Privacy policy
Privacy Policy
Gassa d'Amante Milano SRL, data controller - is constantly committed to protecting the online privacy of users who use the application and the site www.gassadamante.com and www.gassadamante.itThis document ( "Information") has been drawn up in order to allow you to understand how your Personal Data will be processed when using the application and to provide you with all the information necessary so that you can express explicit and informed consent to the processing carried out .
In general, the processing of any information or Personal Data that you provide to the Data Controllers through the application, or that will be collected in any other way through the site, will take place according to the internationally recognized principles of lawfulness, correctness, transparency , limitation of purposes and conservation, data minimization, accuracy, integrity and confidentiality and will be aimed at the provision of the services offered on the site itself, the sale of the Products and the activation of an information service with newsletter service.
1. Data controllers
Gassa d'Amante Milano SRL, as identified at the beginning of the Information, are Data Controllers in relation to all Personal Data that are processed through this application.
2. The personal data being processed
Following navigation of the Site, we inform you that the Data Controllers will process your Personal Data, which may consist (also depending on your decisions on how to use the Services) by an identifier such as your name and surname, an identification number, a online identifier or to one or more characteristic elements of your physical, physiological, cultural or social identity capable of making you identified or identifiable (hereinafter only "Personal Data").Among the Personal Data collected by this Application, independently or through third parties, there are also: Cookies, Usage data, Email, Password,. Other Personal Data collected may be indicated in other sections of this privacy policy or through information texts displayed together with the collection of the Data itself. Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application. Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording the relevant preferences for purposes strictly linked to the provision of the service requested by the User.
Failure by the User to provide some Personal Data may prevent this Application from providing its services. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that he or she has the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.
The Personal Data processed through the platform are as follows:
a. Name, contact details and other Personal data
In various sections of the Site, in particular the one relating to the creation of a personal account and the one for subscribing to the news letter, you will be asked to enter information such as Email, Password, name, surname, date of birth, gender.b. Special categories of personal data
Some sections of the Site Platform include free fields in which you can provide the Owners with some information, which may contain Personal Data.Since these fields are free, you may use them to communicate (voluntarily or otherwise) some sensitive categories of Personal Data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the person's health or sexual life or sexual orientation.
The Owners invite you not to send such Personal Data unless strictly necessary.
Indeed, these special categories of Personal Data can only be processed with your explicit consent (manifestable via the flag present in the specific format) and in compliance with the legislation in force at the time.
The Data Controllers therefore underline the importance of expressing your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.
c. Data provided voluntarily by the interested party
As already mentioned above, in some parts of the Site you are allowed to insert text messages or information, visible to the Owners, which may contain Personal Data of other people.With respect to these hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the broadest indemnity on this point with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that should reach the Data Controllers from third parties whose Personal Data has been processed through your use of the Site's functions in violation of the applicable personal data protection regulations.
In any case, if you provide or otherwise process the Personal Data of third parties when using the Site, you hereby guarantee (assuming all related responsibility) that this particular processing hypothesis is based on the consent of such interested third party or on another suitable legal basis that legitimizes the processing of the information in question.
d. Browsing data
The IT systems and software procedures used to operate the platform acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the platform or third parties.
e. Payment management and data
Payment management services allow this Application to process payments via credit card, bank transfer or other instruments. The data used for payment are acquired directly from the manager of the requested payment service.
Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or payment notifications.
The payment services are Multisafepay and PayPal which collect data as specified in their privacy policy.
f. Interaction with social networks and external platforms
These services allow you to interact with social networks, or other external platforms, directly from the Application pages. The interactions and information acquired by this Application are in any case subject to the User's privacy settings relating to each social network. If an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.g. The buttons
Tweet button and Twitter social widgets (Twitter)
The Tweet button and Twitter social widgets are services for interaction with the Twitter social network, provided by Twitter Inc. and the data processed are Cookies and Usage Data. Place of processing: USA - Privacy Policy.Facebook Like button and social widgets (Facebook, Inc.)
The "Like" button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc. The Personal Data collected are Cookies and Usage Data.
Place of processing: USA Privacy Policy.
Google+ +1 button and social widgets (Google)
The +1 button and Google+ social widgets are interaction services with the Google+ social network, provided by Google Inc.Personal data collected are Cookies and Usage Data.
Place of processing: USA Privacy Policy
h. Google Analytics (Google)
Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network.Personal data collected are Cookies and Usage Data.
Place of processing: USA Privacy Policy and Opt Out.
i. Google AdWords Conversion Tracking (Google)
Google AdWords conversion tracking is a statistics service provided by Google, Inc. which connects data from the Google AdWords advertising network with actions performed within this Application.Personal data collected are Cookies and Usage Data.
Place of processing: USA Privacy Policy
l. Viewing content from external platforms
These services allow you to view content hosted on external platforms directly from the pages of this Application and interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.m. Youtube Video Widget (Google)
Youtube is a video content viewing service managed by Google Inc. which allows this Application to integrate such contents within its pages. Personal data collected: Cookies and Usage data.Place of processing: USA Privacy Policy.
n. Vimeo, LLC
Viewing content from external platforms. Vimeo is a video content viewing service managed by Vimeo, LLC which allows this Application to integrate such content within its pages.Personal data collected: Cookies and Usage data.
Place of processing: USA Privacy Policy and Cookie Policy.
3. The purposes of the processing
The Data Controllers will use your Personal Data, collected through the Platform, for the following purposes:- purchase and delivery of products and services: we use your personal data to receive and manage orders, provide products and services; to verify your identity and help you, in case you lose or forget the login/password details of your personal account on the platform; purchase a loyalty card; send you the newsletters you requested as a Service by subscribing; allow you to save your favorite items and provide you with any service you request;
- marketing and remarketing: we use your personal data to show you interest-based advertising in relation to features, products and services that may be of interest to you, to be able to send you email promotions, SMS, push notifications , by telephone, via banner, instant messaging, through the official social media pages of the Data Controllers, relating to products and/or services also referable to third parties;
- soft spam: the processing for this purpose is based on the interest of the Owners in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequences for you (other than the fact that you will no longer receive further communications of this kind from the Owners).
- compliance: to comply with legal obligations that require Data Controllers to collect and/or further process certain types of Personal Data;
- abuse/fraud: to prevent or identify any abuse in the use of the platform, or any fraudulent activity and therefore allow the Owners to protect themselves in court.
4. Legal basis and mandatory or optional nature of the Processing
The legal bases used by the Data Controllers to process your Data, according to the purposes indicated in the previous Paragraph 3, are the following:- purchase, delivery and supply of services and products: processing for this purpose is necessary to be able to provide you with the Services and products and, therefore, to execute the contract stipulated with you. It is not mandatory to provide the Data Controllers with your Personal Data for this purpose, but otherwise it will not be possible to provide you with any Service. The same applies to the newsletter service which arises from your specific request by entering an e-mail address and which you can revoke at any time by following the instructions in Paragraph 7 of this Policy.
- marketing and remarketing: processing for this purpose is based on your consent. It is not mandatory to give your consent to the Owners for this purpose and you are free to revoke it at any time without any consequences (except for the fact that you will no longer receive marketing communications from the Owners). You can revoke your consent previously given by following the instructions in Paragraph 7 of this Policy.
- soft spam: the processing for this purpose is based on the interest of the Owners in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequences for you (other than the fact that you will no longer receive further communications of this kind from the Owners).
- Compliance: processing for this purpose is necessary for the Data Controllers to fulfill any legal obligations. When you provide Personal Data to the Data Controllers, they must be processed in accordance with applicable legislation, which may involve their retention and communication to the Authorities for accounting, tax or other obligations.
- abuse/fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activities or abuses in the use of the Site and therefore allows the Data Controllers to protect themselves in court.
5. Subjects receiving personal data
Your Personal Data may be shared with the subjects indicated below (the "Recipients"):- subjects who typically act as managers (internal and external) of the processing, i.e.: i) people, companies or professional firms that provide assistance and consultancy to the Data Controllers in accounting, administrative, legal, tax and financial matters;
- owners of the websites within the platform;
- subjects with whom it is necessary to interact for the provision of the Services;
- subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communications networks);
- persons authorized by the Data Controllers to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of the Data Controllers);
- subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data for Compliance, Abuse or Fraud purposes, or by orders of the authorities.
6. Storage of Personal Data
The Personal Data processed for the purpose of purchase, delivery and supply of services and products will be kept by the Data Controllers for the time strictly necessary for the aforementioned purpose (e.g. for sending the purchased product).In any case, since such Personal Data is processed to provide you with the Services, the Owners may retain them for a longer period, in particular as may be necessary in order to protect the interests of the Owners from possible complaints relating to the Services.
Personal Data processed for Marketing and remarketing purposes will be retained by the Data Controllers until you revoke your consent.
In any case we will remind you of the consent you have given us every 24 months. Once consent has been revoked, the Data Controllers will no longer use your Personal Data for these purposes, but may still retain them, in particular as may be necessary in order to protect the Data Controllers' interests from possible complaints based on such processing.
The personal data processed for the purposes of Soft Spam will be retained by the Data Controllers until you object to such processing through the link found at the bottom of each of the Soft Spam emails.
Personal Data processed for Compliance purposes will be retained by the Data Controllers for the period required by specific legal obligations or applicable legislation.
The Personal Data processed for the purpose of preventing Abuse/Fraud will be kept by the Data Controllers for the time strictly necessary for the aforementioned purpose and therefore until the moment in which the Data Controllers are required to keep them to protect themselves in court and to communicate said data to the competent Authorities .
7. Rights of the interested party
You have the right to ask the Data Controllers, at any time:- access to your Personal Data, (or a copy of such Personal Data), as well as further information on the ongoing processing of them
- the rectification or updating of your Personal Data processed by the Data Controllers, where they are incomplete or not updated;
- the deletion of your Personal Data from the Data Controllers' databases;
- the limitation of the processing of your Personal Data by the Data Controllers;
- to obtain the Personal Data concerning you in a structured, commonly used and machine-readable format;
- object to the processing of your Personal Data by the Data Controllers (e.g. Soft Spam);
- revoke your consent for Marketing and Remarketing purposes.
- We inform you that most of the Personal Data you have provided to the Owners can be modified at any time by accessing, where possible, your personal account created on the Site.
You can revoke your consent for Marketing relating to each of these communication channels through your personal account on the Site, by deselecting the relevant options.
You can also revoke your consent to Marketing sent by e-mail and stop receiving Soft Spam by using the appropriate link found at the bottom of each e-mail received. The same method may be used to stop receiving the newsletter, if you have requested it as a Service.
In addition to the above, you can also exercise your rights by writing to the Data Controllers at the following address: info@gassadamante.com
In any case you always have the right to lodge a complaint with the competent Supervisory Authority ( Guarantor for the Protection of Personal Data) if you believe that the processing of your Personal Data is contrary to the legislation in force.