Privacy Policy
Information regarding the processing of personal data in accordance with Article 13 of the Personal Data Protection Code (Legislative Decree no. 196/2003 hereinafter the “Code”), as amended by Legislative Decree no. 101/2018 and Article 13 of the European Regulation (GDPR 679/2016 hereinafter the “Regulation”) and subsequent national rules of adaptation.
As data controller of personal data Dalfiume Nobilvini Srl, with registered office in Via Madonnina, 3041 Castel San Pietro Terme, Bologna, e-mail address privacy@dalfiumenobilvini.it, informs you that, as a result of consulting and visiting this website, the company comes into possession of personal data (i.e. any information concerning an identified or identifiable natural person) related to navigation.
The data controller may modify, complete or update this Privacy Policy from time to time, also in consideration of any changes in applicable legislation or measures taken by the data protection authority. For this reason, the data subject is invited to check this Policy periodically in order to see any changes.
Therefore, in full compliance with the principles of correctness, lawfulness and transparency, the owner provides the following information.
- Type of data processed
The owner processes personal identification data related to navigation and consultation of our portal (name, surname, e-mail address, address, telephone number, IP address, operating system, browser type and version, credit card number limited to the provisions of the General Conditions of Sale).
This data is provided voluntarily by the User for the purposes listed below and essentially to allow the execution of purchase orders, the carrying out of research regarding the products on the Site and to ensure their delivery.
The owner is not in possession of any of your sensitive data (or belonging to particular categories of data ex art. 9 Regulation) nor of any biometric, genetic or judicial data.
As far as payment data is concerned, the data controller merely receives from digital payment companies and credit card payment institutions a return information regarding the status of the payment itself (successful/rejected). All details on the prepaid card or credit card are stored by the institutions that manage the relevant service, which are not authorized to use the personal data received through this website for other purposes. These subjects are autonomous Data Controllers.
1.1 Data of minors.
If you are a minor, you can browse our site, but you cannot buy alcoholic beverages. In this case, the supervision of the person exercising parental responsibility is required. The sale of alcoholic beverages to minors under the age of 18 is prohibited in our legal system.
- Purpose of treatment and legal basis
| Purpose of process | Legal basis |
|---|---|
| a) The data will be processed to manage orders and perform related activities (e.g.: communications with the customer on the status of the order, answers to his requests for information, payment management, etc.). The provision of such information is mandatory to allow you to receive the products ordered through the site. | Execution of a pre-contractual or contractual relationship. |
| b) The data will also be processed for the fulfilment of legal, fiscal and accounting obligations, as well as to allow an effective management of financial and commercial services, delivery relationships or for administrative needs related to orders, shipments and invoices. The transmission of such data is necessary to fulfill legal obligations and is therefore mandatory. | Fulfilment of legal obligations. |
| c) The data will be processed in aggregate and anonymous form to verify the correct functioning of the site. | Legitimate interest of the owner. |
| d) Subject to your consent, promotional communications and/or newsletters may be sent to you. Such sending will also take place if the appropriate form is filled in. The insertion of such data is optional and, if you do not give your consent, no commercial communication and/or newsletter will be sent to you. You may revoke your previous consent at any time. | Consent.. |
| d) Subject to your consent, promotional communications and/or newsletters may be sent to you. Such sending will also take place if the appropriate form is filled in. The insertion of such data is optional and, if you do not give your consent, no commercial communication and/or newsletter will be sent to you. You may revoke your previous consent at any time. | Consent. |
| e) The data will be processed to allow you to perform authentication procedures (log-in) to the site. The provision of such data is necessary to allow you to access the reserved area. The failure to provide such data, however, does not prevent you from placing orders on our site. | Execution of a pre-contractual or contractual relationship. |
| f) The site offers you the possibility to subscribe for the purchase of products. In this case, you will need to register within the web portal. | Execution of a pre-contractual or contractual relationship. |
| g) The data will be processed to propose products designed specifically for the user, also based on purchases made previously. The owner will then perform profiling activities. However, this activity can only be carried out with the user's consent. | Consent. |
For the above purposes, the data controller may assign external suppliers to whom the data strictly necessary for the performance of the assignment will be transmitted exclusively.
- Treatment methods
The processing of personal data is carried out by using the operations indicated in the (Privacy Code and art. 4 n. 2) Regulations and precisely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, limitation, communication, cancellation and destruction of data.
The data are subject to electronic processing.
- Storage period
The owner will process the data for the time necessary to achieve the above mentioned purposes and store them for the time strictly necessary to carry out the specified activities. With regard to data relating to the sending of promotional communications, the data will be kept for a maximum of 18 months.
In case you purchase products by subscription, the data will be kept for the entire duration of the contract.
The profiling data will be kept for 18 months.
- Cancellation of consent to the processing of personal data.
The personal data processed by the owner are necessary for the pursuit of the purposes described in point 2. It is your right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on your consent.
- Recipients
The data may be made accessible for the purposes set forth in art. 2. to the following categories of subjects:
to third party companies or other subjects (such as companies that provide computer services or that deal with the fulfilments related to invoicing) that carry out outsourcing activities on behalf of the owner, in their capacity as external data processors;
Moreover, the data may be communicated to:
- Companies that deal with online payments;
- Monitoring bodies,
- Judicial authorities,
- Public authorities,
- All persons to whom communication is required by law for the fulfilment of the purposes set out in point 2. Said subjects will process the data in their capacity as independent data controllers.
Your data will not be disclosed.
- Data transfer
Personal data are stored at the company’s headquarters, and therefore within the European Union as well as at the webhosting datacentre.
- Exercise of rights by the interested party.
Pursuant to the Privacy Code and Articles 15 and following of the Regulations, as a data subject, you have the right to: a) obtain confirmation as to whether or not personal data concerning you exist, regardless of their being already recorded, and communication of such data in intelligible form; b) be informed of the source of the personal data, the purposes and methods of the processing, the logic applied to the processing if the latter is carried out with the help of electronic means, the identification data concerning data controller and data processors, and the entities or categories of entity to whom or which the personal data may be communicated in their capacity as data processors; c) to obtain the updating, correction or, when interested, integration of data; d) to obtain the cancellation of data in the cases provided for by art. 17 EU Reg. 2016/679, the transformation into anonymous form or the blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; e) to obtain the limitation of processing in the cases provided for by art. 18 EU Reg. 2016/679; f) to receive in a structured format, in common use and readable by automatic device, the personal data concerning him/her and the right to transmit them to another Data Controller; g) to object, in whole or in part for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection; h) to object to the processing of personal data concerning him/her for the purposes of direct marketing, sending advertising materials or direct selling or for carrying out market research or commercial communication; i) to lodge a complaint with the Data Protection Authority.
The exercise of the rights is not subject to any form constraints and is free of charge.
- How to exercise the rights
To exercise your rights you can contact us directly by sending:
- a registered letter with signed return receipt to the owner at the following address: Via Madonnina, 3041 Castel San Pietro Terme, Bologna; or, alternatively,
- an e-mail to privacy@dalfiumenobilvini.it.
* For more information regarding the processing of personal data please also see our Cookie Policy.