Privacy policy
WHY THIS INFORMATION
Pursuant to Legislative Decree No 196/2003 and (EU) Regulation 2016/679 (hereinafter "Regulation"), this page describes the methods of processing personal data of users who consult the website of Arca Sas di Carrisi Francesco & C. electronically available at the following address: http://plazacarrisi.it We inform the user that, following this website consultation, data on identified or identifiable individuals may be processed. This information does not relate to other websites, pages or online services accessible via hypertext links.
Identity of the Data Controller
The Data Controller is Arca Sas di Carrisi Francesco & C. with registered office in Cellino San Marco (BR), Via Berlinguer n. 41 - c.a.p. 72020, (Email: francocarrisi@libero.it, PEC: arcacsm@pec.it, Tel.: +39 3480901481).
Data source and type of data collected
Arca Sas di Carrisi Francesco & C. collects personal data provided by users on a voluntary basis:
a) at the time of registration on the website.
b) related to the use of the website by the user, for example: IP address; if the user reaches the website through a redirect webpage, a link in a promotional e-mail or an ad on another website that redirects to Arca Sas di Carrisi Francesco & C. website, the company can also collect information from the redirect webpage, promotional e-mails or targeted ads together with the user's IP address to analyze the effectiveness of marketing operations ("usage data").
c) when sending a message using the forms provided for the contact request (included the forms for prenotations), i.e. the contact addresses on the site http://plazacarrisi.it. The optional and voluntary sending of messages to the contact addresses and also the compilation and the submission of website forms, entail the acquisition of the sender's contact data, necessary to provide feedback, as well as all the personal data included in the notices. The data provided will be used with IT and electronic devices for the sole purpose of providing the requested service and, for this reason, they will be kept exclusively for the period in which it will be active.
Purpose of the processing
Depending on the type of processing to be put in place, the Data Controller uses:
1) to provide feedback on any communication, user requests for information and/or services through the appropriate forms or using the address (s) in the contacts section;
3) Finally, the data will be used to manage and control risks, to prevent possible fraud, insolvency or default; prevent and manage possible controversy, take legal action if necessary.
Legal basis for processing
With reference to the above mentioned purposes, their legal basis is:
1) the need to perform a contract whose data subject is party or pre-contractual measures that are in response to the data subject’s request;
3) the need to pursue the legitimate interest of the Data Controller (in particular with regard to the prevention of fraud and insolvency).
Recipients of the data
The personal data processed by the Data Controller are neither disclosed nor notified to indeterminate subjects, in any possible form, including that of their availability or simple consultation. They may be communicated to the Data Controller’s employees, or to authorized parties that operate under the authority of the Data Controller. In this respect, Arca Sas di Carrisi Francesco & C. has appointed third party service providers in connection with the operation of the website, such as hosting service providers, marketing services and websites providers, IT maintenance service, shipping services and VAT verification services providers, as well as service providers that allow the integration of other functions on the website that the user can use at his discretion. To these service providers, designated as Data Officer, only the personal data necessary to deliver the equivalent services are provided and they are not allowed to use or disclose the personal data of the data subjects for other purposes, without prior authorization of the data subject.
The data may also be communicated, as it is strictly necessary, to subjects instructed by the Data Controller that must provide goods and/or services for purposes of order fulfillment or other requests or services related to the transaction or the contractual relationship with the Data Controller. Finally, the data may be communicated to the persons entitled to access it pursuant to legal provisions, regulations and Community legislation. In particular, on the basis of the roles and job duties performed, some workers have been entitled to process personal data, in view of their respective competences and in accordance with the instructions given by the Data Controller.
Data transfer
In no case does the Data Controller transfer personal data to third countries or international organizations. However, he reserves the right to use cloud services; in which case, the service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.
Data retention
The Data Controller retains and processes personal data for the time necessary to fulfill the stated purposes. Subsequently, personal data will be stored and not further processed for the time established by the current provisions on civil and fiscal matters. In particular, they will be kept for the entire duration of their registration and no later than a maximum period of 12 (twelve) months of inactivity, or when, within this period, no services are related the registration itself. It should also be added that, in the event that a user provides unsolicited or unnecessary personal data for the provision of the required service, or closely connected to it , to the Data Controller, Arca Sas di Carrisi Francesco & C. cannot be considered as the effective Controller of these data and will delete them as soon as possible.
Rights of the data subject
In relation to the processing data referred to this privacy statement, the data subject is given the right to:
• ask the Data Controller for access to your personal data and information (GDPR Article 15); the correction of inaccurate data or the integration of incomplete data (GDPR Article 16); the erasure of personal data (upon the occurrence of one of the conditions mentioned in GDPR Article 17, paragraph 1 and in compliance with the exceptions provided for in paragraph 3 of the same article); the restriction of the processing of your personal data (upon the use of one of the hypotheses mentioned in GDPR Article 18, paragraph 1);
• request and obtain from the Data Controller - in the cases in which the legal basis for the is the contract or consent, and it is carried out by automated means - your personal data in a structured and machine-readable format, also for the purpose of communicate such data to another Data Controller (so-called right to the portability of personal data - GDPR Article 20);
• object to processing of your personal data to the occurrence of particular situations that affect you (GDPR Article 21) at any time.
The appropriate application is submitted by contacting the Data Controller by mail at francocarrisi@libero.it, pec: arcacsm@pec.it or registered mail with advice of delivery to Cellino San Marco, Via Berlinguer n. 41 - c.a.p. 72020.
If the data subject considers that the processing of personal data is in violation of the Regulation terms, he can lodge a complaint with a supervisory authority (Authority for the protection of personal data - www.garanteprivacy.it), as provided for by GDPR Art. 77, or refer the matter to appropriate legal courts (GDPR Article 79).
Refusal to provide data
Data subjects cannot refuse to give the Data Controller the personal data necessary in order to comply with the laws that regulate commercial transactions and taxation. The provision of further personal data may be necessary to improve the quality and efficiency of the transaction. Therefore, the refusal to provide the data required by law will prevent the fulfillment of orders. The additional data indicated in the paragraph "Data source and type of data collected" are provided on a voluntary basis; however, if the data subject decides not to provide the requested data, Arca Sas di Carrisi Francesco & C. may not be able to provide the services, allow for the completion of the transaction through the website or process the order.
Automated decision-making
The Data Controller does not process automated decision-making data related to individuals.
