Privacy Policy – pursuant to article 13 of EU Regulation no. 2016/679
Dear Sir / Madame,
Pursuant to art. 13 of EU Regulation no. 2016/679 (GDPR), containing provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which we are bound.
1. Data Controller
The owner of the treatment of personal data is Pasta di Aldo Srl (hereinafter "OWNER"), with registered office in Via Castelletta 41 – Monte San Giusto (MC) VAT number 02046500431 – Tax code 02046500431, Tel.0733-837120 – Email: privacy@lapastadialdo.it
2. Purpose of the Processing
Subject to your consent, your personal data will be processed for the following purposes:
a) Make purchases through the Owner's e-commerce portal and related services
Your data will be processed to allow you access to the e-commerce portal dedicated to the Owner's online purchases, as well as for all related services (communications, requests for information, returns management, order monitoring, etc.).
Your personal profile will be created on the portal through which you can carry out all the purchase operations.
Finally, your data may be processed for the purpose of carrying out all the administrative, accounting and fiscal activities related to this purpose and for the fulfillment of obligations imposed by laws or regulations.
b) Direct marketing.
Your personal and contact data may be processed by the Data Controller for the sending, via postal mail, e-mail, SMS, of information on purchase opportunities and active promotions. They may also be used for market research, including by telephone.
3. Legal basis
The legal basis of the processing for the purposes indicated above is based on your consent to the processing of your personal data.
Nonetheless, the treatment may also be carried out as necessary for the execution of a contract of which you are a part or for the execution of pre-contractual measures adopted at your request, to fulfill legal obligations to which the Data Controller is subject or in cases where conditions of lawfulness of the treatment determined by the art. 6 of the GDPR and subsequent amendments and additions, also introduced by the State.
4. Processing methods
Personal data will be processed in computerized, telematic and paper form and entered in the pertinent databases which the persons in charge of data processing will be able to access.
The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the aforementioned purposes.
We point out that, in compliance with the principles of lawfulness, purpose limitation, integrity, confidentiality, availability and minimization of data, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed and in any case no longer than 10 years.
5. Communication and dissemination of data
We also inform you that the data collected will never be disclosed and will not be communicated, except for the necessary communications which may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations.
6. Transfer of personal data
Your data will not be transferred outside Italy. The data processing and storage tools are managed by Italian suppliers who fully adhere to the GDPR.
7. Existence of an automated decision-making process, including profiling
The OWNER does not adopt any automated decision-making process, including profiling, pursuant to article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016. If purchase analysis techniques are implemented, they will take place on aggregated data without personal information.
8. Rights of the interested party
At any time, you may exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of personal data;
b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period; c) obtain the rectification and cancellation of data;
d) obtain the limitation of the treatment;
e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
f) oppose the treatment at any time and also in the case of treatment for direct marketing purposes;
g) oppose an automated decision-making process relating to natural persons, including profiling.
h) ask the data controller to access personal data and correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
j) lodge a complaint with a supervisory authority.
To exercise your rights with a written request or for any other information, contact us using the email privacy@lapastadialdo.it or at the postal address of the OWNER's headquarters.
9. Coming of age obligation
This information is addressed exclusively to persons who have reached the age of majority. Therefore, if you are a minor, please refrain from providing your data and from giving your consent to the processing, as in any case your data will not be collected, stored or processed by the Data Controller for any of the aforementioned purposes.
10. Update
This document may undergo changes and/or additions, also as a consequence of any subsequent regulatory amendments and/or additions.
