Should the information provided be deemed to be unclear or insufficient, the Controller can be contacted at the numbers and addresses provided hereinafter in point 1.
1. General information, valid for any type of processing
In general, all processing is subject to principles of lawfulness, correctness and transparency, guaranteeing the rights of the concerned party through an appropriate level of protection and confidentiality of data aimed at preventing the loss of data, unlawful or improper uses and unauthorized access. The data will be kept for the amount of time compatible with the purposes of their collection, of legal / contractual obligations or until the request for cancellation of the data subject.
The Controller is:
1.1 Area of communication
The data may be processed by in-house and/or external personnel, appointed especially Processor or Data Handler. The personal data may be disclosed to third parties to fulfil legal obligations, or to abide by orders made by the relevant public authorities or to enforce or defend rights in a court of law. If necessary, in relation to special services or products required, the personal data may be disclosed to third parties who perform functions strictly linked and instrumental to the relationship established with the concerned party.
1.2 Rights of the data subjects (GDPR Chapter III)
The data subjects have the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data in order to verify information concerning the processing. Moreover, the data subjects have the right to obtain the rectification of inaccurate personal data concerning him or her (GDPR art. 15-16).
In accordance with art. 17-18-21 of the above-mentioned Regulation, the data subjects have the right to obtain from the Controller the erasure of personal data and/or the restriction of processing and have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her.
The data subjects have the right to lodge complaints with a supervisory authority in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.
The complete GDPR text is available at: EUR-Lex- GDPR
2. SPECIFIC INFORMATION REGARDING VARIOUS TYPES OF DATA PROCESSING
2.1 DATA ACQUIRED DURING NORMAL CORPORATE OPERATIONS BY CUSTOMERS AND SUPPLIERS
L’Inglesina Baby S.p.A. hereby notifies that, for the establishment and performance of contractual relations, it acquires personal data (master data, fiscal data, relating to the financial activities of the party concerned, etc.) also collected orally or from public registers, lists, deeds and documents and/or public and/or private databases, commercial information companies. The legal basis for the processing is Art. 6, paragraph 1, points b) and c) of GDPR.
With reference to such data, please be advised of the following:
Data retention occurs for the period established by the relevant legislation.
The provision of data based on the data subject’s express consent to their processing for one or more specific purposes (GDPR Art. 6, par. 1 point a)), which are not ascribable to the above-mentioned legal and contractual obligations, can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal. In this case, data retention occurs till the withdrawal of the consent.
2.2 DATA DETECTED AUTOMATICALLY BY THE SITE TECHNOLOGIES
The information systems and the software procedures responsible for the functioning of this website acquire, during their normal use, some personal data, the transmission of which is implicit for the use of the Internet. This information is not collected to be associated with identified parties concerned, but for its very nature this information could, through processing and associations with details held by others, make it possible to identify the users. This category of data includes IP addresses or domain names of computers used by the users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to make the request to the server, the size of the file obtained in reply, the numeric code indicating the state of the reply given by the server (good outcome, error, etc.) and other parameters relating to the operating system and to the user’s IT environment. This information is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly. This information can be accessed by the in-house processors or external processors who provide support services tied to the site. The data could be used to establish liability in the event of hypothetical IT crimes that damage the website and may therefore be provided upon request to the Judicial Authorities.
2.4 Data provided by the user via the site contact feature
The “CONTACT US” and the «WORK WITH US» sections of the website envisage the compilation of certain personal data by the user. The legal basis for the processing is Art. 6, paragraph 1, point a) of GDPR.
The data will be processed exclusively to provide specific answers to the requests presented by the user. Provision of data marked with a star is necessary to provide appropriate answers to the user.
Compilation of the additional fields is optional and will enable further customization of the answers.
Data retention occurs for the entire duration of the company’s management needs and/or the request of erasure by the data subject. In case of transmission of the Curriculum Vitae by the user, the Controller will keep this document in its paper and / or electronic archives for a maximum of 24 months.
2.5 Account creation
The “CREATE AN ACCOUNT” section of the website envisages the compilation of certain personal data by the user. The data are requested in order to enable the site features reserved for registered users (e.g. product registration). Provision of data is compulsory to use the related services. The legal basis for the processing is Art. 6, paragraph 1, point a) of GDPR. Data retention occurs till the request of erasure by the data subject.
2.6 Data provided by the user for the download of informative and promotional material
The download of information or promotional material requires the compilation of some personal data by the user and the subscription to the newsletters referred to in point 2.8 below. The provision of data is necessary in order to provide the material requested by the user. The legal basis for the processing is Art. 6, paragraph 1, point b) of GDPR. Data retention occurs till the request of erasure by the data subject.
2.7 Participation in online training events
Participation in online training events requires the completion of some personal data by the user. The data will be processed exclusively to give specific feedback to the user’s request. The provision of data is necessary in order to be able to participate in the online training event. The legal basis for the processing is Art. 6, paragraph 1, points a) and b) of GDPR. Data retention occurs for 3 months from their transmission.
2.8 Processing for marketing purposes
Processing of personal data for marketing purposes is only carried out subject to free manifestation of explicit consent by the data subject. The processing carried out for marketing purposes includes, for instance, sending commercial, promotional and training information by email (newsletter). The legal basis for the processing is Art. 6, paragraph 1, points a) of GDPR. Data retention occurs till the request of erasure by the data subject.