Information on data processing applies only to the Site and to processing by the Company, and does not extend to processing by third parties via any other web sites the User may consult via links.
The Company accepts no liability for additional data processing via such sites, in relation to which the User must refer to the individual Privacy and Cookie Policies of third-party sites.
1. 1. Data Controller
The Data Controller is the Company, as stated above.
1. 2. Purposes and legal basis of data processing
The Company may process the User’s data via the Site for the following purposes:
a. To contact the Company. The Data Controller offers the User an opportunity to send the Company information, questions, and requests for information regarding orders, activities, initiatives, products and/or services via the “Contact Us” section of the Web Site. The Company will use the personal data supplied by the User to accept, correctly manage and respond to the User’s requests. The legal basis of data processing is in this case providing the service expressly requested by the User, and refusal to provide personal data will make it impossible for the Company to manage and respond to correspondence or requests for information.
b. Registration. The Company offers the User an opportunity to register on the Site via the “Register” section. In this section, the User may view information on orders placed, orders pending, and recent shipments, and edit his or her contact information (such as shipping address) and accounting information (such as banking data). The Company will in this case use the User’s personal data to accept, correctly manage and respond to the User’s request. The legal basis for processing is represented by execution of the service expressly requested by the User, and refusal to provide personal data will make it impossible for the Company to provide the requested service.
c. Sale of products and services offered on the Site. The Company may process data supplied by the User as part of the procedure for purchasing products and/or services offered on the Site under the “Larusmiani” trademark. The legal basis for processing is in this case conclusion, execution and management of a contract of sale stipulated between the Company and the User, and refusal to provide personal data will make it impossible to complete the purchase.
d. Competitions for prizes. The Company may process the data supplied by the User in order to participate in a competition for prizes solely for the purpose of permitting this participation (e.g. notification in the event of winning). The legal basis for processing is, in this case, providing a service expressly requested by the User, and refusal to provide personal data will make it impossible to participate in competitions for prizes.
e. Pursuit of the legitimate interests of the Company and/or third parties. The User’s data may be used to exercise the rights and legitimate interests of the Company and/or of third parties, such as the right to defence in court, management of claims and disputes, credit collection, or prevention of fraud and/or unlawful activity. In these cases, though it is not obligatory for the User to provide personal data, it will be necessary as the data are strictly connected with an instrumental to pursuit of these legitimate interests, which do not prevail over the User’s fundamental rights and freedoms, and refusal to provide personal data could make it impossible to provide the requested services (such as requests for the Company to provide information).
f. Fulfilment of applicable laws and/or obligations. The Company may also use personal data supplied by the user or otherwise acquired in the course of the User’s interaction with the Site for purposes connected with fulfilment of obligations under national or EU laws, regulations and legislation or deriving from the orders of legitimate authorities, which represent the legal basis for processing, with no need to obtain the User’s prior consent.
g. Sales and marketing purposes. The Company may use the personal data you supply to send you, in print form and/or via text message and/or e-mail, newsletters containing information, invitations to events, product catalogues and/or information of a promotional or commercial nature pertaining to Larus Miani products and/or services. The legal basis for data processing is in this case the User’s freely given consent, and withholding consent for processing of personal data will make it impossible for the User to receive promotional or commercial messages from the Company. Secondly, if you have provided your e-mail address for the purposes of sale of the Company’s products and/or services via the Site, we inform you that the Company may use this e-mail address, even without your consent, to send you correspondence regarding similar products or services, on the basis of its own legitimate interests, under point 47 of the Regulation: in this case, we inform you that you may refuse such correspondence at any time by writing to the e-mail address appearing at the foot of each e-mail message received.
h. Sales and marketing purposes based on the User’s profile (profiling). The Company may use the personal data you supply while browsing the Site (such as the date and time at which you visit the site, the products you have viewed and/or purchased, etc.) to send you, in print and/or via text message and/or e-mail, advertising messages personalised on the basis of your preferences and interests. The legal basis of processing is in this case the User’s freely given consent, and withholding consent for the processing of your personal data will make it impossible for the User to receive promotional and commercial messages personalised on the basis of his or her preferences, without affecting the User’s ability to use the services and functions available on the Site in any way.
i. Conducting aggregated, anonymous statistical analyses with the goal of improving the Company’s performance and the services it offers via this Site. In this case, the User will not be asked to provide consent, as the data will be processed in anonymous form.
1. 3. Categories of data processed
The Company receives and collects, through the Site, information on Users who visit pages on the Site and make use of the web services offered on it. The Company acquires and processes the following specific items of information:
1.3.1 Data collected through browsing and cookies
When a User visits the Site, the Site collects certain items of data, such as pages viewed, links or buttons the User clicks on, date and time of access, the user’s IP address, and the browser and operating system used (known as “browsing data”). Browsing data may, by nature, permit identification of the User through processing and association with data held by third parties. The Company will, however, use these data only for the purpose of obtaining anonymous statistical information on Site use for purposes strictly linked with the functioning of the Site. Browsing data may also be used to ascertain responsibility in the event of a cybercrime attack on the Site.
1.3.2 Data voluntarily provided by the User
The Company limits collection of information voluntarily supplied by the User to the information necessary to pursue the purposes described in point 2 above and the services expressly requested. The Company may also collect and process additional personal data, if voluntarily supplied by the User in the context of the services offered on the Site, as for example if the User contacts the Company to report a failure or fault, to exercise his or her rights in relation to personal data processing, etc. The company will use such data only for purposes strictly connected with the User’s request. Failure to provide such data may make it impossible to obtain the requested service.
• companies belonging to the same group of companies as the Data Controller, for administrative purposes, for pursuit of the legitimate interests of the Company or of a third party, and for the purposes of providing services expressly requested by the User;
• companies, partners, consultants or self-employed professionals whose services the Company uses to perform technical or organisational tasks (such as suppliers of IT services), or with which the Company collaborates, for the purposes of providing and ensuring the functioning of its services, or for communication;
• persons, companies or professional practices providing the Company with assistance and consulting services, particularly but not exclusively in relation to accounting, administrative, legal, fiscal and financial matters;
• parties entitled to access the data by provisions of the law or by order of authorities.
Parties belonging to the above categories will use the data as independent data controllers under the law or as data processors duly appointed by the Company.
These parties may be based in EU or non-EU nations. If these parties are based on non-EU nations, the Company will adopt the measures required by the Regulation for legitimate transfer of personal data to them, including the Standard Contractual Clauses approved by the European Commission or the Privacy Shield Agreement for transfers to the United States. A list of parties to which the data is or may be disclosed may be requested from the Company through the “Contact Us” section of the Site.
1. 5. Data storage
The User’s data will be stored only for the amount of time necessary to achieve the purposes for which the data were collected and for the performance of tasks connected with and instrumental to these purposes, as stated in paragraph 2 above, after which the data will be stored up to the ordinary time of expiration identified by the Italian Civil Code or by specific provisions of the law, for administrative purposes and/or in order to enforce or protect a legitimate right or interest, and will be erased when the purpose for which they were collected no longer applies. In the specific case of use of personal data for marketing purposes, the Company will process the User’s data until the User objects to receiving marketing messages. In the case of data used for profiling purposes, the Company will process personal data for profiling for no more than 24 months following collection.
1. 6. Rights
Users may exercise their rights in the cases expressly identified by the law and under the Regulation, where applicable. Specifically, the User is entitled to:
• obtain confirmation whether his or her personal data is processed, and if it is, ask the Data Controller to provide access to information on the processing (e.g. purposes, categories of data processed, recipients or categories of recipients of the data, storage period, etc.);
• request correction of inaccurate or incomplete data;
• request erasure of the data;
• request limitation of processing;
• receive his or her personal data in a structured format commonly in use and readable on an electronic device (such as pdf format), and send the data to another data controller, or request direct transmission of the data to another data controller, if technically feasible (referred to as “data portability”);
• revoke consent at any time without affecting the legitimacy of processing based on consent prior to revocation.
The User is also entitled to object to processing of his or her personal data, in full or in part, with legitimate reason.
These rights may be exercised directly by contacting the following e-mail address: firstname.lastname@example.org
Lastly, users who believe that the processing of their data violates personal data protection regulations may contact the Garante or personal data protection authority (www.garanteprivacy.it)