This page describes how this website manages the processing of its users’ personal data. Data on identified or identifiable individuals may be processed after visiting this website. This policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR 2016/679) for anyone who interacts with the web services of The Bold One di Pignedoli Giada for the protection of their personal data. These services can be accessed online at the address: www.theboldonejewels.it
This policy only applies to the The Bold One di Pignedoli Giada website and not to any other websites that users may visit via links.
This policy is also based on Recommendation No. 2/2001 which the European personal data protection authorities, brought together in the Working Party established by Article 29 of Directive No. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for collecting personal data online and, in particular, the methods, timing and nature of the information that data controllers are required to provide to users when they visit web pages, regardless of the reasons for this visit.
Type of Data Processed
- Browsing data: The computer systems and software procedures that operate these websites acquire certain personal data during normal use, which is transmitted using Internet communication protocols. This information is not collected to be associated with identified data subjects. However, by its very nature, it might be used to identify users by means of processing and matching with information held by third parties. This data category includes IP addresses or the domain names of the computers used by any user visiting this website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, the size of the file received in reply, a numerical code indicating the server response status (successful, error, etc.) and other parameters relating to the user’s operating system and computer set-up. This data is only used to extract anonymous statistical information on how the website is used and to ensure that it is running properly. It is deleted immediately after processing. This data might be used to establish liability in the event of any cybercrimes against the website: otherwise, web contact data will currently not be stored for more than seven days.
Purposes: The personal data that you provide shall be used to ensure that you can browse the www.theboldonejewels.it website properly, i.e. for: technical and functional access to the Website, advanced browsing purposes or for managing personalised content, as well as statistical and analytical purposes of browsing and users.
This processing falls under the lawful processing pursuant to Article 6, paragraph 1(b) of EU Regulation 2016/679 on Data Protection.
- Contact details provided voluntarily by the user for information requests: the personal data which the user provides shall be processed to answer users’ questions
Purposes: to provide the best response to your requests. The processing of your personal data is legitimate as it is necessary to provide you with the service you specifically requested from us and falls under the lawful processing pursuant to Article 6, paragraph 1(b) of EU Regulation 2016/679 on Data Protection. If you do not consent to this processing, we shall not be able to provide you with a response, so it is not possible to send the form without your consent.
- Personal and contact details provided by the user for product purchasing and shipping Purposes: to fulfil a contract or pre-contractual measures; to comply with legal, accounting and tax obligations; to fulfil the contract of which you are a party; to comply with its related legal obligations. To help provide the Services you requested: customer management; to respond to requests for support or information; to provide consultancy services; scheduling of activities.
The Data Controller processes your personal data lawfully, as this processing: is necessary to fulfil a contract of which you are a party or to fulfil pre-contractual measures adopted upon request; is necessary to comply with a legal obligation.
The provision of Personal Data for these purposes is optional, but if you do not provide this data, it might not be possible to access the Services provided by the Data Controller.
- Soft marketing. Any e-mail contact details which you provide shall be processed for soft marketing, such as the advertising of services that are similar to those you have shown an interest in by using one of our specific products/services; this shall only be done within the mutual legitimate interest of both parties. Soft marketing shall be done by e-mail, while keeping contact to a minimum.
This processing falls under the lawful processing pursuant to Article 130, paragraph 4 of Italian Legislative Decree No. 196 of 30 June 2003, the “Data Protection Act”, supplemented with the amendments introduced by Italian Legislative Decree No. 101 of 10 August 2018. Please note that “if the data controller uses the e-mail address provided by the data subject for the direct sale of its products or services […], it does not have to request the data subject’s consent”.
Data Controller, Data Processor and DPO
Processing Methods
All personal data is processed primarily using electronic tools and procedures. However, hard copy processing cannot be ruled out in principle.
Processing shall be carried out automatically and/or manually with tools and procedures in accordance with the security measures under Article 32 of the GDPR 2016/679, by appropriately authorised individuals, pursuant to the provisions of Article 29 of the GDPR 2016/679. Security measures shall be taken to guarantee the confidentiality of the data subject and to prevent undue access by third parties or unauthorised personnel.
Data Processing Location
Any processing connected to the web services of this website takes place at the operational and registered head office of The Bold One di Pignedoli Giada and is only carried out by specifically appointed staff.
Data is also processed at any other location where the parties involved in the processing are located; in particular, all data concerning the website, as well as the relative back-up copies, shall be processed both within the European Union and stored on servers located in the European Union and also processed and stored in countries outside the European Union when an adequate level of protection is guaranteed.
Storage
Please note that in accordance with the principles of lawfulness, purpose limitation and data minimisation pursuant to Article 5 of the GDPR 2016/679, the storage period for your personal data shall be 10 years from the end of the relationship between the parties.
Disclosure of data to third parties
No data shall be circulated. When disclosure to third-party suppliers, consultants or partners is necessary for requirements linked to the provision of the Services, the Data Controller shall appoint them as data processors pursuant to Article 28 of the Regulation, based on their proven expertise, experience and reliability.
Data subjects may request at any time the full list of any data processors appointed from time to time by The Bold One di Pignedoli Giada by sending a request to the Data Controller at the e-mail address theboldonejewels@gmail.com
It is understood that users’ personal data may be freely disclosed to third parties, such as law enforcement authorities or other public administrations, any time this is permitted by law or required by an order or decision by a competent authority. These parties shall process data as independent data controllers.
Data subject rights
Pursuant to Articles 15-22 of the GDPR 2016/679, you may exercise the right at any time to:
– request confirmation of the existence or not of your personal data;
– obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to which personal data has been or shall be disclosed and, when possible, the storage period;
– have your data amended or deleted;
– have the processing of your data restricted;
– data portability, i. e. to receive data from a data controller in a structured, commonly used and machine-readable format and to send it to another data controller without impediment;
– object to processing at any time and also in the case of processing for direct marketing purposes;
– object to an automated decision-making process relating to natural persons, including profiling.
To exercise your data subject rights and/or to request more information, please contact the Data Controller, The Bold One di Pignedoli Giada – Via Papa Giovanni XXIII no. 3 – 42033 Carpineti (RE) – e-mail: theboldonejewels@gmail.com
