The Code guarantees that the personal data be processed in accordance with fundamental rights and liberties, as well as in respect of the dignity of the interested party, particularly as concerns confidentiality, personal identity and the right to protection of personal data.
1. References of Data Controllers
The Data controller of the processing of personal data of Users who navigate on the Website www.novelli.it and mobile.novelli.it is Regali Novelli Snc, with registered office in Via di San Marcello 21/22, 00187 – Roma, Italia.
The appointed Data Protection Officer, which you can contact to exercise your rights and/or for any clarification regarding the protection of personal data can be reached through the following contacts:
Telephone: +39 06.6792852
Address: Via di San Marcello 21/22, 00187 – Roma - Italia
2. Type and of processing Data
Through the Website, different types of personal data are collected and processed, for different purposes and with different methods. More precisely:
b) personal data which is voluntarily provided by the User (such as, for example, the email address, contact information), or that is otherwise legally acquired, also by email, to compare the latter's requests and offer services, assistance and information requested regarding the products.
c)personal data provided by the User in the context of the online registration process on the Website, the sending of purchase order forms of products for the conclusion of e-commerce transactions, and as part of the interrelation with Users for functional and instrumental sales activities , and to the shipment as well as for all necessary pre and post sales assistance;
(d) with the express consent of the User, Regali Novelli Snc may process the latter's personal data for marketing purposes, in other words in order to send the User, (through traditional tools and through telematic tools such as, newsletters, emails, SMS and MMS) information and updates on products, sales, advertising campaigns, about events and other initiatives promoted.
3. Source of personal data and legal basis for the treatment
the provision of personal data through the email address indicated on the Site in response to Users requests and queries is unrestricted, voluntary and optional.
Failure to provide such data does not limit the use of the Website, although it may make it impossible for Regali Novelli Snc to provide assistance and manage and execute contact requests forwarded by the Users.
Providing your personal data, in particular personal details, email address, mailing address, telephone number and payment details (in case of payments with creditcard), is necessary
to implement preliminary activities and and those following the purchase of a product, to manage the applicable order, to shipping the purchased product, the associated invoicing and payment management, fraud prevention, as well as fulfillment of any and all other requirements arising from the contract.
Some of this data may be essential for providing other services rendered on the Website, that are related to the sale (pre and after sales services, such as transportation, replacement, handling of complaints, returns and notifications to the support service and performance of the support itself) or to properly perform the legal or regulatory obligations (tax compliance and anti-money laundering legislation).
Failure to provide data may therefore constitute, depending on the case, a legitimate and justified reason to not perform the product purchase agreement and or the provision of the services related thereto.
Depending on the case, and where needed, the mandatory or optional nature of disclosing data shall be periodically indicated, by affixing an appropriate (*) sign next to the mandatory information, or merely data that is needed to provide services and purchase products on the Website.
The legal basis for this processing is to provide the services relating to the contractual relationship or reply to the request of Users/Visitors and the performance of the services related to the contractual relationship and to comply with legal requirements.
the provision of personal data through the Website for marketing purposes is unrestricted, voluntary and optional. Failure to provide such data does not limit the use of the Website, although it may make it impossible for Regali Novelli Snc to provide informational material, updates and newsletters.
As indicated in the previous point 2.d) and with the explicit, specific and informed consent
of the User, Regali Novelli Snc may process the personal data of the User for direct marketing purposes and contact him for commercial, promotional and advertising operations. and information and for conducting market research, including, messages by post, telephone, SMS, mms, smart messages or email.
The User may at any time withdraw his consent or change the settings of his preferences by accessing the links at the bottom of each email he receives from Regali Novelli Snc or by contacting the Data Controller at the address indicated above.
The legal basis for this processing is the consent you initially granted for the processing itself, which you may freely withdraw at any time.
4. Procedures for processing personal data
However, these measures, due to the nature of the online transmission method, cannot limit or absolutely exclude any risk of access without consent or dissemination of data. To that end, we advise periodically checking that the computer is equipped with suitable software to protect from incoming and outgoing transmission of data on networks (such as up-to-date antivirus systems), and that your Internet service provider has adopted suitable measures to ensure the security of the data transmitted on the network (such as, for example, firewalls and antispam filters).
On www.novelli.it and mobile.novelli.it every purchase takes place in maximum security thanks to the use of advanced technological and coding systems (SSL).
5. Scope of personal data communications
Regali Novelli Snc communicates the personal data of the Website's Users only to recipients and/or third parties whose activity is necessary for the performance of activities related to the relationship established and to meet certain legal obligations.
The personal data shall be processed and known by:
employees and consultants of Regali Novelli Snc which process the data solely to perform the agreement to purchase products from the Website;
employees and companies performing specific technical and organizational services for Regali Novelli Snc that are related to the Website (data entry, hosting, IT services, marketing and communications services);
Furthermore, the data may be communicated to
1.third parties, only to perform the agreement to purchase products from the Website (such as the credit institution for the execution of electronic payment services via credit / debit card or courier for the delivery of products );
2. practitioner, consultants, consulting firms in accounting, legal, administrative, tax financial and debt collection matters,
3. police forces, judicial authority, custom in conformity with the law and upon formal request by such parties.
Personal data shall not be disseminated, and shall be transferred abroad solely by guaranteeing suitable levels of protection and safeguards, according to the legal standards.
On this regard, the following is specified:
- The Website's housing and data retention services are provided by Easy Space whose Privacy is governed by these guidelines ;
- The mail marketing services (newsletter) are provided by Mailchimp whose Privacy is governed according to these guidelines and according to the supplement contract PDF between Regali Novelli Snc and Mailchimp stipulated to ensure the User compliance with the names provided by the GDPR.
- The e-mail services that are accessed using our e-mail address to request information outside the site are provided by Gmail Privacy is governed according to these guidelines ;
- The tools of widgets, plug-ins, third-party embedded on our site that are activated by clicking on the "Like" button on Facebook or on YouTube and Ebay links use their own cookies to collect information on the User's interactions with these functions. This information is collected directly from the function providers and is subject to their respective privacy policies:
- Facebook: https://www.facebook.com/about/privacy/
- You Tube: https://policies.google.com/privacy?hl=it
6. Data retention period
Personal data will be retained until they are necessary in relation to the legitimate purposes for which they were collected and, in particular:
The navigation data will be kept for the time necessary to perform the specified activities.
The data provided for sales purposes will be kept for a period not exceeding 10 years, in compliance with tax and civil legislation.
The data provided for marketing purposes will be kept for the period necessary for the specific treatment or processed until the revocation of its consent.
The cases in which the rights of Regali Novelli Snc, in which case the personal data of the User, exclusively those necessary for such purposes, will be processed for the time necessary for their pursuit, regardless of retention times indicated above and from the determination of the User to their removal.
7. Children Under the Age of 18
Our Website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this Website. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information
8. User rights
User always has the right to obtain the following from the Data Controller:
a) confirmation on whether your personal data is being processed and if so, to obtain access to your personal data and the following information:
1. the purposes of the processing;
2. the categories of personal data in question;
3. the recipients or categories of recipients that have received or will receive your personal data, in particular if these recipients are in third party countries or are international organizations;
4. when possible, the anticipated storage period of your personal data or, if not possible, the criteria used to determine this period;
5. whether you have the right to ask the Data Controller to correct or delete your personal data or the limits on processing your personal data or to oppose the processing of the data;
6. the right to lodge a complaint with a supervisory authority;
7. in the event the data is not collected from you, all of the information available regarding its origin;
8. whether there is an automated decision process, including profiling, and, at least in these cases, significant information on the logic used, as well as the importance and consequences to you for this processing.
9. the suitable guarantees provided by the third party country (outside EU) or international organization to protect any transferred data
b) the right to obtain a copy of the personal data processed, again given that this right does not affect the rights and freedoms of others; for extra copies requested by you, the Data Controller may assign a reasonable fee based on administrative costs.
c) the right to edit any of your incorrect personal data from the Data Controller without unjustified delay
d)the right to have your personal data deleted by the Data Controller without unjustified delay, if there are the reasons outlined in the GDPR, Article 17, including, for example, if the data is no longer needed for processing or if the data is considered illegal, and again, if there are no conditions outlined by law; and in any case, if the processing is not justified by another equally legitimate reason;
e) the right to obtain limits on the processing from the Data Controller, in those cases outlined in Art. 18 of the GDPR, for example where you have disputed the correctness, for the period necessary for the Data Controller to verify the data's accuracy. You must be notified, within an appropriate time, even when the suspension period has passed or the cause of limiting the processing has been eliminated, and therefore the limitation itself has been withdrawn;
f) the right to obtain information from the Data Controller on the recipients who have received the requests for any corrections or deletions or limits on the processing implemented, except when this is impossible or would create a disproportionate effort.
g) the right to receive your personal data in a structured format, commonly used and readable by automatic devices as well as the right to forward this data to another Data Controller without obstruction from the original Data Controller, in those cases outlined by Art. 20 of the GDPR, and the right to obtain direct forwarding of your personal data from one Data Controller to another, if technically feasible.
The rights noted above may be exercised by sending a request to our Data Controller at firstname.lastname@example.org or to the address indicated above.
Regali Novelli Snc reserves the right to modify or simply update the content, partly or completely, also due to changes in the applicable legislation. If the changes to this Policy concern substantial changes in the treatments or may have a significant impact on the interested parties, Regali Novelli Snc will take care to notify them to the interested parties. User/visitor is invited to periodically consult this page.