privacy policy and cookie policy

In compliance with the obligations deriving from national legislation (Legislative Decree No. 196 of June 30, 2003, Personal Data Protection Code as amended by Legislative Decree 101/18) and community law, (European regulation for the protection of personal data No. 679/2016, hereinafter GDPR) and subsequent amendments, this website www.oroemiliano.it (hereinafter Site) respects and protects the privacy of visitors and users, making every effort possible and proportionate so as not to damage user rights.

This information applies exclusively to the online activities of the Site and is valid for its visitors / users. The purpose of the privacy policy is to provide maximum transparency regarding the information that the Site collects and how it uses it.


Data Controller

The Data Controller is Viatico srl, with registered office in via Ugo Foscolo 3, 46024 Moglia (MN), hereinafter Data Controller, in the person of its legal representative pro-tempore, which can be contacted at the e-mail address privacy@viaticosrl.com.


Legal basis of the processing

The Data Controller processes personal data of the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes;
  • processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual or post-contractual measures;
  • processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
  • processing is necessary for the execution of a task of public interest or for the exercise of public powers under the responsibility of the Data Controller;
  • processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

The User has the right to request at any time the Data Controller to clarify the legal basis of each treatment and in particular to specify whether the processing is based on the law, required by a contract or necessary to conclude a contract.


Type of data collected and processed

Processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes, applied to personal data or sets of personal data, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction.

The personal data collected and processed through the Site are the following:

Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information are not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow Users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data are used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site or third parties.

Data provided by the user

These are the identification data entered voluntarily by the User in the appropriate compilation fields, necessary to be able to execute a purchase order and the related contractual obligations: name and surname and / or company name, residence and / or administrative office, tax data, email address, telephone contacts and shipping address. This type of data also includes personal information provided by the User to use the services offered by the Site, such as the messaging service and newsletter subscription. By entering these data, the User expressly accepts the privacy policy, and in particular he agrees that the contents inserted are freely released also to third parties (e.g. those responsible for freight transport). Other personal data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the data collection.

Apart from that specified for navigation data, the User is free to provide his personal data. Failure to provide such data may make it impossible to obtain what is requested. For completeness it must be remembered that, in some cases (not object of the ordinary management of this site), the Authority can request news and information pursuant to the GDPR, for the purpose of controlling the processing of personal data. In these cases the response is mandatory under penalty of administrative sanction.

Any use of Cookies - or other tracking tools - by this Site or third-party owners used by this Site, unless otherwise stated, is intended to identify the User and record the related preferences for purpose strictly related to the provision of the service requested by the User.

The User assumes responsibility for the personal data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Data controller from any responsibility towards third parties.


Data Retention Period

The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service. In the event of the conclusion of a contract for the purchase of goods on the site, the processing of the User's data will take place to give effect to the legal obligations to which the Data Controller is bound in accordance with the fiscal provisions and other regulations to which it is subject.

The data collected by the site during its operation are used exclusively for the purposes indicated and kept for the time strictly necessary to carry out the specified activities. In any case, the data collected by the Site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided for by law.

The data used for security purposes (blocking attempts to damage the site) are kept for 7 days.


Processing methods

The Data Controller uses appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and / or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

In addition to the Data Controller, in some cases, other parties involved in the organization of this site (administrative, commercial and legal staff, system administrators) or external parties (such as suppliers of administrative and accounting services, couriers and logistics operators, hosting providers, IT companies, communication agencies) may have access to the data, also appointed, if necessary, Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller. These subjects have access only to the personal data that are necessary to perform their tasks, without the possibility of using them for other purposes; they are also required to process personal data in accordance with this Privacy Policy, and in accordance with applicable laws regarding the protection of personal data.


Purpose of the processing

User data are collected to allow the Data controller to provide its services and, upon specific consent where necessary, for the following purposes:

  1. allow the provision of the services requested and the subsequent operational, technical and administrative management of the relationship connected to the provision of the Services and any communications relating thereto;
  2. allow navigation and consultation of the Site;
  3. respond to requests for assistance or information, which we will receive via e-mail, telephone or chat;
  4. fulfill legal, accounting and tax obligations;
  5. carry out direct marketing via e-mail and / or promote products and services provided by the Data Controller, unless the User has opposed such processing initially or in subsequent communications;
  6. develop studies, research, market statistics; send advertising, information, commercial information or surveys to improve the service ("customer satisfaction") via e-mail or text message, and / or through the use of the telephone with operator and / or through the official pages of the Data Controller on social networks network;
  7. make customized business proposals based on the products or services purchased by the User, or that you are interested in browsing the Site, or based on the group of customers to which it belongs (profiling);
  8. for the sole purpose of security and prevention of fraudulent conduct.

Place of processing

The data collected by the site are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located.

This site may share some of the data collected with services located outside the European Union area (eg Google, Facebook, Microsoft) through social plugins and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield), for which no further consent is required.


Cookie Policy

As is in use on all websites, also this site uses cookies, small text files that allow you to keep information on visitor preferences, to improve the site's functionality, to simplify navigation by automating procedures (eg. Login, site language) and for analyse the site's usage.

Session cookies are essential in order to distinguish between connected users, and they are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, ie until the browser is closed. They do not need consent.

Functionality cookie used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required.

By using the site the visitor expressly consents to the use of cookies.

Disabling cookies

The cookies are connected to the browser used and CAN BE DISABLED DIRECTLY BY THE BROWSER, thus refusing / revoking the consent to the use of cookies. Keep in mind that disabling cookies may prevent the correct use of some functions of the site itself.

Instructions for disabling cookies can be found on the following web pages:

  • Mozilla Firefox
  • Microsoft Internet Explorer
  • Microsoft Edge
  • Google Chrome
  • Opera
  • Apple Safari

Third-party cookies

This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as buttons for social media, or videos. This site has no control over third-party cookies, entirely managed by third parties. As a result the information on the use of these cookies and on the purposes of the same, as well as on the methods for disabling them, are provided directly by the third parties on the pages indicated below.

In particular, this site uses cookies of the following third parties:

  • Google Analytics: a Google analysis tool that, through the use of cookies (performance cookies), collects anonymous browsing data (IP truncated to the last octet) and exclusively aggregated in order to examine the use of the site by users , compile reports on the activities on the site and provide other information, including the number of visitors and the pages visited. Google may also transfer this information to third parties where this is required by law or where such third parties process the information on Google's behalf. Google will not associate the IP address with any other data held by Google. The data transmitted to Google are stored on Google's servers in the United States.
    On the basis of a specific agreement with Google, which is designated as the data processing manager, he undertakes to process the data based on the request of the Data Controller, given through the software settings. Based on these settings, the advertising and data sharing options are disabled. Further information on Google Analytics cookies can be found on the Google Analytics page Cookie Usage on Websites.
    The user can selectively disable the action of Google Analytics by installing on his browser the opt-out component provided by Google. To disable the action of Google Analytics, refer to the following link: tools.google.com/dlpage/gaoptout.
    For more information on the use of data and their treatment by Google it is recommended to view the information on the specific page prepared by Google, and on the page on how to use data by Google when using sites or apps of partners.

Social Network Plugin

This site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so provided by social networks, only when the user makes an effective and voluntary use of the plugin. Keep in mind that if the user surfs being logged into the social network then he has already consented to the use of cookies conveyed through this site when he registered with the social network. The collection and use of information obtained through the plugin are governed by the respective privacy policies of social networks, to which please refer.

  • Facebook
  • Instagram
  • Linkedim

User right

Pursuant to the GDPR and the national legislation, the User can, according to the procedures and within the limits established by the current legislation, exercise the following rights:

  • withdraw consent at any time. The User can revoke the consent to the processing of his personal data previously expressed.
  • object to the processing of your data. The User may object to the processing of his / her data when it takes place on a legal basis other than consent. Further details on the opposition right are indicated in the section below.
  • access his own data. The User has the right to obtain information on the data processed by the Data controller, on certain aspects of the processing and to receive a copy of the processed data.
  • check and ask for rectification. The User can verify the correctness of his / her data and request its updating or correction.
  • obtain the treatment limitation. When certain conditions are met, the User can request the limitation of the processing of his data. In this case the Data Controller will not process the data for any other purpose than their storage.
  • obtain the cancellation or removal of his own personal data. When certain conditions are met, the User can request the deletion of his data by the Data controller.
  • receive your data or have it transferred to another Data controller. The User has the right to receive his data in structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder. This provision is applicable when the data are processed by automated tools and the processing is based on the consent of the User, on a contract to which the User is a party or on contractual measures connected to it.
  • make a complaint. The User can make a complaint to the competent personal data protection supervisory authority or act in court.
  • as well as, more generally, exercise all the rights that are recognized by the current legal provisions.

Each User has the right to object, in whole or in part, to the processing of personal data concerning him if the processing is based on the legitimate interest of the Data Controller, as well as for direct marketing purposes. To exercise User rights, Users can address a request to the contact details of the Data Controller indicated in this document. The requests are processed by the Data Controller as soon as possible, in any case within a month.


Udates

This privacy policy is updated on 01 February 2019.