Information pursuant to art. 13 of Regulation (EU) 2016/679 - WEB

With this document (the "Privacy Notice"), the Data Controller, as defined below, wishes to inform you of the purposes and methods of processing your personal data and of the rights granted to you under Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR"). This Notice may be supplemented by the Data Controller if any additional services requested by you entail further processing.

Data controller

La Chiocciola SRL with headquarters in Via Ruvo, 103 - 70033 Corato (BA), Italy, P.IVA: IT07554100722,  tel: 0808984705, mail: info@lachiocciolasrl.it , PEC: lachiocciolasrls@pec.it​​ 

Types of data processed

The processing activities carried out are aimed at acquiring the following personal data:

  • Cookie: Profiling Cookies;
  • Behavioral data: Navigation log;
  • Common data: Personal data.

Categories of interested parties

The processing activities carried out are aimed at the following categories of interested parties: Natural persons, legal persons, public and private organizations.

Purpose of the processing and condition that makes the processing lawful

1 - SITE - Navigation Data

Obtain anonymous statistical information on usage, monitor the correct functioning of the site, and ascertain liability in the event of hypothetical cybercrimes against the Data Controller.

Condition of Lawfulness of Treatment: Legitimate Interest - Art. 6, paragraph 1, letter f. GDPR

Purpose of the processing:   1) Data analysis for website development and maintenance; 2) Ascertainment of liability in the event of potential cybercrime against the website and/or data subjects; 3) Anonymous statistical analysis of website use.

Nature of the contribution:

Mandatory - Failure to provide the data will make it impossible for the company to provide the web service provided.

Personal data retention period: Data is retained for 30 days.

Processing Methods: Processing is performed using IT tools.

2 - SITE - Requests from the Site

Richieste formulate dagli interessati mediante il sito internet del Titolare del Trattamento.

Condition of Lawfulness of Treatment:  Contract Execution - Art. 6, paragraph 1, letter b. GDPR

Purpose of the processing: 1) Sending requests via web platform tools.

Nature of the provision: Optional - Failure to provide the data will make it impossible for the Data Controller to respond to the interested party's requests.

Personal data retention period: Processing of the request.

Processing Methods: Processing is performed using IT tools.

3 - SITE - Use of the Service and Reserved Area

Use of the services offered through the reserved area of ​the Data Controller's website.​

Condition of Lawfulness of Treatment:  Contract Execution - Art. 6, paragraph 1, letter b. GDPR

Purpose of the processing:  1) Registration in the reserved area; 2) Use of the service provided by accessing the reserved area of ​​the site.

Nature of the provision: Optional - Failure to provide the data will make it impossible for the Data Controller to provide services through the reserved area of ​the site.​

Personal data retention period: Deletion of the user.

Processing Methods: Processing is performed using IT tools.

4 - SITE - Remarketing

Use of Google AdWords and Facebook advertising platforms to advertise the products/services offered by the Data Controller on third-party websites. Remarketing may involve running advertising campaigns on Google search results pages, on a site in the Google Display Network (Google Adsense), or within the Facebook social network, targeting site visitors who have given their consent for this purpose. Third-party vendors, including Google and Facebook, use cookies to serve ads based on previous visits to our website. All data collected will be used in accordance with our privacy policy, as well as the privacy policies of Google and Facebook. You can opt out of remarketing advertising campaigns using the following links: for Google: - https://support.google.com/ads/answer/2662922?hl=it - https://adssettings.google.com/authenticated?hl=it#display_optout for Facebook: https://www.facebook.com/ads/website_custom_audiences/

Condition of Lawfulness of Treatment:   Consent - Art. 6, c.1, let. to. GDPR

Purpose of the processing: 1) Use of cookies for the configuration and management of advertising campaigns carried out on the Facebook platform and Google Display Network.

Nature of the provision: Optional - Failure to provide consent will make it impossible for the Data Controller to promote products/services on third-party websites other than the Data Controller's own.

Personal data retention period: The remarketing cookie used by this site is used for 30 days for Google AdWords and 30 days for Facebook.

Personal data retention period: The remarketing cookie used by this site is used for 30 days for Google AdWords and 30 days for Facebook.

5 - FACEBOOK SOCIAL PAGE

When a user uses the Page managed by the Owner, Facebook (“Social Media”) collects information such as the types of content viewed or interacted with, the actions performed, as well as information on the devices used (IP addresses, operating system, browser type, language settings, cookie data).

Page Insights are aggregate statistics created from certain events recorded by Facebook servers when users interact with Pages and the content on them.

As illustrated in Privacy Policy Facebook, the Social Media collects and uses information also to provide statistical data collection services defined  Insights Page to page administrators to help them understand how people interact with the content on their pages.

Details on how Facebook processes your data are available at the following link: https://www.facebook.com/privacy/explanation

Details on the personal data processed for Insights are available at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

Details on the cookies used by Facebook are available at the following link: https://www.facebook.com/policies/cookies/

The Data Controller as administrator of the Page and Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are joint controllers in accordance with Article 26 of the GDPR for the processing of such personal data recorded for the events delivered  Insights Page ("Insights Data").

The joint ownership agreement, between the Owner and Facebook, covers the creation of such events and their aggregation in Insights on the Page provided to each administrator.

The legal basis for the processing is the legitimate interest of the Data Controller, pursuant to Art. 6, paragraph 1, letter f), GDPR. Therefore, obtaining your prior consent for the processing is not required.

Condition of Lawfulness of Treatment: Legitimate Interest - Art. 6, paragraph 1, letter f. GDPR

Purpose of the processing:  1) Statistical surveys relating to the use of elements contained within the Facebook page managed by the Data Controller.

Nature of the provision: Mandatory - Failure to provide the requested data will make it impossible for the Data Controller to provide services through the Page published on Facebook.

Personal data retention period: The data collected will be processed for the time strictly necessary to achieve the purposes described above, as specified in the Facebook policies described above.

Processing Methods: The processing is carried out using computerised means by the joint owner Facebookk

Data subject rights - complaints to the supervisory authority

In relation to the processing described in this Policy, as a data subject, you may, under the conditions set forth in the GDPR, exercise the rights set forth in Articles 15 to 22 of the GDPR and, in particular, the following rights:

  • right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to your personal data;
  • right of rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
  • right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims..
  • right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing when: a) the accuracy of the personal data is contested by the data subject; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the personal data are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
  • right to data portability–Article 20 GDPR: the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from this controller to another controller, where technically feasible;
  • right of opposition – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on legitimate interest, including profiling, unless there are compelling legitimate grounds for the Data Controller to continue processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
  • right not to be subject to automated decision-making – Article 22 GDPR: The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless it is necessary for entering into or performing a contract or you have given your consent. In any case, automated decision-making cannot involve your personal data, and you may at any time obtain human intervention by the data controller, express your opinion, and contest the decision. Feedback Google Traduttore
  • right to lodge a complaint to the Italian Data Protection Authority: http://www.garanteprivacy.it;
  • withdraw consent  provided on every occasion and with the same ease with which it was provided without prejudice to the lawfulness of the processing based on the consent given before the revocation.

The above rights may be exercised against the Data Controller by contacting the contact details indicated in point 1 above. The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Data Controller may charge a reasonable fee, taking into account the administrative costs incurred in handling your request, or refuse to comply with your request. Finally, we inform you that the Data Controller may request additional information necessary to confirm the identity of the data subject.

  • Right of revocation: The data subject has the right to withdraw his or her consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to complain: The interested party has the right to lodge a complaint with the Italian Data Protection Authority at any time, www.garanteprivacy.it