ACCORDING TO EU GDPR 2016/679
Last updated: 26.10.2018
Welcome to our website. Please read carefully our Policy which applies both if you access the Site and decide to simply browse through it and in case you use its advanced services. Please also read, if you have not already done so, the page of the Terms of Service because it contains important information on safety in navigation and control systems adopted. This information is made in accordance with the European General Data Protection Regulation (GDPR) 2016/679, which provides for the protection of individuals with respect to the processing of personal data. According to the law indicated, such processing will be based on the principles of fairness, legality and transparency and protection of your privacy andyour rights.
1. Who processes your personal data
The controller of the personal data collected from users through the site subject to this privacy policy is RAVIZZA FRATELLI SAS DI RAVIZZA ALDO & C, Via Ala di Stura 63, Turin, 10148, VAT number: 01921700017, hereinafter referred to as “Data Controller”.
2. Our information
This Privacy Policy provides you with any information useful to understand how the Data Controller collects and uses information that identifies users of the Site. Everyone has the right to protection of their personal data. The Data Controller respects the right of its users to be informed about the collection and processing of their personal data. In the processing of data that can, directly or indirectly, identify your person, the Site Owner respects a principle
of strict necessity. For this reason, the Site is configured in such a way that the use of your personal data is reduced to a minimum and so as to exclude the processing of your data when the purposes pursued in individual cases (such as for market research to improve services, or for traffic data and your stay on the website or your IP address, or at the request of law enforcement authorities) may be achieved through the use of anonymous data. The decisions regarding the purposes, the methods of processing your personal data and the tools used, including the security profile, are the responsibility of the Data Controller, as the controller of the users’ personal data.
3. How we use your data and for what purposes
Your personal data (personal data, user ID and password, e-mail address) are collected and processed by the Data Controller for purposes strictly related to the use of the Site and its services. Your personal data may also be used in other processing operations, however, in terms compatible with these purposes. In particular, your personal data may be processed to provide you with confidential features, as part of the portal access processes, such as
changing your login details and user profile;
to provide you with support services;
when you make a purchase, for order processing and the management of the commercial relationship (deliveries, invoices, customer service). The recipients of your personal data, if necessary, will be our electronic commerce platform information technology providers, our payment or payment security system providers, our delivery providers, our business partners. These companies are obliged to protect your data and use it in accordance with
this policy and legal requirements.
Your personal data are processed mainly in digital format and are stored in a form that allows you to be identified for the time strictly necessary for the purpose for which the data were collected and subsequently processed;
and, In any case, within the legal limits.
To ensure that your personal data is always accurate and up-to-date, however relevant and complete, please report any changes made by interacting independently with the forms for changing your profile data contained in the Site.
Your personal data will not be disclosed to third parties for purposes not permitted by law or for purposes not in accordance with this policy. Your data may be communicated to the police or judicial authorities, in accordance with the law and upon formal request by such parties, for example within the anti-fraud services. Your data may be disclosed by the Data Controller if it considers that disclosure is reasonably necessary to enforce its Terms of Use
or to protect its activities or users.
Your personal data may be disclosed to the public only with your consent and only within the scope of the provision of services provided through the Site. Your personal data may be transferred abroad only for the purposes strictly related to the use of the Site and only for the purpose for which your data were obtained.
The Data Controller, in case of reorganization, merger or sale could transfer to third parties all personal data collected and for the specific purposes for which you have given your consent. In all these cases your consent is not necessary.
4. What happens if you do not consent to the processing of your personal data The communication of your personal data to the Data Controller and, in particular, the personal data, your e-mail address, your postal address, telephone number are necessary for the management of operations carried out on the Site, by way of example the registration on the Site, the finalisation of purchase orders, the provision of assistance services, the fulfilment of legal obligations, etc..
Any refusal to communicate to the Data Controller your data necessary for these purposes, may result in the impossibility, on the part of the Data Controller, to properly provide services through the Site. Failure to provide data may, depending on the case, constitute a legitimate and justified reason for not performing or suspending the services requested by you. The communication to the Data Controller of additional data, other than essential data, for the purpose of performing its services is optional and does not entail any consequences for the use of the Site. Depending on the case and, if necessary, from time to time, the Data Controller will inform you of the mandatory or optional nature of the communication of your personal data, highlighting the mandatory or optional nature of the communication of your data, by attaching a special character (*) to the mandatory information or only the data
necessary for the provision of services. We remind you that the failure to provide optional personal data will not entail any obligation or disadvantage.
5. The collection of your browsing data
As part of the use and navigation of the Site, it may happen that some browsing data is collected through so-called “cookies”, such as browsing history, duration of the session on the site, number of pages visited, geographical origin, collection of the IP address of the user and other information related to the stay on the Site or the preferences expressed by the user in choosing the services offered by the Site. This information and data is collected
directly and automatically by the Site and as part of its own operation. For more details on how it works you can read our Cookie Information.
6. Safety measures
The Data Controller adopts security measures in order to minimize the risk of destruction or loss, even accidental, of the same data, unauthorized access or processing not allowed or not in accordance with the collection purposes indicated in our Privacy. However, the Data Controller cannot guarantee to its users that the measures taken for the security of the Site and the transmission of data and information limit or completely exclude any risk of
unauthorized access or dispersion of data through the devices that users are browsing on. You should make sure that your computer is equipped with appropriate software devices to protect the network transmission of data, both in and out (such as updated antivirus systems) and that your Internet service provider has taken appropriate measures for the security of data transmission over the network.
7. Registration of bank data
In case of payment by credit card, the information necessary for the execution of the transaction, such as credit or debit card number, expiration date, security code will be protected and managed by our systems, or third-party circuits, to enable you to finalize your purchase. The information and payment arrangements entered in the financial system (credit card number, security codes) are processed through SSL (Secure Sockets Layer) protocol
and will not be stored in any way on our systems.
8. Rights of the data subject to processing
At any time you may exercise, pursuant to articles 15 to 22 of EU Regulation 2016/679, the following rights and obtain:
confirmation of whether or not personal data concerning you exist;
information about the origin of your personal data;
information about the purpose and method of processing your personal data;
information on the logic applied in case of processing carried out with the aid of electronic tools;
the identification details of the controller and processors; an indication of the subjects or categories of subjects to whom personal data may be
disclosed or who may become aware of them, for example as controllers;
where possible, information about the storage period and obtaining processing limitations;
the portability of data, that is to receive them in a structured format of common use and readable by automatic device and transmit them to another controller without hindrance the updating, rectification or integration of your personal data;
the deletion, transformation into anonymous form or blocking of your personal data processed in violation of law, including those for which it is not necessary to store them in relation to the purposes for which they were collected;
revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation submit a complaint to the competent authority(Privacy Supervisor).
You will, however, have the right to object to the processing of your data:
a) for legitimate reasons to process personal data concerning you, even if relevant to the purpose of collection;
b) the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for the completion of market research or commercial communication;
c) automated decision-making relating to natural persons including profiling. You can freely and at any time exercise your rights, provided that within the limits of law, with a request addressed to the Data Controller, at the email address info@ravizzafratelli.it to which we will provide appropriate confirmation. The Data Controller may refuse to comply with requests that are futile, harassing, harmful to the privacy of others or excessively difficult to satisfy.
9. Contacts
If you would like to receive more information about how the Data Controller handles your personal data, please write an e-mail to info@ravizzafratelli.it. To know your rights and always be updated on the legislation regarding the protection of individuals with regard to the processing of personal data, we recommend you visit the website of the Guarantor for the protection of personal data at www.garanteprivacy.it.
10.Time to store
Your data is kept for the time necessary to pursue the purposes indicated in this policy unless a longer retention period is required or permitted by law.
11. Contacts
For any other information on our Privacy Policy you can send a request to the following e-mail address: info@ravizzafratelli.it or write to RAVIZZA FRATELLI SAS DI RAVIZZA ALDO & C, Via Ala di Stura 63