PRIVACY POLICY
Pursuant to articles 12, 13, 14 and following of the General Data Protection Regulation (hereinafter GDPR) on the protection of individuals with regard to the processing of personal data, La Via dell'Incenso, as data controller, provides the following information:
1. The user's personal data will be processed for purposes related to the provision of the services offered on the website (www.laviadellincenso.it), for activities of a commercial, direct sales, marketing, promotional, statistical nature, for the disclosure of consumer preferences, as well as for the performance of contractual obligations related thereto (including the purchase of products online and the management of the order; the management of customer care activities, verification and in-depth analysis of reports and complaints; activities preliminary to the contract and contractual obligations; administrative-accounting tasks).
Subject to specific and separate consent, data may be processed for the following purposes: advertising and promotional activities, such as the sending of newsletters and product promotions.
2. The legal basis for the processing are the obligations assumed by the data controller towards the user in the case of processing necessary for the performance of a contract (such as the sale of goods) and/or for the management of pre-contractual relations relating to the sale or other services offered. On the other hand, for processing for direct marketing purposes, the legal basis is the legitimate interest of the data controller ("processing necessary to pursue a legitimate interest of the data controller"), in a similar sense to the legitimate interest for processing personal data for direct marketing purposes.
For all other processing that may be carried out by the controller, the legal basis is the consent of the data subject.
3. The data controller is La Via dell'Incenso, P.IVA 06422490489 Via Bolognese 71
50019 Sesto Fiorentino (FI). The data controller can be contacted by e-mail at info@laviadellincenso.it.
4. The Data Protection Officer (DPO) can be contacted at the registered office address or at the e-mail address info@laviadellincenso.it.
5. In order to register on the Site, enter the reserved area of the Site, obtain purchase assistance activities from the Controller, it is necessary to provide the following data: first name, last name, telephone number, e-mail address.
6. The provision of personal data (name, surname, e-mail, telephone number, address and e-mail) is necessary, among other things, to manage the registration as a user, the purchase of products or services, to answer questions and, only with prior consent, to send promotional communications (newsletters).
7. Personal data are also processed through the creation of a centralized database, using computer and telematic tools. The database containing the personal data of the users is accessible only to authorized persons. Specially appointed persons, such as employees or other collaborators, may become aware of the data during the processing necessary for or related to the execution of the order and marketing activities.
In addition to the Data Controller, in some cases other subjects involved in the organization of the Site (administrative, sales, marketing, legal, system administrators) or external subjects (such as administrative and accounting service providers, couriers and logistics operators, hosting providers and system engineering service providers, collection service providers, IT and online marketing companies) also appointed as data processors by the Data Controller may have access to the data. The updated list of subjects may be requested from the Data Controller at any time.
These subjects will only have access to the personal data necessary to perform their tasks and will not be able to use the same data for other purposes. They are also required to process personal data in accordance with this Privacy Policy and applicable data protection regulations.
Each agent will be provided with specific instructions regarding data processing that the agent must follow. The Way of Incense confirms that any personal data provided by the data subject will not be used for purposes other than those stated herein.
8. Data Retention Period by Purpose.
Data will be processed and kept for a period not exceeding the time necessary to achieve the purposes for which they are processed. Data relating to the details of purchases with reference to identifiable customers will be kept for profiling or marketing purposes for a period not exceeding twelve and twenty-four months respectively from the date of their registration, subject to their effective transformation into an anonymous form that does not allow, even indirectly or by linking with other databases, the identification of the data subjects.
The personal data (personal, contact, contractual and pre-contractual) related to the contractual relationships with the customers of La Via dell'Incenso are kept in accordance with the law for civil, fiscal, accounting and administrative purposes, to provide evidence in the event of litigation and to satisfy specific requests from the competent authority.
At the end of the retention period, the personal data will be deleted. Therefore, at the end of this period, the rights of access, cancellation, rectification and portability of data may no longer be exercised.
9. The User, when accessing the home page or other pages of the Site, will first see the pop-up banner with brief information on cookies, with a request for consent to the use of cookies. The User will then have access to the Site's Privacy Policy.
"By continuing to browse, the user consents to the use of cookies. By accessing the Cookie Policy, the User may refuse to consent to the use of cookies."
10. By tracking the User's navigation on the Site, including the use of cookies, The Way of Incense will be able to:
a.count visitors to a web page or service provided by the Site;
b. process aggregated statistics, also regarding the functioning of the Site and the services present;
c. improve the performance of the Site, including making user searches more effective;
d. aggregate user traffic data to identify trends;
e. store information about user preferences and then customize the Site accordingly;
f. avoid repetitive advertising;
g. to recognize the computer when the user returns to the Site;
h. store products already purchased and placed in the user's shopping cart;
i. evaluate, again anonymously, the popularity of the services available on the Site, including those of an advertising nature;
l. improve the user's browsing experience by suggesting products and the best promotions based on the navigation performed;
m. with the consent of the registered user, which can be withdrawn at any time, to carry out the identification and detection of personal consumption preferences, with registration of the monitored data for the purpose of targeted offers and promotions;
n.collect anonymous statistical data on the percentage of delivery of e-mails compared to those sent, read, opened, forwarded to third parties, number of "clicks", etc.
In accordance with articles 15 to 22 of the GDPR, the user concerned has the right to
a. access to his/her personal data, obtain information on the data processed and receive a copy of it (art. 15);
b. to obtain the rectification of inaccurate personal data concerning him/her (art. 16);
c. to obtain the deletion of personal data concerning him/her without undue delay under the conditions set out in art. 17;
d. to limit the processing of his/her data under the conditions provided for in art. 18;
e. to object, at any time, to the processing of his/her personal data for the purpose of direct marketing or for the purpose of creating profiles, if this is done for the purpose of direct marketing (art. 21).
f. to revoke at any time the consent given to the processing of personal data where the processing is based on such consent, without prejudice to the lawfulness of the processing carried out on the basis of the consent prior to its revocation
g. the portability of his/her data (art. 20), that is, to receive his/her personal data provided to the data controller in a structured, commonly used and machine-readable format and to transmit them to another data controller without any hindrance from the data controller to whom he/she provided them. In exercising the right to data portability, the data subject shall also have the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible;
h. lodge a complaint with the data protection authority or take legal action.
These rights may be exercised at any time by writing to the Data Controller La Via dell'Incenso, info@laviadellincenso.it, who will do so as soon as possible.
However, pursuant to Article 77 of the GDPR, this is without prejudice to the data subject's right to appeal to the data protection authority, whose references can be found at https://www.garanteprivacy.it.