Privacy Policy
Information pursuant to article 13 GDPR 679/2016
Information notice for the processing of personal data collected from the data subject
In compliance with the provisions of EU Regulation 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of the personal data provided. This information notice is provided pursuant to art. 13 of EU Regulation 2016/679 (European Regulation for the protection of personal data).
TYPE OF DATA PROCESSED/PROCESSABLE
Data processed/processable: "personal data".
For "personal data", pursuant to art. 4 of GDPR 2016/679, this means "any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30)".
User data.
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
Voluntarily provided data
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms entails the subsequent acquisition of the data necessary to respond to requests.
COOKIES
Use of technical session cookies (non-persistent), strictly limited to what is necessary for the safe and efficient navigation of the sites. Cookies are not used for user profiling. The only processing carried out concerns the production of statistics, with pseudonymised data. The adopted configuration, designed to exclude the processing of identifying data, collects the IP address, which is adequately masked by zeroing the last 2 bytes (xxx.xxx.0.0).
DATA CONTROLLER, pursuant to art. 4 of EU Regulation 2016/679, is E.L.L.E. SRLS with registered office in VIA A. DA SANGALLO 17B, 06034 Foligno (PG), Tel. 0742770670, email elle.amministrazione21@gmail.com
PURPOSE OF PROCESSING
A) Navigation on this website
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter f), of GDPR 2016/679, the legal basis is represented by the Legitimate Interest: "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child";
In this specific case, the legitimate interest is represented by the activity strictly necessary for the functioning of the site and the provision of the navigation service on the platform.
RETENTION PERIOD
Duration of the browsing session (unless there is a need to ascertain crimes by the judicial authority).
NATURE OF PROVISION
The provision of data is necessary for navigation.
B) Completion of contact form
Following the completion of the contact form on the website by the Data Subject, the company will process the data to respond to your requests.
Please note that completing the Form is prohibited for users under 14 years of age (or considered minors by the jurisdiction of their country of residence). If you do not meet the required age requirements, you are prohibited from entering your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter b), the processing is necessary for the performance of pre-contractual measures adopted at the request of the data subject.
RETENTION PERIOD
The data will be stored until the request is fulfilled and for a maximum of 1 year.
NATURE OF PROVISION
The provision of data is optional, but failure or incomplete provision of the data indicated as necessary will make it impossible for the company to process the request.
C) Mailing list subscription
Following the completion of the mailing list subscription form by the Data Subject, the company – with explicit consent and until its possible subsequent revocation – will collect contacts to send commercial and promotional information, newsletters, and market research for marketing purposes.
This activity will be carried out both by automated means (email and SMS) and by telephone calls with an operator and postal mail (all based on the data provided and detailed during the completion of the form).
Please note that the Form is not intended for visitors under 14 years of age or who are not adults in their jurisdiction of residence. If you do not meet the specified age requirements, do not enter your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter a), of GDPR 2016/679, the legal basis is represented by the Data Subject's Consent: "the data subject has given consent to the processing of his or her personal data for one or more specific purposes".
RETENTION PERIOD
The data will be stored until consent is withdrawn (opt-out).
NATURE OF PROVISION
The provision of data for the purpose in question is optional.
In its absence, the data provided will not be used for the activity in question.
Failure to consent does not affect the other different purposes referred to in this information notice.
Any subsequent withdrawal of previously granted consent does not affect the lawfulness of processing based on consent prior to the withdrawal itself (ref. art. 7, paragraph 3)
D) Registered user area
Following the completion of the form by the data subject, the company will process the data to register you on our site and allow you to make purchases in the e-commerce area. Please note that the Form is not intended for visitors under 14 years of age or who are not adults in their jurisdiction of residence. If you do not meet the specified age requirements, do not enter your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter b), the processing is necessary for the performance of pre-contractual measures adopted at the request of the data subject.
RETENTION PERIOD
The data will be kept until the account deletion request.
NATURE OF PROVISION
The provision of data is optional, but failure or incomplete provision of the data indicated as necessary will make it impossible to register and make purchases.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be communicated to recipients, who will process the data as processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller and Processor (art. 29 of EU Reg. 2016/679), or operate in total autonomy as separate Data Controllers, for the purposes listed above.
TRANSFER OF DATA TO A THIRD COUNTRY
Personal data will not be transferred outside the EU.
RIGHTS OF THE DATA SUBJECTS
You may assert your rights as expressed in EU Regulation 2016/679, arts. 15 et seq., by contacting the Data Controller. You have the right, at any time, to request access to your personal data, their rectification, and erasure. Furthermore, you have the right to data portability. You have the right to withdraw your consent at any time without prejudice to the lawfulness of processing based on consent prior to withdrawal. Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the provisions of EU Regulation 2016/679, pursuant to art. 15, letter f) of the aforementioned EU Regulation 2016/679, you have the right to lodge a complaint with the Personal Data Protection Authority (Supervisory Authority www.garanteprivacy.it).
CHANGES TO THE INFORMATION NOTICE
The Controller reserves the right, at its discretion, to change, modify, add or remove any part of this privacy policy, at any time. To facilitate the verification of any changes, the information notice will contain the indication of the update date of the information notice.
Update date 07/03/2024
The Data Controller
E.L.L.E. SRLS
Information notice for the processing of personal data collected from the data subject
In compliance with the provisions of EU Regulation 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of the personal data provided. This information notice is provided pursuant to art. 13 of EU Regulation 2016/679 (European Regulation for the protection of personal data).
TYPE OF DATA PROCESSED/PROCESSABLE
Data processed/processable: "personal data".
For "personal data", pursuant to art. 4 of GDPR 2016/679, this means "any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30)".
User data.
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
Voluntarily provided data
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms entails the subsequent acquisition of the data necessary to respond to requests.
COOKIES
Use of technical session cookies (non-persistent), strictly limited to what is necessary for the safe and efficient navigation of the sites. Cookies are not used for user profiling. The only processing carried out concerns the production of statistics, with pseudonymised data. The adopted configuration, designed to exclude the processing of identifying data, collects the IP address, which is adequately masked by zeroing the last 2 bytes (xxx.xxx.0.0).
DATA CONTROLLER, pursuant to art. 4 of EU Regulation 2016/679, is E.L.L.E. SRLS with registered office in VIA A. DA SANGALLO 17B, 06034 Foligno (PG), Tel. 0742770670, email elle.amministrazione21@gmail.com
PURPOSE OF PROCESSING
A) Navigation on this website
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter f), of GDPR 2016/679, the legal basis is represented by the Legitimate Interest: "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child";
In this specific case, the legitimate interest is represented by the activity strictly necessary for the functioning of the site and the provision of the navigation service on the platform.
RETENTION PERIOD
Duration of the browsing session (unless there is a need to ascertain crimes by the judicial authority).
NATURE OF PROVISION
The provision of data is necessary for navigation.
B) Completion of contact form
Following the completion of the contact form on the website by the Data Subject, the company will process the data to respond to your requests.
Please note that completing the Form is prohibited for users under 14 years of age (or considered minors by the jurisdiction of their country of residence). If you do not meet the required age requirements, you are prohibited from entering your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter b), the processing is necessary for the performance of pre-contractual measures adopted at the request of the data subject.
RETENTION PERIOD
The data will be stored until the request is fulfilled and for a maximum of 1 year.
NATURE OF PROVISION
The provision of data is optional, but failure or incomplete provision of the data indicated as necessary will make it impossible for the company to process the request.
C) Mailing list subscription
Following the completion of the mailing list subscription form by the Data Subject, the company – with explicit consent and until its possible subsequent revocation – will collect contacts to send commercial and promotional information, newsletters, and market research for marketing purposes.
This activity will be carried out both by automated means (email and SMS) and by telephone calls with an operator and postal mail (all based on the data provided and detailed during the completion of the form).
Please note that the Form is not intended for visitors under 14 years of age or who are not adults in their jurisdiction of residence. If you do not meet the specified age requirements, do not enter your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter a), of GDPR 2016/679, the legal basis is represented by the Data Subject's Consent: "the data subject has given consent to the processing of his or her personal data for one or more specific purposes".
RETENTION PERIOD
The data will be stored until consent is withdrawn (opt-out).
NATURE OF PROVISION
The provision of data for the purpose in question is optional.
In its absence, the data provided will not be used for the activity in question.
Failure to consent does not affect the other different purposes referred to in this information notice.
Any subsequent withdrawal of previously granted consent does not affect the lawfulness of processing based on consent prior to the withdrawal itself (ref. art. 7, paragraph 3)
D) Registered user area
Following the completion of the form by the data subject, the company will process the data to register you on our site and allow you to make purchases in the e-commerce area. Please note that the Form is not intended for visitors under 14 years of age or who are not adults in their jurisdiction of residence. If you do not meet the specified age requirements, do not enter your personal data in the Form.
LEGAL BASIS
Pursuant to art. 6, paragraph 1, letter b), the processing is necessary for the performance of pre-contractual measures adopted at the request of the data subject.
RETENTION PERIOD
The data will be kept until the account deletion request.
NATURE OF PROVISION
The provision of data is optional, but failure or incomplete provision of the data indicated as necessary will make it impossible to register and make purchases.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be communicated to recipients, who will process the data as processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller and Processor (art. 29 of EU Reg. 2016/679), or operate in total autonomy as separate Data Controllers, for the purposes listed above.
TRANSFER OF DATA TO A THIRD COUNTRY
Personal data will not be transferred outside the EU.
RIGHTS OF THE DATA SUBJECTS
You may assert your rights as expressed in EU Regulation 2016/679, arts. 15 et seq., by contacting the Data Controller. You have the right, at any time, to request access to your personal data, their rectification, and erasure. Furthermore, you have the right to data portability. You have the right to withdraw your consent at any time without prejudice to the lawfulness of processing based on consent prior to withdrawal. Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the provisions of EU Regulation 2016/679, pursuant to art. 15, letter f) of the aforementioned EU Regulation 2016/679, you have the right to lodge a complaint with the Personal Data Protection Authority (Supervisory Authority www.garanteprivacy.it).
CHANGES TO THE INFORMATION NOTICE
The Controller reserves the right, at its discretion, to change, modify, add or remove any part of this privacy policy, at any time. To facilitate the verification of any changes, the information notice will contain the indication of the update date of the information notice.
Update date 07/03/2024
The Data Controller
E.L.L.E. SRLS