PRIVACY POLICY
COMMERCIAL PARTNERS
Art. 13 of EU Regulation 2016/679 of 27/04/2016
In accordance with Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as the GDPR (General Data Protection Regulation), Vingi Shoes snc by Grimaldi Gioacchino & Vincenzo, with registered office at Via Dell'Euro 15, 70051 Barletta (BT) Italy, as data controller, hereby informs you as follows:
Data Controller and Data Processor
The data controller is Vingi Shoes snc by Grimaldi Gioacchino & Vincenzo, with registered office at Via Dell'Euro 15, 70051 Barletta (BT) Italy.
Purpose of Data Processing
Subscription to the newsletter involves a series of information and/or updates on products and services offered by the Controller, which may use both automated means without the intervention of the operator (e.g., SMS, fax, MMS, email, etc.) and traditional means (via telephone, mail, etc.).
This processing requires your express consent (Art. 7 of the GDPR). This consent pertains to both the automated communication methods and the traditional methods described above. You will always have the right to easily and free of charge object, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your desire to receive commercial and promotional communications exclusively through traditional contact methods.
Mandatory or Optional Nature of Data Provision and Consequences of Refusal to Provide Personal Data
The data required for the aforementioned purposes must be provided in order to fulfill legal obligations (protection of your data) and/or to provide the requested services. Therefore, your refusal, even partial, to provide such data would make it impossible for the Controller to establish and manage the relationship and to provide the requested service.
Data Processing Methods
The processing of personal data is carried out using operations indicated in Art. 4 No. 2) of the GDPR, for the aforementioned purposes, both in paper and electronic format, using electronic or automated tools, in compliance with current regulations, particularly regarding confidentiality, security, and in accordance with the principles of fairness, lawfulness, transparency, and protection of the rights of the data subject. The processing is carried out directly by the organization of the data controller, by its managers and/or appointees.
Communication and Disclosure
Your personal data may be communicated, within the limits strictly relevant to the obligations, tasks, and purposes described above and in compliance with current regulations, to the following categories of subjects:
Subjects to whom such communication must be made in order to fulfill or demand the fulfillment of specific obligations provided by laws, regulations and/or EU regulations;
Companies belonging to the Controller's Group or parent, subsidiary or affiliated companies within the meaning of Art. 2359 of the Italian Civil Code, which act as data processors or for administrative and accounting purposes (purposes connected with the performance of internal organizational, administrative, financial, and accounting activities, particularly to fulfill contractual and pre-contractual obligations);
External natural and/or legal persons providing services instrumental to the activities of the Controller for the purposes described in the previous point 1. (e.g., call centers, suppliers, consultants, companies, entities, professional studios). These subjects will operate as data processors. Personal data will not be disseminated in any way.
Data Retention Period
Personal data will be retained for the entire duration specified by the contract concluded with the Controller, after which the data will be retained for the time necessary to comply with legal requirements for the retention of administrative documents, after which they will be deleted.
Data Transfer
Personal data is stored on servers located within the European Union. It is understood, however, that the Controller, if necessary, has the right to move servers outside the EU. In this case, the Controller assures in advance that the transfer of data outside the EU will take place in accordance with applicable law, subject to the conclusion of standard contractual clauses provided by the European Commission.
Data Subject Rights
As the data subject, you have the rights under Articles 15 - 22 of the GDPR, specifically:
To obtain confirmation of whether or not personal data concerning you are being processed, even if not yet recorded, and their communication in an intelligible form;
To obtain indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the data controller, data processors and the designated representative pursuant to Art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors or appointees;
To obtain: a) updating, rectification or, when interested, integration of data; b) cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data has been communicated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the protected right;
To object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or traditional marketing methods by telephone and/or paper mail. It should be noted that the data subject's right to object, as outlined in the preceding point b), for direct marketing purposes through automated means extends to traditional methods, and that in any case the data subject has the option to exercise the right to object only in part. Therefore, the data subject can choose to receive only communications through traditional methods or only automated communications, or none of the two communication types. Where applicable, you also have the rights under Articles 16-21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
To exercise the rights under Articles 15 - 22 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you can send a request to our company at the following address:
Vingi Shoes snc by Grimaldi Gioacchino & Vincenzo
Via Dell'Euro 15, 70051 Barletta (BT) Italy
Email: info@vingishoes.com