Privacy Policy
Pursuant to articles 13 and 14 of EU Regulation 2016/679
Data last updated: 05/05/2023
With this document, Archi Acustica di Stefano Ughi, with registered office in San Giovanni in Persiceto (BO), Italy, via Gutenberg 4, VAT number 09008900152, owner of the website www.stefanoughi.com (hereinafter, “Site”), informs the interested party (User) that his personal data, relating to navigation within the Site itself, with direct access from the homepage or through subpages, as well as relating to the use of the services, goods or products offered, will be treated with the utmost care and with tools capable of guaranteeing appropriate safety. It is specified that this information – in compliance with the provisions of articles 13 and 14 of EU Regulation 2016/679 on the protection of personal data (also “General Data Protection Regulation” – GDPR) and by Legislative Decree 196/2003 ( “Code regarding the protection of personal data”) – is not to be considered valid for other and external websites that may be consulted via the links present therein.
1. DATA PROCESSING OWNER.
The data controller is Archi Acustica di Stefano Ughi, with registered office in San Giovanni in Persiceto (BO), Italy, via Gutenberg 4, VAT number 09008900152, in the person of the data controller. The owner can also be contacted at the e-mail address info@stefanoughi.com.
2. PURPOSE OF DATA PROCESSING.
The processing of User data is aimed at:
- allow correct navigation on this Site;
- conclude and execute the sale of goods offered on the Site;
- allow registration on the Site and the use of services reserved for registered users;
- perform aggregated and anonymous statistical analysis of navigation and users;
- manage requests made by e-mail, telephone, or via the form on the “Contact” page;
- send promotional information on the services provided and on the products sold by the data controller, via e-mail, by subscribing to the newsletter;
- comply with all the obligations incumbent on the data controller established by current legislation;
- defend a right in court or before authorities exercising judicial functions.
3. LEGAL BASIS OF DATA PROCESSING.
The processing of your personal data is lawful, as:
- necessary for the execution of the contract of which you are a part, or for the execution of pre-contractual measures adopted at your request, to: allow correct navigation on the Site; conclude and execute the sale of goods offered on the Site; allow registration on the Site and the use of services reserved for registered users; manage requests made by e-mail, telephone or via the form on the “Contact” page; send promotional information on the services provided and on the products sold by the data controller, via e-mail, by subscribing to the newsletter;
- necessary for compliance with a legal obligation to which the data controller is subject;
- necessary for the pursuit of the legitimate interest of the data controller, for carrying out aggregate and anonymous statistical analyzes of navigation and users, aimed at a possible improvement of the Site and for understanding how the data controller is sought on the Internet, and for the defense of one’s right in court or before judicial authorities.
4. TYPE AND SOURCES OF THE DATA PROCESSED.
Archi Acustica di Stefano Ughi does not process personal data relating to persons under the age of 18, with the exception of any personal data voluntarily provided by the adult User on third party recipients of goods and products purchased on the Site, in relation to which the User exempts Archi Acustica di Stefano Ughi from any liability. By accessing the Site, registering a user account, using the services offered and/or purchasing goods, the User expressly declares that he is 18 years of age.
4.1. Data deriving from the User’s navigation.
These data, through the normal functioning of the Site, are implicitly acquired and transmitted in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but, by their very nature, through processing with data held by third parties, could allow Users to be identified.
This category of data includes the IP addresses or domain names of the computers used by Users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the User’s IT environment.
These data are used for the sole purpose of obtaining anonymous and aggregate statistical information on the use of the Site and to check its correct functioning, and reside permanently on responsible third-party servers (hosting providers). The data could also be used to ascertain responsibility in the event of any harmful unlawful actions carried out on or through the Site.
These data processing and association activities are, however, never carried out by the data controller, they are used only to check correct functioning and are automatically canceled after processing.
4.2. Cookies.
For information on the use of cookies within the Site, visit the appropriate Cookie Policy.
4.3. Data provided voluntarily by the User.
These data are provided by the User, during the voluntary interaction with the Site, in order to use the services offered on the Site, purchase the products sold on the Site, request information, receive assistance or for any personal purpose. In particular, these are:
- personal data necessary to register the User’s personal profile: name and surname, date of birth, e-mail address; optional personal data: gender;
- personal data necessary to conclude and execute the sale of goods on the Site: shipping and billing address, telephone, payment data, in addition to the data necessary to register the User’s personal profile;
- personal data of third parties, if provided voluntarily by the User who decides, for example, to purchase a good to be delivered to a friend, or to make a gift; in such cases, Archi Acustica di Stefano Ughi will deliver the privacy information to this third party at the time of the first communication;
- personal data provided voluntarily in case of contact by e-mail, telephone and/or via the “Contact” form to request information, receive assistance or for any personal purpose as well as request subscription to the newsletter.
5. DATA PROCESSING METHODS.
The processing of your personal data is carried out, with methods strictly necessary to cope with the purposes indicated above, by means of some or all of the operations indicated in art. 4, no. 2) of EU Regulation 2016/679: collection, registration, organization, structuring, conservation, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The operations can be carried out with or without the aid of electronic, telematic or in any case automated tools, in any case in compliance with the provisions of art. 32 of EU Regulation 2016/679.
6. PROVISION OF DATA.
The provision of personal data by the User, although not a legal obligation, is a necessary requirement for:
- correct navigation on this Site;
- purchase goods offered on the Site;
- register on the Site and use the services reserved for registered users;
- manage requests made by e-mail, telephone and/or via the form on the “Contact” page;
- send promotional information on the services provided and on the products sold by the data controller, via e-mail, by subscribing to the newsletter;
therefore, failure to provide data will make it impossible to fulfill the aforementioned purposes. In any case, by providing the data controller with your personal data for any of the purposes listed above, the data controller will be able to process such data to fulfill legal obligations and pursue its legitimate interests in carrying out aggregate and anonymous statistical analysis of navigation and users and for the protection of one’s own right in court or before judicial authorities.
7. DATA RETENTION.
The User’s personal data will be processed and stored for the entire period necessary for the fulfillment of the aforementioned purposes and, in particular:
- the data collected to conclude and execute contracts for the purchase of goods on the Site are kept until the conclusion of the contract and the administrative-accounting formalities, while the billing data are kept for ten years from the invoice date;
- the data relating to the payment of commercial transactions relating to the purchase of goods on the Site are kept until the certification of the payment and the conclusion of the related administrative-accounting formalities following the expiry of the right of withdrawal and the terms applied for disputing the payment;
- the data collected for the registration of the user account are kept until the cancellation of this account;
- the data collected for the use of any services offered on the Site are kept until the termination or conclusion of the use of the service;
- the data collected to manage requests made by e-mail, telephone and/or through the form on the “Contact” page, are kept until the request is exhausted;
- the data collected by subscribing to the newsletter will be kept until you object to the related processing, or decide to unsubscribe from the newsletter itself, and in any case for no more than 2 (two) years from your subscription;
- the data collected to allow correct navigation on the Site are stored according to the duration indicated in the specific Cookie Policy, while the data collected for carrying out aggregate statistical analyzes are completely anonymous;
- the data collected for the fulfillment of legal obligations are kept for the necessary time required by the provisions of the law or regulation;
- the data collected for the defense of rights in court are kept until the statute of limitations of the right to be asserted or, if a judicial proceeding is initiated, until the definitive conclusion of the same.
8. DATA COMMUNICATION.
The User’s personal data may be communicated to, or become aware of, for the purposes listed above and to provide, improve, protect and promote our services:
- persons authorized to process, i.e. collaborators and/or employees of the data controller;
- data processors and related additional managers and authorized subjects, such as, by way of example and not limited to: accountants, consultants, service providers, IT service providers or assistance to them, and related technical personnel in charge, any collaborators, persons in charge of occasional maintenance operations, all adequately trained in the protection of confidentiality;
- couriers, carriers and freight forwarders;
- judicial or administrative authorities, for the fulfillment of legal obligations;
- subjects who process data in execution of specific legal obligations.
9. PROFILING.
The User’s personal data is not subject to any fully automated decision-making process, including profiling.
10. TRANSFER OF DATA TO THIRD COUNTRIES WITH RESPECT TO THE EU.
Personal data will not be transferred to third countries with respect to the European Union or the European Economic Area.
11. RIGHTS OF THE INTERESTED PARTY.
Pursuant to articles 15-18 and 20-21 of EU Regulation 2016/679, the User has the right to obtain:
a. confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
b. the indication:
- the origin of the personal data;
- of the purposes and methods of the treatment;
- of the logic applied in case of treatment carried out with the aid of electronic instruments;
- of the identification details of the owner and any managers;
- of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents;
c. updating, rectification or, when interested, integration of data;
d. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
e. the attestation that the operations referred to in letters c) and d) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.
The User has the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
The User has the right to revoke, at any time, the consent given, in relation to the processing activities for which it represents the legal basis, without prejudice to the lawfulness of the processing based on the consent given before the revocation. The User has the right to data portability, i.e. to receive personal data concerning him in a structured, commonly used and automatically readable format and has the right to transmit such data to another data controller without impediments. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Personal Data Protection Authority: www.garanteprivacy.it). The User can exercise his rights with a written request sent to the data controller, at the addresses indicated above.
12. CHANGES TO THE PRIVACY POLICY.
Archi Acustica di Stefano Ughi reserves the right to modify, update, add or remove parts of this Privacy Policy at its own discretion and at any time. The User concerned is required to periodically check for any changes published on the Site.