Privacy
/
Privacy Policy
Information pursuant to art. 13 of Regulation (EU) 2016/679 on the protection of personal data (RGPD) and request for consent for the processing of personal data collected from the interested party.
The society Dave Srls with registered office in Padua (PD), Via Swedish 9, PI and CF 05459460282 as Data Controller of personal data (hereinafter, “DAVE” and/or “Data Controller”) as defined in the current law , whose contact details are:
e-mail: info@dolcevia.it
intends to inform you pursuant to art. 13 of EU Regulation 2016/679 (hereinafter for brevity "REGULATION") to assume the role of owner of the personal data that you will provide and who will proceed with the relevant processing for the purposes and according to the methods set out below.
It is highlighted from now on that this information is provided for the website www.dolcevia.it ("Site") and on the sites connected to it, while it does not apply to other websites that may be consulted via external links and is to be understood as Information made pursuant to art. 13 of the Regulations Applicable to those who interact with the Site or with the blog connected to it.
It is hereby specified that pursuant to and for the purposes of the articles. 12 of the Applicable Regulations, we wish to inform you that the personal data communicated by you will be recorded, processed and stored in our paper and electronic archives, in compliance with the appropriate technical and organizational measures referred to in the art. 32 of the GDPR. The processing of personal data will take place through the use of tools and procedures suitable to guarantee their security and confidentiality.
Should you provide personal data of third parties (therefore not directly relating to you) to DAVE, you act as the independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant on this point the broadest indemnity with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that should reach DAVE from third parties whose personal data have been processed through your spontaneous sending in violation of the applicable personal data protection regulations. In any case, if you provide or otherwise process personal data of third parties, you guarantee from now on - assuming all related responsibility - that this particular processing hypothesis is based on an appropriate legal basis pursuant to art. 6 of the Regulation which legitimizes the processing of the information in question.
1. Purpose and legal basis of the processing which DO NOT require the CONSENT of the interested party - Obligation to provide data
Your personal data will be processed for the following purposes:
a) to establish, conclude and execute a contract concerning the products and/or services offered by DAVE and to respond to its requests subsequent to the purchase and concerning the goods or services purchased;
b) fulfillment of tax or accounting obligations;
c) for customer management (customer administration; administration of contracts, orders, shipments and invoices);
d) to assert or defend a right in court, as well as in administrative proceedings or in arbitration and conciliation procedures in the cases provided for by laws, community legislation and regulations;
e) to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
The processing referred to in letters a), b), c), d), e) above is necessary for the provision of the service requested by the user with the consequence that DAVE is not obliged to acquire specific consent to the processing of data as the legal basis for the processing of your personal data for the purposes indicated above is art. 6(1)(b) of the Regulation (“[…] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same”) and art. 6(1)(c) of the Regulation (“[…] the processing is necessary to fulfill a legal obligation to which the data controller is subject”).
2. Purpose and legal basis of the processing which requires the consent of the interested party - Power to provide data
Subject to your consent, your data may be processed by DAVE for the following purposes:
f) marketing: by sending newsletters or by sending electronic mail in order to propose offers and commercial initiatives relating to DAVE products or services. It is understood that the processing of data for this purpose will only be possible with the consent of the interested party pursuant to Article 6(1)(a) of the Regulation. Consent may be revoked at any time freely in the ways indicated in point 6 below or through the cancellation link available in each electronic communication. Any failure to provide or withdraw consent will not prejudice the execution of the contract in any way.
g) Customer satisfaction: this means the processing activities aimed at collecting information relating to your purchasing experiences and. It is understood that the processing of data for this purpose will only be possible with the consent of the interested party pursuant to Article 6(1)(a) of the Regulation. Consent may be revoked at any time freely in the ways indicated in point 6 below. Any failure to provide or revoke consent will not prejudice the execution of the contract in any way.
With reference to marketing and customer satisfaction activities, it is specified that, in the event of lack of specific consent to the processing by the user, DAVE will not be entitled to carry out said activities, without prejudice to the fact that it will in any case be possible to follow up on the activities resulting from the conclusion of the contract. It is specified that the consent given may be revoked at any time without this precluding the performance of the obligations arising from the concluded contract. The data will not be subject to profiling.
3. Any recipients of personal data or categories of recipients of personal data
Personal Data may be communicated, within the limits of what is necessary, to categories of recipients including:
1) authorized personnel, adequately instructed and trained by the Data Controller, who are committed to confidentiality or have an adequate legal obligation of confidentiality;
2) personnel of third parties who provide services to the Data Controller who carry out data processing on behalf and on instructions of the latter as Data Controller, including: – companies or professional firms, which provide assistance, consultancy or collaboration activities in accounting, administrative, legal, tax and financial matters with which a contract has been concluded pursuant to and for the purposes of article 28 of the Regulation; – third-party companies that manage the blog and/or marketing campaigns with which a contract has been concluded pursuant to and for the purposes of article 28 of the Regulation;
3) to the parent company and/or associated with DACVE; In any case, personal data may be communicated to jurisdictional authorities in the exercise of their functions when required by the Applicable Regulations. For the subjects indicated in nos. 1 and 2 only the category of recipients is indicated, as it is subject to frequent updates and revisions. Therefore, interested parties may request the updated list of recipients by contacting the Data Controller via the contact details indicated above.
4. Data transfer to third countries
Some of your Personal Data is transferred to Recipients who may be located outside the European Economic Area. DAVE ensures that the electronic and paper processing of your Personal Data by the Recipients takes place in compliance with the Applicable Regulations, all always in compliance with the principles indicated in articles 45 and 46 of the GDPR relating to the existence of an adequacy decision by the Commission European Union or with adequate guarantees.
5. Data retention period
Personal data will be kept for the period of time strictly necessary to pursue the specific purposes of the processing for which the user has given his consent and, specifically:
– for the purposes indicated in letter a), b), c), d) e) of point 2 above for the time necessary to fulfill the contractual obligations and, in any case, no later than 10 years from the moment of collection of your data data for the fulfillment of regulatory obligations and, in any case, no later than the deadlines set by law for the limitation of rights;
– for the purposes indicated in letter f) and letter g) of point 2 above for 24 (twenty-four) months from the moment of issuing consent to processing;
6. Treatment methods
Pursuant to and for the purposes of articles. 12 et seq. of the GDPR, we wish to inform you that the personal data communicated by you will be recorded, processed and stored in our paper and electronic archives, in compliance with the appropriate technical and organizational measures referred to in the art. 32 of the GDPR. The processing of your personal data may consist of any operation or set of operations among those indicated in art. 4, paragraph 1, point 2 of the GDPR. The processing of personal data will take place through the use of tools and procedures suitable to guarantee its security and confidentiality and may be carried out, directly and/or through delegated third parties, either manually using paper media or with the aid of IT or electronic instruments. The data, for the purposes of correct management of the relationship and the fulfillment of legal obligations, may be included in the internal documentation of the Data Controller and if necessary also in the writings and registers required by law.
7. Rights of the interested party
Pursuant to articles 15 and following of the regulation, the interested party has the right to ask DAVE, at any time, for access to his/her personal data, rectification or cancellation of the same or to oppose their processing in the cases provided for by the 'art. 21 of the regulation, you have the right to request the limitation of processing in the cases provided for by the art. 18 of the regulation, as well as to obtain the data concerning him in a structured format, commonly used and readable by an automatic device, in the cases provided for by the art. 20 of the regulation. To this end, DAVE makes available on the website the form to be able to submit the access request and therefore to allow you easier access.
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in the epigraph of this information, and in particular to the following email address: info@elpadoan.it
Requests relating to the exercise of the user's rights will be processed without unjustified delay and, in any case, within one month of the request; only in cases of particular complexity and the number of requests can this deadline be extended by a further 2 (two) months.
In any case, the user always has the right to lodge a complaint with the competent supervisory authority (guarantor for the protection of personal data), pursuant to art. 77 of the regulation, if you believe that the processing of your personal data is contrary to the legislation in force.