Personal data processing notice pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
This notice is provided for the site sfusobuono.com (Site) owned by Sfusobuono di A.C., based in Via Casalbagliano 37, Alessandria 15121 (AL) VAT no. 02636780062, Cam.Com. AL REA 272259, as Data Controller in accordance with the GDPR.
Provided you give us your personal data, your personal data will be processed to allow you to make purchases on the Site.
The information and data required for registration will be used to allow you to access the private area of the Site, and to use the online services offered by the Data Controller to registered users.
The Data Controller may process the personal data you provide in order to send you advertising material and/or newsletters regarding its own products or those of third parties. You can cancel your subscription at any time or ask us to stop receiving communications.
With your consent, the Data Controller may process your personal data for profiling purposes, i.e. to analyze your consumption choices by revealing the type and frequency of the purchases you make, in order to send you advertising material and/or newsletters relating to its own products or third parties, of your specific interest.
The Data Controller may use, for the purpose of the direct sale of products offered for sale through the Site, the e-mail addresses you provided in the context of a purchase on the Site, even without your consent, provided that it is a product similar to that object of the previous sale (so-called soft spamming). You may refuse this treatment at any time by communicating your opposition to the Data Controller.
Art. 1. Purpose and legal basis of processing. Compulsory or optional conferment. Consequences of refusal to process.
The processing of personal data is directed to the achievement of the following purposes:
a.to allow registration on the Site and access to services reserved for registered users as well as to allow compliance with obligations arising from the law or regulations in force, in particular, in the administrative, accounting, public security. The legal basis for the processing is the need for the Data Controller to execute pre-contractual measures adopted at the request of the data subject or to comply with a legal obligation;
b. in the case of making an online purchase order, to allow the conclusion of the purchase contract and the proper execution of transactions related to the same (and, if necessary under the sector legislation, to fulfill tax obligations). The legal basis for the processing is the obligation of the Data Controller to perform the contract with the data subject or to comply with legal obligations;
c. limited to the email addresses you provide in the context of a purchase through the Site, to allow the direct offer by the Data Controller of similar products (so-called soft spamming), unless you object to such processing in the manner provided by this policy. The legal basis for the processing is the legitimate interest of the Data Controller to send this type of communication. This legitimate interest can be considered equivalent to the interest of the data subject to receive "soft-spam" communications;
d. subject to your consent, for the sending of newsletters and for the carrying out of market surveys, also aimed at assessing the degree of user satisfaction, and the sending of advertising material relating to products of the Data Controller and/or third parties, by means of systems such as email (marketing purposes); with your consent, for the processing of your commercial profile, through the detection and processing of your choices and buying habits, in order to monitor the degree of customer satisfaction, and to send you advertising material about products of the owner of the treatment and / or third parties, of your specific interest, by means of systems such as email ( profiling purposes). The legal basis of the processing is the consent of the data subject;
e. if the chat service is operational, allow the activation of the service, through which the user can contact and be contacted by the Data Controller, subject to your consent, during your navigation on the Site. The legal basis is the legitimate interest of the Data Controller to carry out this type of activity. This legitimate interest can be considered equivalent to the interest of the data subject to use the chat service of the Site;
f. to respond to your requests through the customer care service. The conferment is optional, but your refusal will make it impossible for the Data Controller to answer your questions through this service. The legal basis of the processing is the legitimate interest of the Data Controller to respond to your requests. This legitimate interest is equivalent to the user's interest in receiving responses to communications sent to the Data Controller;
g. to respond by email to your requests. The conferment is optional, but your refusal will make it impossible for the Data Controller to respond to your requests. The legal basis for the processing is the legitimate interest of the Data Controller to respond to your requests. This legitimate interest is equivalent to the user's interest in receiving responses to communications sent to the Data Controller.
The provision of data for the purposes referred to in points a) and b) is merely optional. However, since such processing is necessary in order to make a purchase on the Site, your refusal to provide such data will make it impossible to make such a purchase through the Site. Consent to the processing of your data for marketing and profiling purposes is purely optional. Failure to consent will only imply the consequences described below. Failure to consent to the processing of your data for marketing purposes will make it impossible for you to receive advertising material relating to products of the Data Controller and/or third parties, and it will also make it impossible for the Data Controller to carry out market surveys, also aimed at assessing the degree of user satisfaction, and to send you newsletters. Failure to consent to the processing of your personal data for profiling purposes will make it impossible for the Data Controller to elaborate your commercial profile, through the detection of your choices and purchasing habits, and to send you advertising material related to products of the Data Controller and/or third parties of your specific interest.
Without prejudice to the above, it is understood that the Data Controller may still use your personal data for the sole purpose of correctly fulfilling the obligations provided for by the laws in force and the obligations arising from the contractual relationship between you and the Data Controller.
If you have registered on the Site, you may in any case modify your consent for the purposes described above at any time, by accessing your personal page.
We remind you that you can also object to the processing of your personal data through the link at the bottom of any promotional email sent by the Data Controller.
Data provided as part of the service "Invite a friend"
On the Site you will have the opportunity to recommend the Site or one or more products offered for sale on the Site to your friends by entering the personal data of the latter from time to time required. You are aware that the Data Controller will keep such personal data only for the time strictly necessary to document that your request has been fulfilled. In order to take advantage of this service you must be able to demonstrate, if requested by the Data Controller, that you can legitimately use the personal data of your friends.
Data provided as part of the "Give a Gift" service
On the Site you will have the opportunity to give one or more products to a person as a gift by entering the personal data requested from time to time. You are aware that the Data Controller will keep this personal data for the time strictly necessary to document that your request has been fulfilled. In order to take advantage of this service you must be able to demonstrate, if requested by the Data Controller, that you can legitimately use the personal data of your friends/contacts.
Payment card data
To make a payment through one of the payment cards offered on the Site, the user must enter the confidential data of the payment card directly on a page that will communicate via secure protocol with the payment service provider (who will act as autonomous data controller), without passing through the server of the Data Controller who, therefore, will not process such data in any way. The data will be acquired in encrypted format.
With reference to the payment card data, it should be noted that the processing of your personal data is necessary to allow the conclusion of the online purchase contract with the Data Controller. Therefore, if you do not provide this data, you will not be able to complete the online purchase process.
On the Site you can also buy through the PayPal payment tool. In this case, you will be directed to a page outside the Site, where you must indicate the personal information required by PayPal - which will act as independent data controller - to complete the purchase process. The personal data will not transit from the server of the Site that, therefore, will not treat such data in any way. The processing of your personal data is necessary to allow the conclusion of the online purchase contract with the Data Controller. Failure to provide this data, therefore, will not allow you to complete the online purchase process.
Whenever you choose bank transfer as a means of payment, in the presence of any hypothesis of reimbursement, the Data Controller will ask you for your bank details in order to arrange the payment.
Particular or judicial data
The Data Controller does not process particular or judicial data.
Delivery of data
For the sending of promotional communications, upon your explicit consent, your personal data may be transferred to operators in the marketing sector for activities related to Sfusobuono.
Art. 2. Methods of processing
The processing of your personal data will be mainly carried out with the help of electronic or automated means, according to the methods and with the tools necessary to ensure the security and confidentiality in accordance with the GDPR.
The information acquired and the methods of treatment will be relevant and not excessive in relation to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.
Art. 3. Communication and dissemination of data
Your data may be communicated:
- to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions
- to companies or third parties in charge of printing, packing, shipping and/or delivery and/or collection services of the products purchased through the Site
- to post offices, couriers, post offices, couriers, suppliers or forwarding agents in charge of the delivery of the products purchased through the Website
- banks and companies that manage national or international payment circuits through which online payments of the products purchased through the Website are made
- companies, consultants or professionals in charge of the installation, to companies, consultants or professionals in charge of the installation, maintenance, updating and, in general, of the management of hardware and software of the owner of the treatment or of which the latter uses for the provision of its services
- to external companies in charge of sending advertising communications on behalf of the owner of the treatment
- to employees and / or collaborators of the owner of the treatment
- to the company responsible for the execution of customer care
- to subjects who manage online payment transactions
- to all those public and / or private subjects, physical and/or juridical persons (legal, administrative and fiscal consulting firms, Judicial Offices, Chambers of Commerce, Chambers and Offices of Labour, etc.).
The data concerning you will not be disclosed, except in anonymous and aggregate form, for statistical purposes or research.
Art. 4. Holder of the Treatment
The Holder of the Treatment of personal data can be contacted by email at firstname.lastname@example.org
Art. 5. Storage of personal data
The user's data will be stored only for the time necessary to ensure the proper provision of services offered and in any case within the terms provided by law or by the provisions of the Guarantor for the Protection of Personal Data. In case of closure of the account of the Website on the user's initiative, the data contained therein will be kept for administrative purposes for a period not exceeding 90 days, without prejudice to any specific legal obligations on the storage of accounting documents or for public security purposes. In any case, it is understood that personal data will be stored and processed for marketing and profiling purposes for the period of time allowed by law and by the requirements of the Guarantor for the Protection of Personal Data. At the end of this period, the Data Controller may ask the user to renew his/her consent to the processing of his/her data for such purposes or render them anonymous and store them only for statistical or historical purposes.
Art. 6. Transfer of personal data to third countries
The Data Controller will transfer your personal data to Canada. With regard to this country, the European Commission has determined that the level of protection offered in terms of personal data protection is adequate and that, therefore, it is possible to transfer personal data there.
The Data Controller will also transfer your personal data to the following third countries: Ireland, U.S.A.. With regard to these countries, the European Commission has not determined that the level of protection offered in terms of personal data protection is adequate. Therefore, you acknowledge that the transfer of personal data presents risks due to the lack of an adequacy decision by the European Commission and of adequate safeguards. Therefore, you acknowledge and take note that the transfer may in any case take place pursuant to Article 49 of the GDPR as the transfer of your personal data may be necessary (i) for the performance of a contract concluded with the Data Controller or the performance of pre-contractual measures taken at your request; (ii) for the conclusion or performance of a contract entered into between the Data Controller and another natural or legal person in your favor;
Art. 7. Transfer subject to adequate safeguards
Your personal data provided to the Data Controller through the Site may be transferred to one or more third countries as the Data Controller has provided adequate safeguards to that effect.
With respect to the transfer of your personal data to third countries you have enforceable rights and effective remedies.
The adequate safeguards that have been provided consist of binding corporate rules in accordance with Article 47 of the Privacy Regulation, standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93, paragraph II, of the Privacy Regulation.
You may obtain a copy of your personal data by contacting the Data Controller).
Art. 8. Rights of the interested party
According to art. 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:
- request from the Data Controller access to your personal data and the rectification or cancellation thereof or the limitation of the processing that concerns you or to object to their processing, in addition to the right to data portability
- revoke your consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation
- propose a complaint to a supervisory authority
The above rights may be exercised by request made without formality to the Data Controller at the contacts indicated above.
Art. 9. Modifications
The Data Controller reserves the right to make changes to this policy at any time, giving appropriate publicity to users of the Site and ensuring in any case an adequate and similar protection of personal data. In order to view any changes, you are invited to regularly consult this information.
A cookie is a text file that a website visited by the user sends to his terminal (computer, mobile device such as smartphones or tablets), where it is stored to be then retransmitted to that site during a subsequent visit to the same site.
Cookies are distinguished by who installs them, whether it is the operator of the website visited (so-called "first-party cookies") or another party (so-called "third-party cookies"), and by the purpose of each cookie. (so-called "technical cookies"), while other cookies allow us to monitor your browsing behaviour in order to send you advertising and/or services that match your preferences (so-called "profiling cookies"). Only profiling cookies require your prior consent to their use. We use all types of cookies, to improve your experience on this site or to convey messages (interesting :D ) advertising.
On your first visit to the Site, you can accept all cookies by clicking OK in the banner/pop-up that appears, otherwise you can click NO, THANKS.
In any case you can express your consent to the release of cookies through your browser settings. Click on the name of the browser you use:
In the case of devices such as smartphones, tablets, etc., we ask that you verify that each browser on each device is adjusted to express your cookie preferences. For third-party cookies, you can also set your preferences through www.youronlinechoices.com (the system operates with reference to the companies that are members of this site).
First-party cookies (sfusobuono. com, sfusobuono.myshopify.com)
_shopify_y, _s, _shopify_fs, _y, _shopify_s > Shopify Analytics, session
cart_currency, cart_sig, cart_ver, cart_ts, cart > necessary for checkout and payment to work, 14d.
secure_customer_sig > required for customer account operation, 20d.
_shopify_m > 1y
_shopify_tw > 14d
_orig_referrer > required, used in association with shopping cart, 14d
_landing_page > landing page analysis, 14d
_shopify_tm > 30 minutes
_shopify_d > session
_tracking_consent > used for consent tracking, 1y
_shopify_sa_t, _shopify_sa_p > analytics related to marketing and traffic origination, session
TawkConnectionTime > used for site chat, session
_fbp > 90d
Third-party cookies (facebook. com, google.com, google.co.uk, tawk.to, automizely.com, avada.io, cdn.shopify. com)
fr > 90d
1P_JAR > 30d
NID > 6286d
CONSENT > 90d
__cfduid > 4y
awxxxx, ss > session
To support the above or in case of future integrations we anticipate the links of the main players for analytics or advertising.
Google LLC. > Information and Opt-out
Criteo SA > http://www. criteo.com/privacy/
Facebook Inc. > https://www.facebook.com/privacy/explanation and https://www.facebook.com/about/privacy
Instagram Inc. > https://www.instagram.com/about/legal/privacy/
Pinterest Inc. > https://policy.pinterest.com/en/privacy-policy
The purpose and use of third-party cookies are determined by these third parties.
The data collected by the cookies issued by the site may be disclosed to persons, including residents of foreign countries, for purposes related to those described.
For any doubt