PRIVACY POLICY DEL SITO WEB
Dear User, in accordance with Articles 12 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, ‘Regulation’ or ‘GDPR’), and in general in compliance with the principle of transparency required by the Regulation itself, we are hereby providing the following information on the processing of personal data (i.e. any information relating to an identified or identifiable natural person: ‘Data Subject’) carried out in connection with the navigation of the website Translated with DeepL.com (free version) “www.lamystique.it ” (’Site") and related interaction by the User (please note that this information does not concern other websites that may be consulted by the user through links present on the Site).
1. DATA CONTROLLER
The Data Controller (i.e., the entity that determines the purposes and means of the processing of personal data, ‘Data Controller’ or ‘Owner’) is J.F. Amonn Srl, with registered office in Via Altmann 12, 39100, Bolzano, Tel +39 0437 984 11, e-mail: info@amonn1802.com. For contacts specifically related to the protection of personal data, we indicate in particular the e-mail address info@amonn1802.com to which you are kindly requested to send any requests.2. NAVIGATION DATA OF THE USER
The computer systems and programs used to operate the Site collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of the computers used by users who connect to the Site, the URI - Uniform Resource Identifier - addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server - successful, error, etc.) and other parameters relating to the user's operating system and computer environment. - and other parameters relating to the user's operating system and computer environment). Although this information is not collected in order to be associated with identified interested parties, by its nature it could, through processing and association with data held by third parties, allow users to be identified. Such data are used only for the purpose of obtaining statistical information not associated with any user identification data on the use of the Site and to check the correct functioning of the same and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site. The legal basis of the processing is therefore the legitimate interest in the operation and security of the Site.3. COOKIES
The Site uses cookies for which please refer to the specific information notice.Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 paragraph 1, letter f of DSGVO. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.
4. DATA PROVIDED VOLUNTARILY BY THE USER VIA THE SITE, IN THE CONTEXT OF CONTACTS WITH THE OWNER
No provision of personal data by the user is required in order to consult the site. However, any contact with the Data Controller, or the optional, explicit and spontaneous sending of messages, by electronic or traditional mail, to the addresses of the Data Controller indicated on the site, also in the ‘CONTACTS’ section, entails the subsequent acquisition of the address, including e-mail or telephone number (in the case of contact via Whatsapp), of the sender, necessary for responding to requests, as well as any other personal data included in the relative communications.This data will be used solely for the purpose of responding to the user's request and may be disclosed to third parties only if necessary for this purpose.The processing of the data for these purposes does not require the consent of the data subject, since the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at his/her request (Art. 6, paragraph 1, letter b) of the Regulations), as well as, where applicable, to comply with a legal obligation (Art. 6, paragraph 1, letter a) of the Regulations).
If, however, the person concerned is a legal entity, this person consents - by sending the contact request - to the processing of further data (such as profession and address) for the storage of these data as a potential customer and the possible sending of communications dedicated to their profession and geographical area of activity.
Personal data will be processed by personnel instructed and authorised by the Data Controller using procedures, technical and IT tools suitable for protecting the confidentiality and security of such data.
Such personal data shall be stored for the time strictly necessary to provide the Data Subject with answers to his/her requests, without prejudice to further storage obligations provided for by law, or until consent is revoked. Personal data will not be disseminated.
5. NEWSLETTER
The user, if he/she so desires, may subscribe to our newsletter, through the appropriate section of the Site, indicating his/her e-mail address in order to receive periodic information on the company's products and services; in this case, the processing of personal data for this purpose shall take place on the basis of the consent of the interested party, which he/she may revoke at any time. Please note that consent (with the right to revoke it) is also a necessary legal basis in relation to legal persons. The data will be processed for this purpose until the consent is revoked (deletion from the newsletter) and in any case no later than 48 months after the consent has been given or renewed.6. RESERVED AREA
Registration to the Reserved Area, with collection of contact data in order to access reserved areas of the site. The processing of the data shall last as long as the registration in the reserved area lasts, except for the need to protect against abuse.7. E-COMMERCE AREA
The user, if he or she so wishes, may access the Purchasing area after registering the required personal data and signing the contract.By registering on the site, it will be possible to purchase products via the e SHOP section. In this case, the object of processing is the following data, all belonging to the category of common data
- surname, first name, date and place of birth, residence;
- tax code and/or VAT number;
- telephone number/email address;
- destination address;
- description of the order and product purchased.
The processed data are provided by the customer or are taken from public registers (such as CCIAA or registry office).
The data are processed for purposes strictly related to the management of the pre-contractual and contractual relationship, including administrative, accounting and tax formalities and fulfilments (e.g. acquisition of information prior to the conclusion of the contract; performance of activities on the basis of the obligations deriving from the concluded contract) and the management of litigation (contractual purposes).
There is no obligation to provide data at the pre-contractual stage, but failure to do so will make it impossible to provide an estimate or conclude the contract; once the contract has been concluded, the provision of further necessary data, or the updating of data already provided, is compulsory for all that is required by legal and contractual obligations and, therefore, any refusal to provide such data in whole or in part may make it impossible for the Controller to execute the contract and could in any case constitute a breach of contract or violation of the law (if such data are required for the fulfilment of regulatory obligations or provisions of the authorities) on the part of the supplier. The legal basis for the processing in question is the circumstance that it is necessary: for the performance of the contract to which the Data Subject is a party or of pre-contractual measures taken at his or her request; for the fulfilment of a legal obligation to which the Data Controller is subject.
The data, under the conditions set out below, may also be processed for marketing purposes: the Controller may transmit, through the e-mail details provided in the context of a previous purchase, communications relating to the direct sale of products or services similar to those already purchased on that occasion, which is permitted unless the recipient, adequately informed, does not refuse such use, either initially or on the occasion of subsequent communications; in the latter case the legal basis of the processing is the legitimate interest of the Controller in marketing activities.
As far as contractual purposes are concerned, the data will be kept for the entire duration of the contractual relationship, and, after the termination of the relationship - limited to the data necessary at that point - for the extinction of the obligations contractually undertaken and for the fulfilment of all possible legal obligations and for the protection requirements, including contractual ones, connected with or arising from it. As far as marketing purposes are concerned, the processing may last until the addressee objects, but in any case no longer than 36 months after the last purchase.
Personal data shall be processed by personnel instructed and authorised by the Data Controller with procedures, technical and IT tools suitable to protect the confidentiality and security of the same.
8. CAREER AREA
The career area of the site allows those interested to apply for possible job positions. The processing of personal data is carried out as part of the application management process aimed at identifying persons to be included in the company's workforce and assessing whether they are in line with the company's needs, in order to then proceed with any contact for selection interviews. The following categories of data may be processed for the needs of the application management process through forms on the dedicated website: First name, last name, residential address, e-mail, telephone, Curriculum Vitae, free information left by the candidate in the message space. The provision of the requested data is optional, however, failure to provide such data will result in the interested party being unable to participate in the personnel selection process implemented by the Data Controller. The processing of the data finds its legal basis in the fact that it is necessary in order to carry out the pre-contractual measures within the scope of the selection process in which the Interested Party participates by spontaneously sending his information. At the first useful contact, the Interested Party shall be provided with specific information on the processing of data relating to personnel selection.9. METHODS OF DATA PROCESSING AND COMMUNICATION TO THIRD PARTIES
The data are not subject to dissemination and may be communicated to collaborators, suppliers of the Controller, as part of their duties and/or contractual obligations relating to the execution of the contractual relationship with the Interested Parties; the Owner's suppliers include, by way of example, banking and credit institutions, insurance companies, legal consultants; software suppliers and related assistance, shipping and delivery companies; as well as the financial administration and other entities for which mandatory communications are envisaged. The processing will be carried out- through the use of manual and automated systems
- by persons or categories of persons authorised to perform the relevant tasks;
- with the use of appropriate measures to guarantee the confidentiality of the data and prevent access to them by unauthorised third parties.
Without prejudice to what is set out in the specific sections above, within the scope of its activity and for the purposes indicated above, the Data Controller may avail itself of services provided by third parties who operate either as autonomous data controllers or on behalf of and in accordance with the instructions of the same, as data processors pursuant to Article 28 of the Regulation. These are subjects that provide the Data Controller with processing or instrumental services. In general, the Data Subject may request a complete and updated list of the subjects appointed as data processors by contacting one of the Controller's contacts. The data may then be accessed by all subjects whose right to access such data is recognised by virtue of regulatory provisions.
10. TRANSFER OF DATA ABROAD
There is no intention to transfer personal data to countries that are not members of the European Union or to International Organisations. If, for specific technical reasons, the controller transfers to third countries in order to ensure an adequate level of data protection, this is done in accordance with the following conditions: transfer on the basis of an adequacy decision, transfer subject to adequate safeguards, binding corporate rules or application of derogations provided for specific situations.11. RIGHTS OF THE DATA SUBJECT
The GDPR gives the Data Subject the right to exercise the following rights with regard to personal data concerning him/her (the summary description is indicative, for the full enunciation of the rights, including their limitations, please refer to the Regulation, and in particular Articles 15-22):- Access to personal data (the Data Subject has the right to obtain, free of charge, information about the personal data concerning him/her held by the Controller and the processing thereof, as well as to obtain a copy of such data in accessible format);
- Rectification of personal data (upon indication by the Data Subject, correction or integration of personal data -not the expression of evaluative elements- that are incorrect or inaccurate, even if they have become such because they have not been updated)
- Erasure of personal data (right to be forgotten) (e.g. data are no longer necessary in relation to the purposes for which they were collected or processed; they have been processed unlawfully; they must be erased in order to comply with a legal obligation; the data subject has withdrawn consent and there is no other legal basis for the processing; the data subject objects, if the conditions are met, to the processing)
- Limitation of processing (in certain cases -contesting the accuracy of the data, during the time necessary for verification; contesting the lawfulness of processing with opposition to deletion; need for use for the rights of defence of the data subject, while they are no longer useful for processing purposes; if there is an objection to the processing, while the necessary verifications are carried out - the data will be retained in such a way that they can be restored if necessary, but, in the meantime, they cannot be consulted by the Controller except in connection with the verification of the validity of the request for restriction made by the Data Subject, or with the consent of the Data Subject or for the establishment, exercise or defence of a right in court or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State);
- Objection in whole or in part, on grounds relating to the particular situation of the Data Subject, to the processing carried out on the basis of legitimate interest (and the Data Subject may in any event object to the processing of his/her personal data for direct marketing purposes, including profiling insofar as it is related to such direct marketing)
- Portability of the data (where the processing is based on consent or on a contract and is carried out by automated means, at his/her request, the Data Subject will receive the personal data concerning him/her in a structured, commonly used and machine-readable format and will be able to transmit them to another Data Controller, without hindrance from the Data Controller to whom he/she provided them and, if technically feasible, he/she will be able to obtain that said transmission be carried out directly by the latter)
- Withdrawal of consent (where the processing is carried out on the basis of consent given by the Data Subject, he/she may withdraw his/her consent at any time, without prejudice to the lawfulness of the processing carried out before the withdrawal);
- Lodging a complaint with the supervisory authority (Garante per la protezione dei dati personali - Data Protection Authority). The Garante per la protezione dei dati personali can be contacted via the contact details indicated on the Authority's website ‘www.garanteprivacy.it’).
12. EXERCISE OF RIGHTS
The Garante per la protezione dei dati personali can be contacted via the contact details indicated on the Authority's website (www.garanteprivacy.it). The Data Subject's other rights may be exercised by sending a request to the following e-mail address: info@amonn1802.com or to the other contacts of the Data Controller indicated above. The Data Controller may amend or update its content in whole or in part, also taking into account any changes in the legislation on the protection of personal data. Interested parties are therefore invited to consult this page regularly, so as to be informed of the processing processes.