Barbara Gregori boutique (hereafter “BG”), located in Via Vittoria 37a – 00187 Rome (Italy), as the data controller according to the EU Regulation 679/2016 (directly applicable from the 25th of May 2018, hereafter “Applicable Law”), is aware of the relevance of data protection for the users. For this reason, before communicating any personal data, BG invites you to carefully read the present privacy policy containing important information related to the protection of your personal data. The present privacy policy, issued in accordance with Article 13 of the Applicable Law, only refers to the website http://www.barbaragregori.boutique (hereafter “Site”), and does not refer to other websites reachable by means of external links. It only applies to the users of this Site. In compliance with the Applicable Law, the personal data processing will be lawful, fair and transparent, and governed by the principles of purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality. Your personal data will be, therefore, processed in compliance with the provisions of the Applicable Law and the confidentiality obligations provided therein.
1. DATA CONTROLLER
According to the Applicable Law, BG, as above defined, is the data controller of the Site.
2. TYPOLOGIES OF PERSONAL DATA AND STORAGE PERIOD
Personal data means any information relating to an identified or identifiable natural person in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2.1. Typologies of personal data processed by the Site
The Site collects the following personal data:
name and surname
e-mail address
IP address
traffic data
With regard to personal data such as name, surname and e-mail address, BG informs you that these data are voluntarily given when you decide to contact us by means of the form “Send Us A Message”. These data will be processed in compliance with the Applicable Law, assuming that they refer to you or to third parties which explicitly gave their consent on a legitimate legal ground. In such cases, you assume all the obligations and legal responsibilities, and you recognize your status of independent data controller. On this point, you acknowledge the largest indemnity relating to any type of dispute or request for compensation for damage caused by personal data processing issued against BG by third parties whose personal data have been processed through the Site in violation of the Applicable Law.
With regard to navigation data, BG informs you that the latter are not collected to be directly associated to you. However, by their very nature, they could indirectly allow your identification by further processing and association with data held by third parties. The collection and transmission of such data is implicit in the use of the Internet communication protocols. They are used in order to obtain anonymous statistical information related to the use of the Site, to allow its correct functioning. They are also used for security reasons to ascertain responsibility in case of hypothetical computer crimes against the Site and / or third parties.
2.2. Storage period
BG will process your personal data for the time strictly necessary to achieve the purposes indicated in point 3. Without prejudice to the foregoing, BG will process your personal data up to the time allowed by the Italian law to protect its interests.
3. PURPOSES OF PROCESSING AND LEGAL GROUNDS
The personal data that you provide through the Site will be processed by BG for the following purposes:
a) execution of pre-contractual measures taken on request such as completion of the form “Send Us A Message”;
b) purposes of statistical research / analysis on aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the Site, traffic and evaluating usability and interest;
c) purposes related to the fulfillment of a legal obligation to which BG is subject;
d) purposes necessary for the establishment, exercise or defense of a right in court or whenever the courts exercise their judicial functions.
The legal basis of the processing of personal data for the purposes referred to in point a) is the provision of a service or the reply to a request that does not require consent under the Applicable Law.
The purpose referred to in point b) does not involve the processing of personal data. The purpose referred to in point d) represents a legitimate processing of personal data under the Applicable Law necessary to fulfill a legal obligation to which BG is subject.
4. DATA LOCALIZATION
BG data centers are located within the European Union.
5. SCOPE OF COMMUNICATION AND DIFFUSION: RECIPIENTS
Your personal data may be shared, for the purposes referred to in paragraph 3, with:
a) subjects necessary for the provision of services offered by the Site including, but not limited to, sending e-mails and analyzing the operation of the Site;
b) persons authorized by BG to process personal data that are committed to confidentiality or have an appropriate legal obligation of confidentiality (eg employees, collaborators);
c) Jurisdictional authorities in the exercise of their functions when required by the Applicable Law.
6. TRANSFERS
The recipients of your personal data are located within the European Union. However, if some of your personal data is transferred to recipients located outside the European Economic Area, BG ensures that the processing of your personal data by those recipients will be in compliance with the Applicable Law.
7. EXERCISE OF THE RIGHTS REFERRED TO IN ARTICLES 13-22
BG informs you that, pursuant to articles 13 to 22 of the Applicable Law, you have the right to request at any time access to your personal data, to rectify or erase them or to oppose their processing. You also have the right to request the restriction of your personal data processing and to obtain the data concerning you in a structured, commonly used and machine-readable format (right to data portability).
Requests should be sent via e-mail to: gregori.barbara@libero.it If you believe that the processing of your personal data is contrary to the Applicable Law, you have the right to lodge a complaint before the competent supervisory authority (Data Protection Authority).
8. CHANGES
This Privacy Policy is effective from 24 May 2018. BG reserves the right to modify or simply update its content, in part or completely, also due to changes in the Applicable Law. BG will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. However, BG invites you to visit this section regularly in order to be always updated on the latest version of the Privacy Policy.