Privacy Policy

Protection of personal data
Pursuant to the new EU Regulation 679/2016, in accordance with the principle of accountability, any processing of personal data must be lawful and correct. It must be transparent for persons how the personal data concerning them are collected, consulted or otherwise processed, and the extent to which the same data is or will be processed. The principle of transparency requires that information and communications relating to the processing of such data are easily accessible and understandable and that clear and simple language is used.

This principle concerns, in particular, the informing of data subjects about the identity of the Data Controller and the purposes of the processing and further information (cf. art. 13 and 14 of EU Regulation 679/2016) to ensure fair and transparent processing with regard to the persons concerned and their rights to obtain confirmation and communication of a processing of personal data concerning them.

In this context, please read the following information:

Spazio Lebole S.r.l. - Via Margaritone 27 /A/B/C - 52100 AREZZO – TEL/FAX +39 0575 1654464 – VAT number and tax code 01606090510 - REA AR125543 – Share capital € 90.000,00 i.v. as Data Controller pursuant to and for the purposes of EU Regulation 2016/679, hereby informs the interested party that the personal data assumed concerning him, acquired by the Data Controller or that will be subsequently requested and/ or communicated by third parties, will be used for the purposes indicated below.

PURPOSE OF PROCESSING
Pursuant to EU Regulation 679/2016, personal data are processed in a lawful, correct and transparent way towards the data subject (art. 5);
The same are collected for specific, explicit and legitimate purposes, and then processed in a way that is not incompatible with these purposes (art. 5);

The purposes for which the data are collected are the following:
To comply with any legal obligations related to civil, tax, accounting, etc. for the purposes of administrative management of the relationship you may establish with Spazio Lebole S.r.l. and for our legal protection;
To fulfil contractual obligations, delivery/ return of goods, technical support and technical information, after-sales service and verification of approval of the products of your interest;
To satisfy market surveys and statistics, to carry out marketing, to forward offers, relative to the products subject of the activity of Spazio Lebole S.r.l.,

For the communication/forwarding of commercial information on initiatives, announcements of products, services and offers, leaflets, of Spazio Lebole S.r.l. by sending e-mails, newsletters, text messages and even printed materials.

PROCESSING METHODS
The processing of data is carried out through computer tools and/ or paper media, by subjects engaged in confidentiality, with logic related to the purposes and in any case in order to ensure the security and confidentiality of data. They will be subject to automated processing through software management and other programs that help us in the processing and execution of the activities listed above, including marketing.

COMMUNICATION TO THIRD PARTIES
Your personal data may be disclosed to third parties known to us only and exclusively for the aforementioned purposes and, in particular, to the following categories of subjects:

External companies that perform services on our behalf;

Entities and Public Administrations for legal compliance;

Professionals who may support performance;
Service/product providers, for example, to process credit card and payment data, shipments, deliveries, hosts, to manage data, to forward emails, to manage product promotion, for research and analysis, and to administer certain services;
When we communicate data to third parties, we enter into agreements that require them to ensure that they take technical and organisational measures to protect personal data. These subjects will process personal data as external Managers.

DATA RETENTION
Pursuant to art. 5 of EU Regulation 679/2016, "Principles applicable to the processing of personal data", personal data are stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed.
The personal data of the data subjects may also be stored for longer periods in compliance with the requirements related to the laws in force (by way of example, in accounting) and, in any case, applying every technical-organisational measure capable of activating data anonymity mechanisms.
The data will be stored for a period of time not exceeding the achievement of the purposes and interests for which they are processed and will be promptly deleted on request by writing to contatti@lebolegioielli.it

RIGHTS OF THE DATA SUBJECT
Pursuant to current legislation, the interested party may assert their rights towards the Data Controller, as expressed by EU Regulation 679/2016, namely:
RIGHT OF ACCESS: The data subject has the right to obtain confirmation from the data controller of whether or not personal data concerning him or her are being processed and, if so, to obtain access to personal data. Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the existence of adequate safeguards under Article 46 relating to the transfer. The right to obtain a copy must not affect the rights and freedoms of others.
RIGHT OF RECTIFICATION: The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary statement.
RIGHT TO CANCELLATION: The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay and the data controller has the obligation to delete personal data without undue delay.
Where the controller has made personal data public and is obliged, in accordance with paragraph 1, to delete it, taking into account the available technology and the costs of its implementation, they shall take reasonable steps, also technical, to inform the controllers who are processing the personal data of the data subject’s request to delete any link, copy or reproduction of his or her personal data.
RIGHT TO LIMIT PROCESSING: The data subject has the right to obtain the restriction of processing from the data controller. Where processing is restricted in accordance with paragraph 1, such personal data shall be processed, except for storage, only with the consent of the data subject or for verification, the exercise or defence of a right in court or to protect the rights of another natural or legal person or on the grounds of a major public interest of the Union or a Member State.
The data subject who has obtained the restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.
RIGHT TO DATA PORTABILITY: The data subject has the right to receive in a structured format, of common use and readable by automatic device, the personal data concerning him or her provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller to whom he has provided them. In exercising his or her rights with regard to data portability in accordance with paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to the processing necessary for the performance of a task in the public interest or relating to the exercise of official authority by the controller. The right referred to in paragraph 1 shall not affect the rights and freedoms of others.

RIGHT TO OBJECT TO PROCESSING Art. 21
The data subject has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller shall refrain from further processing of personal data unless they demonstrate the existence of compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject or for verification, the exercise or defence of a right in court.

Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling to the extent that it is related to such direct marketing.
If the data subject objects to the processing for direct marketing purposes, the personal data are no longer processed for such purposes.
The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.
In the context of the use of information society services, save the Directive 2002/58/EC, the data subject may exercise his right of objection by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with Article 89, paragraph 1, the data subject, for reasons related to his or her particular situation, has the right to object to the processing of personal data concerning him or her, except where processing is necessary for the performance of a task in the public interest.
In addition to the aforementioned rights, the data subject has the right to withdraw consent upon appropriate request, as well as to lodge a complaint with the Supervisory Authority Guarantor for the protection of personal data – WEB SITE: http://www.garanteprivacy.it - indirizzo mail: garante@gpdp.it.

OWNERS AND PRIVACY NOTICES
SPAZIO LEBOLE SR.L.
VIA MARGARITONE, 27 /A/B/C
52100 AREZZO
TEL. E FAX +39 0575 1654464
VAT number and Tax code 01606090510
REA AR125543 - Share capital € 90.000,00 i.v.
CONTATTI@LEBOLEGIOIELLI.IT
CEM: spaziolebolesrl@legalmail.it

FOR FURTHER INFORMATION Also in relation to the methods of exercise of these rights and for any communication we are at your disposal.