NOTICE ON THE PROCESSING OF PERSONAL DATA
When we carry out our activities, it might be necessary to obtain and process information or data in compliance with applicable legislation (General Data Protection Regulation – GDPR), and for this reason we are providing you with this notice.
When we carry out our activities, it might be necessary to obtain and process information or data in compliance with applicable legislation (General Data Protection Regulation – GDPR), and for this reason we are providing you with this notice.
1. CONTROLLER
The Controller is Zintala srl ., with head office in Contrada Mostrapiedi 167 ,Casette d’Ete (FM) e-mail : info@zintala.it (hereinafter the “Controller”, or simply “ZINTALA”).
2. RECIPIENTS (DATA SUBJECT)
This notice concerns data relative to customers, consumers, persons interested in finding out about specific products and/or services promoted/provided by SILVANO LATTANZI, including recipients of digital lead- generation campaigns.
3. PROCEDURES FOR COLLECTING AND SOURCE FOR COLLECTING AND/OR OBTAINING DATA Data subjects provide data in hard copy and/or electronic forms, available online or at direct and partner stores giving their informed consent.
4. PURPOSES OF THE PROCESSING Sale of goods and services, after-sales service and processing of your requests, as well as compliance with legal obligationsYour data might be necessary to make a purchase (via the website and/or from our stores), for related obligations, to make shipments, guarantee after-sales services (if you contact Customer Service we can follow up your requests), comply with applicable laws and/or regulations, also concerning tax refunds. Providing this data is optional, however if you do not give this data, Zintala cannot follow up your requests or finalise the contract for the sale of its products / services and/or provide after-sales service. Your data will be processed and kept for the entire time necessary to meet your requests indicated previously, and in any case for no more than 10 years from your last purchase (in line with/for the time indicated by applicable legislation). The legal basis for processing your data is to meet your request, so to achieve the purposes described in this notice, Zintala requires your specific consent.
5. WEBSITE REGISTRATION (LOGIN/REGISTER) The Website has a specific, reserved section where you can register and create a personal profile, to save your favourite products in a wishlist, save and track your previous orders, manage invoicing and shipment addresses, check the status of orders, manage your credit cards and request product returns, and where we can manage all your subsequent requests, meet related obligations and provide you with relative services. Giving your data (name, surname, date of birth, email address) is optional and we require your consent. If you do not give consent, you cannot register with the Website. Your personal data will be processed by Zintala srl until you decide to cancel your Website registration, according to the procedures indicated in this Notice.
6. SENDING OUT THE NEWSLETTER
If you wish to receive our Newsletter for up-to-date news, information about special initiatives, products and services offered by Silvano Lattanzi, you can fill in a specific section on the Website and/or the hard copy or digital form available at our Stores, giving your data (name, surname, email address, date of birth). Giving your data is optional, and your consent is required. If you do not give consent, we cannot process your request to sign up to receive the Newsletter with all the latest news about Silvano Lattanzi. Your personal data will be processed for the purposes indicated until you decide to cancel your subscription to the Newsletter by clicking on the “unsubscribe” link, or according to the procedures indicated in this Notice.
7. MEETING REQUESTS FOR INFORMATION
The Website has a specific section “Contact us”. You can use this section to request further information, if you opt in to register with the website. Giving your data (name, surname, email address) is optional and we require your consent. If you do not give consent, you cannot register with the Website or request further information. Your personal data will be processed by Zintala srl only for the time necessary to meet your requests. You can decide to cancel your Website registration, whenever you want, according to the procedures indicated in this Notice.
8. Methods for processing.
the data Data are processed according to the following methods: • lawfully and fairly, in compliance with laws, and in a manner that guarantees the confidential nature of the data; • using electronic or other means (for example hard copies); • by (natural and legal) persons that are authorised to carry out such duties and that are identified at all times, and are also appropriately trained; • using safety measures designed to guarantee the confidentiality of the data subject the data refer to and to prevent undue access by unauthorised third parties. 9.
8.1 Mandatory and/or optional nature of giving/processing data and consequences of refusing to give data The processing of data is mandatory where specifically required for the activities described above. The consequences of refusing and/or not consenting to the processing of data are given for each single case, which could make it impossible or difficult to meet contractual requirements.
8.2 Dissemination of data Data and information are not disseminated.
8.3 Rights that may be exercised by the data subject Rights that may be exercised The data subject has the right to obtain confirmation as to whether or not his/her personal data are being processed and also to obtain access to the personal data, as well as the following information: • the purposes of the processing; • the categories of personal data concerned; • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; • the right to lodge a complaint with a supervisory authority; • where the personal data are not collected from the data subject, any available information as to their source; • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer pursuant to Article 46.
9. BACKUP
The Controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. The data subject shall also have the right to obtain the rectification of inaccurate personal data concerning him or her and taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; • the data subject withdraws consent and where there is no other legal ground for the processing (for example, a legal obligation); • the data subject objects to the processing and there are no overriding legitimate grounds for the processing (for example, a legal obligation); • the personal data have been unlawfully processed; • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; • the personal data have been collected in relation to the offer of services by an information society; where the controller has made the personal data public and is obliged to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; • the data subject has objected to processing pursuant to Article 21(1) pending the verification of whether the legitimate grounds of the controller override those of the data subject.
10. TERMS AND CONDITIONS
The Controller shall provide information on action taken on a request to the data subject without undue delay and in any event within one month of receipt of the request. In compliance with the GDPR, that period may be extended by two further months where necessary, taking into account the complexity and number of the requests. In this case, the Controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject. Data subjects may contact us by email or telephone (see the above contact details) to exercise their rights, and to receive any clarifications also regarding this Notice