Processing of personal data
Access to some sections of the site and/or requests for information or services from users of the site may be subject to entering personal data which will be processed by COSI TABELLINI di Tabellini & C s.n.c. (hereinafter referred to as “COSI TABELLINI”), the data controller, in compliance with Legislative Decree No. 196/2003 “Personal data protection code” (hereinafter the “Code”). This policy aims to allow website users to find out, even prior to accessing the various sections of the site and filling in their data, how COSI TABELLINI processes users’ personal data, and website users must in any case review this before entering personal data into online forms in the various sections of the site.
Purposes of data processing
According to the needs expressed from time to time by users accessing the various sections of the site, the purpose of the processing of personal information provided directly by users filling out forms online will be the following: a) for registration on the site, which is necessary for purchasing products on this site and for providing and managing the various services offered; b) with prior consent from the user, and as long as this consent is not revoked, to carry out marketing activities (such as, by way of example and not of limitation, sending of promotional and advertising materials, carrying out linked analyses on registered users, enabling COSI TABELLINI to improve the services and products offered to its customers); including via e-mail, fax, MMS and SMS, contingent upon specific consent and until this consent may be revoked; c) to send newsletters, receive updates on all the site news and other information;
Methods of data processing
Personal data will mainly be processed using automated methods, with logic strictly related to the aforementioned purposes.
Nature of personal data provided by users
The provision of personal data is optional, but may sometimes be required (i.e. for data where the boxes are marked with an asterisk) so that COSI TABELLINI can meet user requirements relating to the functionality of the site. Missing, partial or incorrect personal data in fields marked with an asterisk, being necessary for the relevant operation, will make it impossible for the operation to be completed. Missing, partial or incorrect personal data in fields which are optional will carry no consequences.
Categories of personal data being processed
In addition to personal information provided directly by users (such as name, postal address, e-mail address, etc.), when connecting to the site, computer systems and software procedures used to operate the site itself indirectly acquire certain personal data, the transmission of which is implicit in the communication protocols of the Internet. This data is used only to carry out anonymous statistical surveys.
Categories of persons who may become aware of users’ personal data: Personal data may be disclosed to employees or collaborators of the Marketing Department of the Controller who, working under the direct authority of the latter shall be appointed Data Processors or trustees pursuant to articles 29 and 30 of the code and that they will receive adequate training in this regard; the same will apply – authorised by Data Processors appointed by Data Controller – to employees or associates of the Data Processors.
Communication or distribution of personal data: Personal information provided directly by website users through filling out online forms will not be communicated or disclosed to third parties, except in the case of inclusion on the site of the names of winners of any competitions or prizes promoted by COSI TABELLINI through the site.
The Data Controller is COSI TABELLINI di Tabellini & C s.n.c. , with head offices at 44 Via Stretta, 25128 Brescia;
The Marketing Department, located at the head office, in the person of its pro-tempore Manager, is responsible for the processing of technical information about the products;
Data Subjects’ rights under article 7 of the Code
“Article 7, Right to access personal data and other rights.
1. The Data Subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and the communication in intelligible form of said data. 2. The Data Subject has the right to obtain information regarding: a the source of the personal data;) b) purposes and methods of processing; c) the reasoning behind any use of electronic instruments for the processing; d) the identifying data of the owner, Data Processors and delegated officer in Italy of the data controller, data processors and the representative designated in the territory of the Italian State, where applicable; e) subjects or categories of subjects to whom the personal data may be communicated or who may have access to such data in their official capacity delegated by the State, Data Processors or Authorised Persons. 3. The Data Subject is entitled to obtain: a) the updating, correction, or, when necessary, integration of data; b) the deletion, transformation into anonymous form or blocking of data processed in breach of the law, including data that does not need to be retained in relation to the purposes for which it was collected or subsequently processed; c) certification that the parties to which the data has been transferred or disseminated have been notified of the operations specified in points a) and b), also regarding their content, except in the event that such a task proves impossible or requires the use of means clearly disproportionate to the right being protected. 4. Data Subjects have the right to object, wholly or in part: a) for legitimate reasons to the processing of their personal data, even if processed in line with the purposes for which it was collected; b) to the processing of personal data for marketing or direct sales or for market research or commercial communication. The rights referred to above can be exercised directly or by giving a written delegation or proxy to physical persons or legal entities. “
How to exercise the rights under art. 7 and for a list of the Data Processors: The Data Subject may, at any time, exercise his/her rights pursuant to art. 7 of the Code as well as obtain a complete list of Data Processors by sending an e-mail to email@example.com , or by sending a letter by ordinary post to COSI TABELLINI di Tabellini & C s.n.c. , 44 Via Stretta, 25128 Brescia, Italy. Furthermore, if the Data Subject has consented, he/she shall be entitled to object to data processing for the purposes outlined in b) above by sending an e-mail from the Data Subject’s own e-mail address, by clicking on the appropriate link which appears in every e-mail message.
How to alter the Data Subject’s profile: Data Subjects may cancel their profile by sending an e-mail to firstname.lastname@example.org , or a letter by ordinary post to COSI TABELLINI di Tabellini & C s.n.c. , with head offices at 44 Via Stretta, 25128 Brescia, Italy.