Privacy Policy - pursuant to Article 13 of EU Regulation no.2016/679
Pursuant to art.13 of EU Regulation no.2016/679 (GDPR), including the provisions for the protection of individuals and other subjects with regard to personal data processing, we wish to inform you that the personal data You provide will be processed in compliance with the aforementioned legislation and with the confidentiality obligations which bind us.
1. Data Controller
The data controller is La Pasta di Aldo Srl (hereinafter referred to as "CONTROLLER"), with headquarters in Via Castelletta 41 - Monte San Giusto (MC) - VAT NUMBER 02046500431 - Tax code 02046500431, Tel. +39 0733 837120 - Email: privacy@lapastadialdo.it
2. Purpose of Processing
With your consent, your personal data will be processed for the following purposes:
a) Purchasing through the e-commerce portal of the Controller and related services.
Your data will be processed to allow your access to the e-commerce portal of the online sale of the Controller, as well as for all related services (communications, inquiries, returns, order monitoring, etc.). A personal profile will be created on the portal, through which you can make all the purchase operations. Your data may, finally, be processed to carry out all administrative, accounting and tax activities that are related to this purpose and for the fulfillment of obligations imposed by laws or regulations.
b) Direct Marketing
Your personal and contact data may be processed by the Data Controller for sending, by paper mail, e-mail or SMS, information on shopping opportunities and active promotions. They can also be used for market research, including by telephone.
3. Legal basis
The legal basis of the processing for the above purposes is based on your consent to the processing of your personal data.
Nevertheless, the processing may also be carried out as necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted at your request, to comply with legal obligations are met, to which the Data Controller is subject or in cases where conditions of processing lawfulness determined by art. 6 of the GDPR and subsequent amendments and additions, also introduced by the State.
4. Methods of Processing
Personal data will be processed in computerized, electronic and paper form and inserted in the relevant databases that will be accessible to those in charge of data processing.
The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the above-mentioned purposes.
We point out that, in compliance with the principles of lawfulness, purpose limitation, integrity, confidentiality, availability and minimization of data, Your personal data will be stored for the period of time necessary to achieve the purposes for which they are collected and processed, and in any case no later than 10 years.
5. Data Communication and Dissemination
We also inform You that the data collected will never be disseminated and will not be communicated, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other entities for the fulfilment of legal obligations.
6. Transmission of Personal Data
Your data will not be transferred outside Italy. The data processing and storage tools are managed by Italian suppliers who adhere to the GDPR.
7. Existence of automated decision-making, including profiling
The CONTROLLER does not adopt any automated decision-making process, including profiling, referred to in Art.22, paragraphs 1 and 4, of EU Regulation no.679/2016. If purchasing analysis techniques are implemented, they will be performed on aggregated data without personal information.
8. Data Subject's Rights
At any time, You may exercise, pursuant to Articles 15 to 22 of EU Regulation no.2016/679, the right to:
a) request confirmation of the existence or otherwise of Your personal data;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
c) obtain the rectification and deletion of data;
d) obtain restriction of processing;
e) obtain data portability, that is to say, receive it from a controller, in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance;
f) oppose the processing at any time and also in the case of processing for direct marketing purposes;
g) oppose an automated decision-making process concerning natural persons, including profiling.
h) ask the controller for access to and rectification or deletion of personal data or restriction of processing concerning the User; or oppose the processing of personal data, in addition to the right to data portability;
i) revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
j) lodge a complaint with a supervisory authority.
To exercise Your rights with a written request or for any other information, please contact us using the email privacy@lapastadialdo.it or at the postal address of the DATA CONTROLLER.
9. Obligation to be of legal age
This information is addressed exclusively to persons of legal age. Therefore, if you are a minor, please refrain from providing your data and from giving consent to the processing, as in any case your data will not be collected, stored or processed by the Data Controller for any of the above-mentioned purposes.
10. Updates
This document may be subject to changes and/or additions, even as a consequence of any subsequent changes and/or regulatory additions.