LISANZA Maglificio Lisanzese S.p.A., with registered office in via Angera n. 60 21018 Sesto Calende (VA) (hereinafter also “Data Controller”), owner of the website https://www.lisanza.it (hereinafter, the “Website”) as Data Controller of the Website users (hereinafter, the “Users”) hereby provides the privacy notice pursuant to art. 13 of Regulation 2016/679/EU dated 27 April 2016 (hereinafter, “Regulation”).
This Website and any services offered through the Website are reserved for individuals who have reached the age of eighteen. The Data Controller does not therefore collect any personal data relating to persons under 18 years of age. Upon request of Users, the Data Controller shall promptly erase all personal data collected involuntarily and relating to persons under 18 years of age.
The Data Controller takes into maximum consideration the right to privacy and the protection of the personal data of its Users. For any information in relation to this privacy notice, Users may contact the Data Controller at any time, using the following methods:
By sending a registered letter with recorded delivery to the registered office of the Data Controller: Via Angera 60 21018 Sesto Calende (VA)
By sending an email to the address firstname.lastname@example.org
By sending a fax to +39 0331977348
1. Purpose of processing
The personal data of the Users will be lawfully used by the Data Controller for the following processing purposes:
a) To execute the User’s order: the personal data are collected and processed by the Data Controller in order to communicate the progress and delivery of the order.
b) Marketing Purposes: by way of example, the sending – using automated contact means (such as email and txt) – of commercial promotional communications or information relating to services/products offered by the Company or notification of company events, as well as the carrying out of market surveys and statistical analyses. Therefore, if the user has explicitly given his/her consent on the website or during the conclusion of the order, he/she will receive from the Data Controller a periodic newsletter containing information, updates and news, occasionally also customized, according to Website purchase preferences.
In case of consent, the User may at any time revoke same, making a request in this sense to the Data Controller as indicated in the following paragraph. The User can also easily object to the sending of further newsletters by clicking on the appropriate link for the revocation of consent, which is present in each email containing the newsletter.
c) Administrative and accounting purposes, i.e. activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities required for the fulfilment of contractual and pre-contractual obligations.
d) Legal obligations, i.e. to fulfil obligations laid down by law, authorities, regulations or European legislation.
The User’s data collected by the Data Controller for these purposes include: email address, personal data (first name, last name, billing and shipping addresses, if different). No other processing will be carried out by the Data Controller in relation to the personal data of Users. Without prejudice to what is stated elsewhere in this privacy notice, under no circumstances shall the Data Controller make the Users’ personal data accessible to other Users and/or third parties.
OBLIGATION TO PROVIDE DATA
The provision of the data indicated with an asterisk (*) on the registration form or order acquisition form is mandatory to conclude and continue the contract; refusal to provide the above data does not therefore allow registration on the website/newsletter or use of services including the shipment of the order.
2. Data processing methods, storage times and communication
The Data Controller will process the personal data of the Users according to logics strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data.
The personal data of the Website Users will be kept for the time necessary to perform the primary purposes described in the previous paragraph and, unless a request for erasure is sent and after termination of the contract (last order), for a minimum period of 10 years.
The Data Controller’s employees and/or collaborators in charge of managing the Website and the Users’ requests may become acquainted with the Users’ personal data, subject to adequate operating instructions. Such persons, who have been instructed in this sense by the Data Controller pursuant to art. 29 of the Regulation, will process the User’s data solely for the purposes indicated in this notice.
Third parties may also become acquainted with the Users’ personal data that process the personal data on behalf of the Data Controller in their capacity as “External Data Processors”, such as, by way of example, providers of IT and logistical services needed to operate the Website, providers of outsourced or cloud computing services (such as companies offering email dispatch services), professional persons and consultants.
Users have the right to obtain a list of any data processors appointed by the Data Controller, by making a request in this sense to the Data Controller in the ways indicated in paragraph 3 below.
The contact data used for generic marketing purposes shall be kept until revocation of the consent or end of life of the customer, while the data regarding the details of purchases, possibly used for profiled marketing, will not be used and stored for more than 24 months from data collection.
Once the above storage terms have expired, the Data will be destroyed, erased or anonymised, compatibly with technical erasure and backup procedures.
3. Rights of data subjects – Complaint to the Control Authority
By contacting the Data Controller by email at email@example.com or by sending a registered letter with recorded delivery to the registered office of the Data Controller in Via Angera n. 60 21018 Sesto Calende (VA) – Italy, the data subjects may request access to the data concerning them, their erasure, the correction of inaccurate data, the supplementing of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as object to processing, on grounds relating to their own particular situation, in cases of legitimate interest of the data controller.
Furthermore, data subjects shall have the right, where the processing is based on consent or contract and is carried out by automated means, to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to transfer them to another data controller without hindrance.
Data subjects are entitled to withdraw their consent at any time for marketing and/or profiling purposes and to object to the processing of their data for marketing purposes, including profiling related to direct marketing.
Data subjects shall have the right to lodge a complaint with the competent supervisory authority in the Member State where they have their habitual place of residence or employment or in the Member State where the suspected breach has occurred.
The Data Controller is not responsible for updating all the links displayed in this Notice, so whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites to which such link refers.