PRIVACY POLICY

This 'Privacy Policy' explains the types of personal information we collect, how we use, disclose and protect it.

 

 

 

Dear user, 

Frantoio Oleario Guido D'Amico has always considered the protection of the per-sonal data of its customers and users, actual and / or potential, of fundamental importance.

 

 

With this document (hereinafter, the Information), we intend to renew our com-mitment to ensure that the processing of personal data, carried out in any way (both automatic and manual), will be executed in full observance of the rights and protections recognized under the Regulation (EU) 2016/679 (hereinafter, GDPR or Regulation) and under the additional applicable rules on the protection of personal data.

 

The term Personal Data refers to the definition contained in art.4 in point 1) of the Regulations, ie “any information concerning an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social "(hereinafter, the Personal Data).

 

The Regulation provides that, before proceeding with the processing of Personal Data - this term being understood, according to the relevant definition contained in art.4 in point 2)of the Regulation, namely "any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring , storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or the destruction "(hereinafter, the Treatment) - it is necessary that the person to whom such Personal Data belongs is informed about the reasons for which such data are requested and how they will be used.

 

In this regard, this Information - drafted on the basis of the principle of transparency and all the elements required by art. 13 of the Regulation - aims to provide you, in a simple and intuitive way, with all the useful and necessary information so that you can provide your Personal Data in a conscious and informed way and, at any time, request and obtain clarifications and / or corrections.

 

 

 

A.THE HOLDER OF THE TREATMENT

 

The company that will process your Personal Data for the main purpose referred to in Section B of this Notice and which, therefore, will play the role of data controller according to the relevant definition contained in art.4 in point 7) of the Regulation, namely "the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data" is:

 

Frantoio Oleario Guido D'Amico (hereinafter the Owner or Oliodamico), with registered office in via Roma 34, 65020 Rosciano PE (hereinafter, the Headquarters).

 

 

 

B.CATEGORIES OF PERSONAL DATA PROCESSED AND PURPOSE OF THE TREATMENT

 

The processing of your Personal Data will be legally based on the relationship that will be created between you and the Owner pursuant to art.6, paragraph 1, point b) of the Regulations and is necessary in order to allow you to purchase the products and / or services marketed through the site, to respond to requests for information and to allow you to use the site.

 

To allow the Data Controller to carry out the Processing activities for the above purposes, it may be necessary to provide Personal Data marked with the symbol [*].

 

In the absence of the provision of even one of the marked data, it will not be possible to proceed with the processing of your Personal Data and, consequently, it will not be possible to request the information.

 

The Personal Data that will be requested from you for the pursuit of the aforementioned purposes will be those reported in the registration and / or contact form, that is, by way of example and not limited to: name, surname, e-mail address, telephone numbers of fixed and / or mobile users.

 

 

 

C.FURTHER PURPOSES

 

In addition to the purposes referred to in the previous section, your Personal Data may be processed for the following and additional purposes.

 

 

Direct marketing: this term means the will of the Owner to carry out promotional and / or marketing activities towards you and in your interest to provide you with a better service, promote products, services, sold and / or provided by the Owner.

 

With regard to the direct marketing purpose (i), it should be noted that, releted to art. 6, paragraph 1, point f) of the Regulation, the Data Controller may carry out this activity based on its legitimate interest, regardless of your consent and in any case up to your opposition or limitation (pursuant to the provisions of Section G letter d) of this Information) to this Processing, as better explained in Recital 47 of the Regulation, in which it is "considered legitimate interest to process personal data for direct marketing purposes". This will also be possible following the assessments made by the Data Controller regarding the eventual and possible prevalence of your interests, fundamental rights and freedoms that require the protection of Personal Data over your legitimate interest in sending direct marketing communications.

.

 

The contact methods aimed at direct marketing activities can be both automated and traditional. In any case, and as further specified in Section G below, you can revoke your consent even partially, for example by consenting only to traditional contact methods.

 

As for the contact methods that involve the use of your telephone contacts, we remind you that the direct marketing activities by the Owner will be carried out after verifying your possible registration in the Register of Oppositions, as established pursuant to and for the effects of the Presidential Decree 7 September 2010, n. 178 and subsequent amendments.

 

 

 

D. SUBJECTS TO WHOM YOUR PERSONAL DATA MAY BE COMMUNICATED

 

Your Personal Data may be disclosed to specific subjects considered recipients of such Personal Data. In fact, art. 4 at point 9) of the Regulation, defines the recipient of a Personal Data "the natural or legal person, public authority, service or other body that receives communication of personal data, whether or not it is a third part" (hereinafter , the Recipients).

 

In this perspective, in order to correctly carry out all the processing activities necessary to pursue the purposes referred to in this Notice, the following Recipients may be in a position to process your Personal Data:

 

-

- third parties who carry out part of the processing activities and / or activities connected and instrumental to them on behalf of the Data Controller. These subjects have been appointed as data processors, having to be understood individually with this term, in accordance with art. 4 in point 8) of the Regulations, "the natural or legal person, public authority, service or other body that processes Personal Data on behalf of the Data Controller" (hereinafter, the Data Processor);

 

- individuals, employees and / or collaborators of the Data Controller, to whom specific and/or more activities involving Personal Data Protection are entrusted. These individuals have been given specific instructions on the subject of security and correct use of Personal Data and are defined, pursuant to art. 4 in point 10) of the Regulations, "persons authorized to process Personal Data under the direct authority of the Data Controller or Data Processor" (hereinafter, the Authorized Persons).

 

Where required by the law or to prevent or suppress the commission of a criminal offence, your Personal Data may be disclosed to public entities or judicial authorities without them being defined as Recipients. In fact, pursuant to art. 4 in point 9) of the Regulation, " public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients".

 

 

 

E. TIMES OF TREATMENT AND STORAGE OF PERSONAL DATA

 

One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by art. 5, paragraph 1, point e) of the Regulation which states "Personal Data are stored in a form that allows the identification of the Data Subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided that they are processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with art. 89, paragraph 1, without prejudice to the implementation of adequate technical and organizational measures required by these Regulations to protect the rights and freedoms of the interested part".

 

In consideration of this principle, your Personal Data will be processed by the Data Controller limited to what is necessary for the pursuit of the purpose referred to in Sections B and C of this Information.

 

In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, i.e. until the termination of the contractual relationships between you and the Data Controller, without prejudice to the legitimate interest of the Data Controller referred to in Recital 47 of the Regulation as well as an additional retention period that may be imposed by law as also provided for by Recital 65 of the Regulation.

 

 

 

F.WITHDRAWAL AND LIMITATION OF CONSENT

 

As required by the Regulations, if you have given your consent to the Processing of your Personal Data for one or more purposes referred to in Sections B and C of this Information, you can, at any time, withdraw it totally and / or partially without prejudice to the lawfulness of the Treatment based on the consent given before the revocation. The methods for withdrawing consent are very simple and intuitive; just contact the Data Controller using the contact channels listed in this Notice in Section G.

 

 

In addition to the above and for simplicity, if you find yourself in a position to receive advertising e-mail messages from the Owner that are no longer of interest to you, simply click on the unsubscribe button at the bottom of them or send an email to the shop. @ oliodamico.it to no longer receive any communication even through other contact channels for which your consent was obtained (SMS, MMS, paper mail, fax, telephone calls).

 

 

 

G.RIGHTS OF THE INTERESTED PARTIES

 

As required by art. 15 of the Regulation, you will be able to access your Personal Data, request its correction and updating, if incomplete or incorrect, request its cancellation if the collection took place in violation of a law or regulation, as well as oppose the processing for legitimate and specific reasons. In particular, we report below all your rights that you can exercise, at any time, towards the Data Controller.

 

Right of access

 

You will have the right, pursuant to art. 15, paragraph 1 of the Regulation, to obtain from the Data Controller confirmation as to whether or not your Personal Data is being Processed and, in this case, to obtain access to such Personal Data and the following information: a) the purposes of the Treatment; b) the types of Personal Data at issue; c) the Recipients or the types of Recipients to whom your Personal Data were or will be disclosed, especially if Recipients belong to third countries or international organizations; d) if applicable, the required storage period of Personal Data or, if not applicable, the criteria used to determine such period; e) the existence of a right of the Data Subject to ask the Data Controller the rectification or erasure of Personal Data or the restriction of the Personal Data Processing or to object to the Processing; f) the right to lodge a complaint to the relevant Data Protection authority; g) if the Personal Data were not collected through the Data Subject, all the information concerning their origin; h) the existence of an automated decisional process, including profiling mechanisms as referred to in the art. 22(1,4) of the Regulation and, at least in these cases, relevant information on the logic used as well as the importance and the expected consequences of such Processing for the Data Subject

 

Right of rectification

 

You will be able to obtain, pursuant to art. 16 of the Regulation, the correction of your Personal Data that are inaccurate. Furthermore, taking into account the purposes of the processing, you will be able to obtain the integration of your Personal Data which are incomplete, also by providing a supplementary declaration.

 

 

Right to erasure

 

You will be able to obtain, pursuant to art. 17, paragraph 1 of the Regulation, the cancellation of your Personal Data without unjustified delay and the Data Controller will have the obligation to delete your Personal Data, if there is even one of the following reasons: a) the Personal Data are no longer necessary with respect to purposes for which they were collected or otherwise processed; b) you proceeded with the withdrawal of the consent on which the Processing of your Personal Data is based and there is no other legal reason for their Processing; c) you opposed the processing pursuant to art. 21, paragraph 1 or 2 of the Regulation and there is no longer any legitimate overriding reason to proceed with the Processing of your Personal Data; d) your Personal Data have been illegally processed; e) it is necessary to delete your Personal Data to fulfill a legal obligation provided for by a community standard or internal law.

 

In some cases, as required by art. 17(3) of the Regulation, the Data Controller can lawfully refuse to proceed with the erasure of your Personal Data if their Processing is necessary, for instance, to exercise the right to freedom of expression and information, to fulfill a statutory obligation, on grounds of public interest, for archiving in the public interest, scientific, statistical, historical use, and for the establishment, exercise or defence of legal claims

 

 

Right to limit the processing

 

You have the right to obtain from the Data Controller restriction of processing, pursuant to art. 18 of the Regulation, where one of the following applies: a) you have contested the accuracy of the Personal Data (at least for a period enabling the controller to verify the accuracy of the Personal Data); b) the Processing is unlawful but you objected to the erasure of the Personal Data, requiring the restriction of their use instead; c) despite the Data Controller no longer needs your Personal Data for the purposes of the Processing, they are required for the establishment, exercise or defence of legal claims; d) you objected to the Processing pursuant to Article 21(1) of the Regulation, pending the verification whether the legitimate grounds of the Data Controller override yours.

In case of limitation of processing, your Personal Data will be processed, except for storage, only with your consent or for the establishment, exercise or defense of a right in court or to protect the rights of a 'other natural or legal person or for reasons of significant public interest. We will inform you, in any case, before this limitation is lifted.

 

 

Right to data portability

 

You can, at any time, request and receive, pursuant to art. 20, paragraph 1 of the Regulation, all your Personal Data processed by the Data Controller in a structured, commonly used and legible format or request its transmission to another data controller without impediments. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer your Personal Data by providing us with written authorization.

 

Right to object

 

In accordance with art. 21, paragraph 2 of the Regulation and as also reaffirmed by Recital 70, you can object, at any time, to the Processing of your Personal Data if these are processed for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.

 

Right to lodge a complaint with the supervisory authority

 

Without prejudice to your right to appeal to any other administrative or jurisdictional office, if you believe that the processing of your Personal Data conducted by the Data Controller is in violation of the Regulations and / or applicable legislation, you can lodge a complaint with the Guarantor Authority for the Protection of Competent Personal Data.

 

 

H. PLACES OF PROCESSING

 

Your Personal Data will be processed by the Data Controller within the territory of the European Union.