Source: http://www.seventy.it/int/privacy-policy
Timestamp: 2019-04-18 22:27:42+00:00

Document:
The processing of data takes place in compliance with applicable legislation on the matter and, in particular, with Legislative Decree 30.6.2003, no. 196 (“Privacy Code”), as well as the measures of the Data protection Commissioner (“Privacy Commissioner”).
“Personal data” under art. 4, lett. b), of Legislative Decree no. 196/2003, shall mean any information on any individual who is or may be identified, whether directly or indirectly, by reference to any other information, including a personal identification number.
“Processing of personal data”, under art. 4, lett. a), of Legislative Decree no. 196/2003, shall mean any activity or set of activities concerning the collection, registration, organisation, saving, consulting, processing, amendment, selection, mining, comparison, use, interconnection, suspension, communication, circulation, deletion and destruction of personal data.
Anyone is entitled to the protection of their personal data.
The processing of personal data will be performed in compliance with the rights and fundamental liberties, with special reference to confidentiality, personal identity, protection of personal data, and in compliance with any applicable standard and legislation.
The information systems and computer programmes used are configured so that they reduce the use of personal data and identification data, in compliance with the general principle of “strictly necessary”, under art. 3 of the Privacy Code.
Data controller of your data is company CA’ DA MOSTO S.p.A., with its registered office in Scorzè (VE), Via Venice, 146, Tax-payer's Code, VAT registration number and Registration with the Company Register of Venice no. 02037210271 – Economic and Administrative Index VE–194234.
“Data controller”, under art. 4 of the Privacy Code shall mean an individual, a legal entity, a public administration and any other entity, association or body which is entitled (also together with another data controller) to make decisions on the purposes and manners of processing personal data and the tools used, including security profile.
"Data supervisor", under art. 4 of the Privacy Code, shall mean an individual, a legal entity, a public administration and any other entity, association or body appointed by the data controller to process personal data.
Ca’ Da Mosto S.p.A. processes your personal data required for website management and maintenance purposes.
The above-mentioned Data supervisors were chosen by the Data controller out of subjects that, for their experience, skill and reliability, are able to supply proper assurance of full compliance with applicable provisions on the processing of personal data, including the security profile.
The Data supervisors shall abide by the instructions given to them by the Data controller.
- browsing data: just by visiting and browsing the website, also by non-registered users, even if a purchase is not made, the user's personal data will be collected and processed (so-called browsing data).
“Browsing data” shall mean such data whose transmission to the website occurs automatically, through the use of Internet communication protocols (i.e., by just entering or browsing the website).
This information itself is not associated with subjects that are identified but that, for their own nature, could still allow the users to be identified through processing and associations with third-party data.
This category of data includes for example IP addresses or computer domain names used by users who connect to the website, and other parameters related to the other operating system and the user's IT environment.
You should be aware that, during standard operation, IT systems and software procedures in charge of operating the website collect the above-mentioned browsing data.
- data willingly supplied by the user: registration on the website or online purchase of products result in the collection and processing of users' personal data. The user undertakes to supply true data, of which it is the holder and is authorized to use it, for the set purposes, also being able to use it for the purposes of communication to the Data controller.
it is saved in a format that allows for the identification of the person concerned for a period of time that does not exceed the necessary time for purposes for which it is collected or subsequently processed.
The processing of personal data is made with paper or electronic instruments, in the manners established by art. 34 of the Privacy Code.
Under art. 31 of the Privacy Code, personal data is processed in compliance with applicable security legislation and is saved and controlled, also with respect to the knowledge acquired based on technical progress, its nature and the specific processing characteristics, in order to minimise risks of data destruction or loss, including accidental loss, by adopting proper and preventive security measures, non-authorized access, or non-permitted or non-compliant processing with the purposes of collection.
A cookie is a small file containing a string of alpha-numerical characters that is sent to the user's computer when a website is visited and that allows such website to recognize the user's browser upon subsequent access.
Cookies may be used for different purposes: performance of computer authentications, monitoring of sessions, saving of information on specific settings concerning users accessing the server.
There are two main categories of cookies, “technical” and “profiling” cookies.
Under art. 122, 1st paragraph, Privacy Code, technical cookies are only used in order to: “send a communication via an electronic communication network, or to the extent that is strictly necessary to the supplier of a service to supply a service expressly requested by the contracting party or by the user.”.
Technical cookies may be divided into browsing or session cookies, which are necessary to assure standard browsing and use of the website (for example, to make purchases, or to authenticate in order to access reserved areas); analytical cookies, used by the website manager to collect information, for example, on the number of users or how they visit the website; functional cookies, which are necessary for browsing, based on selected criteria (for example, the language, the products one intends to purchase).
For the installation of technical cookies prior users' content is not requested (Measure of the Data protection Commissioner, 8 May 2014, no. 229).
Profiling cookies are used to create user profiles and to send advertising messages in line with the preferences shown by the user during internet browsing. Because of the special invasive character of such elements on the private sphere of the users, European and Italian legislation provides that the users should be adequately informed on their use and express their consent.
Art. 122 of the Privacy Code, concerning profiling cookies, provides that: “The filing of information in the computer of a contracting party or a user or the access to already filed information is only allowed on condition that the contracting party or the user has expressed his/her consent after being informed in the streamlined manners laid down in article 13, paragraph 3.”.
With reference to such important aspects, we inform you that our website can use both technical cookies and profiling cookies.
Your personal data is processed by CA’ DA MOSTO S.P.A. for purposes strictly connected to the use of the website, its services and the online purchase of our products. Data processing may also occur for other purposes, compatible with applicable legislation and compliant with law.
In particular, your data will be processed for the following purposes: in order to complete your registration with our website, to give you the opportunity to use the services offered by accessing the website, such as, for example, the online purchase of our products, the processing of your purchase orders, the making of payments of purchased products, their delivery, as well as to allow you to access (where possible) any reserved areas of our website, for tax and administrative fulfilments, to comply with applicable legislation, and also to improve our website and offered services.
Your data may be also used to send emails, text messages or multimedia messages or other types of messages, for advertising purposes on similar products or services to those purchased, but in this case you are free to refuse to receive said messages, by exercising the right to object, in the manners set forth in section “Rights of the person concerned”, of this Statement (art. 130, paragraph 4, Privacy Code).
Additionally, subject to prior consent of the person concerned, your data may be used to send advertising or promotional material on different products or services from those purchased, for marketing activities or market surveys, and for profiling activities, based on your shopping habits, in order to send proposals or promotions which take into consideration your specific interest.
Your data will be saved in compliance with applicable legislation, for the time strictly necessary with respect to the purposes for which processing is performed and, in any case, within limits of law.
The processing purposes are, in any case, from time to time, specifically and analytically reported in the privacy statement, that we invite you to read carefully.
Data controller reserves the right to delete registered users or, in any case, not to allow users who use third-party data to access the website or access or use the services (including the possibility to make on online purchase of products), without prior authorization or, in any case, in case of communication of untrue data, or in case of incorrect or illegal use of the website or the communicated data, provided that the user is the only and exclusive responsible for the supplied data, as well as for the conducts held, with indemnity in favour of Data controller, that refuses any responsibility.
Consent to data processing for advertising or marketing purposes, as well as for consumer profiling purposes, based on the shopping habits or choices, is not compulsory.
The communication of the personal data indicated as mandatory, as part of the set procedure for the online purchase of the products, or for the purposes of registration or, again, for access to reserved areas of the website or to certain services is necessary for the completion of said purchases or procedures, as well as to access certain areas or services for which said compulsory data is requested. In case of refusal of the person concerned to supply said compulsory data, it may be impossible to complete the online purchase, or to access or use the services for which it is requested.
Without prejudice to the appointment of Data supervisors, as well as people in charge for processing, by the Data controller, for the purposes concerning the operation of the website and the making of online purchases and services, in compliance with applicable legislation, your data will not be assigned to third parties, that the users have not been previously informed of, and subject to their prior consent to assignment, in the cases established by law.
1. The person concerned is entitled to obtain confirmation of the existence of the personal data concerning him/her, even if not yet recorded, and to its communication in an intelligible format.
e) of the individuals or the categories of individuals to whom the personal data may be notified or that may become aware thereof as designated representative in the State territory, data supervisors or people in charge of processing.
c) certification that the above-mentioned activities have been disclosed, also as concerns their content, to the people to whom data has been notified or circulated (unless such a fulfilment is impossible or results in endeavours that are manifestly disproportionate to the protected right.
b) against the processing of personal data which concerns him/her in order to send advertising or direct selling materials or for the making of market surveys or business communication.
1. The rights set forth under article 7 are exercised with an informal request to the data controller or data supervisor, also through a person in charge, who is given proper feedback without delay.
h) under article 53, without prejudice to the provisions established by law 1° April 1981, no. 121.
3. The Commissioner, also following report of the person concerned, in the cases set forth in paragraph 2, letters a), b), d), e) and f), takes action in the manners established under articles 157, 158 and 159 and, in the cases set forth in letters c), g) and h) of the same paragraph, takes action in the manners established under article 160.
4. The exercise of the rights under article 7, when it does not concern objective data, may take place unless it concerns the amendment or addition of personal data concerning judgements, opinions or other subjective evaluations, as well as the indication of conducts to hold or decisions to be made by the data controller.
1. Request to the data controller or supervisor may also be sent by registered letter, telefax or electronic mail. The Commissioner may identify another suitable system with reference to new technological solutions. When it concerns the exercise of the rights set forth in article 7, paragraphs 1 and 2, the request may also be made orally and in that case it is written summarily by the person in charge or the data supervisor.
2. When exercising the rights under article 7 the person concerned may grant, in writing, proxy or power of attorney to individuals, entities, associations or bodies. The person concerned may also be assisted by a trustworthy person.
3. The rights under article 7 referring to personal data concerning deceased people may be exercised by those who have a vested interest or act to protect the person concerned or for family reasons deserving of protection.
4. The identity of the person concerned is verified on the basis of suitable evaluation elements, also through available deeds or documents or show or attachment of a copy of an identification document. A person acting on behalf of the person concerned shows or attaches a copy of the power of attorney, or the proxy signed before a person in charge or signed and submitted together with a non-authenticated photostatic copy of an identification document of the person concerned.
5. Request under article 7, paragraphs 1 and 2, is formulated freely and without coercions and may be renewed, subject to the existence of justified reasons, not later than ninety days.
The website may, also in the future, contain links to third-party websites. The Data controller refuses any related responsibility, also as concerns the content and purposes of said websites, their reliability and/or seriousness. A user who decides to connect to said websites is aware to take any risk and/or responsibility arising out of said choice.

References: art. 4
 art. 4
 art. 3
 art. 4
 art. 4
 art. 34
 art. 31
 art. 122

Art. 122