Policy on personal data processing based on REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR)
The Company shall process the personal data provided by you to enable you to register with the Website and make use of the services restricted to registered users.
If you provide your explicit consent, the Company shall process your personal data to send you promotional communications and/or newsletter regarding products offered for sale by the Company or by third parties.
If you provide your explicit consent, the Company shall process your personal data for the analysis of your consumer choices and purchasing habits (known as “profiling”), through a study of the type and frequency of your online purchases, in order to send newsletter and/or advertising material of the Company or third-parties that may be of particular interest to you.
Article 1. Purpose of the processing. Legal basis. Mandatory or optional nature of data provision and consequences of any refusal.
The Company shall process the personal data provided by you for the following purposes:
- to enable you to register with the Website and make use of the services restricted to registered users and for administrative/accounting purposes. The legal basis for the processing is Company’s commitment to be compliance with a legal obligation or to take steps at the request of the data subject prior to entering into a contract, as the case may be;
- if you provide your explicit consent, for the Company to send you newsletter and for market research purposes also aimed at evaluating the level of customer satisfaction and to send you promotional communications in relation to the products of the Company and / or third-parties, by email (marketing purposes); if you provide your explicit consent, for the analysis of your consumer choices and purchasing habits (known as “profiling”), by the Company, through a study of the type and frequency of your online purchases, in order to send informative and/or advertising material about products of the Company and / or third-parties, that may be of particular interest to the user, by email (profiling purposes). The legal basis for the processing is your consent;
- to respond to your requests through the customer care service. The provision of data is purely optional. However, as the said processing is necessary in order to respond to your request, your refusal to provide the relevant data will prevent you from obtaining answer from the customer care of the Company. The legal basis for the processing is the Company’s legitimate interest to perform these activities. This legitimate interest is equal to the user’s interest to use the customer care service of the Website;
- in order to answer to your requests by email, by telephone, by mail. The provision of data is purely optional. However, as the said processing is necessary in order to respond to your request, your refusal to provide the relevant data will prevent you from obtaining answer from the customer care of the Company. The legal basis for the processing is the Company’s legitimate interest to perform these activities. This legitimate interest is equal to the user’s interest to receive answer by the Company.
The provision of data for registering purposes is optional. However, as the said processing is necessary in order to let you to register in our Website, your refusal to provide the relevant data will prevent you from completing the registration.
Consent to marketing and profiling purposes is purely optional. Failure to consent will have the following consequences.
Failure to consent to the processing of personal data for marketing purposes will prevent you to receive promotional communication and newsletter regarding products of the Company and/or third-parties and will prevent the Company to carry out market research purposes aimed at evaluating the level of customer satisfaction.
Failure to consent to the processing of personal data for profiling purposes will prevent the Company from studying the type and frequency of your online purchases, in order to send to you newsletter and/or advertising material that may be of particular interest to you regarding products of the Company and/or third-parties.
It is understood that the Company may use your personal data to comply with legal obligations and to perform the purchase contract.
If you are a register-user, you may revoke any consent granted for the purposes described above through your personal account.
You may revoke your consent using the relevant link indicated in any promotional email sent by the Company.
Special Categories of Personal Data. Judicial Data.
The Company does not process special categories of personal data nor judicial data.
Article 2. Methods of Processing Personal Data
The processing of your personal data will be carried out by electronic or automated means, in the manner and with the appropriate tools to ensure the security and confidentiality in accordance with the GDPR.
The information and methods of processing will be relevant and not excessive in relation to the type of services provided. Data will be managed and protected in environments where access is under constant control.
Article 3. Data Disclosure
- to all those parties (including Public Authorities) that have access to the data by virtue of regulatory or administrative measures
- to companies, consultants or professionals in charge of the installation, maintenance, updating and the management of the Company’s hardware and software or which the Company uses for the provision of its services
- to the Data Protection Office (DPO)
- to the companies that send the newsletters and/or other informative communications transmitted on behalf of the Company
- to the employees and/or collaborators of the Company
- to the company in charge of the customer care service
- to all those public and/or private parties, natural and/or legal persons (legal, administrative and tax consultancy firms), where the communication is necessary or of practical use for the correct fulfilment of contractual obligations undertaken in relation to the services provided through the Website, and of legal obligations.
Your data may be disclosed only in anonymous and aggregated form for statistical or research purposes.
Article 4. Data Controller; Data Protection Officer
You can contact the Company, as Data Controller, at the following addresses:
Consorzio Melinda SCA Via Trento 200/9, 38023, Cles (TN)
By telephone, calling: 0463 469299
By email, writing to: firstname.lastname@example.org
By selecting the contact form on the Website.
You can contact the Data Protection Office at the following addresses:
via Trento, 200/9 – 38023 Cles
By fax, writing to: email@example.com
By telephone, calling to: 0463671111
Article 5. Data Storage
Your personal data will be stored and processed for for marketing purposes for 24 months and for profiling purposes for 24 months. At the end of this period, the Company may ask you to renew your consent to the processing of your data or to make them anonymous and keep them only for statistical or historical purposes.
For all other purposes, personal data will be stored only as long as necessary to ensure the provision of the services offered.
If you close your account, your personal data will be stored for administrative purposes for a period not exceeding 90 days, without prejudice to any legal obligations regarding the storage of accounting documents or for public security purposes.
Article 6. Rights of the Data Subject
Pursuant to GDPR (Article 13), you have the right to:
- request access to and rectification or erasure of personal data or restriction of processing or object to their processing, in addition to the right to data portability
- withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to the withdrawal
- lodge a complaint before a supervisory authority (for instance, the Italian Data Protection Authority).
The above-mentioned rights may be exercised by making a request to or to the Data Protection Officer at the contacts indicated above.
Article 7. Amendments