PRIVACY POLICY STATEMENT
UNDER ART. 13 OF REG. (EU) 2016/679
Here at Simone Bianchi Art S.r.l. we give great importance to personal data protection,
and so we are constantly at work to ensure that your privacy is respected.
Therefore, this document is intended to provide you with information about the processing
of your personal data, how and why we collect them, and how we manage them.
We process your personal data when you visit our website, when you purchase our
services, and when you ask us for assistance or just information.
In all cases, in compliance with Regulation (EU) 2016/679, we process all your data in a
responsible manner, in accordance with the principles of lawfulness, fairness,
transparency, accuracy, purpose limitation, data minimisation and storage limitation,
guaranteeing their integrity and confidentiality.
On this basis, in accordance with art. 13 of Regulation (EU) 2016/679, we would like to
provide you with information about this processing.
DATA CONTROLLER
The Data Controller is Simone Bianchi Art S.r.l. (VAT no./Tax Code IT02533350464),
with registered office at Capannori (Lucca), Via di Paganico 9/G, which can also be
contacted by ordinary email at info@simonebianchi.it or by certified email at
simonebianchiartsrl@pec.it
PURPOSES OF THE PROCESSING
LEGAL BASIS
Browsing: We use your data to enable
you to browse and consult our website.
During their normal operations, the IT
systems and software resources
necessary for the functioning of websites
acquire certain personal data, the
transmission of which is implicit in the use
of Internet communication protocols. This
category of data includes IP addresses,
information regarding the device used to
connect to the website, the URI/URL
(Uniform Resource Identifiers/Locator)
format addresses of the requested
Processing takes place on the basis of art.
6 para 1 point b) of Reg. (EU) 2016/679,
since it is necessary for the performance of
precontractual measures adopted on your
request, or for the performance of a
contract to which you are a party.
resources, the time of the request, the
method utilised in presenting a request to
the server, the size of the file obtained in
response, the numerical code specifying
the status of the response provided by the
server (positive outcome, error, etc.) and
other parameters concerning the
operating system and the user’s IT
environment, and other identifiers which
may, on their own or together with other
data, allow the identification of a natural
person. This category also includes
cookies, for which reference should be
made to the specific policy statement.
Registration on the reserved area: The
purpose of the data processing is to
enable you to register and then to access
the reserved area of the website, and to
manage your account.
Processing takes place on the basis of art.
6 para 1 point b) of Reg. (EU) 2016/679,
since it is necessary for the performance of
precontractual measures adopted on your
request, or for the performance of a
contract to which you are a party.
Performance of precontractual and
contractual measures: We process your
data during preliminary activities related to
and/or arising from the purchase of one of
our services and/or products. This
purpose includes processing in the pre-
contractual phase, and for the conclusion
and management of the contract,
including assistance, billing and/or
fulfilment of any other legal obligations
arising from the performance of the
contract.
Processing takes place on the basis of art.
6 para 1 point b) of Reg. (EU) 2016/679,
since it is necessary for the performance of
precontractual measures adopted on your
request, or for the performance of a
contract to which you are a party.
Direct marketing: Personal data are
processed in order to send, via email,
commercial and/or marketing
communications regarding services and/or
products similar to those already
purchased.
Processing takes place on the basis of art.
6 para 1 point f) of Reg. (EU) 2016/679,
and in particular the Data Controller’s
legitimate interest in conducting marketing
activities, provided the data subject’s
interests, rights and/or fundamental
freedoms do not prevail. More specifically,
for the purposes of art. 130 para 4 of
Italian Legislative Decree No.196/2003,
Simone Bianchi Art S.r.l. may use your
email address, supplied in the context of
the sale of products or services by the data
controller, for the dispatch of marketing
communications relating to products or
services similar to those already
purchased. You may, however, object to
the processing at any time, easily and free
of charge, by asking not to receive any
further communications.
DATA DISCLOSURE
Your communication of your personal data is a contractual obligation, since otherwise it
is not possible to perform the actions requested.
RECIPIENTS OF THE DATA
Depending on the purpose, Simone Bianchi Art S.r.l. may disclose the personal data
contributed to it to its staff, specifically authorised to perform processing operations, and
to IT service providers and/or consultants acting in the capacity of data processors,
Banks acting in the capacity of independent data controllers, and Public Authorities in
the fulfilment of legal obligations. The list of recipients is available from the data
controller.
DATA STORAGE PERIOD
Data will be stored in a form which allows the identification of the data subject for a
period of time not exceeding that necessary for the fulfilment of the specific purpose for
which they were collected. In the case of performance of a contract and/or fulfilment of
related legal obligations, data will be stored for ten years, pursuant to art. 2946 of the
Italian Civil Code for matters with standard time-limitations and/or pursuant to articles
2220 of the Civil Code and 22 of Italian Presidential Decree no. 600/1973 when
applicable.
EXERCISING YOUR RIGHTS
You have the right, at any time, to obtain from the data controller confirmation as to
whether or not personal data concerning you are being processed, and, where that is
the case, access to your personal data and the following information:
- the purposes of the processing;
- the categories of personal data processed;
- the recipients or categories of recipients to whom the personal data have been or will
be disclosed;
- the storage period or the criteria used to decide this period;
- the existence of an automated decision-making process, including profiling.
You may also request:
- the rectification of your data, if they are inaccurate;
- erasure, if: i) the personal data are no longer necessary for the purposes for which they
were collected and/or processed; ii) consent is withdrawn, if there is no other legal
foundation for the processing; iii) an objection is made under art. 21 paras 1) and 2) of
the Regulation; iv) it is necessary to fulfil a legal obligation;
- the restriction of processing in the event that: i) you dispute the accuracy of the
personal data, for the period necessary for the data controller to verify the accuracy of
the data; ii) the processing is unlawful and you wish to oppose the erasure of the data
and only request the restriction of their use; iii) the data controller no longer needs the
data but they are necessary to you for the ascertainment, exercise or defence of a right
in court; iv) in the event of exercise of the right to object under art. 21, for the time
necessary for the data controller to verify whether there are legitimate grounds of the
data controller for the processing which prevail over your grounds;
- to receive the personal data processed by automated means on the basis of consent or
a contract, in a structured, commonly used and machine-readable format;
- that the data are not processed further for direct marketing purposes, through an
objection pursuant to art. 21 para 2) of the Regulation;
Finally, you have the right to lodge a complaint with the Italian Data Protection Authority
- Garante per la protezione dei dati personali, Piazza Venezia no. 11, Rome, if you
believe that a form of processing is in breach of the Regulation.