Privacy Policy
This document was updated on 16 May 2018 to comply with the new regulatory provisions on the protection of personal data.
NOTICE PURSUANT TO ARTICLE 13 OF LEGISLATIVE DECREE 196/2003
The Data Controller
This policy applies to the website amarodoncarlo.it (hereinafter “the Website”) and is intended as a notice provided in accordance with Article 13 of the Italian Data Protection Code, as well as Article 13 of the European General Data Protection Regulation (GDPR), to users who browse the Website and may interact with the services offered. The Data Controller, pursuant to Article 28 of Legislative Decree 196/2003 (hereinafter referred to as the “Privacy Code” or “Code”), is Coloniali Carlo Gargiulo (hereinafter also referred to simply as “Gargiulo”), Viale Amendola 117, 84025 Eboli (Sa), VAT No. 03300490657, tax code GRGCRL71T29D390N, email info@gargiulocoloniali.it.
The purposes of data processing
As explained in more detail in the sections where users can sign up for the services reserved for users of our website by providing their personal data, the data of the users concerned is processed in order to respond to the requests they have specifically made. In particular, all data collection and subsequent processing activities are carried out for the following purposes:
a) registration on the website;
b) subscription to the email newsletter;
c) purchase of selected products and Gargiulo-branded products;
d) sharing of content on the website;
e) customer relationship management (CRM);
f) general requests for information;
g) participation in any promotional initiatives aimed at new or existing customers;
(h) for the purposes of research and statistical analysis based on aggregated or anonymous data – meaning that it is not possible to identify the user – aimed at assessing the website’s performance.
Providing your data is optional, but failure to do so may prevent some or all of the requested features from working.
We do not require consent to the processing of personal data for these purposes, as such processing “is necessary for the performance of obligations arising from a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract” (see Article 24(1)(b) of the Privacy Code), and insofar as “the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request” (see Article 6(1)(b) of the GDPR).
If you purchase products or services from the Gargiulo e-shop, Gargiulo, as the data controller, may send promotional emails regarding products or services similar to those purchased by you. You may, however, opt out of receiving such communications immediately by contacting info@gargiulocoloniali.it. Gargiulo will not use the data provided for purposes other than those related to the service, as listed above, to which the data subject has subscribed, or only within the limits indicated from time to time in any further specific information accompanying the different and particular service requested by the user. The processing of aggregated or anonymous data, as referred to in point (d), is not subject to the Privacy Code and the GDPR.
Who we entrust with processing the data
For purposes related to the provision of the service to which the user has subscribed, the data will be made available to third parties, who will act as independent data controllers by providing services necessary to fulfil the request of the user concerned (for example, companies that handle the delivery of purchased products) or to whom the disclosure of data is necessary to comply with legal provisions or regulations. A number of data processors have been appointed. In particular, Aruba Spa, Località il Palazzetto n. 4, Bibbiena (Ar), Italy, has been appointed as the external data processor for hosting functions. The updated list of data processors is available on request from the Data Controller at info@gargiulocoloniali.it. Personal data will be made available to persons expressly authorised by the Data Controller – and appointed for this purpose as data processors – who carry out processing activities essential for the pursuit of the purposes indicated above; the categories of such persons include those responsible for administration, communications, accounting, legal consultancy, technical maintenance of information systems, and marketing, depending on the specific request submitted by the data subject via this website. The Data Controller does not transfer personal data to third countries or to international organisations; however, it reserves the right to Personal data will be made available to persons expressly authorised by the Data Controller – and appointed for this purpose as data processors – who carry out processing activities essential for the pursuit of the purposes indicated above; the categories of such persons include those responsible for administration, communications, accounting, legal consultancy, technical maintenance of information systems and marketing, depending on the specific request submitted by the data subject via this website.
The Data Controller does not transfer personal data to third countries or to international organisations; however, it reserves the right to use cloud services; in such cases, service providers will be selected from among those offering adequate safeguards, as provided for in Article 46 of the GDPR (Regulation (EU) 2016/679). Data may also be transferred to countries within the European Union or to other countries which the European Commission has declared provide an adequate level of protection, or with which the Data Controller has entered into standard contractual clauses provided by the Commission in its decision of 5 February 2010, or which have otherwise obtained certification under the Privacy Shield framework for data transfers between the EU and the US.
How we process data
All data processing carried out in connection with this website will be performed using electronic or telematic means, although data may also be processed using paper-based or manual methods. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access, in full compliance with the provisions of Articles 31 et seq. of the Privacy Code and the Technical Regulations – Annex B to the Privacy Code – regarding minimum security measures, and Article 32 of the GDPR. The data will be processed in accordance with the purposes for which it was collected and in compliance with current security regulations, for the purposes indicated above or as specified from time to time in any further notices provided to the user.
Types of data processed and whether provision is optional
The forms to be completed on this website include both data that is strictly necessary to process your request – and which must be provided in order for the request to be processed – and data that is optional and not strictly necessary for the request to be processed.
Browsing data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the website and to check its correct functioning, and is deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the website.
Data provided voluntarily by the user
The personal data normally required to use the services on this website consists of personal details, contact information, and details relating to payment methods and account details. The optional, explicit and voluntary sending of emails to the addresses indicated on this website or the completion of electronic contact forms entails the subsequent collection of the sender’s email address, which is necessary to respond to enquiries, as well as any other personal data included in the message. Specific summary notices will be progressively provided or displayed on the pages of the website dedicated to particular services available on request. Sensitive data pursuant to Article 4 of Legislative Decree 196/2003 is not normally processed (in the event of the processing of sensitive data for specific services, a specific privacy notice will be issued and the specific consent of the data subject will be requested).
Social log-in
Although this is not currently possible, in future it may be possible to access the website and its services using credentials provided by a third party, such as Twitter, Facebook, Google+ or a similar service (“social log-in”). In such cases, you will be required to check the settings of that service and read the third-party provider’s policies carefully, as these may authorise the third-party provider to share your personal information and authorise Gargiulo to collect information such as your contacts, friends and other user data. We will retain the identification code associated with the user’s account on the third-party service when it is used to log in to Gargiulo or to share content hosted on the site; this data will be retained for as long as necessary to provide the requested services. If you create a Gargiulo account or use the site’s services by logging in via social media, we may use the information contained in your original account to complete your profile on the site. You may update or amend your profile and contact details at any time via social login. We may also collect information about you and your use of our services via cookies and other similar technologies implemented on the site, as explained in the following paragraph.
Cookies
You can choose which cookies to allow via the procedure provided in the Cookie Settings section, as well as allow, block or delete (in whole or in part) cookies using the specific functions of your web browser: however, if all or some of the cookies are disabled, the Website may not be accessible, or certain services or functions of the Website may not be available or may not work correctly, and/or you may be required to manually change or enter certain information or preferences each time you visit the sites. For further information on how to set your cookie preferences via your web browser, please refer to the relevant instructions:
If you use Google Chrome, click here to find out how.
If you use Mozilla Firefox, click here to find out how.
If you use Internet Explorer, click here to find out how.
If you are using any other browser, check your browser settings to see how to manage cookies.
Rights of data subjects
Data subjects have the right at any time to obtain confirmation as to whether or not personal data concerning them exists, and to be informed of the content and origin of such data, to verify its accuracy, or to request that it be supplemented, updated or rectified (Article 7 of Legislative Decree No 196/2003), deletion, restriction of processing or to object to such processing, and to request data portability (Chapter III of the GDPR). Pursuant to the same article, you have the right to request the anonymisation or blocking of data processed in breach of the law, as well as to object in any case, on legitimate grounds, to their processing.
To exercise the above rights, requests should be sent to the Data Controller’s postal address or by email to info@gargiulocoloniali.it.
