INFORMATION ON THE PROCESSING OF PERSONAL DATA of users who consult the Buti Sas website pursuant to Article 13 of Regulation (EU) 2016/679
Ai sensi del Regolamento (UE) 2016/679 (di seguito “Regolamento”), questa pagina descrive le modalità di trattamento dei dati personali degli utenti che consultano il sito web di Buti Sas (di seguito “Titolare”) accessibile per via telematica al seguente indirizzo: https://www.torrettabuti.it/.
Le presenti informazioni non riguardano altri siti, pagine o servizi online raggiungibili tramite link ipertestuali eventualmente pubblicati nel sito ma riferiti a risorse esterne al dominio del Titolare.
DATA CONTROLLER
Following consultation of the above-mentioned site, data relating to identified or identifiable natural persons may be processed.
The data controller is the company BUTI DI BUTI AMERIGO E C SAS, located in BUTI 56032 (PI) – Italy, Zona Industriale La Tura
PEC: butisas@pec.it
EMAIL: info@torrettabuti.it
RECAPITO TELEFONICO: 0587/722735 FAX: 0587 725150
TYPES OF DATA PROCESSED AND PURPOSE OF THE PROCESSING
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data, necessary for the use of web services, are also processed for the purpose of:
• obtaining statistical information on the use of services (most visited pages, number of visits, etc.) visitors by time slot or day, geographical areas of origin, etc.);
• check the correct functioning of the services offered;
• respond to your contact request (commercial request, information, etc.) for which you will be asked for specific consent;
The browsing data does not persist for longer than the time necessary to guarantee the security of the server and is deleted immediately after its aggregation (except in the event of any need to ascertain crimes by the Judicial Authority).
Online order data
The following personal data are collected in the online order request: name, surname, address, postcode, town, email, telephone number, shipping and payment method.
Unless otherwise specified, all Data requested from the user is mandatory. If the User refuses to communicate them, we will be unable to proceed with the online order. In cases where the site indicates some data as optional, users are free to refrain from communicating such Data, without this having any consequences on the online order.
Newsletter subscription data
The online order offers the possibility of subscribing to the Torretta Buti newsletter to always be informed about news and promotions.
In the event that the user subscribes to the newsletter, his/her email will be inserted in a list of addresses managed by us through Mailchimp. The platform provides for the transfer of data to the United States where the servers with which the service is provided reside. The supplier company has adequate guarantees as it adheres to the Privacy Shield.
Purpose of the Processing of Collected Data
The User's Data is collected to allow the Owner to provide its Services, as well as for the following purposes:
• Contacting the User for requested information
• Registration and authentication
• Online order management
• Subscription to the informative newsletter
LEGAL BASIS
The processing of personal data provided and/or inferred by browsing the Site is processed on the basis of consent, with the use or consultation of this site visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below.
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
• processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
• processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• the User has given consent for one or more specific purposes.
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.
PROCESSING METHODS
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this site may have access to the Data and have been appointed, if necessary, Data Processors by the Data Controller. The updated list of Processors may always be requested from the Data Controller.
Place of processing
The Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, you can contact the Data Controller. In the event of registration to the newsletter, your data may be transferred to the U.S.A. to the Mailchimp service provider, which is an adequate subject as it adheres to the Privacy Shield.
DATA RETENTION PERIODS
The Data are processed and stored for the time required by the purposes for which they were collected.
Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until such contract has been fully performed.
When the processing is based on the User's consent, the Owner may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, at the expiration of such term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
The newsletter subscription data will be retained until the User proceeds with the request for cancellation from the mailing list.
RIGHTS OF INTERESTED PARTIES
The interested parties have the right to obtain from the Data Controller, in the cases provided for, access to personal data and the rectification or erasure of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 et seq. of the Regulation).
For processing activities for which the legal basis is the consent given by you, you are recognized the right to revoke the same at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
RIGHT TO COMPLAIN
Interested parties who believe that the processing of their personal data carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Data Controller, as provided for by art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation).