Last updated: 24 May 2018
In compliance with the obligations deriving from national legislation (Legislative Decree No. 196 of June 30, 2003, Personal Data Protection Code) and European Community legislation (European Regulation for the protection of personal data No. 679/2016, GDPR) and subsequent changes, this site respects and protects the privacy of visitors and users, making every effort possible and proportionate so as not to damage users' rights.
HOLDER OF THE TREATMENT
The data controller in accordance with the laws in force is the site administrator, Salumeria Lenotti, Via Cà Schena, 2, 37010 San Zeno di Montagna, Verona (VR); can be contacted by e-mail at: firstname.lastname@example.org
MANAGER OF TREATMENT
In addition to the Owner, in some cases, categories of appointees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, mail carriers, hosting providers, computer companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of data processors may always be requested from the Data Controller.
LEGAL BASIS OF THE TREATMENT
This site treats data based on consent. With the use or consultation of this site, visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore the consent to the collection and processing of data is optional, the user can deny consent, and can revoke an already given consent at any time. However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.
Starting from 25 May 2018 (date of entry into force of the GDPR), this site will treat some of the data based on the legitimate interests of the data controller.
DATA COLLECTED AND PURPOSE
Like all websites, this site also uses log files in which information collected in an automated manner during user visits is stored. The information collected could be the following:
internet protocol address (IP);
browser type and device parameters used to connect to the site;
name of the internet service provider (ISP);
date and time of visit;
web page of the visitor's origin (referral) and exit;
possibly the number of clicks.
The aforementioned information is processed in an automated manner and collected in an exclusively aggregated form in order to verify the correct functioning of the site, and for security reasons (from 25 May 2018 this information will be treated according to the legitimate interests of the owner).
For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in compliance with the applicable laws in force, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful activities or offenses. These data are never used for the identification or profiling of the user, but only for the purpose of protecting the site and its users (from 25 May 2018 this information will be treated according to the legitimate interests of the owner).
The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
The information that users of the site will deem to make public through the services and tools made available to them, are provided by the user knowingly and voluntarily, exempting this site from any responsibility for any violations of the laws. It is up to the user to verify that they have the permission to enter personal data of third parties or contents protected by national and international standards.
The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided for by law.
The data used for security purposes (blocking attempts to damage the site) are kept for 7 days.
The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For more information, contact the owner.
This type of service has the function of hosting Data and files that allow this Application to function, allow its distribution and provide an infrastructure ready for use to provide specific features of this Application.
Some of these services work through geographically dispersed servers in different locations, making it difficult to determine the exact location where Personal Data is stored.
Google Cloud Storage (Google Inc.)
The hosting of the site is provided at the Google Data Centers, which is responsible for processing the data, processing the data on behalf of the owner, is located in the European Economic Area and acts in accordance with European standards. [more information]
TRANSFER OF DATA IN EXTRA EU COUNTRIES
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield - here the information page of the Italian Guarantor), for which no further consent is required. The companies mentioned above guarantee their compliance with the Privacy Shield.
This site treats users' data in a lawful and correct manner, taking appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the data. Processing is carried out using IT and / or telematic means, with organizational methods and logic strictly related to the purposes indicated. In addition to the owner, in some cases, the categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies).
Pursuant to the European Regulation 679/2016 (GDPR) and the national legislation, the User can, according to the methods and within the limits provided for by the current legislation, exercise the rights holders:
request confirmation of the existence of personal data concerning him (right of access);
know the origin;
receive intelligible communication;
have information about the logic, methods and purposes of the processing;
request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
in the case of treatment based on consent, to receive at the sole cost of any support, its data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
the right to file a complaint with the Control Authority (Privacy Guarantor - link to the Guarantor's page);
as well as, more generally, exercise all the rights that are recognized by the current legal provisions.
Requests should be addressed to the Data Controller, who can be contacted by e-mail at: email@example.com
In the event that the data is processed on the basis of legitimate interests, the rights of the parties to the processing are guaranteed (except the right to portability that is not provided for by the rules), in particular the right to object to the processing that can be exercised by sending a request to the data controller.
Session cookies are essential to be able to distinguish between connected users, and they are useful to avoid that a requested functionality can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, ie until the browser is closed. They do not need consent.
The functionality cookies used by the site are strictly necessary for the use of the site, in particular they are connected to an express request for functionality by the user (such as Login), for which no consent is required.
Instructions for disabling cookies can be found on the following web pages:
Microsoft Internet Explorer
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as buttons for social media, or videos. This site has no control over third-party cookies, entirely managed by third parties. As a result, information on the use of these cookies and on the purposes of the same, as well as on the methods for disabling them, are provided directly by the third parties on the pages indicated below.
On the basis of a specific agreement with Google, which is designated as data processing manager, he undertakes to process the data on the basis of the request of the Data Controller (see the bottom of the information), given through the software settings. Based on these settings, the advertising and data sharing options are disabled.
Further information on Google Analytics cookies can be found on the Google Analytics page Cookie Usage on Websites.
The user can selectively disable the collection of data by Google Analytics by installing on the browser the special component provided by Google (opt out).
For more information on the use of data and their treatment by Google it is recommended to view the information on the specific page prepared by Google, and on the page on how to use data by Google when using sites or apps of partners.
Details on the processing of Personal Data
PLUGIN SOCIAL NETWORK
The collection and use of information obtained through the plugin are governed by the respective privacy policies of social networks, to which please refer.
- Facebook - (cookie information link)
- Twitter - (cookie information link)
- LinkedIn - (cookie information link)
- Google+ - (cookie information link).
SALE OF GOODS AND SERVICES ONLINE
The Personal Data collected are used for the provision of services to the User or for the sale of products, including payment and possible delivery. The Personal Data collected to complete the payment can be those related to the credit card, to the current account used for the transfer or to other payment instruments provided. The Payment Data collected by this Application depends on the payment system used.
Payment management services allow this Application to process payments by credit card, bank transfer or other means. The data used for the payment are acquired directly by the manager of the requested payment service without being in any way treated by this Application.
Some of these services could also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications concerning the payment.
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.