pursuant to EU Regulation 2016/679 ("GDPR") regarding the protection of the natural person with regard to the processing of personal data, we wish to inform you that the personal data sent at the time of registration and / or purchase, as well as those obtained from visits and browsing on our Site are treated lawfully, correctly and transparently. This information is provided pursuant to and by effect of art. 13 GDPR.
HOLDER OF THE TREATMENT
The data controller is Il Aromi Divini di Oksana Loboda, VAT number IT 02254580562 with registered office in Sutri (VT) at Via Dei Saturnali, 25 which may appoint one or more data processors who operate under its direct authority on the on the basis of the instructions received. Any communication relating to the processing of personal data for the exercise of the rights of the interested party may be forwarded to the same owner by, by e-mail. firstname.lastname@example.org
DATA PROTECTION MANAGER (DPO)
In order to guarantee the best possible service, also in terms of personal data protection, Aromi Divini di Oksana Loboda. has designated the Personal Data Protection Officer (DPO).
LEGAL BASIS OF THE PROCESSING
The processing of personal data by Il Aromi Divini di Oksana Loboda takes place when:
a) the interested party has given consent to the processing of their personal data for one or more specific purposes;
b) the processing is necessary for the execution of a contract for the sale of products and / or services to which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same;
c) the processing is necessary to fulfill a legal obligation to which the data controller is subject;
e) the processing is necessary for the performance of a task carried out in the public interest or connected to the exercise of public authority vested in the data controller;
f) the processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail.
PURPOSE OF THE TREATMENT
Personal data provided voluntarily are processed for the following purposes:
a) to register on the site and purchase products / services;
b) to allow the use of the services reserved for registered users accessible from the Customer Area, aimed at better managing the relationship with the Customer;
c) for the management of the contractual relationship;
d) to verify the quality of the services provided and / or offer after-sales services;
e) to register for events advertised on the site and / or in the Reserved Area (seminars, webinars, ..) and for the consequent management of the related organizational and administrative requirements;
f) to send, by e-mail, answers regarding our products and services;
g) to process statistics anonymously (eg to evaluate the number of accesses to the website of the Aromi Divini Sromi Divini by Oksana Loboda );
h) to carry out promotional activities on the products and / or services of the data controller, with automated tools (in particular via email) and / or with non-automated tools (telephone with operator or paper mail). In these cases the user can always freely modify his consent, in whole or in part, by sending an e-mail to email@example.com ;
i) for personnel selection purposes through the dedicated page of the site;
j) for IT security purposes, the owner processes, also through its suppliers (third parties and / or recipients), the personal data of the interested party relating to traffic to an extent strictly necessary and proportionate to guarantee the security of the networks and information, i.e. the ability of a network or information system to withstand, at a given level of security, unforeseen events or illegal or malicious acts that compromise the availability, authenticity, integrity, confidentiality of personal data stored or transmitted. The owner will promptly inform the interested parties, if there is a particular risk of violation of their data;
k) for the prevention of fraud, the personal data of the interested party will be processed to allow controls for the purpose of monitoring and preventing fraudulent payments, by software systems that carry out an automated check and prior to the negotiation of services and / or products. Passing these checks with a negative result will make it impossible to carry out the transaction; the interested party may in any case obtain an explanation or contest the decision giving reasons by contacting the data controller at the e-mail address firstname.lastname@example.org ;
The personal data collected for anti-fraud purposes only, unlike the data necessary for the correct execution of the requested service, will be immediately deleted at the end of the control phases;
l) to comply with legal obligations and provisions of the competent Authorities.
METHOD OF TREATMENT
Personal data are mainly processed with automated and electronic tools, for the time strictly necessary to achieve the purposes for which they were collected. In particular, the processing of personal data may involve: collection, registration, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication and dissemination, cancellation and destruction and any other operation useful for the supply. of the services requested, including communication to third parties, where necessary. Such data may also be organized in databases or archives. Specific security measures are adopted by Aromi Divini di Oksana Loboda to prevent the violation of personal data, or the loss, illicit or incorrect use of the same and unauthorized access, in order to allow their processing only to the persons in charge or managers appointed in compliance with the law. The personal data acquired are stored on electronic support, kept and archived on servers owned by Aromi Divini di Oksana Loboda, located in the European Community, managed in a protected environment with controlled access.
Adequate security measures are adopted by Aromi Divini di Oksana Loboda in order to preserve the confidentiality, integrity and availability of the data subject's personal data and to prevent accidental or unlawful violation.
Aromi Divini di Oksana Loboda imposes similar adequate security measures on third party suppliers and data processors.
RIGHTS OF THE INTERESTED PARTY
Interested parties have at any time:
1. Right of Access: right to obtain confirmation of the existence or otherwise of personal data and to know its content, origin and verify its accuracy;
2. Right of rectification: right to obtain from the data controller the rectification of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration;
3. Right of Cancellation (right to be forgotten). Right to obtain from the data controller the cancellation of personal data concerning him without undue delay, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the treatment is based and there is no other legal basis for the treatment itself;
c) the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing;
d) the personal data have been unlawfully processed;
e) the personal data must be deleted to fulfill a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services to minors.
4. Right to Restriction of Processing. Right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs it for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) if the interested party has opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
5. Right to data portability. Right to obtain the direct transmission of personal data from one data controller to another, if technically feasible. Right to receive the personal data provided in a structured format, commonly used and readable by an automatic device and the right to transmit such data to another data controller without impediments by the data controller to whom it provided them if:
a) the processing is based on consent or on a contract;
b) the processing is carried out by automated means.
6. Right of Opposition: right to object to the processing of personal data, when it is necessary for the performance of a task of public interest or connected to the exercise of public authority vested in the data controller or is necessary for the pursuit of the legitimate interest of the data controller or third parties, including profiling based on these needs. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him for these purposes, including profiling to the extent that it is connected to such direct marketing.
7. Right to lodge a complaint with the supervisory authority.
Requests for the exercise of these rights must be addressed:
- by e-mail, at email@example.com ,
- by ordinary mail to the physical address of the Data Controller.
TYPE OF DATA
Data provided voluntarily by the interested party.
The optional, explicit and voluntary sending of personal data (name, surname, physical address, nationality, province and municipality of residence, landline and / or mobile telephone, fax, tax code, e-mail address (es)) and bank details ( IBAN and bank / postal data) to the addresses indicated on this site entails their subsequent processing by the data controller.
In the event that the user enters or otherwise processes the data of third parties, he guarantees from now on, assuming all related responsibility, that he has previously provided them with the information referred to in this information and that he has acquired their consent to the processing. if required by the specific case.
In the event that the user sends personal data that are not necessary for the purposes of the requested service, Aromi Divini di Oksana Loboda immediately deletes such data by promptly informing the interested party. Specific summary information is reported or displayed on the pages of the site set up for services on request, in such a way as to draw the attention of the interested party to the processing of his personal data.
Telematic traffic data (Logs and IP addresses of origin). The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case the site is the object and / or source of cyber attacks.
Cookies are small data files that the sites visited by the user send to their terminal or device, where they can be deleted at the end of each work session or stored before being re-transmitted to the same sites at the next visit by the same user. Cookies allow a site to recognize the user's device, to trace their navigation through the various pages of the site, to identify users who visit the site again. For more information on cookies and tools that can help the user reduce monitoring, you can consult the section of the website of the Guarantor Authority dedicated to this http://www.garanteprivacy.it/cookie or visit the website http : //www.aboutcookies.org/ .
The cookies used by this website do not allow the collection of personal information relating to the user, they are not used for profiling activities and some are automatically deleted when the browser is closed. Furthermore, the data generated by the cookies are used by Aromi Divini di Oksana Loboda. as an aid for the analysis and internal monitoring (on aggregated data) on the traffic generated by users (accesses and pages viewed, in particular), and in order to be able to make improvements in terms of operation and navigation.
In particular, they are used:
Technical cookies are essential for the proper functioning of websites and are used to allow normal navigation and the possibility of using the advanced services available on this website.
The technical cookies used are divided into session cookies, which are stored exclusively for the duration of the navigation until the browser is closed, and persistent cookies that are saved in the memory of the user's device until their expiration or cancellation by the user. same.
This site uses the following technical cookies:
- Session cookies, used to manage normal navigation and user authentication;
- Functional cookies, used to memorize personalizations chosen by the user, such as, for example, the language;
- Analytics cookies, used to know how users use the website so as to be able to evaluate and improve its functioning.
Third Party Cookies.
Through this site some services provided by third parties are made available to the user:
The data transmitted to Google are stored on Google's servers in the United States.
On the basis of a specific agreement with Google, which in these cases is designated as the data controller, the latter undertakes to process the data based on the requests of the Data Controller, given through the software settings. Based on these settings, the advertising and data sharing options are disabled.
Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.
- Links to social networks: the site features social plugins for Facebook, Twitter, LinkedIn, Instagram and Youtube. These plugins do not set a cookie, but if it is already present on the visitor's computer they are able to read it and use it according to its settings. The collection and use of information by these third parties are governed by their respective privacy policies and to which reference must be made.
For more information, you can consult the specific privacy laws for the sites to which they belong:
- Facebook: http://www.facebook.com/about/privacy/
- Twitter: http://twitter.com/privacy
- Linkedin: https://www.linkedin.com/legal/privacy-policy
- Youtube: https://www.youtube.it/t/privacy
Blocking / management of cookies.
The user has the possibility to configure his browser to accept all cookies, reject them all or receive a notification when a cookie is set. Each browser is different, so it is advisable to check the procedures for changing cookie preferences in the browser guide.
- in Internet Explorer it is possible to block all cookies by clicking on "Tools", "Internet Options", "Privacy" and selecting "Block all cookies" using the scrolling selector;
- in Firefox it is possible to block all cookies by clicking on "Tools", "Options" and deselecting "Accept cookies from sites" in the "Privacy" tab.
However, blocking all cookies will have a negative impact on the usability of the website. If you block all cookies, you will not be able to fully use the features and applications on this site.
OPTIONAL PROVISION OF DATA
With the exception of navigation data, the provision of data is optional. However, failure to provide, even partial, of the same may make it impossible to execute the contract by preventing the provision of the service that is the subject of it, as well as preclude the continuation of the relationship with Aromi Divini Srl .
SCOPE OF COMMUNICATION AND DISCLOSURE OF DATA
The data are stored and collected in the company database of Aromi Divini di Oksana Loboda and recorded in such a way as to allow access only to those expressly appointed and authorized to do so.
The communication of the personal data of the interested party takes place towards third parties and / or recipients whose activity is necessary for the performance of the activities related to the contractual relationship established with the interested party and to respond to certain legal obligations, such as:
a) third party suppliers for the provision of services (assistance, maintenance, delivery / shipment of products, provision of additional services, suppliers of networks and electronic communication services) connected to the requested service;
b) credit and digital payment institutions, banking / postal institutions for the management of collections, payments, reimbursements related to the contractual service;
c) professionals and external consultants and / or consultancy companies for the fulfillment of legal obligations, exercise of rights, protection of contractual rights, credit recovery;
d) financial administration, public bodies, judicial authorities, supervisory and control authorities for the fulfillment of legal obligations, defense of rights, lists and registers kept by public authorities or similar bodies based on specific legislation, in relation to the contractual performance ;
e) subjects formally delegated or having a recognized legal title such as legal representatives, curators, guardians, etc.
f) companies connected, controlled, affiliated to Aromi Divini di Oksana Loboda or to the legal person that takes over from Aromi Divini di Oksana Loboda following the sale of a business, transformation or merger;
g) companies that carry out surveys concerning the sphere of customer satisfaction, where the interested party has given the necessary specific consent.
Aromi Divini di Oksana Loboda requires third party suppliers and the data processors in charge to comply with security measures equal to those adopted for the data subject.
Aromi Divini di Oksana Loboda does not transfer the personal data of which it is the data controller to countries where the GDPR is not applied.
STORAGE OF PERSONAL DATA
Users' personal data will be kept only for the time necessary to guarantee the correct performance of the services requested and offered through the site.
In particular, they will be kept for the entire duration of your registry registration and in any case no later than a maximum period of 12 (twelve) months of inactivity or if, within this period, no services and / or products have been purchased through the registry itself.
In the case of data provided to the owner for the purposes of commercial promotion for services other than those already acquired by the interested party, for which he initially gave his consent, these will be kept for 24 months, unless the consent given is revoked.
Regardless of the determination of the interested party to remove them, personal data will in any case be stored according to the terms provided for by current legislation and / or national regulations, for the exclusive purpose of guaranteeing the specific obligations of some services (by way of example but not exhaustive, Certified Electronic Mail, Digital Signature, Substitutive Conservation).
Personal data will in any case be kept for the fulfillment of the obligations (eg tax and accounting) that remain even after the termination of the contract (Article 2220 of the Italian Civil Code) and for these purposes the owner will only keep the data necessary for the relative prosecution.
The cases in which the rights deriving from the contract and / or from the registration in the registry are valid, in which case the personal data of the interested party, only those necessary for these purposes will be processed for the time indispensable to their pursuit.
All information collected on the site is stored and maintained in secure facilities that limit access to authorized personnel only. The website is checked regularly to check for any security breaches, and to ensure that all information collected is safe from those who intend to view it without authorization.
Aromi Divini di Oksana Loboda implements all the security measures described by the applicable laws and regulations and all the appropriate measures according to the currently most advanced criteria, to ensure and guarantee the confidentiality of users' personal data, and to minimize, to as far as possible, the dangers of violating them.
This information is updated on 1 January 2022.