This Privacy Policy is intended to describe how the website http://www.fratellivitale.com/ (hereinafter, the “Website”) is managed with regard to the processing of users’ personal data.
This is a general information notice provided in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data (hereinafter, the “Regulation”), to all users who browse and/or register and, more generally, interact with the services made available through the Website, Fratelli Vitale, with registered office at Contrada Laureta (P.O. Box I), -83036 Mirabella Eclano (AV), VAT No. IT00251590642 (hereinafter: the “Data Controller” or “Fratelli Vitale”).
In this notice we will explain the purposes and methods by which the Data Controller collects and processes your personal data, which categories of data are processed, what rights data subjects have, and how those rights may be exercised.
This notice is provided exclusively for this Website; therefore, the Data Controller assumes no responsibility with regard to any other websites that may be consulted through hyperlinks on the Website.
By using this Website, users accept this notice and are therefore invited to read it before providing any personal information of any kind.
Categories of personal data
- Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.
These data are used solely to obtain anonymous statistical information on the use of the Website and to check its proper functioning, and are deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the Website.
- Data provided voluntarily by the user
Without prejudice to what is specified above regarding browsing data, Fratelli Vitale will acquire any personal data provided by the user through the Website in order to access certain services (e.g., to access services, place orders, or subscribe to the newsletter), or to submit requests via email. By way of example, the Website will collect only ordinary personal data (first name, last name, email), as well as the type of order requested and any other data that the user may communicate, on their own initiative, through the contact tools made available on the Website.
Through the Website, at your explicit request (for example, in the case of a booking), the Data Controller may collect sensitive data or, in any event, data falling within the special categories referred to in Article 9 of Regulation (EU) 2016/679, or data relating to criminal convictions or offences.
- Data collected when using the services
The Data Controller may also collect certain personal data relating to the registered user when using the services offered by Fratelli Vitale through the Website. The personal data indicated above will be processed by the Data Controller solely for the purposes and within the limits set out in the following paragraph.
Purposes and legal basis of processing
- For the provision of services
The data indicated in the previous paragraph, points 2 and 3, will be processed by the Data Controller to allow you to register on the Website and to use the services specifically connected thereto. The data will therefore be processed for the performance of the legal relationship in place with the Data Controller. Providing such data is necessary.
In fact, once registered, the user will be able to access a reserved area through the Website by entering a “username” and “password”: at the time of registration, the user will provide personal data such as first name, last name, address, phone number, email address, bank details (IBAN), and VAT number. Such data will be used to fulfil the order, as well as to contact the user if it is necessary to provide information relating to the processing of the order.
- For promotional purposes
With the user’s explicit consent, the data indicated in the previous paragraph, points 2 and 3, may also be used for commercial communications in order to promote further product or service offers by Fratelli Vitale. The optional, explicit, and voluntary sending of email to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Categories of recipients to whom personal data may be disclosed and purpose of disclosure
For the same purposes, the Data Controller may disclose certain of your personal data to third parties, who will process your personal data as Data Processors. The list of Data Processors may be requested from the Data Controller at any time.
The list of Data Processors may be requested by writing to privacy@fratellivitale.com.
Users are informed that IP addresses have been anonymised, meaning that the Data Controller may, by default, store only part of the IP address.
Data retention period and duration of processing
Your data will be stored for the entire duration of the contractual relationship with the Data Controller; following termination of the relationship, for whatever reason, the data will be retained for a limited period, up to ten years from termination of the contractual relationship, solely for the purposes of protecting the Data Controller’s rights and for compliance with legal obligations.
Browsing data will be retained for a maximum of 12 months.
Rights of data subjects
We inform you that, in accordance with applicable law, you have the following rights:
- to request and obtain information as to whether your data are held by the Data Controller and to access such data;
- for data processed by automated means, to request that the data be transferred to another controller;
- to request and obtain the amendment and/or correction of your personal data if you believe they are inaccurate or incomplete;
- to request and obtain erasure and/or restriction of processing of your personal data where such data or information are not necessary, or are no longer necessary, for the purposes set out above, once the retention period indicated in the preceding paragraph has elapsed.
In particular, you are granted the following rights: Articles 15 – “Right of access by the data subject”, 16 – “Right to rectification”, 17 – “Right to erasure”, 18 – “Right to restriction of processing”, 20 – “Right to data portability” of Regulation (EU) 2016/679, within the limits and under the conditions set out in Article 12 of the Regulation.
Such requests may be addressed to the Data Controller by sending an email to privacy@fratellivitale.com.
We also inform you that the Data Controller has appointed a Data Protection Officer, who can be contacted at dpo@e-lex.it.
We further inform you that, pursuant to applicable law, you may lodge any complaints regarding the processing of your personal data with the Italian Data Protection Authority (Garante per la protezione dei dati personali).