This privacy policy is provided, pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation – henceforth “GDPR”), article 13, and d. lgs. n. 196/2003, article 13, to all the users taking advantage of the Lavezzi s.r.l. web services – Single Member Private Limited Company, owned by Giuseppe Tarditi – via the address www.lavezzi.it, which corresponds to the home page of the Lavezzi s.r.l. official website.

We endeavour to protect the privacy of those who visit our website, to make sure that they can take advantage of the services offered on the site without feeling unsafe. To that end, and pursuant to article 13 of the GDPR and article 13 of Legislative Decree 196/2003 (Personal Data Protection Code), we provide the following information.

1. Type of processed data

1.1 Data voluntarily provided by the user

The data that are provided voluntarily by the users through the email addresses and the website forms, including the user’s name, surname, address and email address, is acquired in order to correctly provide the requested services.

1.2 Cookies

We also collect information relating to the user through the use of cookies, which help the Seller correctly provide the services  on the www.lavezzi.it website. The user can manage their cookie settings and preferences directly on their browser, as well as delete cookies that had been previously installed, including those that may have been saved following the moment in which the consent to the installation of cookies by www.lavezzi.it was given.

This site uses both session and persistent cookies. Session cookies are temporary and only last for as  long as the user is on the website. Persistent cookies are saved by the browser on your computer or device and are used to customize site navigation and get access statistics.

This website can insert scripts in the form of buttons to facilitate sharing content with social networking websites and apps and to help the user interact with them. Lavezzi Srl has no control over the cookies of these websites, therefore the user will have to read the cookie policy directly on the websites of the companies that manage such websites and applications:

• Facebook - https://www.facebook.com/policies/cookies/
• Twitter - https://twitter.com/privacy?lang=en  
• Youtube - https://www.google.com/intl/en/policies/technologies/types/
• Linkedin - https://www.linkedin.com/legal/cookie-policy

If the user sets up their account so that no type of cookie is accepted, they will be able to view the pages of www.lavezzi.it, but the operation of the site and related services may be compromised.

Lavezzi Srl uses Google Analytics to track the www.lavezzi.it website and its usage. Google Analytics collects data regarding users’ browsing in anonymous form. Google Inc. offers the ability to disable Analytics for the web, if the user decides that they do not want the data to be collected.

2. Purpose of data collection

The data can be collected for the following purposes:

a) to complete and place orders, to send confirmation messages relating to a purchase, to handle possible complaints following a purchase;

b) to give users access to the website’s private areas and to send commercial messages, news and updates on the activities of Lavezzi Srl;

c) comply with the obligations stemming from law or regulation;

d) to manage contacts, to send newsletter emails and promotional materials relating to the services and products offered by Lavezzi Srl;

e) to obtain data and statistics on the usage patterns and traffic of the www.lavezzi.it website;

f) for additional purposes related to Lavezzi Srl’s activities, such as data archiving, customers’ management and billing, and in particular to comply with legal obligation of a fiscal, accounting etc. nature.      

 3. Data collection methods

The data will be collected and processed in accordance with the purposes described at section 2 of this policy and in order to ensure the security and confidentiality of the data. The processing of the data can be carried out, using the same means, by third parties providing data processing services on behalf of Lavezzi Srl or carrying out activities that are necessary to carry out the services requested by the users.

Data is processed through the use of computer tools and is kept only for the time necessary to achieve the purposes for which it is collected, in any case not for longer than 10 years.

4. Optional nature of data transfer

The user can decide not to share the personal data that is necessary to complete the application forms on the website, bearing in mind that not providing the mandatory data will render it impossible for Lavezzi Srl to provide the service.

5. Sharing data with third parties

5.1 Access to data

We might give access to the data collected for the purpose of section 2 to:

a) employees and associates of the Controller, in order to comply with their working duties;

b) to third parties, such as the accountancy firm we rely on, in order to carry out their duties on behalf of the Controller.

5.2 Sharing data 

Collected data may be disclosed to third parties under the following circumstances:

a) to investigate potentially fraudulent activities relating to the use of user accounts and the violation of the site’s terms and conditions;

b) in case of sale, reorganisation or merger of our company;

c) where the information is necessary to conduct judicial investigations or to collect tax data. Moreover, some data may be shared with third parties, such as legal advisors or auditors, in order to obtain their professional opinion.

The data of users who have accepted or requested informative material to be sent to them (such as newsletters) are used only on order to carry out these services and are not shared with third parties.

6. Rights of the concerned party

Pursuant to art. 15 to 21 GDPR and d.lgs. n. 196/2003, article 7 (Right of access to personal data and other rights), the concerned party who provides their personal data have specific rights, namely:

6.1 Right of access

The data subject shall have the right to obtain the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f) the right to lodge a complaint with a supervisory authority;

g) where the personal data is not collected from the data subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

6.2 Right to rectification

The data subject shall have the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning him or her.

6.3 Right to erasure

The data subject shall have the right to obtain from the Controller the erasure of personal data concerning him or her without undue delay.

6.4 Right to restriction of processing

The data subject shall have the right to obtain from the Controller restriction of processing in the cases outlined by art. 18, par. 1 GDPR.

6.5 Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance in the cases outlined by art. 20, par. 1 GDPR.

6.6 Right to object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her.

6.7 Exercising your rights

The data subject can exercise their rights by:

a) accessing and editing their account data directly on our website www.lavezzi.it;

b) making a request via e-mail to our e-mail address lavezzi@lavezzi.it, or contacting us through our Contacts page.

The data Controller or one of their employees will reply to the request within a reasonable time and in any case within one month of receiving the request.

7. Transferring data outside of the European Union

Collected data is stored on servers located in Germany and is in no case transferred to countries outside the European Union. Some data can also be stored in our company server.

8. Data Controller and Processor

The data controller as far as statutory obligations are concerned is Lavezzi Srl, with registered office in Piazza Primo Maggio, 9, Robbio (PV), 27038, VAT number: 01873250185.

The data Processor, as far as the data collected on our website www.lavezzi.it is concerned, is the hosting company VHosting Solution s.r.l Unipersonale.

In order to take advantage of the rights protected by art. 15 to 21 GDPR and by art. 7 of the Privacy Code, you just need to get in contact with us through one of the channels listed on our Contacts page.

All data is protected through the use of antivirus, firewall and password protection.

Lavezzi Srl

May 2018