(PURSUANT TO EU REGULATION 679/2016; D.Lgs. 101/2018; D.Lgs. 196/2003)

 

This policy is provided pursuant to art. 13 and 14 of Regulation 679/2016 (EU) (“GDPR”) to those who access and browse spachezvous.it website.

This policy describes how the Website is managed and the personal data relating to users who access it is processed; therefore, any third party website to which you may be redirected from the Website is considered excluded.

The website offers the possibility to carry out electronic commercial transactions.

By using this website, providing to SPA CHEZ VOUS srls, their Personal Identification Data (as defined below) or otherwise indicating their consent to receive marketing or other information, the User consents to all operations carried out by SPA CHEZ VOUS srls in relation to their Personal Identification Data as established in this Policy.

If the User disagrees with the terms and conditions of this Policy, they must not use the Website, neither provide Personal Identification Data through the Website or in any other way.

1 – Purpose and legal basis of the data processing

The user’s personal identification data is collected directly in order to satisfy the requests made by the user. In this regard, there are different forms on the Website, which are required to be filled in by the user in order to manage and follow up on the requests the user has made. In particular, it is possible to:

  • purchase the marketed products;
  • request information about products or services.

Furthermore, the data may be acquired by the Data Controller, even indirectly, considering that, while browsing the Website, the IP addresses or domain names of the computers used by users who connect to the website are tracked, as well as the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

Furthermore, data collection can also take place through the third-party sources such as:

Other third parties (Google Chrome, Mozilla Firefox, Apple Safari, Internet Explorer).

SPA CHEZ VOUS srls could also combine the Personal Identification Data collected with others in the public domain and received from the third parties or which refers to Personal Identification Data received from the third parties. The collection and use of Personal Identification Data separately or combined, is carried out in accordance with this Policy for the purposes described therein.

The data provided will be processed for:

  • The purposes related to the correct and complete execution of the signed order (for this purpose, the consent is not necessary as the processing of the data is related to the execution of the order);
  • The purposes related to the exercise of the rights of the owner (e.g. defense in court);
  • The purposes related to the fulfillment of the obligations established by law or regulations as well as for the fulfillment of the obligations established by the anti-money laundering legislation (for this purpose, consent is not necessary as the processing of the data is related to compliance with these obligations/provisions of law and/or regulations);
  • The ordinary marketing activities (sending emails, mail, text messages, newsletters, commercial or advertising communications, etc.).

The data provided will be processed in a lawful, correct and transparent manner and exclusively for the purposes indicated above. The relevant data processing will not exceed these purposes.

2 – Types of processed data

The types of processed data are defined in “Personal Data”, i.e. information suitable for identifying, directly or indirectly, a natural person. While browsing the Website, the following data may be processed:

  • Name and surname;
  • Contact details (i.e. phone number and email address);
  • IP address, domain name, URL address;
  • browsing data;
  • the version of a browser;
  • The data voluntarily provided in this context in order to use the services and purchase our products

3 – Redirection to external websites

The Website uses the social media plugins, that constitute a set of special tools that allow you to incorporate the features of the social network directly into a website.

Each of the social media plugins on the Website is identified by the logo owned by the social media platform, in this case the logo.

If the user interacts with the social media plugin, the information referable to the interested party is directly communicated to the social media platform that processes the data as an independent owner, therefore in order to obtain more details about the purposes and methods of data treatment, exercisable rights and the retention of personal data, please consult the privacy policy of the social media network.

4 – Cookies

Cookies are small text files that the websites visited by the users send to their terminals, where they are stored before being re-transmitted to the same websites on the next visit.

In general, the company uses technical cookies necessary in order to provide the user with the best functionality of the Website.

It is possible to disable or refuse the use of these cookies at any time by changing the browser settings on your PC, indicating that navigation on the Website and the use of its content may be compromised.

5 – Types of used cookies

SPA CHEZ VOUS srls also uses:

  • analytical cookies when used directly by the website manager to collect information, in the organized manner, about the number of users and how they use the website;
  • navigation or session cookies (to authenticate);
  • functionality cookies, which allow the user to browse according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.

NOTE: disabling technical and/or functional cookies may result in the Website not being available or some services or certain functions of the Website may not be available or may not work properly and you may be forced to modify or manually enter some information or preferences each time when visiting the Website.

The user can exercise their right to opt-out when accessing the Website by clicking on the appropriate information banner.

Below are the links to information about the third-party cookies:

Type of cookies and the owner

Purpose and functionality

Cookie persistence

Technical cookies

SPA CHEZ VOUS srls

google.com

– activity strictly necessary for the functioning of the website

– activity of saving preferences

– statistic activity

– persistent

– subject to the settings of the used browser

Analytical cookie

google.com

– statistic activity – subject to the third-party policies of the cookie management
Navigation or session cookies

SPA CHEZ VOUS srls

– activity strictly necessary for the functioning of the website – persistent

– subject to the settings of the used browser

Functionality cookies

SPA CHEZ VOUS srls

– activity strictly necessary for the functioning of the website – persistent

– subject to the settings of the used browser

 

6 – How to disable cookies by configuring the browser

Below we provide the information that specifies how to disable/delete cookies, based on the type of the used browser. Please note that for the website to function properly some technical cookies are essential and their possible elimination could preclude navigation.

The user can select which proprietary cookies to authorize, block or delete (in whole or in part) through the specific functions of their navigation software (i.e. browser).

For more information on how to set preferences for the use of cookies in your browser, you can consult the relevant instructions:

7 – Transfer of personal data

The server farm where the Website is hosted is located in Italy.

The Data is not transferred to the third-party companies located outside the European Economic Area, if this transfer becomes necessary, we will ensure that the recipients of the Data have adopted appropriate security measures to ensure its protection.

8 – Processing methods

The processing of the provided Personal Data will be based on principles of correctness, lawfulness and transparency; it will be carried out in an automated and/or manual manner, in compliance with the security measures pursuant to art. 32 of the GDPR.

It should be noted that processing of Personal Data will be carried out in accordance with the operations indicated in art. 4 (2) of the GDPR; therefore the method of processing may consist of collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.

9 – How the collected personal identification data is used

SPA CHEZ VOUS srls collects Personal Identification Data relating to private customers, visitors to the Website and others. In order to offer an experience that meets their specific needs SPA CHEZ VOUS srls may collect, use and disclose Personal Identification Data for one or more of the following purposes:

  • Fulfillment of quotes and/or orders.
  • Responses to marketing material requests, information requests or others.
  • Sending administrative and other communications.
  • To send important information regarding the Website to the User, any changes to the relevant terms, conditions and policies or other information of an administrative nature.
  • Surveys. To conduct or facilitate surveys and ask the User to respond to questionnaires in order to provide increasingly better products and services to customers and Website visitors. The participation in any surveys or questionnaires is completely voluntary.
  • Customer care. To track, process and answer questions addressed to customer service and optimize and improve the customer experience SPA CHEZ VOUS srls may also transmit the User’s Personal Identification Data to the third party service providers and affiliated organizations in order to allow such third parties to track, process and answer questions addressed to customer service.
  • Internal business purposes. For internal commercial purposes, such as data analysis, audits, new product development, Website improvements, service improvements, identification of usage trends and visiting patterns, determination of the effectiveness of promotions and compliance with contractual obligations.

10 – Third party websites

The Website may contain links to the third party websites. These linked websites are not controlled by SPA CHEZ VOUS srls and it is not responsible for the privacy policies or the content of such linked websites (or any links on a linked website).

These links are provided for convenience only and the inclusion of a link on the Website does not imply the approval of the linked website by SPA CHEZ VOUS srls or its Affiliates. If the User decides to access the third party websites linked to the Website, they do so at their sole risk according to the terms and conditions of use and the privacy policies of such websites. If the User provides Personal Identification Data through a third party website, the Personal Identification Data provided will be treated in accordance with the privacy policy of said third parties.

11 – Communication of data to third parties

The Data will be processed by the Data Controller, the Data Processor and the appointed individuals in charge pursuant to art. 30 of the Privacy Code and art. 29 of the GDPR.

The Data may also be disclosed to companies/professional firms that provide assistance, consultancy and collaboration to the data controller in accounting, administrative, fiscal, legal, tax and financial matters, to public administrations within the limits established by law or regulations and to third party service providers to whom communication is necessary for the fulfillment of the services covered by the order and/or contract.

In any case, the recourse to these subjects will take place subject to a commitment to respect the privacy legislation on their part.

The Data is not subject to disclosure.

12 – Intention of the Data Controller

The Data Controller has no intention of transferring the data provided to a third party or to an international organization.

13 – Data retention period

The data provided will be kept for a period of time that does not exceed 1 (one) year from the request to delete the user from the database sent by email to info@spachezvous.it

Once the terms indicated above have elapsed, the Data will be destroyed.

Finally, we reserve the right to keep the mentioned data to log-in and log-out for a longer period, in order to be able to manage any crimes committed against the Website (hacking activity).

14 – Mandatory or optional nature of providing data and consequences of a refusal to respond

The provision of data for the purposes indicated in point 1 a) and b) is necessary for the correct and complete execution of the order and any refusal in this regard will make it impossible to perform the services of the order. The provision of data for the purposes indicated in point 1 c) is mandatory as it is necessary for the fulfillment of regulatory obligations. The provision of data for the purposes indicated in point 1 d) is optional.

15 – Existence of an automated decision-making process

There is no automated decision-making process.

16 – Rights of the interested party and methods of exercise

The interested party enjoys the rights referred to in Articles 15-22 EU Regulation 2016/679 (access to personal data, rectification or cancellation (“right to be forgotten”) of the same or limitation of related data processing, right to object to the processing, right to data portability; right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal and the right to lodge a complaint with a supervisory authority). The rights can be exercised at any time by sending a registered letter with return receipt to the company, represented by its Administrator and pro tempore legal representative, or an email to info@spachezvous.it.

17 – Data Controller and Data Processor

The Data Controller and Data Processor is SPA CHEZ VOUS srls, represented by its Administrator and pro tempore legal representative, based in Vicinale Parco Della Corte, 5340 – Gioia del Colle (BA) – Italy – VAT number 07869040720.

18 – Changes to the policy

The data controller reserves the right to make changes to this Policy at any time. The date of the last update of this Policy is shown at the top of this page. In the event of substantial changes to this Policy, the data controller will communicate on the Website that its privacy policy has been changed, providing a link to the new version. In the event of substantial changes to its methods of use of the User’s Personal Identification Data, SPA CHEZ VOUS srls will inform the User via email at the email address specified in their account (where applicable) and/or through a notification published on the homepage of the Website, offering the possibility to refuse such new or different use. Any changes to the Policy will become effective upon publication of the new version of the Policy on the Website.

Use of the Website after the publication of these changes implies acceptance by the User of the new version of the Policy in force.