Privacy policy
Information on the processing of personal data
pursuant to Articles 13 et seq.
of the General Data Protection Regulation No. 2016/679 (“GDPR”)
Website www.angelico.it
Introduction
Dear user, when you access and browse this website (hereinafter ‘Site’) some of your personal data is captured, stored and managed (in technical terms ‘processed’), through the device you are using, including by analyzing and saving your IP address, navigation data, "cookies" and other online identifiers such as "pixels".
In light of these processing activities, in compliance with applicable regulations that provide for protection, confidentiality and security obligations on your data, L.A.R. Italia S.r.l. Unipersonale clarifies below the purposes and means processed in its capacity as Data Controller.
Data controller
Personal data processing operations carried out as a result of accessing and interacting with the Site will be carried out as the Data Controller by L.A.R. Italia S.r.l. Unipersonale, P. IVA and C.F. 02669650026, with registered and operational headquarters in Gaglianico (BI), via Cavour n. 67.
pursuant to Articles 13 et seq.
of the General Data Protection Regulation No. 2016/679 (“GDPR”)
Website www.angelico.it
Introduction
Dear user, when you access and browse this website (hereinafter ‘Site’) some of your personal data is captured, stored and managed (in technical terms ‘processed’), through the device you are using, including by analyzing and saving your IP address, navigation data, "cookies" and other online identifiers such as "pixels".
In light of these processing activities, in compliance with applicable regulations that provide for protection, confidentiality and security obligations on your data, L.A.R. Italia S.r.l. Unipersonale clarifies below the purposes and means processed in its capacity as Data Controller.
Data controller
Personal data processing operations carried out as a result of accessing and interacting with the Site will be carried out as the Data Controller by L.A.R. Italia S.r.l. Unipersonale, P. IVA and C.F. 02669650026, with registered and operational headquarters in Gaglianico (BI), via Cavour n. 67.
L.A.R. Italy S.r.l. Unipersonale can be contacted at the following addresses:
by writing an e-mail to privacy@angelico.it
by telephone to 015542811
by regular mail to the address of the registered office indicated.
Categories of data processed
The categories of data processed are as follows:
information relating to the user's navigation on the Site, including so-called online identifiers and data relating to the devices used
personal identification and contact data freely entered by the user on the Site, including those necessary for the conclusion of purchases of goods and services, even in the absence of registration (so-called. purchase as a guest), such as: first name, last name, e-mail address, telephone number
personal data necessary for the management of shipping methods and systems, such as: address of residence, domicile or abode
personal data necessary for the management of payment methods and systems, such as: number and data relating to the bank card, data relating to the bank account, data relating to the accounts of the chosen payment system (eg. PayPal)
personal data acquired from third parties or sources, in relation to specific initiatives or purposes promoted by the Owner
personal data relating to user behavior (tastes and consumption habits), in relation to proposed profiling activities
additional personal data, specifically identified, in case of implementation of new features or services.
by writing an e-mail to privacy@angelico.it
by telephone to 015542811
by regular mail to the address of the registered office indicated.
Categories of data processed
The categories of data processed are as follows:
information relating to the user's navigation on the Site, including so-called online identifiers and data relating to the devices used
personal identification and contact data freely entered by the user on the Site, including those necessary for the conclusion of purchases of goods and services, even in the absence of registration (so-called. purchase as a guest), such as: first name, last name, e-mail address, telephone number
personal data necessary for the management of shipping methods and systems, such as: address of residence, domicile or abode
personal data necessary for the management of payment methods and systems, such as: number and data relating to the bank card, data relating to the bank account, data relating to the accounts of the chosen payment system (eg. PayPal)
personal data acquired from third parties or sources, in relation to specific initiatives or purposes promoted by the Owner
personal data relating to user behavior (tastes and consumption habits), in relation to proposed profiling activities
additional personal data, specifically identified, in case of implementation of new features or services.
Purposes, legal bases and data retention times
In the table below, the Data Controller lists the specific purposes under which a processing of personal data takes place, each accompanied by the relevant legal basis and the maximum data retention time, if it is possible to indicate it precisely (failing that, the retention criterion on the basis of which the relevant technological tool has been set is indicated).
In the table below, the Data Controller lists the specific purposes under which a processing of personal data takes place, each accompanied by the relevant legal basis and the maximum data retention time, if it is possible to indicate it precisely (failing that, the retention criterion on the basis of which the relevant technological tool has been set is indicated).
| Purpose | Legal basis |
Storage time |
| Offering navigation features of the Site, its pages and content such as, for example, product-related catalogs | 6 (1) (b), for the fulfillment of needs related to pre-contractual activities | For the user's time on the Site, up to a maximum of 24 months. |
| Responding to contact requests or inquiries sent by the user, including through a digital assistant service | 6 (1) (f), for the pursuit of the legitimate interest of the Owner aimed at maintaining relations with users of the Site | for a maximum of 10 years from the interaction with the user. |
| User registration for booking an appointment at a Holder's point of sale | 6 (1) (b), for the fulfillment of needs related to pre-contractual activities | For a maximum of 6 months after interaction with the user. |
| Registration, access and use by the user of the eCommerce shop, including in case of “purchase as a guest”, including the activities of purchase, payment, management and delivery of products, management of returns and refunds | 6 (1) (b), for the fulfillment of needs related to the contract and related pre-contractual activities also in order to enable, facilitate or simplify the purchase | for the time necessary to achieve the stated purposes, up to a maximum of 10 years after the user's deletion from eCommerce. |
| Management of the user's shopping cart regarding the so-called abandoned check-out functionality as a result of interrupted purchase flow or eCommerce shop anomalies | 6 (1) (f), for the pursuit of the legitimate interest of the Controller aimed at promoting the recovery of purchase interactions interrupted for technical reasons | for the time necessary to achieve the stated purpose, up to a maximum of 7 days following the interruption of the purchase flow or eCommerce shop anomalies. |
| Management of accounting and tax documentation related to purchases made through the eCommerce shop. | 6 (1) (c), for the fulfillment of a legal obligation to which the Controller is subject (in particular, accounting and tax obligations) | For a maximum of 10 years after the purchase made. |
| Management of spontaneous contacts from users of the Site, by sending Curriculum Vitae and/or other communications | 6 (1) (b), for the fulfillment of needs related to pre-contractual activities | for a maximum period of 12 months from the end of the selection process, unless further storage needs or user consent. |
| Analysis of usage statistics and improvement of the functionality of the Site to which, due to their specific technical operation, Dir. 2002/58/EC is not applicable | 6 (1) (f), for the pursuit of the legitimate interest of the Data Controller, aimed at improving its products and services also by using data pseudonymization tools for statistical purposes | for only the period necessary for the complete anonymization of the collected data. |
| Analysis of usage statistics and improvement of the functionality of the Site through technologies involving data processing activities in accordance with Dir. 2002/58/EC | 6 (1) (a), based on the user's express consent, including through the use of data pseudonymization tools for statistical purposes and overall analysis of the Site's functionality | until the expiration of the online identifier related to the user retained for the longest time, unless requests for deletion or anonymization. |
| Recontacting the user by e-mail following the purchase of goods or services offered by the Controller, aimed at the proposed sale of further similar goods or services | 6 (1) (f), for the pursuit of the legitimate interest of the Owner, aimed at promoting its sales of goods and services in compliance with the limits set by art. 130, co. IV, Legislative Decree 196/2003 (so-called “soft spam”) | for a maximum of 24 months from the last purchase made by the user, subject to the right of opposition expressed by the user expressed in any manner. |
| Recontacting the user following events, occasions or meetings within which the Controller or third parties have collected personal contact data | 6 (1) (a), based on the user's expressed consent or, alternatively, 6 (1) (f), for the pursuit of the legitimate interest of the Controller aimed at maintaining contact with the user who has expressed interest in the goods and services offered | until the withdrawal of the consent or for a maximum of 3 months from the receipt of the data in the case of the exercise of the legitimate interest, subject to the right of opposition expressed by the user expressed by any mode. |
| User registration to the newsletter and subsequent management of related commercial communications of special offers, promotions and news, by means of both automated and non-automated systems (so-called marketing purposes) | 6 (1) (a), based on the consent given by the user | until the withdrawal of consent by the user, and in that case no later than the necessary technical and procedural time. |
| Activities of analysis of the user's tastes and consumption habits, aimed at offering personalized promotions and services (so-called profiling purposes) | 6 (1) (a), based on the consent given by the user | until the withdrawal of consent by the user, and in that case no longer than the necessary technical and procedural time. |
Further information regarding how we process data
If the user would like more information about the balance between the legitimate interests pursued by the Data Controller and the fundamental rights and freedoms of the natural person, he/she may contact them at the contact details indicated, having the right to receive feedback as soon as possible and in any case within the timeframe prescribed by law.
In case of litigation with the user or third parties, or control by the authorities in charge, the storage may be extended until the expiration of the last applicable prescriptive term.
The data will not be disseminated in any way, except with the express and prior consent given by the user and within the limits of the law.
If the user would like more information about the balance between the legitimate interests pursued by the Data Controller and the fundamental rights and freedoms of the natural person, he/she may contact them at the contact details indicated, having the right to receive feedback as soon as possible and in any case within the timeframe prescribed by law.
In case of litigation with the user or third parties, or control by the authorities in charge, the storage may be extended until the expiration of the last applicable prescriptive term.
The data will not be disseminated in any way, except with the express and prior consent given by the user and within the limits of the law.
Consequences of not providing data
The provision of the personal data indicated as mandatory is necessary to pursue the related purposes: not providing such data will result in the impossibility of carrying out the related processing.
The provision of other personal data is optional: not providing such additional data may result in the total or partial impossibility to access certain functions or features of the Site. With reference to the so-called marketing and profiling purposes, as well as in relation to the so-called “online identifiers” that are not merely technical, the consent to the processing of personal data is optional: there is no legal or contractual obligation on the user to provide such data for this purpose and/or to give consent to the processing of his/her personal data for this purpose.
The provision of the personal data indicated as mandatory is necessary to pursue the related purposes: not providing such data will result in the impossibility of carrying out the related processing.
The provision of other personal data is optional: not providing such additional data may result in the total or partial impossibility to access certain functions or features of the Site. With reference to the so-called marketing and profiling purposes, as well as in relation to the so-called “online identifiers” that are not merely technical, the consent to the processing of personal data is optional: there is no legal or contractual obligation on the user to provide such data for this purpose and/or to give consent to the processing of his/her personal data for this purpose.
Automated decision-making processes
No processing of personal data by means of automated decision-making processes is envisaged in accordance with current legislation, and in particular pursuant to Article 22(1) and (4) of the GDPR.
In any case, any automated processing will not have a legal effect on the user or significantly affect him/her, unless specific informed consent is acquired and in any case within the limits of the law.
Categories of entities that process personal data
Within the limits of the obligations, tasks or purposes indicated above, personal data may be processed, made available and/or communicated to:
employees and/or collaborators of the Data Controller;
third parties appointed as Data Processors (in particular, suppliers of goods or services), including their employees and/or collaborators;
Jurisdictional, administrative and/or public security authorities, in accordance with regulatory provisions.
The full list of Data Processors and other third parties can be requested from the Controller at any time, at the references indicated.
No processing of personal data by means of automated decision-making processes is envisaged in accordance with current legislation, and in particular pursuant to Article 22(1) and (4) of the GDPR.
In any case, any automated processing will not have a legal effect on the user or significantly affect him/her, unless specific informed consent is acquired and in any case within the limits of the law.
Categories of entities that process personal data
Within the limits of the obligations, tasks or purposes indicated above, personal data may be processed, made available and/or communicated to:
employees and/or collaborators of the Data Controller;
third parties appointed as Data Processors (in particular, suppliers of goods or services), including their employees and/or collaborators;
Jurisdictional, administrative and/or public security authorities, in accordance with regulatory provisions.
The full list of Data Processors and other third parties can be requested from the Controller at any time, at the references indicated.
Transfer of personal data outside the European Economic Area.
The user's personal data will be transferred to countries outside the European Economic Area for technical needs, to entities based in countries recognized as “adequate” by the European Commission, including adherents to the “EU-US Data Privacy Framework,” or to entities that have entered into appropriate Terms of Business Type in the current text as approved by the European Commission.
Your rights as a data subject
The user may, at any time, exercise the rights provided by the European Regulation No. 2016/679. In particular, the user has the right:
to access his/her personal data;
to obtain the rectification or deletion thereof or the restriction of the processing concerning him/her;
to object to the processing, where permitted;
to obtain the portability of the data, where provided for;
to revoke consent: such revocation does not affect the lawfulness of the processing carried out on the basis of the consent given before the revocation;
The user's personal data will be transferred to countries outside the European Economic Area for technical needs, to entities based in countries recognized as “adequate” by the European Commission, including adherents to the “EU-US Data Privacy Framework,” or to entities that have entered into appropriate Terms of Business Type in the current text as approved by the European Commission.
Your rights as a data subject
The user may, at any time, exercise the rights provided by the European Regulation No. 2016/679. In particular, the user has the right:
to access his/her personal data;
to obtain the rectification or deletion thereof or the restriction of the processing concerning him/her;
to object to the processing, where permitted;
to obtain the portability of the data, where provided for;
to revoke consent: such revocation does not affect the lawfulness of the processing carried out on the basis of the consent given before the revocation;
to lodge a complaint with the supervisory authority: for Italy, with the Italian Data Protection Authority (www.gpdp.it).
The exercise of the aforementioned rights may be made by sending a request to the references of the Data Controller, as indicated above, and in particular to the e-mail address indicated in the “Data Controller” section.
The exercise of the aforementioned rights may be made by sending a request to the references of the Data Controller, as indicated above, and in particular to the e-mail address indicated in the “Data Controller” section.
