Source: http://parris.it/privacy/
Timestamp: 2019-04-26 06:46:01+00:00

Document:
The disclosure is made exclusively for this website and exclusively concerns the role of Pelletterie Bianchi e Nardi SpA as Personal Data Controller for this website and not for other websites which might be accessed by the User through links or directly through social media available in the website, and its purpose is to inform the Users of the website how their personal data are collected and processed.
The changes will apply from the date of their publication on said website. If the data subject is not willing to accept any change, he or she may discontinue their use of the website.
Therefore, data subjects are invited to periodically consult the dedicated webpage.
The Personal Data Controller points out that this disclosure can be freely and easily consulted on the website, www.parris.it, in the dedicated section, or by sending a request using the contact details provided in the following article called “Personal Data Controller “.
Within the meaning of Art. 9 of Regulation (EU) no. 2016/679, merely by way of example, “special categories of personal data” are defined as those revealing the racial or ethnic origin, health state, trade union membership, political opinion and, in any case, data revealing the religious of philosophical beliefs of the subject, or his/her role, activity or position in a trade union, as well as their biometric data or sexual orientation.
Within the meaning of Art. 10 of Regulation (EU) no. 2016/679, merely by way of example, personal data relating to criminal convictions and offences are defined as those data relating to criminal convictions, criminal offenses and security measures.
All the data belonging to the categories referred to in Articles 9 and 10 of the Regulation relating to a data subject are processed exclusively to fulfil the obligations indicated in point 1) above, subject to the possibility for the data subject to exercise his/her rights under Articles 15, 16, 17,18, 20, and 21 of Regulation (EU) no. 2016/679, as indicated in point 11), as specified in point 12).
The processing of data takes place with the aid of electronic and/or paper instruments according to logics that are strictly related to the purposes mentioned above and, in any case, by adopting appropriate procedures and organizational measures and technologies to protect the security, confidentiality, relevance and non-excessiveness of data.
The processing of data will be carried out by the personnel directly hired by the Data Controller and/or by natural or legal persons specifically designated and charged with data processing by the Data Controller, whose contact details shall be made available at the express request of the data subject at the addresses provided in point 7).
The personal data processed by the Data Controller are voluntarily made available by Users during their navigation of the website or through emails, filling of appropriate forms and the affixing of the relative requested flags.
We inform Users you that provision of their personal data is compulsory, as a refusal to provide them would imply the consequence of making it impossible for them to continue visiting the website.
The data subject, by browsing in this website, gives his/her voluntary consent to the provision and processing of his/her personal data and navigation details.
Sending and transmitting both voluntary and optional communications by filling the specific forms available in the website or by email implies the acquisition of the personal data provided by the data subject with the purpose of allowing communications and submitting any request. Voluntary and optional registration to the Newsletter service involves the acquisition of the personal data provided by the data subject, which will only be used for the purpose of sending the Newsletter and processed in compliance with this disclosure.
More specifically, for any disclosure and/or notification regarding the processing of personal data, the Data Controller provides the email address info@parris.it, as well as the certified email address bianchienardi@pec.it.
An updated list of the outsourced data processors charged with the processing of personal data is made available for data subjects at the Data Controller’s headquarters upon request to be submitted to the addresses specified above.
The data provided may in no case be disclosed or disseminated to third parties, except after obtaining prior specific consent from the data subject and, in any case, only to the extent necessary for the fulfilment of the purposes better specified in point 1).
Disclosure to third parties other than the Data Controller, corporate and outsourced Data Processor(s), and any designated person or entity, as well as to the external or foreign persons or entities used by the Data Controller for the conduction of instrumental or ancillary activities required for the management of corporate activities, including the providers of software solutions, web application, and storage services, even delivered through Cloud Computing systems, and used for this purpose, is permitted only for the purpose of performing transactions required for the precontractual or contractual relationship established and without prejudice to the subjects entitled to access the data by law, order or decision of judicial authorities, and, in any case, always in compliance with the guarantees required by Regulation (EU) no. 2016/679 and with the Italian Data Protection Authority’s guidelines, as well as by the Commission created in compliance with said EU Regulation.
6 The personal data of Data Subjects shall be preserved only for the time required to carry out the activities mentioned in point 1) above, for a minimum period of 12 (twelve) months and for a maximum period not exceeding 10 (ten) years, in any case subject to the safeguards provided for sensitive data in respect of which the Data Controller shall take care to regularly check their strict relevance, non-excessiveness and indispensability with respect to the still ongoing or even ceased processing. All this subject to the defensive needs of the Personal Data Controller, which may extend the retention period for the personal data that are strictly necessary and indispensable for the management of any litigation that may be initiated.
Art. 15 – Right of access by the data subject: The data subject shall have the right to access the personal data concerning him or her and the related processing. This right consists in the possibility to obtain confirmation as to whether or not personal data concerning him or her are being processed or request and receive a copy of said processed personal data.
Art. 16 – Right to rectification: The data subject shall have the right to obtain from the Controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Art. 17 – Right to erasure (“right to be forgotten”): The data subject shall have the right to ask the Personal Data Controller to erase and no longer process personal data that concern him or her and, in some cases, where there is a reason, to obtain erasure without undue delay when the purpose of the processing no longer exists, consent has been revoked, opposition has been made to the processing or when the processing of the personal data that concern him or her is not otherwise compliant with the Regulation.
Art. 18 – Right to restriction of processing: The data subject shall have the right to restrict the processing of his or her personal data in case of inaccuracies, objection or as an alternative measure to erasure.
Art. 20 – Right to data portability : The data subject, except in the event that the data are stored using non-automated processing (e.g. in paper format), shall have the right to receive the personal data that concern him or her in a structured, commonly used and machine-readable format, where reference is made to data directly provided by the data subject, with express consent or based on a contract, and to request that said data are transmitted to another controller, if technically feasible.
Art. 21 – Right to object: The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her.
The data subject, however, has the right to submit a complaint to the supervisory authority of the State, as well as to introduce an appeal to the competent Judicial Authority for the protection of his or her rights.
If the data subject wishes to exercise one of his or her rights listed above, he or she shall submit the request directly to the Data Controller at the addresses indicated in section 7), without prejudice to the right to file a complaint to Data Protection Authority of the State or to appeal to the competent Judicial Authority.
! The data subject shall also have the right to revoke his or her consent at any time by sending a specific request to the Controller by using the addresses provided in section 7). In any case, the revocation of consent will not affect the lawfulness of the processing based on the consent given before the revocation.
¹The deadline for a reply to the data subject is, for all rights (including the right of access), 1 (one) month, extendable up to 3 (three) months in particularly complex cases; the Data Controller shall in any case acknowledge receipt of the request to the data subject within 1 (one) month from the request, including in the case of rejection.
The Controller shall assess the complexity of the data subject’s request and establish the amount of any contribution to be charged to the data subject, but only if the request is manifestly ungrounded or excessive.
The Data Controller shall not carry out any processing of personal data of minors without parental consent.
The Data Controller collects data freely provided by the User by voluntary filling of the contact form and/or by sending an email or other notification.
While the User is navigating the website, certain personal data relating to the use of internet communication protocols are acquired (“Navigation Data”).
and other parameters related to the operating system and the User’s computer environment.
These data are acquired with the exclusive purpose of allowing the usability of website and are collected in an aggregate form, but could, through processing and associations with data held by third parties, allow the identification of the Users.
Navigation Data are used for statistical purposes on the use of the website and to check its correct operation.
In particular, we specify that no cookies are used for profiling purposes, but only technical cookie are used for the purpose of improving the quality of navigation for Users in the website in question (Privacy Cookies).
Sending and transmitting information, both on a voluntary and on an optional basis, through the website or through emails, implies the acquisition of the personal data provided by the data subject with the purpose of allowing communication and process requests, this in compliance with the principles of this disclosure.
The User may subscribe to the website’s NEWSLETTER, as well as send requests for product customization through the dedicated “BESPOKE” section of the website. These operations require the Data Controller to acquire personal data such as addresses, emails or telephone numbers, which are necessary to fulfil the Users’s requests.
These data will be used only to fulfil the Users’ requests; only if necessary, they will be processed for purposes connected with contractual obligations, taxes and accounting; billing log; litigation and credit protection; fulfilment of legal obligations, and may be disclosed to third parties only in the event that this this is necessary for that purpose.
The User’s CONSENT is required for the processing of personal data relating to subscription to the Newsletter because, in both cases, the User’s contact details (email address and telephone number) may be used for direct marketing activities, such as sending by email advertising communications materials containing information content or promotional materials regarding the goods or services provided or promoted by the Data Controller or the Data Controller’s commercial partners. Refusal to give this consent does not imply any consequence for the accessibility of the website, except for non-reception of advertising and promotional materials.
A cookie is a small file of letters and numbers that our website places on your computer. These cookies allow us to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse this website and also allows us to improve our site. Some of the cookies we use are “analytics” cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the website when they are using it. This helps us to improve the way our website works, for example by ensuring that users are finding what they are looking for easily.
Third __utma, __utmb, __utmc, __utmv, __utmz, __utmt: Google Analytics is a web analytics service provided by Google, Inc. (“Google”), to help us see how our website is used. In doing so information about your use of our website, including your IP address, may be transmitted to Google and stored on servers in the United States. The data collected by Google Analytics is used to analyse how frequently the same people revisit the website, how the website is found (from advertising or referring websites), and which pages are most frequently viewed. This information is combined with data from thousands of other users to create an overall picture of website use, and is never identified individually or personally and is not linked to any other information we store about you.

References: Art. 9
 Art. 10

Art. 15

Art. 16

Art. 17

Art. 18

Art. 20

Art. 21