Information compliant with EU Regulation 2016/679, known as GDPR (General Data Protection Regulation)
Holder of the treatment
Riseria De Medici s.r.l. with headquarters in Via della Liberazione, 19 - 28069 Trecate (NO) - Italy, which will be able to make use of the collaboration of specifically identified managers or agents, guarantees compliance with the regulations on the protection of personal data (and in the EU Regulation 2016/679 "GDPR") by providing the following information about the processing of the data communicated or in any case collected during navigation on this site.
Data processed, purposes and legal bases of the treatment
- Data generated by accessing the site
During their normal operation, the IT systems and software procedures used to operate this site acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
The legal basis that legitimizes the processing of such data is the need to make the site functionalities usable following user access.
- Data voluntarily provided by the user
The personal data provided by the user through the form are collected and processed for the following purposes:
A. By filling out the Contact Form, Riseria De Medici s.r.l. will process your personal data to provide you with the requested information;
B. By filling out the form for creating a new account on this ecommerce, Riseria De Medici s.r.l. will process your data in order to process current or future orders, complete the sale and ship the goods.
C. By filling in the form at the time of completion of the purchase (so-called "quick checkout" without previous registration) Riseria De Medici s.r.l. will process your data in order to process the order, complete the sale and ship the goods.
In the case expressly indicated in letters A) B) and C) the legal basis is the consent freely provided by the interested party.
Nature of the provision
Apart from what is specified for navigation data, the provision of data:
● with respect to the purposes referred to in letters A) B) and C), it is optional subject to the release of an explicit consent, but any refusal will make it impossible for Riseria De Medici s.r.l. to carry out the indicated activities;
Processing methods and data retention times
The data will be processed with the aid of electronic and / or paper tools, according to logic strictly related to the purposes indicated below and in any case adopting procedures and measures suitable to protect their security and confidentiality.
For the purposes set out in letters A) B) and C) we keep your data for an indefinite period (except as indicated below, the possibility of requesting timely cancellation at any time by the user, by writing to firstname.lastname@example.org or by contacting the Company).
In the case of exercising the right to be forgotten through a request for express cancellation of personal data processed by the owner, we remind you that such data will be kept, in a protected form and with limited access, only for the purpose of ascertaining and suppressing crimes, for a period not more than 12 months from the date of the request and subsequently they will be securely canceled or irreversibly anonymised.
Authorized subjects to the treatment, responsible and communication of the data
The data collected is processed directly by Riseria De Medici s.r.l. and / or by personnel directly reporting to the Data Controller and / or to natural or legal persons specifically identified, authorized and duly trained for this purpose.
The data processing will be carried out by personnel directly reporting to the Data Controller and / or by natural or legal persons specifically identified, authorized and duly trained for this purpose by the data controller. The data provided will in no case be disclosed or communicated to third parties, except for the subjects to whom the right to access the data is recognized by law or by orders of the authorities as well as the subjects, also external and / or foreign, of which the Data Controller uses for the performance of instrumental and / or ancillary activities for the management of the data collected and for the provision of the services and benefits connected to it, including the suppliers of software solutions, web applications and storage services also provided through Cloud Computing systems and used for this purpose.
The collected data may also be transferred to third parties even outside the European Union, guaranteeing the appropriate level of protection and in compliance with the provisions of current legislation.
In any case, personal data cannot be disseminated.
Rights of the interested party
At any time, it is possible for the data subject to exercise their rights:
- access to personal data;
- to obtain the correction or cancellation of the same or the limitation of the treatment that concern him;
- to oppose the treatment;
- to data portability;
- to withdraw consent, where provided: the withdrawal of consent does not affect the lawfulness of the treatment based on the consent given before the revocation;
- to lodge a complaint with the supervisory authority (Privacy Guarantor).
For the exercise of these rights, the interested party may contact the Data Controller directly by writing to email@example.com or by contacting the Company.