Privacy information pursuant to article 13 of the 2016/679 EU regulation
With the following privacy policy Eleonora Azzolina Shop informs you that it is of fundamental importance that the processing of personal data, carried out by any means, both automated and manual, takes place in full compliance with the protections and rights recognized by Regulation (EU) 2016/679 of the European Parliament and of the Council concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter the "Regulation" or "GDPR") and the additional applicable data protection rules personal data (jointly referred to as "current privacy legislation"). The Company also informs that - pursuant to and for the purposes of the provisions of art. 13 of the Regulations - your personal data will be processed through electronic and manual tools. The following information is intended to describe, in general, the management methods of the website www.eleonoraazzolina.it (hereinafter the "Portal") and this information is prepared on the basis of the principle of transparency and all the required elements from the GDPR and is divided into individual sections in order to make the reading faster, easier and easily understandable (hereinafter the "Information").

Data processed, purposes and legal basis
The Portal offers contents of a commercial and sometimes interactive information. While browsing the site the Company can acquire information about the visitor, in the following ways:

Navigation data.
The computer systems and software procedures used to operate the Portal acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Data provided voluntarily by the user.
The optional, explicit and voluntary sending of messages using the "Contact us" service present on the site and / or sending e-mails to the Company's address entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well any other personal data included in the request. The legal basis for this treatment is art. 6.1.b of the Regulations, ie the execution of measures requested by the user.

Register to the site
Registering an account involves entering some personal data that must be true and accurate. The data to be entered must be clearly indicated by being marked with an asterisk, the other data are entered voluntarily and failure to enter does not imply any consequences. The user is invited to keep these data updated by accessing the personal account. The legal basis for this treatment is art. 6.1.b of the Regulations, ie the execution of measures requested by the user. The user who chooses to activate the account via social media must be aware that the Portal can collect some data that the user has already provided to this social media (eg e-mail address and public profile). The data controller has no control over the social media and does not establish the privacy settings of the social media. The user must therefore refer to the privacy policy of the social media he uses.

Newsletter and commercial communications
The user can voluntarily choose to receive newsletters and commercial communications. The site requests explicit and free consent before undertaking such promotional initiatives and may ask the user for additional information in order to create personalized and more relevant communications. The user can always easily revoke his consent which is the legal basis of this processing (article 6.1.a of the Rules).

Business Orders
In case of order, the site asks the user to provide personal data for the essential purpose of providing the service or the purchased good, including the post-sales phase (eg delivery tracking, assistance services, customer satisfaction) and activities to prevent fraud and improper use of the Portal. The legal basis for processing is the fulfillment of contractual obligations (Article 6.1.b of the Rules). For payments, the site makes use of third-party suppliers and does not retain bank information belonging to the user. The data controller has no control over the provider of this type of service and the user must therefore refer to the privacy policy and terms of service of that provider.

Profiling
The purpose of profiling is to propose products, services and initiatives more suited to the preferences, habits and interests of users. Personal data may be used for remarkeitng, retargeting or profiling purposes also through third parties (eg social networks). As for users of the site it is in the legitimate interest of the site to process personal data to offer more interesting and personalized services, improving the performance of the site.

minors
The site invites parents and all those who supervise minors to instruct them on how to process personal data on the Internet in a safe and responsible manner. Minors must not transmit personal data to the site without the consent of their parents. The site undertakes not to intentionally collect the personal data of minors, not to use them in any way and not to communicate them to third parties.

Further categories of data.
This is all personal data provided by the visitor through the site, for example, by registering and / or accessing a reserved area and / or a service and / or participating in one of the initiatives launched by the Company, either alone or in partnership with third parties, by writing to an e-mail address of the Data Controller to request information or by calling our telephone number to have direct contact with the Company.

Cookie
Regarding the cookies used by the Company, please consult our cookie policy

Which subjects can your personal data be disclosed to?
Your personal data will be processed exclusively by persons authorized to process and by persons designated as Data Processors, pursuant to art. 28 of the GDPR, in order to perform the processing activities necessary to pursue the detailed purposes in this Notice.

Your personal data may be disclosed to public bodies or judicial authorities, where required by law or to prevent or suppress the commission of a crime. The list of data processors may be requested from the Data Controller at any time by writing to the e-mail address: info@eleonoraazzolina.it

Methods of data processing
The processing of personal data is carried out mainly using electronic procedures and supports for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness, correctness, non-excess and pertinence provided for by the current privacy legislation. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Connection to / from third party sites
From the Portal it is possible to connect, through appropriate links, to other websites or it is possible to connect to the Portal from third-party websites. The Data Controller declines any responsibility regarding any request and / or release of personal data to third party sites and regarding the management of authentication credentials provided by third parties.

How long are your data stored?
Your personal data will be kept for the period necessary for the pursuit of the purposes outlined in this Information. We inform you that the data relating to the navigation logs, if registered, will be kept by the Owner for a period of 3 months. In particular, your data will be processed for a period of time equal to the minimum necessary for the fulfillment of legal obligations, provided that it is not necessary to further preserve them to defend or assert a right or to fulfill any further legal obligations or orders from the Authorities.

Where will your personal data be processed?
Your personal data will be processed by the Company within the territory of the European Union. Should it be necessary to use subjects located outside the European Union, we inform you from now on that these subjects will be appointed and the transfer of your personal data to these subjects, limited to the performance of specific treatment activities, will be regulated in compliance with the provisions of Title V of the GDPR. In this circumstance, the Company ensures the adoption of adequate guarantees (such as the signing of standard contractual clauses approved by the EU Commission) with the receiving foreign company; these clauses guarantee a level of data protection corresponding to that established by European legislation.

What are your rights?
We remind you that you can exercise your rights under the GDPR and in particular obtain:

confirmation that the processing of personal data concerning you is being processed and obtaining access to data and the following information: processing purposes, categories of personal data, recipients and / or categories of recipients, retention period) ;
the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data, also by providing an additional declaration;
the cancellation of personal data, in the cases provided for by the GDPR;
the limitation on processing in the cases envisaged by the current Privacy Law;
the portability of data concerning you and in particular to request personal data provided to the Company and / or request the direct transmission of your data to another data controller;
the opposition to the processing at any time, for reasons connected to your particular situation, to the processing of personal data in full compliance with the current Privacy Law.
To exercise all your rights as identified above, simply contact the Data Controller by writing to the following email address info@eleonoraazzolina.it

Claim right
Interested parties who believe that the processing of their personal data in violation of the provisions of the Regulations have the right to lodge a complaint with the Guarantor for the protection of personal data as required by art. 77 of the Regulations, or to take appropriate judicial offices (Article 79 of the Rules).

Changes to this information
This information may change over time - also related to the possible entry into force of new industry regulations, the updating and / or provision of new services or technological innovations - for which we invite you to periodically consult this page. Last updated: 10.11.2018