The Data Controller is Natura Iblea srl (hereinafter “Data Controller”), in person of the legal representative, Mr. Giadone Roberto, with registered office in C.Targia Stentinello Street, n.9 Siracusa 96100 (SR)
Personal data are collected by the Data controller through registration and filing in our paper and electronic databases. The treatment is based on principles of correctness, lawfulness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality and accountability.
Data Protection Officer
The Data Protection Manager has not been designated as not provided for the type of company.
Purposes of data processing and legal basis
The data collected and processed will be used exclusively for the purposes of:
a) Compliance with contractual obligations
b) Compliance with legal obligations
c) Administrative and Accounting
d) Analysis of habits or consumption choices
e) Direct marketing activities
f) Commercial and information
g) Organizational and productive need
h) Supply of goods and services
i) Online shopping management
j) Management of payment or transport of goods
k) Market research or other sample research
l) Surveys / satisfaction questionnaires
The handling of personal data – including any sensitive data (“special categories of data”) and relating to criminal convictions or crimes (“judicial”) for which you need your consent to be expressed at the bottom of this statement – collected, takes place for the management purposes identified above. All data collected are treated, therefore, exclusively for obligations related to the activity of the owner, whose legal bases are found in the << consent (ex. for the treatment of "special categories of personal data" or for marketing / profiling) >>, << in the need to execute a contract of which you are a part or of pre-contractual measures adopted upon your request>>, << in fulfilling legal obligations to which the undersigned is subject >>, << in the legitimate interest of the same >>, << to perform a task of public interest or connected to the exercise of public authority of which the Holder is invested >>, << for the safeguard of a vital interest or of another physical person >>.
Nature of the provision of data
The handling of personal data and the subsequent processing by the owner, for the mentioned purposes, they are necessary for the establishment, for the continuation and for the correct management of the relationship between the Data Controller and the interested party, or they must be understood as mandatory according to the law, Community regulation or legislation; any refusal to provide the requested personal data may cause the impossibility, in whole or in part, to perfect and manage the relationship in being or in progress. The provision of personal data and the consequent processing by the Data Controller for the purposes referred to in the points << d-k> is optional and failure to provide, even partially, will not result in any consequence.
Data processing methods
The data will be processed – by the persons in charge of processing – with manual, informatics and telematics tools in the field and due to the purposes specified above and, however, always respecting the security and confidentiality of the same, also in accordance with the law and the provisions of the Guarantor for the protection of personal data.
Categories of subjects to whom data can be communicated:
The processing of personal data will be carried out by subjects expressly and specifically designated as specially instructed persons; these subjects will process the data according to the instructions received from the Data Controller, according to the operating profiles assigned to them in relation to the functions performed. The data may also be processed by third parties (outsourcers), which are used for the provision of services related to the purposes pursued, which our organization evaluates from time to time, to ensure greater protection, if you appoint as external managers of the treatments from these existing places. In all cases, these subjects will process the data in accordance with the instructions received from the Data Controller, according to the operating profiles attributed to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the services requested and exclusively for the achievement of the purposes indicated in this statement. The data << will not be subject to disclosure >>.
Duration of treatment and storage
The collected data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected, to fulfill contractual or pre-contractual obligations, of the law and / or regulation (without prejudice to the statutory and legal terms, in respect for the rights and in compliance with the consequent obligations).
In particular, the standards used to determine the retention period are established by specific legal provisions that regulate the activity of the Data Controller (for example, from the fiscal legislation regarding the processing of administrative-accounting data, it specifies, finally, that your Personal data may also be kept until the time allowed by Italian law).
Rights of the interested party:
to the interested party the rights of:
• obtain cancellation or transformation into anonymous form or blocking of data processed in violation of the law;
• obtain updating, rectification and integration of data;
• obtain the certification that these operations have been brought to the attention of those to whom data are communicated;
• oppose, for legitimate reasons, the processing of data or any automated decision-making process (including profiling);
• obtain treatment limitation or portability from another holder.
For this purpose, it will be necessary to send the request, through specific communication trough e-mail addressed to email@example.com (specifying in the subject “Privacy”) or by registered letter with return receipt to the legal address of Natura Iblea srl.
It should also be noted that the interested party always has the right to lodge a complaint with the Guarantor for the protection of personal data for the exercise of his rights or for any other matter concerning the processing of his personal data.
The data subject is always entitled to withdraw consent to the processing provided for the purposes indicated above, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.
After having read the information, I consent to the processing of my personal data << and, expressly, to the processing of any sensitive data ("particular categories of data") and / or judicial data ("data relating to criminal convictions or crimes") >> the achievement of the above-mentioned purposes.