Privacy Policy

 Privacy Notice pursuant to Article 13 of EU Regulation 679/2016 (GDPR) for data processed through the website 

Pursuant to Legislative Decree No. 196 of June 30, 2003, and subsequent amendments ("Privacy Code") and European Regulation No. 679 of 2016 (the "Privacy Regulation"), the company Stramondo S.r.l.intends to inform you and all users and/or visitors of the site www.boncrem.it(hereinafter referred to as the "User" and the "Site"), regarding the use of personal data, log files, and cookies collected through the Site itself.

1.     Data Controller, Data Processors, and Data Protection Officer

The data controller is the company Stramondo S.r.l. (VAT number 01494580812), with its registered office in Salemi (TP) 91018, Via Marsala Snc, email shop@stramondo.it (hereinafter referred to as the "Data Controller”).

The updated list of designated Data Processors can be provided upon request by the data subjects and/or users.

Where a Data Protection Officer has been appointed (pursuant to Article 37 of the Privacy Regulation), their contact details will be published on the website.

2.     Information automatically collected by the Site – Cookies
   
   a) Information automatically collected.

Like all websites, our site uses log files, in which information is stored automatically during your visits. The computer systems and software procedures involved in the operation of the site automatically collect certain information during use, the transmission of which is implicit in the use of internet communication protocols.

The information collected is as follows:

– Internet Protocol (IP) address or the domain name of the device you are using;

– Type of browser and device parameters used to connect to the Site;

– The URI (Uniform Resource Identifier) addresses of the requested resources or the method used to submit the request to the server;

– Name of the Internet Service Provider (ISP);

– Date and time of the visit;

– The referring web page (referral) and the exit page of the user;

– Possibly the number of clicks;

– The size of any file obtained in response;

– The numeric code indicating the status of the response given by the server (success, error, etc.);

– Other parameters related to the operating system and the computing environment of your device.

This information is processed automatically and collected exclusively in an aggregated form in order to verify the proper functioning of the site.

b) Cookies

The site uses cookies. Cookies are text files stored on a computer device that allow certain parameters and data communicated to the system via the browser you use to be recorded. These tools enable the analysis of your habits in using the site for various purposes: performing digital authentications, monitoring sessions, storing information about specific configurations related to users accessing the server, saving preferences, etc.

Cookies are classified into the following types:

– Technical cookies: These are used to facilitate navigation or to provide a service you have requested. Without the use of these cookies, certain operations could not be performed or would be more complex and/or less secure.

– Profiling cookies: These are used to track your browsing and create profiles based on your tastes, habits, choices, etc. In this way, they can deliver advertising messages to your device that align with your preferences previously expressed during online browsing.

Your consent is not required for the installation of technical cookies. 

Your consent is required for the installation of profiling cookies: if you do not wish for your device to receive and store profiling cookies, you can modify the security settings of your browser. In fact, through the settings of the browser you use to navigate, you can decide whether to delete and/or prevent the installation of cookies on the device.

However, it should be noted that by disabling the use of profiling cookies, you may not be able to fully enjoy certain features of the Site.

During your navigation on the Site, you may also receive cookies sent from websites or web servers other than ours (hereinafter "Third Parties"), whose privacy policies you can consult on their respective sites.

By using the site, you acknowledge and accept the use of cookies and give consent to the processing of data collected by Third Parties.

3.     The personal data you provide to us by using the Site: for what purpose do we process them?

We use your data to allow you to:

– Access the site and navigate it accordingly;

– Register on the e-commerce platform;

– Purchase products sold by the Data Controller through the site (either by registering or as a guest) and for related operations (shipping, invoicing, etc.);

Your data is processed for the following purposes:

(1) To comply with legal obligations;

(2) To carry out the technical management of the Site;

(3) To fulfill your product purchase orders from the Data Controller through the site, both with registration and as a guest, comply with related administrative and accounting obligations (e.g., order fulfillment, correspondence, invoicing, warranty, exercising the right of withdrawal, etc.), and arrange for the delivery of the products through the e-commerce platform (e.g., delivery and/or pickup, any information requests, complaints, etc.), as well as managing payments.

(4) To update you via email regarding all our promotional and marketing initiatives, including, by way of example, information about the latest product updates, events, and advertising campaigns organized by the Data Controller (the "Marketing");

(5) To analyze your preferences, habits, interests, and consumption choices, including the type, frequency, and location of purchases, in order to develop statistics, create specific user profiles, and perform predictive activities related to your future consumption (hereinafter, the "Profiling Activities").

The processing of data for the purposes mentioned above will be carried out in compliance with the Privacy Code, the Privacy Regulation, and all relevant sector-specific regulations, including those outlined in the "Rules of the Data Protection Authority for loyalty programs" of February 24, 2005, and the "Guidelines on the processing of personal data for online profiling" of March 19, 2015.

In compliance with the "Guidelines on promotional activities and the fight against spam" of July 4, 2013, we highlight that any consent you may provide for the sending of commercial, promotional, and marketing communications via automated tools will also extend to traditional contact methods.

Methods and location of data processing

The data you provide will be processed primarily using electronic tools but also on paper, under the authority of the Data Controller at the Data Controller's office or on servers located within the European Union, by individuals specifically designated, authorized, and trained for processing in accordance with Article 2-quaterdecies of the Privacy Code and Articles 28 and 29 of the Privacy Regulation. We inform you that appropriate security measures are in place, also pursuant to Articles 5 and 32 of the Privacy Regulation, to prevent data loss, unlawful or incorrect use, and unauthorized access..

4.     Nature of data provision and the legal basis for processing

Please be aware that for the purposes outlined in points (1), (2), and (3) of the previous Article 3, providing your personal data is necessary, as without it you will not be able to use the services offered by the Site, including the transportation, delivery, and/or collection of products through the e-commerce platform.

Instead, providing your personal data is not mandatory but optional for the purposes outlined in points (4) and (5) of the previous Article 3. Failure to provide data for the purposes mentioned will prevent us from carrying out Profiling and Marketing activities. For this purpose, you are free to decide whether or not to give your consent for these purposes, and this will not affect your ability to access the services offered by the Site.

With regard to the purposes outlined in points (1), (2), and (3) of the previous Article 3, the legal basis for processing is the execution of a contract or pre-contractual measures for the services provided through the Site and requested by you (pursuant to Article 6, paragraph 1, letter b) of the Privacy Regulation); whereas, with regard to the purposes outlined in points (4) and (5) of the previous Article 3, the legal basis for processing is your potential freely given consent (pursuant to Article 6, paragraph 1, letter a) of the Privacy Regulation).

5.     To whom and in what context we may transmit your data.

Your data may be shared, within the EU, in full compliance with the Privacy Code and the Privacy Regulation, with the following parties:

(1) To entities and/or other public authorities, where required by law or upon their request;

(2) To credit institutions for purposes related to the online purchase of products;

(3) To external structures, parties, and companies that the Data Controller relies on to carry out activities related to, instrumental to, or resulting from the provision of services offered by the Site – including cloud computing storage services, transportation, delivery, and/or collection of products through the e-commerce platform;

(4) To external consultants, unless specifically designated in writing as Data Processors;.

6.     Your rights

In relation to the data subject to processing as described in this notice, the data subject is granted, pursuant to Articles 15, 16, 17, 18, 19, 20, 21, 22 of the EU Regulation 2016/679, the following rights at any time:

(1) The data subject has the right to obtain confirmation of whether or not personal data concerning them exists, even if not yet recorded, and to receive such data in an intelligible form. 

(2) The data subject has the right to obtain the following information: 

1. Of the origin of the personal data; 
2. Of the purposes and methods of processing; 
3. Of the logic applied in the case of processing carried out with the aid of electronic tools; 
4. Of the identifying details of the data controller, data processors, and the representative designated pursuant to Article 5, paragraph 2; and of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives within the territory of the State, data processors, or persons in charge. 

(3) The data subject has the right to obtain:

1. The update, correction, or, when applicable, the integration of the data; 
2. The deletion, anonymization, or blocking of data processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected or subsequently processed;
3. The confirmation that the operations referred to in letters a) and b) have been brought to the attention, including their content, of those to whom the data have been communicated or disclosed, except in cases where such fulfillment proves impossible or involves the use of means clearly disproportionate to the protected right; 
4. The right to data portability. 

(4) The data subject has the right to object, in whole or in part: 

1. For legitimate reasons, to the processing of personal data concerning them, even if it is relevant to the purpose of collection; 
2. To the processing of personal data concerning them for the purpose of sending advertising material, direct sales, or for market research or commercial communication purposes.

To exercise their rights, the data subject may contact the Data Controller at any time by sending the appropriate request via email to: privacy@stramondo.it or by registered mail to Stramondo S.r.l. – Via Marsala snc, 91018 Salemi (TP). If the data subject believes that the processing of their personal data is in violation of the Regulation, they can file a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it), as provided by Article 77 of the GDPR, or seek judicial remedies (Article 79 of the GDPR). 

7.     Duration of Processing

The Data Controller retains and processes personal data for the time strictly necessary to fulfill the stated purposes. Afterward, the personal data will be kept and not further processed, for the time established by the applicable legal provisions. It is specified that the data retained for Profiling or Marketing purposes will be kept for no longer than 12 and 24 months, respectively, from their registration. 

It should also be added that, in the event that a user provides the Data Controller with personal data that is not requested or not necessary for the execution of the requested service or for the provision of a service strictly related to it, the Data Controller will ensure their deletion as soon as possible.

8.     Security Measures

Through the Website, your data is processed in compliance with applicable law and using appropriate security measures in accordance with current regulations, including Articles 5 and 32 of the Privacy Regulation. In this regard, it is confirmed, among other things, that appropriate security measures have been implemented to prevent unauthorized access, theft, disclosure, modification, or unauthorized destruction of your data..

9.     Changes to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy. In such a case, you will be promptly informed when you use the Website again.