©
This document contains information provided pursuant to art. 13 of Legislative Decree no. 196/2003, known as the Code regarding the protection of personal data (“Privacy Code”) and articles 13 of EU Regulation 679/2016 (“GDPR”).
Data Controller
Giannone Bakery by Carmelo Giannone, via Trapani Rocciola 15a, 97015 Modica (Rg), VAT: 01743770883, Tel. 3398883549, info@giannonebakery.it
Types of data processed
2.1 Browsing data
Computer systems and software procedures acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but which by their very nature could allow users to be identified.
This category of data includes (i) the IP addresses or domain names of the computers used by users who connect to the Site, (ii) the URI (Uniform Resource Identifier) addresses of the requested resources, (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numeric code indicating the status of the response given by the server (successful, error), and (vii) other parameters related to the user's operating system and IT environment.
2.2 Cookie
For the processing of data through cookies, please refer to the relevant policy, available at the following link on the cookie policy.
2.3 Data voluntarily provided by the user
The optional, explicit, and voluntary sending of emails and/or requests for information sent through the use of the "Contacts" section or, furthermore, the communication of your data for the receipt of promotional communications and/or informational newsletters, entails the acquisition and processing by the Data Controller of such data and any other information contained in such communications for the purposes indicated in the following par. 3.
Purpose and legal basis of processing
The processing of the User's personal data by the Data Controller is aimed at:
a) pursue, in accordance with art. 6.1, letter f) of the GDPR, its own legitimate interest, consisting in ensuring the security of the Site and the information exchanged on it, that is, the ability of this Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible;
b) with the User's consent, pursuant to art. 6.1, letter a) of the GDPR, send promotional communications and/or informational newsletters by email regarding products and/or services of Giannone Bakery;
c) allow the User to request information regarding the services promoted by the Data Controller on the Site and provide the User, pursuant to art. 6.1, lett. b) of the GDPR, with any response and/or quote requested.
Consequences of a possible refusal to respond
Apart from what is specified with reference to navigation data, which is necessary to ensure the proper functioning of the Site, to cookies, in relation to which you are invited to consult the relevant cookie policy, and to the data contained in information requests, Users are free to provide their personal data:
(i) to receive, via email, promotional communications and/or informational newsletters regarding goods and/or services of Giannone Bakery.
Failure to provide such data will make it impossible for the User to stay updated on news and/or services from Giannone Bakery.
The Data Controller, in any case, informs Users of the existence of the right to withdraw at any time the consent given for the processing of data referred to in the previous point (i), without affecting the lawfulness of the processing based on the consent given before the withdrawal.
Processing methods
Personal data is processed using manual, computer, and automated systems for the time necessary to achieve the purposes for which it was collected.
It should be specified, in particular, that the User's personal data are processed by individuals duly appointed to carry out such tasks, who are constantly identified and/or designated, appropriately trained and made aware of the constraints imposed by law, as well as through the use of security measures designed to ensure the protection of your privacy and to avoid the risks of loss or destruction, unauthorized access, processing that is not permitted or not in line with the aforementioned purposes.
Communication and dissemination of data
The personal data collected will not be communicated, sold or transferred to third parties, except as provided by law.
In any case, the communication of data to companies expressly appointed to carry out specific services within the scope of the activities performed by the Data Controller and/or, in general, on their behalf, is reserved. These companies will operate as independent data controllers and/or data processors. Furthermore, the communication and/or dissemination of data requested, in accordance with the law, by police forces, judicial authorities, intelligence and security agencies, or other public entities for purposes of defense or state security or for the prevention, detection, or prosecution of crimes, is also reserved.Rights of the data subject
Pursuant to Article 7 of the Privacy Code and Articles 15 et seq. of the GDPR, the User has the right to obtain:
confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
2. a copy of your personal data;
3. the rectification of your personal data if it is inaccurate;
4. the deletion of your personal data;
5. the restriction of the processing of your personal data;
6. in a structured, commonly used and machine-readable format, the personal data that you have provided to us or that you yourself have created – excluding assessments created by the Data Controller and/or by the persons in charge pursuant to art. 4 of the Privacy Code / by persons authorized to process data on behalf of and for the account of the Data Controller pursuant to art. 4 of the GDPR – and to transmit them, directly or through the Data Controller, to another data controller;
7. the indication:
a) of the origin of the personal data;
b) the categories of personal data processed;
c) of the purposes and methods of processing;
d) of the logic applied in the case of processing carried out with the aid of electronic tools;
e) the identification details of the Data Controller and any processors;
f) of the retention period of your personal data or of the criteria used to determine such period;
g) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors or persons in charge pursuant to art. 4 of the Privacy Code / persons authorized to process data on behalf of the Data Controller pursuant to art. 4 of the GDPR;
h) the updating, rectification or, when you are interested, the integration of the data;
i) the transformation into anonymous form or the blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
j) certification that the operations referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been communicated or disclosed, except in cases where this proves impossible or involves the use of means that are manifestly disproportionate to the right being protected.
8. The User also has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of the collection;
b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
To exercise the aforementioned rights, Users may send a communication to the Data Controller's email address, as indicated in the previous art. 1, specifying in the subject line “Privacy – exercise of rights pursuant to art. 7 of Legislative Decree 196/2003 and pursuant to arts. 15 et seq. of the GDPR”.
Finally, we inform you that if you believe your rights have been violated by the Data Controller and/or by a third party, you have the right to lodge a complaint with the Data Protection Authority and/or with another competent supervisory authority pursuant to the GDPR.
Duration of processing and storage of personal data
The User's personal data will be processed by the Data Controller only for the period necessary to achieve the purposes of the processing referred to in the previous article 3, after which they will be retained solely in compliance with the legal obligations in force, for administrative purposes and/or to assert or defend a right, in the event of disputes or pre-litigation. Personal data processed for the purpose of sending newsletters, on the other hand, will be processed until the Data Controller receives the withdrawal of consent that the User may have provided.
©