always observed to prevent data loss, illicit or incorrect use and unauthorized access.
7. WHAT ARE YOUR RIGHTS?
As data subject, you can exercise, using the methods indicated in paragraph "14. THE EXERCISE OF DATA SUBECTS’ RIGHT", the rights provided for according the Regulations and in particular:
obtain confirmation of the existence or not of any personal data concerning you, even if not yet registered, and their communication in an intelligible form;
obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. art. 3, paragraph 1, GDPR; e) of the subjects or the categories of subjects to whom personal data may be communicated or who may become aware of it as a designated representative in the territory of the State, managers or agents;
obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means clearly disproportionate to the protected right;
to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail.
It should be noted that the right of opposition of the data Subject, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the data subject can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.
Where applicable, it may also exercise the rights referred to in Articles from 15 to 22 of the GDPR (Right of rectification, right to be forgotten, right of limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority. For further information on your rights or in the event of any complaints or requests regarding the processing of the customer's personal data, please contact privacy@premiata.it.
8. WHAT DATA DO WE PROCESS?
8.1. Navigation data
The computer systems and software procedures used to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified people concerned, but by reason of their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the Uniform Resource Identifier (URI) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used concerning liability in case of hypothetical computer crimes against the site.
8.2. Data provided voluntarily by the user
Following optional, explicit and voluntary consent expressed in advance by the data subject to the use of this integrated service on this site or to the addresses indicated on this site, PREMIATA will collect and store received data, including the e-mail address, no longer than necessary to reply to requests, for the purpose of exchanging information or contacts.
Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request or for particular categories of data.
8.3. Cookies
For further information on the adopted cookies Policy, please refer to the specific information.
9. DOES PREMIATA PROCESS DATA CONCERNING MINORS?
As a general rule, we do not intentionally collect personal information regarding minors. If we know that we have inadvertently collected personal data from such individuals, we will act to eliminate such data as soon as possible, except where the applicable law requires us to keep it.
10. VALUNTARY NATURE OF DATA PROVISION
Apart from what has been specified relating navigation data, the user is free to provide personal data contained in the request forms or indicated in contacts to solicit, for example, the sending of informative material or other communications. Failure to provide such data may make it impossible to obtain what has been requested. For the sake of completeness, it should be noted that in some cases (not regarding the ordinary management of this site) the Authority can request news and information for the purpose of monitoring the processing of personal data. In these cases the answer is mandatory subject to administrative penalty.
The Site offers certain services to be used for which the User is required to provide additional data, such as personal data. For example, website’s subscription, access to reserved areas and the purchase of products and services on PREMIATA, are all activities that imply user’s personal data transfer and allow PREMIATA to uniquely identify the Users such as, for instance, name, surname, date of birth, address of residence and / or domicile, telephone number, e-mail address, credit card details.
It is expressly understood that the provision of such personal data is optional, but becomes mandatory in order to allow the User the access to certain services. The withdrawal of data provision, therefore, does not imply any consequences for the User, but in the absence of the related provision, PREMIATA will not be able to provide the User with certain services. In order to promote and improve its products, services and content, PREMIATA reserves the right to aggregate personal data and non-personal data. In this case, non-personal data will be processed as personal data until they are aggregated to the latter.
11. REDIRECT THROUGH SOCIAL PLUG-IN
network directly within the website. When you visit a page of the Site and interact with the plug-in, the corresponding information is transmitted from the browser directly to the social network platform and stored there. All the social plug-ins on the Site are marked by their own logo of the social network platform. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as for the ways in which to exercise their rights, please consult the privacy policy of the related social network.
12. LINK TO THIRD PARTY SITES
Our sites may be able to connect through other links to other third-party websites. PREMIATA does not control or perform any monitoring of these websites and their contents. Our sites provide links to these sites only to facilitate users to search and surf and; to facilitate the hyperlink on the Internet to other sites.
The activation of the links does not imply any recommendation or warning of PREMIATA for accessing and browsing these sites, nor any guarantee regarding their contents, services or goods supplied by them and sold to Users. Therefore, we decline any responsibility regarding the contents of these sites and the rules adopted by them, also with regard to the protection of personal data and the related processing during the navigation within the sites in question.
13. USE AND METHOD OF DATA PROCESSING
13.1. Data collected on the net
After consultation of this site, data releted to identified or identifiable persons may be processed. The provision of data is optional. However, in some cases, they may be essential for carrying out specific activities and therefore, failure to provide them, entails for the PREMIATA an impediment to the provision of services and information. Failure to provide all data except those that are not due to legal, tax and contractual obligations will be assessed by the writer from time to time and will determine the resulting decisions, related to importance for the writer of the data requested and not provided.
In particular, for the purposes defined under point "13.2 Data provided voluntarily by the user and collected for the execution of the services", will be required to express consent to the processing of data where required. Personal data may be communicated by the Data Controller exclusively for the achievement of the specific purposes indicated in this policy to internal and external subjects, who will process your data in accordance with the instructions received from the Company as managers, persons in charge, system administrator or operating autonomously as distinct Owners. The internal subjects are the appointed managers or processors.
External subjects are external collaborators such as: managers or processors, postal, logistics and shipping services, banking institutions, law firms, accounting and tax consultancy firms, information systems management services, information systems maintenance services, as well as all the subjects to whom the faculty of access to the data and / or the obligation of communication is recognized by virtue of regulatory provisions or judicial authority. No data is communicated or disseminated unless it is clearly specified in the informative notes drafted for specific treatments for which it will be requested to express explicit and separate consent to the data subject. Likewise, if the acquisition of sensitive data is necessary, it will be required to provide explicit and separate consent to the data subject. When access to the Site, technical data, as well as those collected from any e-mails sent by you, will not, in any case, be disclosed to third parties, nor disseminated.
13.2. Data provided voluntarily by the user and collected for the execution of the services
The collection and processing of user’s personal data will be in compliance with the general principles of necessity, correctness, relevance and non-excess. In particular, the data will be processed during:
the registration to the personal area or the adhesion to the services offered by PREMIATA in its Site;
the reply to questions and providing the information requested by the User;
the handling of User’s requests, of a technical and commercial nature, relating to the progress of orders and of a general nature;
the management of purchases by users who are not registered on the site or purchases of gift cards. With regard to the gift card, it should be noted that the conferment data, communicated during the purchase of this product, will be processed to fulfill the buyer's request for delivery to the conferment. The conferment of the gift card can later make the purchase by entering the code of the same and communicating their data independently;
the execution of connected, instrumental or necessary activities for the supply of PREMIATA services, including the communication of data to third-party companies which, for example, carry out necessary or instrumental activities to the provision of PREMIATA services or may manage payments on the Website;
the necessary and indispensable treatments of an operational, managerial, accounting and other nature. In particular, some data will be used for registrations and communications required by law;
the monitoring of the degree of satisfaction and preferences of the User;
letting the User access, after registration and creation of his own User profile in the e-commerce portal, to the reserved area for the provision of services, products and any other kind of request and any subsequent and autonomous management of your User profile from the control panel;
the management of payments, including the anti-fraud control in case of payment by credit card, which will be managed through through the payment systems you have chosen from those on our site. We inform you that you can find specific information directly from the suppliers of these services to which you subscribe and that we do not keep any of your personal banking information for longer than is necessary to complete the transaction;
after prior consent, the sending of advertising, informative and commercial information material, or for all those commercial and / or statistical purposes in accordance with current legislation. The given consent for sending commercial and promotional communications implies consent to the receipt of the same communications not only with automated methods, but also through traditional methods (paper mail and telephone calls via operator). In these circumstances, the User is also given the right to express his consent to the receipt of the aforementioned communications exclusively through traditional methods of contact;
User profiling, upon prior consent, in order to allow PREMIATA elaborating User's choices, habits and propensities to consume and, consequently, sending them specific offers related to PREMIATA products and services;
the subscription to the "NEWSLETTER" service to which the User may apply to register. If the personal data provided by users have been provided by registering to the aforementioned service, the same will be used for the sole purpose of sending the newsletter and will not be disclosed to third parties. Specifically, the dedicated information can be consulted;
The data may also be processed for statistical and historical purposes.
14. THE EXERCISE OF DATA SUBECTS’ RIGHT
The Data Subject, at any time, can exercise towards the Data Controller the rights provided for by the articles. from 15 to 22 of the Regulations, referring to PREMIATA S.r.l. with registered office in Via Friuli, 64 - 20135 Milan (MI) and administrative headquarters in via Veregrense, 64 - 63812 Montegranaro (FM) using the following e-mail: privacy@premiata.it .
15. UPDATE OF THIS POLICY
This Privacy Policy regulates the processing of personal data issued by the User while browsing the Site and may be modified or simply updated, in whole or in part, also in consideration of the modification of the laws or regulations governing the protection of personal data. Changes and updates to this Privacy Policy will be made known to Users as soon as they are adopted and will be binding as soon as they are published on the Site. PREMIATA invites Users, therefore, to regularly access this page to verify the publication of the most recent and updated Privacy Policy. For this purpose, the document highlights the update date.
Lastest update 01 September 2021
