Source: http://pasticceriacova.com/en/terms-and-privacy
Timestamp: 2019-04-21 10:19:10+00:00

Document:
This policy describes the procedures followed by Pasticceria Confetteria Cova S.r.l. (hereinafter "Cova" or the "Controller" or the “Company”) in relation to the processing of personal data collected through the website www.pasticceriacova.com (hereinafter the "Website").
Unless otherwise stated, this policy also applies as an information notice - in accordance with art. 13 of Regulation (EU) no. 2016/679 (hereinafter the "GDPR") - rendered to those who interact with the Website (hereinafter the "User").
Information on the processing of detailed personal data is provided, where necessary, in the pages relating to the individual services offered through the Website. Such information is aimed at defining the limits and methods of processing the personal data of each service, on the basis of which the User can freely express his consent, where necessary, and possibly authorize the collection of data and their subsequent processing.
The Data Controller is Cova, with registered office in Via Pietro Cossa 2, 20122 Milano (MI), tel. +39 0276002750, e-mail privacy@covamilano.com. The updated list of any data processors is available at the registered office of the Controller.
personal data provided voluntarily by the User through the forms present within the Website.
Cookies are small text files that websites you visit send to your terminal, where they are stored, and then retransmit to the same websites the next time you visit. Cookies allow websites to function properly and efficiently to improve your experience by allowing the website to store information in the memory of your computer or other devices.
The Website uses technical cookies. Such cookies, due to the technical nature, do not require the prior consent of the User to be installed and used.
social widgets and plugins: some widgets and plugins made available by social networks may use their own cookies to facilitate interaction with the website of reference.
The third party cookies installed on the Website are listed below. For each of them, there is a link to the relative information notice on the processing of personal data carried out and the methods for deactivation of any cookies used. With regard to third party cookies, the Controller is only obliged to insert the link to the third party's website in this policy. On the other hand, the latter is required to provide information and indicate how to consent to and/or deactivate cookies.
Cookies may be disabled by the User by checking and/or changing their browser settings based on the instructions made available by their providers to the links listed below.
for the sending of communications aimed at the promotion and/or direct sale of products or services similar to those you have already purchased (so-called "soft spamming"), without prejudice to your right to object at any time.
The processing of personal data for the purposes under a) does not require the consent of the User as the processing is necessary to meet specific requests of the subject concerned under art. 6, par. 1, lett. b) of the GDPR. The processing of personal data for the purposes under b), c) and d) requires the consent of the User pursuant to art. 6, par. 1, lett. a) of the GDPR.
The processing of personal data for the purposes under e) does not require the consent of the User as the processing is necessary for the fulfillment of specific contractual obligations, pursuant to art. 6, par. 1, let. b) of the GDPR. The processing of personal data for the purposes under f) does not require the consent of the User as it is necessary to comply with the legal obligations to which the Controller is subject, under art. 6, par. 1, let. c) of the GDPR. The processing of personal data for the purposes sub g) and h) does not require your consent as it is necessary for the pursuit of the legitimate interests of the Controller, pursuant to art. 6, par. 1, let. f) of the GDPR.
The principality of Monaco, on the basis of your explicit consent.
The provision of personal data for the purposes under a), b), c) and d) is optional and failure to provide them shall result, as a consequence, the only impossibility for the Data Controller to manage and process requests or to send commercial communications on products and services of the same or to carry out the activities specified.
The provision of personal data for the purposes under e) and f) is necessary to fulfill the legal and contractual obligations on the part of the subject concerned and the Controller. The provision of personal data for the purposes under g) is necessary for the pursuit of the legitimate interests of the Company indicated above. In all these cases, failure to provide the data shall make it impossible for the Company to respond to your purchase request and manage your contractual relationship.
Cova's business partners located in countries outside the European Union.
The data shall be stored for a maximum period of time equal to the period of prescription of the rights that can be activated by the Controller, as applicable from time to time. In the case of processing for marketing purposes, the data shall be stored for a maximum period of 24 months; for profiling purposes, the data shall be stored for a maximum period of 12 months.
receive their personal data in a structured format that is commonly used and machine-readable, and request their transmission to another controller if technically feasible.
Every concerned subject has the right to object at any time to the processing of his/her personal data carried out in order to pursue a legitimate interest of the Controller. In the event of objection, personal data will no longer be processed, unless there are legitimate reasons to carry out the processing that prevail over the interests, rights and freedoms of the concerned subject or for ascertaining, exercising or defending a right in court.
RIGHT TO REVOKE THE CONSENT.
In the event that consent is required for the processing of personal data, each interested party may, at any time, revoke the consent already given, without prejudice to the lawfulness of the processing based on consent given before the revocation. Consent can be revoked by writing an email to privacy@covamilano.com.
RIGHT OF OBJECTION AND REVOCATION OF CONSENT IN RELATION TO THE PROCESSING CARRIED OUT FOR MARKETING PURPOSES.
With reference to the processing of personal data for the purposes under lett. b), d) and h) each concerned subject may revoke at any time any consent given or object their processing, by writing an email to privacy@covamilano.com. Objection to the processing exercised through these methods also extends to the sending of commercial communications by postal service or telephone calls with an operator, without prejudice to the possibility of exercising this right in part, objecting for example only the processing carried out through automated communication systems.
RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY.
In addition, any concerned subject may lodge a complaint with the Italian Data Protection Authority in the event that he/she believes that his/her rights under the GDPR have been violated, in accordance with the procedures indicated on the Italian Data Protection Authority’s website accessible at: www.garanteprivacy.it.

References: art. 13
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6