Limonta S.p.A. ("Limonta"), Via Cesare Battisti 15 - 23845 Costa Masnaga (LC), VAT number 00201760139 (hereinafter also the "Company" or "Data Controller").
1 - PURPOSES OF THE DATA PROCESSING
1.1 - Contractual purpose: purchase and management of the purchased Gift Card.
1.2 - Marketing purposes: sending, with automated contact methods (such as text messages, mms and e-mails) and traditional methods (such as telephone calls with operator and traditional mail), of promotional and commercial communications relating to services/products offered by the Company or reporting of corporate events, as well as carrying out market studies and statistical analyzes.
1.3 - Profiling purposes: analysis of your preferences, habits, behaviors or interests in order to send you personalized commercial communications.
1.4 - Legal obligations: to fulfill obligations established by regulations and by applicable national and supranational legislation.
1.5 - Rights of the Data Controller: if necessary, to ascertain, exercise or defend the rights of the owner in court
1.6 - Out-of-court debt collection: in order to allow the Company to recover its credits without resorting to a judicial authority.
2 - LEGAL BASES OF THE DATA PROCESSING
2.1 - Contractual purpose: execution of a contract to which you are a party, or for the sale and management of the Gift Card.
2.2 - Marketing and profiling purposes: consent (optional and revocable at any time).
2.3 - Legal obligations: need to fulfill legal obligations.
2.4 - Rights of the Data Controller and out-of-court credit recovery: legitimate interest.
3 - DATA RETENTION OF PERSONAL DATA
3.1 - Contractual purpose, Legal obligations: for the entire duration of the contract and, after termination, for 10 years.
3.2 - Marketing and profiling purposes: up to the withdrawal of consent for this purpose. The only data relating to the detail of purchases will be processed for marketing and profiling purposes for 24 months as established by the provision of the Authority for the protection of personal data of 24 February 2005 and subsequent amendments.
3.3 - Rights of the Data Controller and out-of-court credit recovery: in the case of judicial litigation, for the entire duration of the same, until the deadlines for appeals are exhausted.
Once the retention terms indicated above have elapsed, your personal data will be destroyed, deleted or made anonymous, compatibly with the technical erase and backup procedures.
4 - PERSONAL DATA PROCESSED
4.1 - FOR CONTRACTUAL PURPOSES - LEGAL OBLIGATIONS - RIGHTS OF THE DATA CONTROLLER - CREDIT RECOVERY:
Name, surname, social security number, mobile and landline telephone number, country, address, city, post code, email.
4.2 - FOR MARKETING AND PROFILING PURPOSES:
Name, surname, mobile and landline phone number, country, address, city, post code, email.
5 - PROVISION OF DATA
The provision of personal data referred to in point 4.1 for the purposes referred to in point 1.1 is mandatory. The refusal to provide the aforementioned personal data therefore does not allow the possibility of using the services of the Site relating to the booking and sale of products.
The provision of personal data referred to in point 4.2 for the purposes referred to in points 1.2 and 1.3 is optional and subject to your consent.
6 - DATA RECIPIENTS
The data can be processed, as well as by the Company, also by
- companies controlled by or connected to Limonta in Italy and/or in the World for the pursuit by the Company of the purposes mentioned in points 1.1, 1.2 and 1.3;
- employees and collaborators of the Company appointed of processing who manage the physical stores or e-commerce of the Company and who will be able to view, modify and update the data entered in the CRM system;
- external subjects operating as independent owners such as, by way of example, supervisory and control authorities and bodies and in general public or private subjects entitled to request data;
- external subjects appointed as Data Processors who are given adequate operating instructions, included in the following categories:
- companies that offer e-mail sending services;
- companies that offer website maintenance and development services;
- companies that offer support in carrying out market studies.
- third parties established in the European Union and also outside the European Union, data processors, which the Company uses in particular for the acquisition and data entry services of personal data, shipping, mailing of promotional material, after-sales assistance, research market, management and maintenance of the CRM system and other company information systems.
7 - SUBJECTS AUTHORIZED FOR THE PROCESSING
Your data may be processed by employees of the Company's corporate functions appointed to pursue the aforementioned purposes, who have been expressly authorized for processing and who have received adequate operating instructions. A complete and updated list of the Data Processors appointed by the Company can be obtained by writing via email to firstname.lastname@example.org.
8 - YOUR RIGHTS AS THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting the Company by e-mail at email@example.com, you can ask the Company to access the data concerning you, their erasure, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 of the GDPR, as well as the opposition to the processing in the hypothesis of legitimate interest of the Company.
Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, you have the right to receive your personal data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another data controller without impediments.
You have the right to withdraw the consent given at any time for marketing and/or profiling purposes, as well as to oppose the processing of data for marketing purposes, including profiling related to direct marketing. The possibility remains valid that you prefer to be contacted for the aforementioned purpose exclusively through traditional methods, to express your opposition only to the receipt of communications through automated methods.You have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which you usually reside or work or in the State in which the alleged violation has occurred.