Privacy Disclaimer
The Privacy Policy was updated on May 25, 2018.
1. Introduction
Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data establishes, in particular, that the interested party must be informed in advance about the use of data concerning him. To this end and pursuant to the legislation on the protection of personal data, SODINI BIJOUX SRLU as "Data Controller" of the processing, is required to provide you (aiming to respect both the fundamental rights and to comply with the principles recognized by the Charter of fundamental rights of the European Union) information regarding the use of your personal data.
2. Source of personal data
The personal data in our possession are processed in compliance with the law and confidentiality obligations. They are also provided through the remote communication techniques that the same can use, directly by the subject to whom the personal data refers ("Interested Party"). Personal data may also be acquired in the exercise of one's business or by third parties. In the latter case, we will take care to provide the interested parties with the information referred to in the introduction when registering the data concerning them or, in any case, no later than the first possible communication.
3. Purpose of the processing
The personal data provided by you or acquired as part of our activity will be processed based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights, for the following purposes:
a) execution of obligations deriving from contracts stipulated with the Data Controller and/or fulfillment, before the conclusion of the contract, of specific requests of the interested party;
b) fulfillment of obligations established by law, regulations or community legislation, or provisions issued by authorities legitimated by law and by supervisory and control bodies.
4. Data processing methods
In relation to the purposes described in the previous paragraph, the processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes highlighted above and, in any case, in such a way as to guarantee the security and confidentiality of the data themselves (with particular regard to the case of use of distance communication techniques).
5. Categories of data being processed
In relation to the purposes described in the previous paragraph 3, the Data Controller processes personal data other than "special" data. In particular, the processing carried out refers to personal data relating to customers and potential customers such as name, address, personal identification data, tax code, etc. For these reasons we invite you not to communicate "sensitive" and/or "judicial" personal data to him. However, if the Data Controller, for its operations, needs to process data of a "particular" nature (i.e. data capable of revealing racial and ethnic origin, religious, philosophical or other beliefs in general, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health and sexual life), the same will take care to send you an addition to this Information and the related request for consent to processing, subject to authorization (where applicable) from the Guarantor for the protection of personal data, according to the methods and for the purposes indicated above.
6. Categories of subjects to whom the data may be communicated
For the pursuit of the purposes described in paragraph 3, the Data Controller may communicate your personal data to third parties belonging to the following categories:
1.subjects who carry out banking, financial and insurance services;
2. subjects who carry out data acquisition, processing and processing services necessary for the execution of the instructions received from customers;
3.subjects who carry out transmission, enveloping, transport and sorting of communications with the interested party;
4.subjects who carry out documentation archiving and data entry activities;
5.subjects who carry out customer assistance activities (e.g. call centre, help desk, etc.);
6.subjects carrying out transport activities;
7.subjects who carry out assistance and consultancy activities (e.g. legal, tax etc.);
The subjects belonging to the above categories operate in total autonomy as separate data controllers, whose constantly updated list is available from the Data Controller himself.
The complete list can be requested by writing directly to the Manager for replying to interested parties.
Your personal data may also be known to the Data Controller's employees, who have been specifically appointed as Data Processors and/or Data Processors.
UNDER NO CIRCUMSTANCES WILL THE DATA PROCESSED BE DISSEMINATED
7. Obligatory data
The provision of data is mandatory. Any refusal to provide us, in whole or in part, with your personal data or authorization for processing could lead to failure or partial execution of the contract or failure to carry out the task.
8. Duration of treatment
Personal data is stored for the entire duration of the contractual relationship and, in the case of revocation and/or other type of termination of the aforementioned relationship, within the terms established by law for the fulfillment, for example, of tax obligations.
For marketing purposes, the data will be retained until consent is revoked or for the period established by legislation or by provisions issued by the supervisory authority.
9. Rights of the interested party
Finally, we inform you that the legislation on the protection of personal data gives interested parties the possibility to exercise specific rights. You may, at any time, exercise the rights as expressed in the articles. 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, and in particular:
- access to personal data;
- to obtain the rectification or cancellation of the same or the limitation of the processing concerning him;
- to oppose the processing; to data portability;
- to revoke consent: the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation;
- to lodge a complaint with the Supervisory Authority (Privacy Guarantor)
The Data Controller has appointed Mr. Sodini Federico, domiciled for his functions at the headquarters, as the person in charge of replying to the interested party, in case of exercise of the rights referred to in paragraph 8.
The requests referred to in paragraph 8 above can be submitted to said Manager in writing or by email to the address privacy@sodinibijoux.it.
The requests referred to in the previous paragraph 8, letter. a), b) and c) can also be formulated orally.