This information is provided in accordance with Italian legislation (Legislative Decree 196/2003 and subsequent amendments and additions) and European legislation (European Regulation 2016/679 - GDPR) in force on matters of personal data protection.
We recommend that you read this policy carefully before providing any personal data.
Data controller is Stile Latino S.r.l. - Via Prof. Filippo Manna 40/42 – ZIP CODE 80013 Casalnuovo (Napoli) – VAT no. 07827060638( hereinafter referred to as Controller or “Us”).
What Data will be used, for what purposes and on what legal basis?
The user/visitor will be provided with detailed information for each section of the website that involves the collection of personal data. That said, please find below a list of the main processing activities carried out:
1.1 Requests for information
By filling in the contact forms on this website, the Data Controller may acquire the User's personal data. The legal basis for its processing is, therefore, the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
For further information on the said processing, please refer to the specific information provided at the bottom of the contact forms.1.2 User area registration
The data requested in the "User area registration" form is processed to enable the data subject's registration to the website, access to and execution of the services reserved to registered users and the possible placing of a purchase order for available products via the website, including any administrative and accounting formalities. In this case, the legal basis is the performance of a contract (Art. 6(1)(b) GDPR).
1.3 Subscription to the Newsletter
In the event that the User accepts to subscribe to the newsletter service, the Data Controller acquires the e-mail address in order to send communications concerning its services, products and offers. The legal basis for the processing is therefore the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
For further information on the said processing, please refer to the specific information provided at the bottom of the application form.
In order to use the e-commerce service and purchase the products on our E-shop, the User may choose to create his or her own personal account and shall, in any case, complete the shipping form, the payment form and, optionally, the invoicing form.· Identification, personal and contact data such as: first name, last name, billing address; shipping address of the purchased products, city, postcode, e-mail address, telephone number, any notes for delivery;
Through these forms, the Controller collects and processes the following categories of personal data:
· Payment data: credit card number, expiry date, security code, first name and last name of the credit card holder. This data is encrypted to ensure secure transactions.
If the User so requests, we may also store payment and billing data in order to make future purchases of products easier. .
The Controller collects such data for the following purposes:
a) Management of the contractual relationship, including the opening of a master data - customers, administrative management of the order, invoicing and shipment and/or delivery of the products, to respond to any requests for information and for the management of debt collection; the legal basis for such processing is the performance of a contract/service requested by the data subject [art. 6, par. 1, lett. b GDPR].
b) Fulfilment of legal obligations deriving from the contract; the legal basis for such processing is the fulfilment of obligations laid down by law or Community legislation [Art. 6(1)(c) GDPR].
c) Safeguard of rights before the competent authorities in the event of disputes or complaints; the legal basis for such processing is the legitimate interest of the Data Controller in having its rights protected [Art. 6(1)(f) GDPR].
d) Anonimysed statistical and sales performance analysis; the legal basis for such processing is the legitimate interest of the Controller - art. 6, par. 1, lett. f GDPR.
e) Fraud prevention and combating: the legal basis for such processing is the legitimate interest of the Controller - Art. 6(1)(f GDPR). Through an automated system operated exclusively by the service provider as autonomous data controller, after a certain number of unsuccessful payment attempts, the card number or IP address may be blocked automatically, for a short period of time. Please, note that the Controller has no access to such data.
The provision of data not expressly identified as 'optional', when filling in the form and personal data concerning the purchase is mandatory for the conclusion of the sales contract and subsequent shipment and invoicing. In the event of failure to provide such data, it will not be possible to conclude the online purchase of our products.
1. 5 Marketing
Subject to the User's free consent, which may be expressed by ticking the relevant box at the bottom of the contact/request forms on the website, the Data Controller may use the User's personal and contact details to send commercial communications or advertising material, or direct sales and/or market research and customer satisfaction activities, using traditional contact methods (e.g. ordinary mail, telephone) and automated methods (e.g. e-mail, instant messaging systems etc.). The said consent is optional and, where given, is revocable at any time. The legal basis for the said processing is therefore the consent (Art. 6(1)(a) GDPR).
Subject to the User's free consent, which he/she may express by checking the relevant box at the bottom of the contact/request forms, the Data Controller may examine your preferences and the ways in which you interact with us in order to outline your behaviours, habits and propensity to purchase, with a view to improving the services offered by the Data Controller on the basis of individual or group profiling. The Controller does not adopt decision-making processes based exclusively on automated processes. Said consent is optional and, where given, is revocable at any time. The legal basis for the processing is, therefore, the consent (Art. 6(1)(a) GDPR).
1. 7 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, specific personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites accessed or exited from, information on the pages visited by users within the site, access time, the length of time spent on the individual page, internal path analysis and other parameters relating to the user's operating system and user's computer environment.
This technical/computer data is collected and used only in an aggregate and not immediately identifiable manner; it could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site or upon request of public authorities.
1.8 Cookies (referral)
With regard to the installation of cookies by this website, please refer to the following Policy https://www.stilelatino.com/en/cookiepolicy/.
To whom do we communicate your Data?
The personal data acquired through this website is accessible to duly authorized and instructed persons acting on behalf of the Controller, as responsible for the management of the requested service.
In addition, your personal data may be shared with our providers of services instrumental to the services rendered by Stile Latino S.r.l. (eg. shipping companies, maintenance companies and technical management of the site, mail marketing agencies, suppliers of payment services for the shop etc.). These latter subjects will operate as data processors, on the basis of specific agreements entered into ex. Art. 28 GDPR.
A complete list of the subjects to whom your Data may be communicated will be made available by sending a written request to: [email protected]
How do we process your Data?
The processing of the User's personal data, for each of the above purposes, will take place in automated and/or traditional form and, in any case, in accordance with the principles of lawfulness, necessity and relevance, taking appropriate measures to ensure the security, availability and confidentiality of the data.
Where do we store your data?
The processing operations connected to the web services of this site are stored on servers located within the European Economic Area. Personal data is handled only by the technical staff of this company, specifically appointed for this purpose, or by any persons in charge of occasional maintenance operations. The data collected during the acquisition of our e-commerce to manage sales and delivery operations is stored on the server of the service provider, in accordance with the provisions of the DPA stipulated with the same.
How long do we keep your data?
The Users' personal data is kept for the time strictly necessary to pursue the purposes indicated above, in compliance with civil and tax conservation obligations and the limits provided for by law. In any case, once the ten-year limitation period has expired (Art. 2946 of the Italian Civil Code; Art. 8, Law no. 212 of 27 July 2000) and the ten-year limitation period for compulsory storage of accounting records (Art. 2220 of the Italian Civil Code) has expired, and the need for the Data Controller to store information in view of possible tax audits has ceased to exist, the data is destroyed, cancelled or transformed into an unintelligible form, unless there are further needs that justify their storage (e.g. pending legal disputes).
For profiling or marketing purposes to which the person concerned has consented by ticking the flag provided in the relevant boxes of the forms on the site, the personal and contact data and the detailed data relating to the good or service requested will be kept for a period of 24 months, after which the Data Controller reserves the right to send you a reminder of the consent given.
What rights can you exercise?
As a data subject, pursuant to Articles 15 et seq. of the GDPR, you may exercise your rights, which include the right to access your personal data, the right to request its modification, deletion or restriction or to object to its processing at any time, as well as the right to data portability should the relevant conditions be met.
In addition, in the event of failure or partial reply by the Data Controller to the aforementioned requests, the User shall have the right to lodge a complaint with the Authority for the protection of personal data or file an appeal to the competent judicial authority, within the terms and according to the modalities provided for under EU Regulation 2016/679 (GDPR) and the national legislation in force.
How to contact Stile Latino S.r.l. for the exercise of your rights or for the revocation or modification of consents given for Marketing and profiling purposes?
You may contact Stile Latino S.r.l. at the following contact details:
How can I contact the competent supervisory authority to lodge any complaints?
Any complaints may be submitted to the Garante per la Protezione dei Dati Personali (Piazza di Monte Citorio n. 121, 00186 Roma, Italy), using the following contact details:
- Fax: (+39) 06.69677.3785
- Ph: (+39) 06.696771
- E-mail: [email protected]
- Certified mail: [email protected]
The possible entry into force of new sector regulations, as well as the constant review and updating of the services rendered to the User, may entail the need to change the way in which we process personal data. It is therefore possible that our policy may change over time, and we therefore invite the visitor to periodically consult this page. To this end, the policy document always reports the latest update.
Ultimo aggiornamento in data: 15/12/2022.