With reference to the Applicable Law we inform you that the Data Controller is SALTIC, whose data is reported on the website on the Home Page and/or on other web pages therein.
2. PERSONAL DATA TO BE PROCESSED
Categories of Personal Data
The types of personal data collected from the Site are the following:
a. Navigation data: the Site’s computer systems collect certain Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with you, but by its very nature could, through processing and the association with data retained by third parties, allow us to identify you. This includes the IP addresses or domain names of the devices used to connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and IT environment. This data is used in order to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct provision of the various functions you requested, for security reasons, and to ascertain liability in the event of hypothetical cyber-crimes against the Site or third parties and is deleted after 7 days; this data is retained by the Site Controller in any case, for the period strictly necessary and in compliance with the relevant regulations in force.
b. Data provided voluntarily: through the Site you have the possibility to voluntarily provide Personal Data such as your name and e-mail address, to subscribe to the newsletter service, the gift card service, to contact SALTICthrough the “Contact us” form, to manage orders on the e-commerce platform, shipping, data acquired from answers to questionnaires for participation in the survey, marketing etc. or other similar services. Users are free to provide their personal data but failure to do so may make it impossible to obtain the service requested. SALTICshall process this data in compliance with the Applicable Law, assuming that it refers to you or to third parties who have expressly authorised you to provide it based on an appropriate legal basis that legitimises the processing of the data in question. With respect to the latter hypothesis, you are acting as an independent Data Controller, assuming all legal obligations and responsibilities. To this effect, you are hereby granting full indemnity with respect to any dispute, claim, request for compensation for damage from processing, etc., that SALTICmay receive from third parties whose Personal Data has been processed through your use of the Site in violation of the Applicable Law.
3. PURPOSE, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF PROCESSING
The Personal Data you provide through the Site will be processed by SALTICfor the following purposes:
Data may be processed by paper, automated or electronic means and, in particular, by post or e-mail, telephone (e.g. automated calls, SMS, MMS), fax and any other computer channel (e.g. websites, mobile apps).
a) purposes strictly connected to the execution of the contract, instrumental to managing the relationship with the customer and connected to the fulfilment of legal obligations (e.g. in accounting, fiscal and tax matters) by the company that acts as the Data Controller;
b) purposes strictly connected to managing the relationship with the customer. In particular, the processing of the Data will be carried out as an independent Controller for: the fulfilment of the obligations regarding the services you requested; the performance of internal audits at the Company; the management of customer service; the carrying out of surveys aimed at improving the quality of the services provided;
c) with the customer’s prior consent: to allow the Company or third party companies to send commercial and/or promotional communications about their products and services, as well as to carry out market research (“Marketing”), analyse the customer’s behaviour, habits and propensity to consume, in order to improve the products and services provided by the Company, as well as to meet the specific needs of customers (“Profiling”);
d) purposes needed to ascertain, exercise or defend a right in court or whenever the courts exercise their judicial functions.
e) purposes of statistical research/analysis on aggregate or anonymous data, without the possibility of identifying the user that is aimed at measuring the functioning of the Site, its traffic and assessing usability and interest.
Data processing for each of the above purposes shall be carried out by paper, automated or electronic means and, in particular, by post or e-mail, telephone (e.g. automated calls, SMS, MMS), fax and any other computer channel (e.g. websites, mobile apps).
The provision of Data is optional. However, any refusal to provide the Data for the purposes under sub sections (a) and (b) of Part 1) above, the processing of which does not require the customer’s consent, will make it impossible to perform the services and obligations under the contract. The refusal to process data for the purposes under sub section (c), shall in no way affect the contractual relationship with the Company and the consequent activities connected or dependent on it. The purpose referred to under sub section (d) represents the legitimate processing of Personal Data pursuant to the Applicable Law since, once the Personal Data has been provided, its processing is indeed necessary to fulfil a legal obligation to which SALTICis subject. The purpose under sub-section e) does not involve any processing of Personal Data.
Your Personal Data may be shared for the purposes specified in point 3, with: a. persons required to provide the services offered by the Site, including, for example, the company responsible for managing order payments, sending e-mails and analysing the functioning of the Site, who typically act as SALTICData Processors; b. persons authorised by SALTICto perform personal data processing who are committed to confidentiality or have an appropriate legal obligation of confidentiality; (e.g., persons authorised by SALTIC); (a. and b. are collectively “Recipients”); c. third parties (companies, freelance professionals, etc. …) operating both inside and outside the European Union and Authorities (e.g. judicial, administrative, etc. …), acting as: 1) Data Controllers, being parties that determine the purposes and means of personal data processing; 2) Data Processors, being parties that process personal data on behalf of the Controller. The updated list of parties identified as Controllers or Processors is available upon request addressed to the Company’s registered office.
Some of your Personal Data is transferred to Recipients that may be found outside the European Economic Area. SALTICensures that the electronic and paper processing of your Personal data by Recipients is carried out in accordance with Applicable Law. Indeed, transfers are alternatively based on an adequacy decision or on Standard Model Clauses approved by the European Commission.
6. DATA RETENTION
SALTICshall process your Personal Data for the time strictly necessary to achieve the purposes indicated in point 3. For example, SALTICshall process your Personal Data for the newsletter service until you decide to unsubscribe from it. Without prejudice to the above, SALTICshall process your Personal Data until the time allowed by Italian law to protect its interests (Articles 2946 and 2947(1)(3) of the Italian Civil Code). Further information about the retention period of your Personal Data and the criteria used to determine this period can be requested by writing to firstname.lastname@example.org.
7. YOUR RIGHTS
As a data subject, you may exercise the rights provided for in the Regulations listed below at any time against the Controller by sending a written request to email@example.com.
You may revoke the consent expressed in this Policy at any time in the same way, or by using the appropriate section of the website in the user area.
Any communications and actions taken by the Company concerning the exercise of the rights listed below will be made free of charge. However, if your requests are clearly unfounded or excessive, in particular due to their repetitive nature, the Company may charge you a fee, taking into account the administrative costs incurred, or refuse to meet your requests.
The customer is entitled to the following rights:
- right of access, being the right to obtain confirmation from the Controllers whether or not the Data is being processed and, if so, to obtain access to it;
- right to rectification and deletion, being the right to obtain the rectification of inaccurate Data and/or the integration of incomplete Data or the deletion of Data for legitimate reasons;
- right to the restriction of processing, being the right to request the suspension of processing if there are legitimate reasons;
- right to data portability, being the right to receive the Data in a structured, commonly used and readable format, as well as the right to transmit the Data to another Data Controller;
- right to object, being the right to object to the processing of the Data if there are legitimate reasons, including data processing for marketing and profiling purposes, if any;
- right to contact the competent Data Protection Authority in case of unlawful processing of the Data.