Privacy Policy

PRIVACY POLICY

PELLEGRINI S.p.a., with registered office at Via Mazzini, 43 24034 Cisano Bergamasco (BG), Tax Code and VAT No. 00224980169 (“PELLEGRINI”) is a company that offers the opportunity to purchase its products online (hereinafter, the “Services”).

In conducting its business, PELLEGRINI processes personal data in compliance with applicable laws and contractual provisions, in a manner guided by the principles of fairness, lawfulness and transparency, while safeguarding the data subject's privacy and rights. 

DATA CONTROLLER

Through this document, PELLEGRINI, as the controller of personal data (hereinafter, the “Controller”), intends to provide the information notice pursuant to Articles 13 et seq. of EU Regulation 679/2016 (hereinafter, the “Regulation”), regarding the processing of personal data of users (hereinafter, “User/Users”) who visit the website https://pellegriniprivatestock.com/ (hereinafter, the “Website”).

1) TYPES OF DATA PROCESSED AND TYPES OF PROCESSING 

a) Browsing data: The computer systems and software procedures responsible for the operation of this Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by its very nature could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the server's response (success, error, etc.) and other parameters relating to the user's operating system and computer environment. This data is used solely to obtain anonymous statistical information on the use of the Website and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to establish liability in the event of hypothetical cybercrimes against the Website: except in this case, web contact data is currently retained for no more than seven days.

b) Data voluntarily provided by the user to purchase a product on the Site and/or use a Service: completing the sale of a product through the Site and/or using the Services entails processing the user’s data solely for the purpose of providing the Services and fulfilling the related contractual and administrative obligations, including, for example, processing the order and payment and shipping the purchased product. The data processed are: first name, last name, address, country of residence,  email address, telephone number.

c) Data voluntarily provided by the user to receive promotional communications relating to the Services: if the Data Subject subscribes to the newsletter service or gives consent to receive commercial or marketing communications from the Controller, the data will be processed to send such communications by email or post to the addresses provided by the Data Subject. The data processed are: first name, email address, residential address.

d) Cookies: for the processing of data through cookies, please review the relevant policy

 

2) PURPOSES AND LEGAL BASIS OF PROCESSING

The collected User data will be processed by the Controller:

  • SITE OPERATION: to pursue the Controller’s legitimate interest in ensuring the security of the Site and the information exchanged on it, that is, the ability of the Site to withstand, at a given level of security, unexpected events or unlawful or malicious acts that compromise the availability, authenticity, integrity and confidentiality of personal data stored or transmitted, and the security of the related services offered or made accessible. The legal basis for processing is Article 6(1)(f) of the Regulation.
  • USING THE SERVICES: to use the Services offered through the Site, for example, to enable the user to purchase a product, etc. The legal basis for processing is Article 6, paragraph 1, letter b) of the Regulation, as processing is necessary for the performance of a contract to which the data subject is a party;
  • SENDING COMMERCIAL\PROMOTIONAL COMMUNICATIONS BY THE DATA CONTROLLER: if the Data Subject has given their explicit consent, to send invitations to events organized by the Data Controller or promotional communications about the Data Controller’s activities. The legal basis for processing is Article 6, letter a) of the Regulation, namely the Data Subject’s consent.

 

3. DURATION OF PROCESSING AND DATA RETENTION PERIOD

For the purposes set out in Article 2) above, personal data will be processed for the period strictly necessary to achieve those objectives and thereafter as well, to fulfill legal obligations and/or for defense purposes.

Data provided for commercial communications, opinion polls, and market research will be retained until the Data Subject requests that the activity be discontinued or for 12 months. 

4. METHODS OF PROCESSING

The data will be processed both on paper and electronically, using modern computer systems and manual procedures, solely by persons expressly appointed for this purpose. The data will be processed according to principles and organizational methods strictly related to the obligations, duties, or purposes set out above. The Data Controller uses technical and organizational measures to protect the data in its possession from tampering, loss, destruction, and access by unauthorized persons. Security measures are continually improved in line with technological developments.

5. MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA

Providing the data referred to in point 1, letter b) is optional. However, if the User refuses, they will not be able to make purchases on the Site. 

Providing the data referred to in section 1, letter c) is optional. L'the user may withdraw their consent at any time and without giving a reason. The easiest way to do so is to click the "Unsubscribe" link, which appears in every newsletter or communication received. L’the user may alternatively send a communication to the Data Controller at shop@pellegriniprivatestock.com 

6. SCOPE OF DISCLOSURE AND DISSEMINATION

The User's personal data will be processed by persons authorized to perform these duties, duly appointed as data processors or persons in charge of processing, and equipped with security measures designed to ensure the confidentiality of the data subjects to whom the data relates and to prevent improper access by third parties or unauthorized personnel. Where necessary, the data collected may be disclosed, within the limits strictly relevant to the obligations, duties or purposes set out in section 2, to public or private entities (insurers, auditing and certification firms, etc.) or to the competent Authorities for the purposes of preventing, detecting or prosecuting crimes, in compliance with the applicable regulations. No data will be disseminated.

The updated list of all Data Processors is available at PELLEGRINI’s headquarters and may be requested at the following email address: shop@pellegriniprivatestock.com . This list may subsequently be supplemented and/or updated as needed.

Among the data processors is Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). We use Shopify's services to host and display our online store. All data collected on the Site is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be transferred to Shopify group companies in Canada and the USA. For further information about Shopify's privacy policy, visit the following website: https://www.shopify.com/legal/privacy

7. USER RIGHTS

Users have the right to know their rights, which essentially consist of the right to receive information from the other contracting party regarding the existence of processing of their personal data, as well as to access their data and obtain its rectification, completion, updating, erasure or blocking. L’User will also have the right to obtain a copy of their data, restriction of processing and/or to object to its processing, as well as the right to data portability and to lodge a complaint with the competent supervisory authorities under the conditions and within the limits set out in Article 13 of the Regulation.

Each data subject whose data is processed is guaranteed the following rights under Articles 15 et seq. of the Regulation:

  • Right to information;
  • Data subject’s right of access;
  • Right to rectification;
  • Right to erasure (right to be forgotten);
  • Right to restriction of processing,
  • Right to data portability;
  • Right to object.

L’user may therefore find out what personal data the Controller holds, its origin and how it is used, and request its updating, rectification or completion, as well as, in the cases provided for by applicable provisions, its erasure, restriction of processing or object to its processing. Each data subject may, if they wish, request a copy of the personal data held by the Controller concerning them in a format readable by electronic devices and, where technically possible, the Controller may transfer the data directly to a third party indicated by the data subject.

If users believe that their personal data has been processed unlawfully, they may lodge a complaint with one of the supervisory authorities competent to ensure compliance with personal data protection regulations. In Italy, complaints may be lodged with the Italian Data Protection Authority (http://www.garanteprivacy.it/).

8. EXERCISE OF RIGHTS

To exercise the aforementioned rights, Users may send a communication to the email address shop@pellegriniprivatestock.com  with the subject line "Privacy - exercise of rights ".

***   ***   ***

This Privacy policy was published on 07/10/22. Any updates will always be published on this page.