In compliance with the Privacy Code, Fratelli Bovo S.r.l., with registered office at Via Postale Vecchia 120/A – 36070 – Trissino (VI), Italy, VAT no. 00564110245 (“Fratelli Bovo”), is the Data Controller (Titolare) of the Users’ personal data treatment.
- The policy
- Who processes your personal data, how and to what end
Pursuant to and for the purpose of the Privacy Code, Fratelli Bovo is the Data Controller (Titolare) of the treatment of the Users’ personal data (the “Personal Data”), aimed at ensuring the management, stipulation and fulfilment of the transactions concerning the purchase of products via the website (the “Commercial Purposes”). Fratelli Bovo is in charge of deciding purposes and methods of this data processing and the tools to be used, also in terms of security. For purely organisational and functional purposes, Fratelli Bovo may appoint some external data supervisors (Responsabili) of the Personal Data able to guarantee proven experience, capacity and reliability on compliance with the applicable privacy legislation, including the data security. Such supervisors, if any, will process the Personal Data in accordance with the instructions from time to time given by Fratelli Bovo. Names and details of Personal Data Supervisors (Responsabili) appointed by Fratelli Bovo can be always obtained by sending a written request to this end to the e-mail address firstname.lastname@example.org.
Pursuant to and for the purpose of the Privacy Code, Fratelli Bovo is also the Data Controller (Titolare) of the treatment of the Users’ Personal Data in connection with direct and profiled marketing activities if and to the extent the User has given its consent (the “Marketing Purposes”), and uses the Personal Data to send out newsletters relating to the Peruffo brand and the products and generalised and/or customised promotional messages with respect to the User’s consumer habits.
Personal Data will be processed by persons in charge of processing specifically chosen by Fratelli Bovo. Personal Data will only be processed by persons in charge of processing authorised and supervised by Fratelli Bovo, in order to prevent any unauthorised access to data or unlawful processing by third parties.
Personal Data is mainly processed in electronic format and in some cases also as hard copies, such as, for example, when Personal Data processing is necessary in order to prevent fraud on the Website. Personal Data will be stored in a way that enables User to be identified only for the length of time strictly necessary to the purpose for which the data has been collected and thereafter processed and, in any case, within the legal limits. In order to guarantee that Personal Data is always exact and up-to-date, pertinent and complete, please notify us of any changes thereto, by e-mailing email@example.com.
The Personal Data will not be disclosed to any third parties for purposes not permitted by the law or without your specific consent. In addition to the companies acting as data supervisors, Personal Data is also made available to third parties, autonomous data controllers, for purposes that are accessory and related to the supply of the services requested by the User(e.g. for purchase transactions). You can obtain an updated list of the data supervisors (Responsabili) at any time, by e-mailing firstname.lastname@example.org.
Personal Data will not be transferred abroad to any non-European Union Member State, which does not ensure suitable personal protection levels. If this is necessary in order to pursue the Commercial Purposes, we can assure you that Personal Data will only be transferred to such non-European Union Member State upon stipulation by Fratelli Bovo and said subjects, in connection with either the Commercial Purposes or the Marketing Purposes, of specific contracts including provisions designed to safeguard the protection of Personal Data in compliance with the applicable laws and regulations.
- What happens if you refuse to provide Fratelli Bovo with your personal data
Provision of your Personal Data for Commercial Purposes (in particular personal information, your e-mail address, postal address, credit/debit card and bank details and telephone numbers) to Fratelli Bovo is necessary in order to pursue the Commercial Purposes. Any refusal to provide Fratelli Bovo with said Personal Data required to this end may make it impossible to process the purchase order on the Website or to correctly fulfil any requirements under applicable laws and regulations. Failure to provide Personal Data may therefore constitute justified grounds for Fratelli Bovo not to fulfil the purchase order made through the Website. The indication of further Personal Data, in addition to that required as compulsory, is instead optional and shall have no consequence with respect to the purchase of products through the Website.
The supply to Fratelli Bovo of Personal Data for Marketing Purposes is always optional and is connected with the Website registration process. Failure to supply such Personal Data, and failure to consent to processing for Marketing Purposes shall not have any consequence in terms of the purchase process, apart from the fact that it will be impossible to finalise registration and therefore to benefit from services such as newsletters, generalised or customised offers and access to reserved promotional areas.
We will duly inform you each time as to whether the supply of the Personal Data to Fratelli Bovo is compulsory or optional and of any consequences should you fail to supply it. Please remember that failure to provide optional Personal Data shall result in no obligation nor disadvantage for Users.
- To whom we disclose the Personal Data
Personal Data may be made available to third party companies providing Fratelli Bovo with specific services, in their quality as data supervisors; it may also be disclosed to other third parties – whose names will be duly specified – which process data autonomously purely in order to fulfil the contract for the purchase of products from the Website (such as banks, for remote electronic payment services made by credit/debit card) and only when these purposes are not incompatible with the purposes for which the Personal Data was collected and thereafter processed and, in any case, in compliance with the law.
Personal Data will not be otherwise disclosed, sold or transferred to any other third parties, without informing the Users in advance and obtaining due consent to such, where so required by the law.
- How is Personal Data collected on the Website
The Personal Data and other information are collected directly from the Users by Fratelli Bovo during the processes which the latter manage (purchases of products through Website, filling in registration forms by Users for marketing purposes).
More specifically, in the pursuit of the Commercial Purposes and within the scope of the processes for purchasing products on the Website, Fratelli Bovo collects Personal Data (such as personal information, e-mail address, postal address, credit card and bank details, telephone number, etc.) by using the order form for the sale of products through the Website.
- Security measures
In view of the best possible protection of your Personal Data, with regards to aspects lying behind Fratelli Bovos’ s control, we recommend ensuring that the computer used is equipped with suitable software to protect the internet transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the chosen internet service supplier has used suitable measures to guarantee the security of data transmission over internet (such as firewalls and antispamming filters).
- Compulsory processing
Please note that Fratelli Bovo may process Personal Data even without consent in certain cases envisaged by the law, such as, for example, when this is necessary in order to fulfil a legal obligation.
For example, Personal Data may be disclosed to the police force or legal authorities in compliance with the law and following a formal request submitted by such subjects, for example as part of anti-fraud services.
- Rights of the data subjects
More specifically, as concerns the processing of your Personal Data for the Marketing Purposes by Frateli Bovo, you may exercise said rights in accordance with Art. 7 of the Privacy Code at any time and obtain a list of supervisors and third parties to whom the data has been disclosed, by e-mailing email@example.com or by sending written notice to the postal address of Fratelli Bovo at via Postale Vecchia 120/A, 36070 Trissino (VI), Italy.
Finally, any User wishing to be removed from the promotional database of Fratelli Bovo, and who no longer wishes to receive marketing communications in the future, may send a specific request to this end, in any of the following ways:
1) following the cancellation instructions given at the foot of each e-mail message.
2) e-mailing firstname.lastname@example.org with the specific request.
- Contact details
If you wish to receive more information on how Fratelli Bovo processes Personal Data, please e-mail: email@example.com.
If you wish to obtain information on your rights and be kept up-to-date on personal protection legislation with respect to personal data processing, we recommend you to visit the website of the Privacy Guarantor at www.garanteprivacy.it.
- Applicable law
The Privacy Code guarantees that personal data is processed in compliance with fundamental freedoms and rights and in respect of the dignity of the data subject, with specific reference to the confidentiality, personal identity and right to protection of personal data.
Privacy disclosure pursuant to Article 13 of Italian Legislative Decree no. 196/2003
Please note that the personal data collected will be processed in compliance with legal requirements and the rights assured you by the law, as data subjects:
- A) Processing will include: collection over the telephone or by telematic or written means or from public registers, lists of deeds and documents and/or public and/or private databases (commercial information companies), registration, organisation, storage and processing as hard copies, on magnetic, automated or telematic storage devices, processing of data collected by third parties, amendment, selection, extraction, comparison, use, inter-connection, including with data of other subjects on the basis of qualitative, quantitative and time criteria, recurring or definable each time, temporary processing with a view to enabling a rapid aggregation or transformation of said data, adoption of decision in automated and/or discretionary fashion, creation of profiles and information, communication, erasure and destruction of data or combinations or two or more of the above-described operations;
- B) Without prejudice to disclosure to third parties in compliance with legal obligations or obligations deriving from regulations or other European Community legislation, the data will be disclosed by us to our appointed members of the administration, marketing, sales, after-sales and claims departments, as well as, both nationally and abroad, to the following subjects: 1) banks and credit institutes, for payments to be made; 2) insurance firms (for transport insurance cover); 3) debt collection companies, insurance and/or credit transfer companies; 4) commercial information companies; 5) consultants and professionals; 6) professionals and professional firms (lawyers, chartered accountants, auditors, etc.); 7) independent auditors; 8) other companies, entities and/or natural persons providing instrumental, support or essential services to the fulfilment of the contracts or services you may have requested (e.g. packaging companies and postal distribution companies, carriers and couriers, sub-suppliers, companies managing commercial information instruments, web space management companies for data archiving). These subjects will in turn process and disclose the data to third parties as “controllers” in accordance with Art. 28 of Italian Legislative Decree no. 196/2003, entirely independently.
- C) Processing and disclosure shall take place with the following aims: 1) to satisfy pre-contractual (e.g. instruction of offers or your orders, solvency checks); 2) fulfilment of contractual obligations (connected with the supply or purchase of goods and/or services) and legal requirements (e.g. the keeping of accounts, tax formalities, administrative, accounting and treasury management); 4) customer and supplier management; 5) management of loans and risk control (fraud, insolvency, etc.); 6) management of disputes and the transfer of credits); 7) financial services instrumental to the management of customers/suppliers and management of electronic payment instruments; 8) insurance services instrumental to customer/supplier management. The internal parties appointed as above by Fratelli Bovo may also process said data for the purpose of 9) proliferation, 10) gaining fidelity and 11) sending newsletters and other promotional and commercial materials.
- D) The conferral of data by yourself is only compulsory for the purposes specified under point C) above, from items 1 to 8 and, therefore, your prior consent for processing to this end, is not necessary. For processing for the purposes specified under points 9, 10 and 11, consent is not compulsory, but any failure to provide consent will prevent us from fulfilling the activities for which said purpose was required.
More specifically, please note that the processing for purpose 11 shall also entail the minimum amount of profiling and obtaining fidelity as is strictly necessary to ensure the targeted fulfilment of your request to receive newsletters and promotional and advertising materials specific to you and/or in your exclusive interests and which, in accordance with Art. 130, paragraph 4 of the Privacy Code, will not require any consent for the sending of advertising e-mails featuring products and services similar to those you have purchase on the Website, except where you should specifically refuse such consent. Data will be processed for the duration of the contracts stipulated with yourself and thereafter, for the time necessary to fulfil our legal obligations and to keep your business profile, in order to rationalise the selection of customers and/or suppliers. You are free to refuse your consent, however such refusal will make it impossible for us to fulfil the contract with yourself.
- F) You may in any case exercise the following rights in relation to your personal data, as established by Articles 7, 8 and 9 of the Privacy Code: Paragraph 1 (…): to obtain confirmation as to whether or not personal data concerning him/her exists, regardless of whether or not it has been recorded, and to communication of such data in intelligible form; Paragraph 2 (…): to be informed: a) of the source of the personal data processed; b) of the purposes and methods of processing; c) of the logic applied to the processing, if this is carried out with the help of electronic means; d) of the identification data concerning the data controller, data supervisors, the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State’s territory, data supervisors or persons in charge of the processing. Paragraph 3 (…): to obtain the: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of any data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data was communication or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; Paragraph 4 (…): to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though relevant to the purpose of the collection; b) to the processing of personal data concerning him/her where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys (NB: our company, however, if processing the data for the purposes indicated in paragraph 4 of Art. 7 above, will ask you for specific written consent with an appropriate disclosure). Art. 8 Paragraph 1 (…): The rights referred to in Article 7 may be exercised by making a request to the data controller or processor without formalities, also by the agency of a person in charge of the processing. A suitable response shall be provided to said request without delay. Paragraph 2 (…): The rights pursuant to Art. 7, where not regarding objective data, may be exercised without prejudice to where such concerns the rectification or supplement of personal data of an evaluation nature, in relation to the judgements, opinions or other such subjective considerations and the indication of how to behave or decisions being made by the data controller. Art. 9 Paragraph 1 (…): the request made of the controller or supervisor can also be sent a) by letter sent recorded delivery, fax or e-mail, b) if regarding the exercise of the rights pursuant to Art. 7, paragraphs 1 and 2, also orally, and in this case, it is noted in summary form by the person in charge of processing or the supervisor. Paragraph 2 (…): in exercising the above rights, the data subject may issue a written delegation or power of attorney to a natural person, entity, association or organisation. The data subject may also be assisted by a trusted person. Paragraph 3 (…): the rights pursuant to Art. 7 in connection with personal data concerning deceased persons may be exercised by those with an interest or acting on behalf of the data subject or, for family reasons, deserving of protection. Paragraph 5 (…): the request pursuant to Art. 7, paragraphs 1 and 2, can be renewed by the data subject, without prejudice to the existence of justified grounds, at least ninety days apart.