OWNER OF DATA PROCESSING
The Data Controller is La Regina di San Marzano di Antonio Romano SpA (hereinafter referred to as La Regina or the Data Controller), with registered office and operational headquarters at Via Nuova S. Marzano – 14 84018 Scafati SA – Tel. 081 859 0515- P. IVA 02946630650
Source and purpose of treatment
The personal data in our archives are collected from the data subject and are processed for the execution of contracts for commercial purposes, the use by users of services and functions on the Site, the management of requests and reports from its users, the sending of newsletters, the management of applications received through the Site, etc.. Personal data are processed both in paper and electronic form and entered into the company’s information system in full compliance with EU Regulation 2016/679, including security and confidentiality profiles and inspired by the principles of fairness and lawfulness of processing. La Regina also processes such data in order to respond to specific requests and provide the information, activities and/or services requested, as well as to comply with administrative and other regulations that are mandatory under current national law or by virtue of decisions of the European Union and stored for the time imposed by such regulations.
MODE OF TREATMENT
Personal data are processed by the Data Controller using mainly electronic methods and are stored within the company’s own management system. Appropriate security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.
To communicate and respond to users in relation to the above activities, the Controller uses the contact details provided by the user.
No decision-making process based solely on automated processing of data subjects’ data is applied.
JURISDICTIONAL BASIS
Data are processed on the basis of the performance of a contract to which the data subject is a party, or of consent given, or on other equivalent mechanisms permitted by law, such as, among others, the “legitimate interest” (Article 6(1)(f) GDPR and recital C47, GDPR).
In particular, La Regina’s legitimate interest consists in maintaining the relationship voluntarily established by the user and informing him/her of new activities, new products, new services, etc.
RESPONSIBLE FOR DATA PROCESSING.
La Regina has appointed a Data Protection Officer.
The person in charge can be reached via the following contact details:
-
- Postal address La Regina Srl – Via Nuova S. Marzano – 14 84018 Scafati SA
.
- E-mail address info@laregina.com
- Telephone +39 081 859 0515
SUBJECTS ADMITTED TO DATA PROCESSING .
The persons authorised to process data are the persons in charge of La Regina’s internal services, marketing, administration, information systems and data security, personnel management, etc.
The data will also be processed by the external managers in charge of the services related to the above, as well as by third parties, independent data controllers, for purposes instrumental to the management of orders or related administrative activities, and, as far as not indicated herein, required to provide the information to be provided pursuant to Art. 13 GDPR.
DATA TRANSFER
Personal data is managed and stored on servers located within the European Union, on servers owned by the Data Controller and/or third party companies duly appointed as Data Processors. It is in any case understood that the Data Controller, if necessary, will have the right to move the management and/or storage to non-EU countries. In this case the Data Controller assures as of now that the transfer of the data will take place in compliance with the applicable legal provisions, stipulating – if necessary – agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.
DATA STORAGE PERIOD
The personal data provided in the context of all the activities mentioned above will be kept for the period necessary to process the files and requests and for the periods imposed by laws, regulations or Community legislation, especially in administrative and fiscal matters.
Furthermore, for all other purposes not specifically regulated (job requests, collaboration, etc.), the data are kept in our archives for the period necessary to maintain the established relationship, but in any case for a period not exceeding one year. Obviously, this period of conservation will be interrupted when the client expresses the wish not to have any further relationship and/or information from La Regina, communicating this in the manner explained below.
Then, only if deemed necessary, the data will be anonymised for statistical purposes and then destroyed, unless otherwise ordered by supervisory authorities, law enforcement agencies and the judiciary. It may, therefore, be retained for longer periods in cases of litigation, for the purpose of defending or enforcing a right in court, either by the Data Controller or by the data subject.
RIGHTS OF THE INTERESTED PARTY
Pursuant to Articles 15-22 of GDPR 2016/679, by writing to the Data Controller at the postal address La Regina Srl – Via Nuova S. Marzano – 14 84018 Scafati SA or at the e-mail address info@laregina.com, the data subject may exercise with reference to their personal data the rights of: access, rectification, portability, revocation of consent, cancellation and oblivion, restriction of processing, opposition to processing for legitimate reasons. At any time, the data subject may request a complete and updated list of the data processors and third parties to whom the personal data may be communicated.
The data subject has the right to lodge a complaint with the Supervisory Authority, which in Italy is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
Details of the processing of Personal Data
Personal Data are collected for the following purposes and using the following services:
-
- Hosting and back-end infrastructure
The function of these services is to host data and files that enable La Regina to function, allow for their distribution and provide a ready-to-use infrastructure to deliver specific La Regina functionalities.
Some of these services operate through servers located in different geographic locations, making it difficult to determine the exact location where Personal Data is stored.
Aruba Business ( Aruba Business S.r.l. )
Aruba Business is a hosting service provided by Aruba Business S.r.l..
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: Italy (Milan) – Privacy Policy
- Hosting and back-end infrastructure
.
-
- Interaction with social networks and external platforms
This type of service allows you to interact with social networks, or other external platforms, directly from the pages of La Regina.
Interactions and information acquired by La Regina are in any case subject to the User’s privacy settings for each social network.
If a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages where it is installed.
+1 button and Google+ social widgets (Google Inc.)
The +1 button and Google+ social widgets are services for interaction with the Google+ social network, provided by Google Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Privacy Policy.
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook “Like” button and social widgets are services for interaction with the Facebook social network, provided by Facebook, Inc.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Privacy Policy.
Tweet button and Twitter social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are services for interaction with the social network Twitter, provided by Twitter, Inc.
Personal data collected: Cookies and Usage data.
Place of processing : USA – Privacy Policy
- Interaction with social networks and external platforms
.
-
- Interaction with data collection platforms and other third partiesThis type of service allows Users to interact with data collection platforms or other services directly from the pages of this website in order to save and reuse data.
If one of these services is installed, it is possible that, even if Users do not use the service, it will collect Usage Data relating to the pages where it is installed.
MailChimpwidget (The Rocket Science Group, LLC.).
The MailChimp widget allows you to interact with the MailChimp email address management and messaging service provided by The Rocket Science Group LLC.
Personal data collected: surname, email, first name and phone number.
Place of processing: United States – Privacy Policy.Privacy Shield adherent.
- Interaction with data collection platforms and other third partiesThis type of service allows Users to interact with data collection platforms or other services directly from the pages of this website in order to save and reuse data.
.
-
- Optimisation and distribution of traffic.
This type of service allows this Application to distribute its content via servers located throughout the territory and to optimise its performance.
The Personal Data processed depends on the characteristics and implementation mode of these services, which by their nature filter communications between this Application and the User’s browser.
Given the distributed nature of this system, it is difficult to determine the places to which content is transferred, which may contain Personal Data of the User.
CloudFlare(Cloudflare)
CloudFlare is a traffic optimisation and distribution service provided by CloudFlare Inc.
The way CloudFlare is integrated means that it filters all the traffic of this Application, i.e., communications between this Application and the User’s browser, also allowing the collection of statistical data on it.
Personal Data collected: Cookies and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
- Optimisation and distribution of traffic.
.
Advertising
These types of services allow the use of User Data for the purpose of commercial communication in various forms of advertising, such as banners, videos, etc. This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below.
-
- Statistics
The services contained in this section allow the Data Controller to monitor and analyse traffic data. La Regina uses this service in order to perform aggregate analysis on its Users in an anonymous form and, thus, improve the performance of the La Regina website.
Google Analytics (Google Inc.).
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google.
Google may use Personal Data to contextualise and personalise ads in its advertising network.
Personal data collected: Cookies and Usage data.
Place of processing: United States – Privacy Policy– Opt Out. Party to the Privacy Shield.
- Statistics
.
-
- Google Analytics with anonymised IP (Google Inc.).
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Application, compile reports and share them with other services developed by Google.
Google may use Personal Data to contextualise and personalise ads in its advertising network.
This Google Analytics integration anonymizes your IP address. The anonymisation works by shortening the IP address of the Users within the borders of the member states of the European Union or other countries which are party to the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.
Personal data collected: Cookies and Usage data.
Place of processing: United States – Privacy Policy– Opt Out. Party to the Privacy Shield.
- Google Analytics with anonymised IP (Google Inc.).
.
-
- Contact management and message sending.
This type of service makes it possible to manage a database of email contacts, telephone contacts or contacts of any other type used to communicate with the User.
These services may also allow the collection of data relating to the date and time of the User’s viewing of messages, as well as the User’s interaction with them, such as information on clicks on links in messages.
MailChimp(The Rocket Science Group, LLC.).
MailChimp is an address management and email messaging service provided by The Rocket Science Group, LLC.
Personal data collected: First name, Last name, email address.
Place of processing: United States – Privacy Policy.Privacy Shield adherent
- Contact management and message sending.
.
-
- Viewing content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of ROSSI WEB MEDIA and to interact with them.
If such a service is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages on which it is installed.
YouTube video widget (Google Inc.)
YouTube is a video content display service operated by Google Inc. that allows La Regina to integrate such content into its pages.
Personal data collected: Cookies and Usage data.
Place of processing : USA – Privacy Policy.
Instagram widget (Instagram, Inc.)
Instagram is an image display service operated by Instagram, Inc. that allows La Regina to integrate such content into its pages.
Personal data collected: Cookies and Usage data.
Place of processing : USA – Privacy Policy.
Google Maps widget (Google Inc.)
Google Maps is a map display service operated by Google Inc. that allows La Regina to integrate such content into its pages.
Personal data collected: Cookies and Usage data.
Place of processing : USA – Privacy Policy
- Viewing content from external platforms
.
-
- Interaction with live chat platformsThis type of service allows the User to interact with live chat platforms, managed by third parties, directly from the pages of this Application. This allows the User to contact the support service of this Application or this Application to contact the User while he is browsing its pages.
If a service for interacting with live chat platforms is installed, it is possible that, even if Users do not use the service, it will collect Usage Data relating to the pages where it is installed. In addition, live chat conversations may be recorded.
Smartsupp (Smartsupp.com, s.r.o.).
The Smartsupp Widget is a service for interaction with the Smartsupp live chat and session recording platform, provided by Smartsupp.com, s.r.o.
Personal Data collected: Cookies, Data communicated during the use of the service, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Czech Republic – Privacy Policy.
- Interaction with live chat platformsThis type of service allows the User to interact with live chat platforms, managed by third parties, directly from the pages of this Application. This allows the User to contact the support service of this Application or this Application to contact the User while he is browsing its pages.
.
-
- Payment management
The payment management services allow this Application to process payments by credit card, bank transfer or other means. The data used for payment are acquired directly by the operator of the payment service requested without being processed in any way by this Application.
Some of these services may also allow for scheduled messages to be sent to the User, such as emails containing invoices or payment notifications.
PayPal(Paypal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Privacy Policy.
Stripe(Stripe Inc.)
Stripe is a payment service provided by Stripe Inc.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: USA – Privacy Policy
- Payment management
.
Further information on Personal Data
Sharing functionality via social networks.
On La Regina there is a sharing function through social networks. This feature allows Users to send invitations, news or other types of communication and/or share content present or actions taken by the User (e.g. comment sharing etc.) on the Site in use, through the use of social networks external to La Regina (e.g. Facebook, Twitter, Google+ etc.). In such cases, the User must be aware that any Personal Data provided may also be processed by third party owners of such social networks according to their privacy policy and without any possibility for the Controller to exercise any kind of control or influence on such subsequent processing methods.
The User is invited to read and accept the privacy policies of these third parties, which are available for consultation at the links provided in the section dedicated to each of these services within this document.
Online sale of goods and services
The Personal Data collected is used to provide services to the User or to sell products, including payment and delivery. The Personal Data collected to finalise the payment may be that relating to the credit card, the bank account used for the transfer or other payment instruments provided. The Payment Data collected by this Application depend on the payment system used.
Additional rights of users.
We never sell or rent your Data to third parties. The only uses of Data are those set out in this policy. Users are the sole owners of their Data and may request modification or deletion at any time.