PRIVACY POLICY pursuant to Article 13 of EU Regulation 2016/679
Introduction and privacy policy updated according to the GDPR.
Chocolat Relais et Maisons considers the protection of personal data of its own and / or potential customers and users to be of fundamental importance, ensuring that the processing of personal data, carried out in any way, whether automated or manual, is carried out in full compliance with the protections and rights recognized by the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (hereinafter the “Regulation”) and by the other applicable rules regarding the protection of personal data.
With the term personal data, reference is made to the definition contained in article 4, point 1) of the Regulation, that is “any information concerning an identified or identifiable natural person; the identifiable natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity ( hereinafter the “Personal Data”).
The Regulation provides that, before proceeding to the processing of Personal Data – with this term having to be understood, according to the relative definition contained in article 4 at point 2) of the Regulation, “any operation or set of operations, carried out with or without the use of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, the communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction “(hereinafter the” Treatment “) – it is necessary that the person to whom such Personal Data belong both informed about the reasons for which these data are requested and how they will be used.
In this regard, this document is intended to provide you, in a simple manner, with all useful and necessary information so that you can provide your Personal Data in an informed and informed manner and, at any time, request and obtain clarifications and / or corrections .
This information, therefore, has been prepared on the basis of the principle of transparency and all the elements required by Article 13 of the Regulation and is divided into individual sections (hereinafter “Sections” and individually “Section”) each of which deals with one specific topic in order to make your reading easier (hereinafter the “Information”).
If necessary, this Notice may be accompanied by a specific Form for the release of consent as provided for by Article 7 of the Rules, articulated according to the additional type of use that we intend to make of your Personal Data.
The company that will process your Personal Data for the main purpose set out in Section D of this Notice and which, therefore, will play the role of data controller according to the relative definition contained in article 4 in point 7) of the Regulation, “the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data “is:
the company Chocolat Relais et Maisons of Ruga Anna registered in the VCO Companies Register, p. I.V.A (IT) 02589470034.
The headquarters of Chocolat Relais et Maisons is in Italy, in Via dell ‘Industria, 9 – 28924 Verbania (VB) (hereinafter the “Data Controller”)
In order to allow the Data Controller to carry out the Processing activities for the above purposes, it will be necessary to provide Personal Data marked with the sentence in red “The field is required” or from *. In the absence even of just one of the marked data, it will not be possible to proceed with the Processing of your Personal Data and, consequently, you will not be allowed to complete your registration on the “Website” and / or benefit from the services provided by them for the which is required to provide Personal Data.
The Personal Data that will be requested for the pursuit of the aforementioned purposes will be those reported in the registration and / or contact form ie, by way of example and not exhaustive: name, surname, date of birth, address of domicile / residence, e-mail address, telephone numbers of fixed and / or mobile users.
4641/5000
The Data Controller, subject to your express consent, free and unambiguous pursuant to Article 6, paragraph 1, point a) of the Rules, may request, in addition to the above data, further Personal Data such as, by way of example and not exhaustive, data on tastes, preferences, habits, needs and consumption choices, for the following purposes:
Purpose of direct marketing: this term means the intention of the Data Controller to carry out promotional and / or marketing activities towards you. This category includes all the activities carried out to promote products, services, sold and / or supplied by the Data Controller on the basis of their legitimate interest in pursuing their corporate purpose.
The Processing of your Personal Data for the purposes referred to in point (i) cannot disregard the obtaining of your consent which must necessarily comply with the conditions set out in article 7 of the Regulations, thus determining the lawfulness of the Treatment of your Personal Data for this purpose.
With regard to the direct marketing purposes referred to in point (i), it should be noted that, pursuant to Article 6, paragraph 1, point f) of the Regulation, the Data Controller may perform this activity based on its legitimate interest, to regardless of your consent and in any case up to your opposition to such Treatment as better explained in Recital 47 of the Regulation:
(The legitimate interests of a data controller, including those of a data controller to whom personal data may be communicated, or of third parties, may constitute a legal basis for processing, provided that interests or fundamental rights and freedoms do not prevail of the interested party, taking into account the reasonable expectations of the data subject based on his relationship with the data controller, for example, such legitimate interests may exist when there is a relevant and appropriate relationship between the data subject and the data controller, to example when the interested party is a client or is employed by the data controller In any case, the existence of legitimate interests requires a careful evaluation also with regards to the possibility that the interested party, at the moment and in the context of the collection of personal data, it can reasonably be expected that processing will take place for this purpose fundamental interests and rights of the data subject may in particular prevail over the interests of the data controller if personal data are processed in circumstances in which the data subjects cannot reasonably expect further processing of personal data. Given that it is up to the legislator to provide by law the legal basis that authorizes public authorities to process personal data, the legal basis for a legitimate interest of the data controller should not apply to the processing performed by public authorities in the performance of their tasks. Equally legitimate interest of the data controller involved is processing personal data strictly necessary for fraud prevention purposes. It may be considered legitimate interest to process personal data for direct marketing purposes.)
in which it is considered “legitimate interest to process personal data for direct marketing purposes”. This will also be possible following the assessments made by the Data Controller regarding any and possible prevalence of your interests, rights and fundamental freedoms that require the protection of Personal Data on their legitimate interest in sending direct marketing communications.
The methods of contact aimed at direct marketing activities as in the previous point (i) may be either automated (email, sms, mms, fax, telephone calls without operator) or traditional (telephone calls with operator, postal items). In any case, and as better described in Section G below, you can revoke your consent, even partially, for example by consenting to traditional contact methods only.
Regarding the methods of contact that require the use of your telephone contacts, we remind you that the direct marketing activities by the Data Controller will be carried out after verification of your possible registration in the Register of Oppositions as established pursuant to and for the effects of the DPR 7 September 2010, n. 178 and subsequent amendments.
From this point of view, in order to correctly carry out all the processing activities necessary to pursue the purposes referred to in this Notice, the following Recipients may find themselves in a position to process your Personal Data:
If required by law or to prevent or punish the commission of a crime your Personal Data may be disclosed to public bodies or the judicial authority without these being defined as Recipients. In fact, according to article 4, point 9) of the Regulation, “public authorities that can receive communication of Personal Data in the context of a specific investigation in accordance with Union or Member State law are not considered as Recipients”.
Furthermore, the user’s data can be communicated to certain subjects, appointed by the Data Controller, to provide services that are instrumental or necessary for the execution of the obligations connected with the registration to the site and the online purchase, within the limits and in accordance with the instructions given. In particular, the data may be communicated to: a. persons, companies or professional offices, who provide assistance, advice or collaboration to the Data Controller in accounting, administrative, legal, tax and financial matters; b. delegated and / or appointed by the Data Controller to carry out the activities or part of the activities related to the provision of sales services, such as customer service, even if outsourced; the logistics center responsible for packaging the products purchased by the user; the carriers in charge of delivering the purchased products; the subjects who carry out the after-sales assistance activity on behalf of the Data Controller and any other external collaborator to whom the communication is necessary for the correct fulfillment of the obligations assumed by the Data Controller in relation to the contract for the supply of its services; c. Public Administrations for the performance of institutional functions within the limits established by law or regulations. User data is not subject to distribution or sale.
With regard to the processing carried out to achieve the purposes referred to in Section D of this Notice, the Data Controller may lawfully process your Personal Data until you communicate, in one of the ways provided for in this Statement, your willingness to revoke the consent to one or all of the purposes for which it was requested. The possible revocation of the consent will impose, in fact, to the Data Controller to cease the processing of your Personal Data for these purposes.
The procedures for revoking consent are very simple and intuitive, simply contact the Data Controller using the contact channels on the site, or write an email to chocolatrelaisetmaisons@pec.it
In addition to the above and for simplicity, if you were in the position to receive promotional e-mail messages from the Data Controller that is no longer of interest to you, simply click on the unsubscribe or removal button at the bottom of the same for not receive more communication even through additional contact channels for which your consent was obtained (SMS, MMS, paper mail, fax, phone calls).
In particular, below you will find all your rights that you can exercise, at any time, towards the Data Controller:
Right of access: you will have the right, pursuant to Article 15, paragraph 1 of the Rules, to obtain from the Data Controller the confirmation that a Treatment of your Personal Data is being processed and in this case, to obtain access to such Personal Data and to the following information: a) the purpose of the Processing; b) the categories of Personal Data in question; c) Recipients or categories of Recipients to whom your Personal Data have been or will be communicated, in particular if Recipients of third countries or international organizations; d) when possible, the retention period of Personal Data provided or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the Data Subject to request the Data Controller to rectify or cancel the Personal Data or limit the Processing of Personal Data concerning him or to oppose their Treatment; f) the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such Treatment for the interested party. All this information can be found within this Information which will always be available to you within the Privacy section of the Website.
Right of rectification: you will be able to obtain, according to article 16 of the Regulations, the correction of your Personal Data which are inaccurate. Taking into account the purposes of the processing, you will also be able to obtain the integration of your Personal Data which is incomplete, even providing a supplementary declaration.
Right to cancellation: according to article 17, paragraph 1 of the Rules, you will be able to delete your Personal Data without undue delay and the Data Controller will be obliged to delete your Personal Data, if only one of the following reasons: a) Personal Data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) you have revoked the consent on which the Processing of your Personal Data is based and there is no other legal basis for their Treatment; c) you have opposed the Processing pursuant to Article 21, paragraph 1 or 2 of the Rules and there is no longer any legitimate prevailing reason to proceed with the Processing of your Personal Data; d) your Personal Data has been processed unlawfully; e) it is necessary to delete your Personal Data in order to fulfill a legal obligation required by a community or national law. In some cases, as required by article 17, paragraph 3 of the Rules, the Data Controller is entitled not to cancel your Personal Data if their Processing is necessary, for example, to fulfill a legal obligation , for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for ascertaining, exercising or defending a right in court.
Right to limitation of treatment: you will be able to obtain the limitation of the Treatment, pursuant to Article 18 of the Rules, if one of the following hypotheses occurs: a) you have objected to the accuracy of your Personal Data (the limitation will continue for the period necessary to the Data Controller to verify the accuracy of such Personal Data); b) the Processing is illegal but you have opposed the deletion of your Personal Data asking, instead, that its use is limited; c) although the Data Controller no longer needs it for the purpose of processing, your Personal Data is used to ascertain, exercise or defend a right in court; d) you have opposed the Processing pursuant to Article 21, paragraph 1 of the Rules and you are awaiting verification regarding the possible prevalence of the legitimate reasons of the Data Controller with respect to yours. In case of limitation of the Treatment, your Personal Data will be processed, except for storage, only with your consent.
To exercise all your rights as identified above, simply contact the Data Controller in the following ways:
writing to,
Chocolat Relais et Maisons by Ruga Anna Via dell ’Industria, 9 – 28924 Verbania (VB);
sending an e-mail to the e-mail address chocolatrelaisetmaisons@pec.it
by calling 3388803692
I. Where will your Personal Data be processed? Your Personal Data will be processed by the Data Controller within the European Union territory.
If for reasons of a technical and / or operational nature it is necessary to make use of subjects located outside the European Union, we inform you as of now that these subjects will be appointed Data Processors pursuant to and for the purposes of the article 28 of the Regulations and the transfer of your Personal Data to these subjects, limited to the performance of specific processing activities, will be regulated in compliance with the provisions of Chapter V of the Regulation. All necessary precautions will therefore be taken to ensure the fullest protection of your Personal Data by basing this transfer: (a) on adequacy decisions of the recipient third countries expressed by the European Commission; (b) on adequate guarantees expressed by the recipient third party pursuant to Article 46 of the Regulation; (c) on the adoption of binding corporate rules, c.d. corporate binding rules.
In any case, you can request more details from the Data Controller if your Personal Data have been processed outside the European Union, requesting evidence of the specific guarantees adopted.
IMPORTANT: What are the security levels for the Internet and sites?
Internet is not a secure system and you should always be cautious about the data that is revealed online. Personal data collected by the Chocolat Relais et Maisons site is stored in secure operating environments that are not available to the public. Where necessary, personal data is encrypted before you make your transaction using appropriate secure technology.