Privacy policy

Information on the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). Effective from 1 August 2023

PREMISE

This notice takes into account the provisions of the GDPR and the Italian Privacy Code (Legislative Decree 30 June 2003 No. 196). The document has also been drafted in accordance with the Guidelines of the Italian Data Protection Authority (in particular the anti-spam guidelines issued by the Authority on 4 July 2013).

Data Controller: In Tessere Scuola di Mosaico di Tiziana Mondini, with registered office in Via Vittorio Emanuele, 6, 05035 Narni (TR) Italy, Phone (+39) 347 12 25 550, Email scuolamosaico@intessere.com, registered with the Chamber of Commerce of Terni.

Website to which this privacy policy refers: https://shop.intessere.com (Site).

The Data Controller has not appointed a DPO (Data Protection Officer). Therefore, you may send any request for information directly to the Data Controller.

GENERAL INFORMATION

This document describes how the Data Controller processes your personal data provided through the Site.

The main processing activities relating to your personal data are described below. In particular, the legal basis of the processing, whether the provision of data is mandatory, and the consequences of failing to provide personal data are explained. In order to better describe your rights, where necessary we have specified whether and when a specific processing of personal data is not carried out.

Registration on the Site

The information and data requested during registration will be used to allow you both to access the restricted area of the Site and to use the online services offered by the Data Controller to registered users. The legal basis of the processing is the need for the Data Controller to carry out pre-contractual measures adopted at the request of the data subject. Providing the data is optional. However, refusal to provide the data will make it impossible to register on the Site.

Purchases on the Site

Your personal data will be processed in order to allow you to make purchases on the Site. In the case of placing an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the operations connected with it (and, where necessary under sector regulations, to fulfil tax obligations).

This processing of personal data also includes the possibility of sending communications (e.g. tracking and order information) via automated tools such as SMS and/or WhatsApp.

The legal basis of the processing is the obligation of the Data Controller to perform the contract with the data subject or to comply with legal obligations.

Regardless of the above (and therefore without requiring your consent), the Data Controller may process your data for the purposes of so-called “soft-spam”, regulated by Article 130 of the Italian Privacy Code. This means that, limited to the email address you provided in the context of a purchase through the Site, the Data Controller may use it to send offers of similar products or services, provided that you do not object to such processing in the manner indicated in this notice.

The legal basis of the processing is the legitimate interest of the Data Controller in sending this type of communication. This legitimate interest may be considered equivalent to the interest of the data subject in receiving “soft-spam” communications.

The Data Controller may also send emails to remind users to complete a purchase. The legal basis for this processing is the legitimate interest of the Data Controller in sending this type of communication.

Responding to your requests

Your data will be processed to respond to your requests for information. Providing the data is optional, but refusal will make it impossible for the Data Controller to respond to your requests. The legal basis for processing is the legitimate interest of the Data Controller in responding to the user's requests. This legitimate interest is equivalent to the user's interest in receiving a response to communications sent to the Data Controller.

General marketing

Subject to your consent, the Data Controller may process the personal data you provide in order to send you advertising material and/or newsletters relating to its own products or those of third parties. The legal basis for this processing is your consent. Providing personal data for this purpose is entirely optional.

Failure to consent to the processing of data for marketing purposes will make it impossible for you to receive advertising material relating to products/services of the Data Controller and/or third parties, as well as prevent the Data Controller from conducting market research, including research aimed at evaluating user satisfaction, and sending newsletters. These communications will be sent to the email address you provided on the Site.

Profiling

The Data Controller does not carry out profiling using your personal data. Therefore, you will not receive advertising material and/or newsletters relating to products or services specifically tailored to your interests.

Transfer of data

The Data Controller does not sell your personal data to third parties.

Geolocation

The Site does not implement IP address geolocation tools.

Curriculum Vitae

It is not possible to send curriculum vitae through the Site. Therefore, your data will not be processed for these purposes.

Appointment booking

No third-party appointment booking systems are active on the Site. Therefore, your data will not be processed for this purpose. In any case, you can always contact the Data Controller using the contact details indicated above.

Communication of personal data

As part of its normal business activities, the Data Controller may communicate your personal data to specific categories of recipients. In Article 2 you can find the list of parties to whom the Data Controller may communicate your personal data.

The “communication” of personal data to third parties differs from the “transfer” of data. In communication, the third party may use the data only for the purposes specified in the relationship with the Data Controller. In the case of transfer, however, the third party becomes an independent Data Controller of the personal data.

In any case, the Data Controller may use your personal data to fulfil obligations imposed by current laws.