PRIVACY NOTICE FOR DATA PROCESSING

This page describes the methods used to manage the website with regard to the processing of the personal data of users who consult it, as well as the methods and purposes of personal data processing.

This notice is provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 — hereinafter, GDPR — to those who interact with the web services accessible electronically from the address: www.leone1857.com

This website is owned by PASTIGLIE LEONE S.R.L., which manages and maintains this website for the purpose of providing information and communications relating to the products or services offered.

This notice is provided only for the website in question and not for any other websites that may be consulted via our links, for which PASTIGLIE LEONE S.R.L. is in no way responsible.

PASTIGLIE LEONE S.R.L., with registered office in Collegno (TO) - 10093 - Via Italia, 46, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 - GDPR, hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be carried out in accordance with the principles of fairness, lawfulness, transparency and protection of your privacy and rights.

Contact details of the Data Controller

The Data Controller can be contacted at the following details:

Telephone: 011 484759

Email: info@leone1857.com

PEC: pastiglieleone@pecsoci.ui.torino.it

Your personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations provided therein.

TYPES OF DATA PROCESSED

Browsing Data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the website and to check that it is functioning correctly, and are deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the website.

Data voluntarily provided by the user

SENDING COMMUNICATIONS TO OUR EMAIL ADDRESSES: the optional, explicit and voluntary sending of emails to the addresses indicated on this website, for the purpose of sending specific requests, entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.

CONTACT US: the explicit and voluntary completion of the data collection form, aimed at requests for information, entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the request for information.

RESERVED AREA: the explicit and voluntary completion of the data collection form, aimed at creating the reserved area for the purchase of products, entails the subsequent acquisition of the sender’s address, as well as any other personal data included in the request.

CART: the explicit and voluntary completion of the data collection form, aimed at purchasing products, entails the subsequent acquisition of the sender’s address, as well as any other personal data included in the request.

NEWSLETTER: subscription to our newsletter, aimed at sending informational material, entails the subsequent acquisition of your email address, as well as all data necessary for pursuing this purpose.

Specific summary notices are shown or displayed on the pages of the website prepared for particular services on request.

Profile data

These data, communicated at the time of registration in the customer area, include your email address, with which you register, and the related password, as well as contact details.

Access may also be carried out via Shop, by quickly authenticating yourself through a saved passkey or by confirming access through the app.

Purchase data

At the time of ordering, we collect your purchase data, including order number, details of the goods purchased, payment method data, delivery and billing addresses.

Payment data

For the execution of payment, we collect the payment data that you have provided to us, including IBAN and BIC or account number and bank code, credit card data and solvency data. We receive further payment data from external payment management services and business information services with which we collaborate for the purpose of payment management and solvency verification. We transmit to our payment management services only the data necessary to carry out the payment. Payment data also include additional data directly related to carrying out the payment and verifying solvency. This concerns, for example, data that external service providers use for identification, such as your PayPal or Google Pay identifier.

PROCESSING METHODS

The data are processed mainly using electronic and IT tools and are stored both on IT media and on paper media and on any other suitable type of medium, in compliance with the methods set out in Articles 6 and 32 of the GDPR and through the adoption of appropriate security measures to prevent data loss, unlawful or improper use and unauthorized access.

We inform you that, in order to provide a complete service, our portal may contain links to other websites not managed by us. We are not responsible for errors, content, cookies, publication of unlawful moral content, advertisements, banners or files that do not comply with current regulatory provisions, nor for compliance with Privacy legislation by websites managed by us to which reference is made. In order to improve the service offered, immediate reporting of malfunctions, abuses or suggestions to the email address info@leone1857.com is appreciated.

Your data will be processed only by personnel expressly authorized by the Data Controller.

PURPOSES OF PROCESSING AND LEGAL BASIS
The data will be processed for the following purposes:

• Registration on the website and access to the reserved areas of the website. The legal basis for processing is the consent of the data subject, pursuant to Article 6, paragraph 1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide such data would make it impossible to create a reserved area on the website;
• providing information on services and products supplied and on changes to products or services. The legal basis for processing is the consent of the data subject, pursuant to Article 6, paragraph 1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide such data would make it impossible to receive the requested response;
• allowing the purchase to be carried out and the service/product to be made available. The legal basis for processing is the performance of a contract or the implementation of pre-contractual measures, pursuant to Article 6, paragraph 1, letter b) of the Regulation. The provision of data for these purposes is optional, but failure to provide such data would make it impossible to perform the contractual relationship;
• Sending newsletters. The legal basis for processing is the consent of the data subject, pursuant to Article 6, paragraph 1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide such data would make it impossible to receive the requested response;
• Profiling activities aimed at analyzing the preferences, habits, purchasing behavior and interests of the data subject, including for the purpose of sending personalized commercial communications and offers in line with the preferences expressed. The legal basis for processing is the consent of the data subject, pursuant to Article 6, paragraph 1, letter a) of the Regulation. The provision of data for these purposes is optional, and failure to provide such data does not affect the possibility of using the requested services, but makes it impossible to receive personalized communications and offers.
• fulfilling obligations required by laws or regulations. For this purpose, processing is necessary to comply with a legal obligation to which the Data Controller is subject, pursuant to Article 6, paragraph 1, letter c) of the Regulation.
• the protection of the Data Controller in judicial proceedings. For this purpose, processing is necessary for the pursuit of the legitimate interest of the Data Controller pursuant to Article 6, paragraph 1, letter f) of the Regulation;

SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

The personal data relating to the processing in question may also be communicated to subjects who are granted the right to access your personal data by laws or secondary and/or Community regulations. Your data may be communicated exclusively to competent subjects duly appointed for the performance of the services necessary for the proper management of the relationship, with a guarantee of protection of the rights of the data subject. In addition, some data may be communicated and disseminated to the Internet operators used by PASTIGLIE LEONE S.R.L. for the management of its domains.

Your personal data will not be disseminated in any way.

DATA RETENTION PERIOD

We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article 5 of the GDPR, the retention period for your personal data is established for the period necessary to perform the requested services and in compliance with current regulations concerning the retention of fiscal, tax and contractual documentation.

accounting and tax data: 10 years in compliance with obligations relating to the retention of accounting and tax records (Article 2220 of the Civil Code, which provides for the retention of accounting records for 10 years; Article 22 of Presidential Decree No. 600 of 29 September 1973)

newsletter: data will be retained until consent is withdrawn or until the right to erasure is exercised, in any case for a period not exceeding 3 years

profiling: data will be retained until consent is withdrawn or until the right to erasure is exercised, in any case for a period not exceeding 1 year.

RIGHTS OF DATA SUBJECTS

The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, even if not yet recorded, and to have such data communicated in intelligible form.

The data subject has the right to obtain information on:

the origin of the personal data;

the purposes and methods of processing;

the logic applied in the case of processing carried out with the aid of electronic tools;

the identification details of the controller, processors and representative designated pursuant to Article 5, paragraph 2;

the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, processors or persons in charge of processing.

The data subject has the right to obtain:

the updating, rectification or, where interested, integration of the data;

the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where such fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;

data portability.

The data subject has the right to object, in whole or in part:

on legitimate grounds, to the processing of personal data concerning him or her, even if relevant to the purpose of collection;

to the processing of personal data concerning him or her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communications.

The data subject has the right to request restriction of processing.

You may exercise your rights by sending an email to info@leone1857.com or by sending a written request to the contact details specified above.

Furthermore, if the data subject believes that the processing of his or her data is contrary to current legislation, he or she may lodge a complaint with the Supervisory Authority for the protection of personal data pursuant to Article 77 of Regulation 2016/679 or submit a report pursuant to Article 144 of Legislative Decree 101/2018.

ANTISPAM SERVICE – RECAPTCHA

In certain sections of the website, namely on data collection forms, we have implemented the antispam service.

Captcha is a type of security measure, known as Challenge/Response authentication, which analyzes website traffic by processing the user’s personal data in order to protect the website owner, the website itself and users from spam, bot software, worms, spam bots, brute-force attacks and password decryption, by asking them to pass a simple test proving that the user is a person and not a computer attempting to breach a password-protected account.

INTERACTIONS WITH SOCIAL NETWORKS

The website allows interactions with social networks through hyperlinks; these interactions are subject to privacy requirements managed by the data subject directly on the social network pages.

Facebook

The link to Facebook is an interaction service with the social network provided by Meta Platforms, Inc. To learn more about the privacy policy of Meta Platforms, Inc. – Privacy Policy https://www.facebook.com/privacy/explanation

Instagram

The link to Instagram is an interaction service with the social network provided by Meta Platforms, Inc. To learn more about the privacy policy of Meta Platforms, Inc. – Privacy Policy https://help.instagram.com/519522125107875

LinkedIn

The link to LinkedIn is an interaction service with the social network provided by LinkedIn Corporation.

To learn more about LinkedIn’s privacy policy – Privacy Policy https://www.linkedin.com/legal/privacy-policy?_l=it_IT

TikTok
The link to TikTok is an interaction service with the social network provided by TikTok Technology Limited and TikTok Information Technologies UK Limited.
To learn more about TikTok’s privacy policy – Privacy Policy https://www.tiktok.com/legal/privacy-policy-eea?lang=it

YouTube
The link to YouTube is an interaction service with the video platform provided by Google Ireland Limited.
To learn more about YouTube’s privacy policy – Privacy Policy https://policies.google.com/privacy?hl=it

CONTENT ON EXTERNAL PLATFORMS

The website allows users to view content hosted on external platforms directly on the pages of the website and to interact with it. If these services are installed within the website, it is possible that, even if users do not use the service, the services may collect traffic data relating to the pages on which they are installed.

Google Tag Manager

Google Tag Manager is a service that allows the Data Controller to manage centrally the tags or scripts required on the website.

To learn more about Google’s privacy policy – Privacy Policy https://policies.google.com/privacy?hl=it

Shopify
Shopify is a service that allows the development of a website dedicated to electronic commerce.

To learn more about the privacy policy of Shopify International Limited – Privacy Policy https://www.shopify.com/it/legal/privacy

PayPal
PayPal is an online payment service that allows users to make payments and electronic transactions securely, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A.

To learn more about PayPal’s privacy policy – Privacy Policy https://www.paypal.com/it/webapps/mpp/ua/privacy-full

Google Pay

Google Pay is a digital payment service that allows users to make online and mobile payments, provided by Google Ireland Limited.

To learn more about Google’s privacy policy – Privacy Policy https://policies.google.com/privacy?hl=it

COOKIE NOTICE

This website uses different types of cookies. We use cookies to personalize content and to analyze our traffic. We also share information on how you use our website with our web analytics partners, who may combine it with other information you have provided to them or that they have collected from your use of their services.

Cookies are small text files that can be used by websites to make the user experience more efficient. To view the cookies present on the website, click here >. The law states that we may store cookies on your device if they are strictly necessary for the operation of this website. For all other types of cookies, we need your consent.

Further information

For further information on cookies and their use, please visit:

All About Cookies.org www.allaboutcookies.org

Wikipedia http://en.wikipedia.org/wiki/HTTP_cookie