Paolo Deandrea LE MOSCHINE

PRIVACY NOTICE

This notice aims to describe the management methods of the website www.paolodeandrea.it (hereinafter, the "Site") with reference to the processing of personal data of individuals who access, use, or interact with it (hereinafter, the "Users").

This is a general notice provided in compliance with art. 13 of Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, the "Regulation" or "GDPR") to all Users who consult and/or interact with the services provided through the Site by PAOLO ANDREA DEANDREA with registered office in Via ROMA 26 28010 AGRATE CONTURBIA (NO), CF: DNDPND63A24F205O (hereinafter, the "Data Controller").

This notice will illustrate the purposes and methods by which the Data Controller collects and processes the personal data of Users, what categories of data are subject to processing, what rights the data subjects have under the Regulation, and how they can be exercised.

The notice is provided exclusively for the Site, therefore the Data Controller assumes no responsibility for third-party websites that may be consulted via hyperlinks present on the Site itself. Furthermore, the notice refers to data acquired from pages managed by the Data Controller on social network platforms such as, by way of example and not limited to, Facebook and Instagram.

The processing of the User's personal data will be carried out using suitable paper, electronic, and/or telematic tools, with logic strictly related to the purposes mentioned above and, in any case, in such a way as to guarantee the security and confidentiality of the data themselves.

By using the Site, Users are invited to read this notice before providing any personal information of any kind.

1. CATEGORIES OF PERSONAL DATA

A) NAVIGATION DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the User's operating system and computer environment.

These data are used solely to obtain anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.

B) DATA VOLUNTARILY PROVIDED BY THE USER

Without prejudice to what is specified above regarding navigation data, the Data Controller will acquire any personal data provided by the User through the Site to access certain services (e.g., through the contact form available "WRITE TO US" on the Site or to receive the newsletter), or to create a personal account on the Site or make a purchase through it.

By way of example, the Site will acquire only common personal data, provided directly by the User (such as name, surname, and email address, shipping address, phone number), as well as any other information that the User will communicate, of their own initiative, through the contact tools made available by the Site, namely the form present in the "WRITE TO US" section and the online assistance chat.

2. PURPOSES, LEGAL BASIS OF PROCESSING, AND NATURE OF PROVISION

The data indicated in the previous paragraph will be processed by the Data Controller:

to allow the User to navigate the Site and, if applicable, create a personal account on it;
in order to fulfill the User's requests submitted through the form present in the "WRITE TO US" section;
to allow operators to provide personalized assistance and respond to User requests submitted through the online chat on the Site;
if requested by the User, to send the periodic newsletter of the Data Controller, containing commercial communications and concerning its own products or services similar to those offered on the Site.

The processing is therefore necessary to follow up on a User's request, within the context of the legal relationship in place with the Data Controller. The provision of such data is therefore necessary to follow up on the User's requests.

Furthermore, the data provided in the context of assistance requested via chat may also be used to monitor and improve the quality of the service offered to the User, based on a legitimate interest of the Data Controller.

At any time, it is possible to request the deletion of the personal account or from the newsletter service by writing to the email address shop@paolodeandrea.it, clicking on the "Unsubscribe" button present in the Data Controller's newsletter, or following the instructions to delete the account present in the reserved area of the Site.

3. CATEGORIES OF SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED AND PURPOSE OF COMMUNICATION

The Data Controller may communicate, for the same purposes indicated in the previous paragraph 2, some personal data of the User also to third parties, who will process their personal data as data processors pursuant to art. 28 of the Regulation.

The list of data processors can be requested from the Data Controller at any time by writing to shop@paolodeandrea.it

4. DATA RETENTION PERIOD AND DURATION OF PROCESSING

The Data Controller will retain the data for as long as necessary to pursue the purposes described in this notice and, in particular, to allow the User to use the services made available through the Site. After this period, the Data Controller may retain the Users' data for an additional period of 10 years, in order to fulfill legal obligations or protect its interests in court.

The data collected through the form present on the "WRITE TO US" page or through the online chat will be retained until the request is fulfilled. Subsequently, the data may be retained for a period not exceeding 12 months.

For the purpose of sending the newsletter, the Data Controller will retain the data until the User requests not to receive such communications anymore, by sending an email to shop@paolodeandrea.it or clicking on the unsubscribe button present in the communications. Following such a request, the Data Controller will proceed to permanently delete the User's email address from the newsletter mailing list.

5. TRANSFER OF PERSONAL DATA ABROAD

The User's personal data will NOT be transferred outside the European Union.

6. RIGHTS OF THE DATA SUBJECTS

The User has the right to exercise the rights provided by articles 15 and following of the Regulation, in particular:

the right to access personal data and, in particular, to access, as well as to request and obtain information about the existence of personal data relating to them in the possession of the Data Controller;
the right to rectification and, in particular, to request and obtain the modification and/or correction of their personal data if they believe it is inaccurate or incomplete;
the right to request, in the circumstances provided for by the Regulation, the deletion of personal data or the limitation of the processing concerning them;
the right to request, if applicable, the portability of personal data;
the right to withdraw the consent previously given.

These requests can be addressed to the Data Controller by sending an email to shop@paolodeandrea.it

Finally, under the current legislation, the User can lodge any complaints regarding the processing of their personal data with the Data Protection Authority.

7. DATA CONTROLLER

The Data Controller is PAOLO ANDREA DEANDREA, with registered office in Via ROMA, 26 AGRATE CONTURBIA (NO) ITALY CF: DNDPND63A24F205O email: deandreap@gmail.com