Privacy and Cookie Policy

INFORMATION FOR THE PROCESSING OF DATA

This page describes how the site is managed with reference to the processing of the personal data of users who consult it, as well as the methods and purposes of processing personal data. This policy is also accorded to 13-14 EU Reg. 2016/679 to those who interact with web services accessible electronically from the address: https://shop.suavisitaly.com. This site is owned by DIFFUSION FOODS SRL which manages and maintains this site with the aim of providing information and communications related to the products and services offered.The information is provided only for the site in question and not for other websites that may be consulted. Through our links, for which DIFFUSION FOODS SRL is in no way responsible. DIFFUSION FOODS SRL with registered office in Turin, Via Peyron 38, in the capacity of Data Controller of your personal data, pursuant to and for the effects of EU Reg. 2016/679 - GDPR, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of personal data and that this treatment will be based on principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights. Your personal data will be processed in accordance with the legislative provisions of the aforementioned law and the confidentiality obligations set forth therein.

TYPES OF DATA PROCESSED

NAVIGATION DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through process and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

DATA PROVIDED VOLUNTARILY BY THE USER

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site, as well as the compilation of the forms for sending specific requests entail the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message or in the form.

PROFILE DATA

These data, communicated at the time of registration in the customer area, include your: name, surname, e-mail, social security number, VAT number, telephone, address, city, zip code, country, province, password, password confirmation (the tax code is mandatory for individuals, the inclusion of the VAT number is mandatory for companies), the aforementioned data are mandatory for registration in the reserved area and for the provision of the service, the other data requested are optional The contact data may be processed for sending newsletters of a commercial nature, with the consent of the interested party.

PURCHASE DATA

At the time of the order, we collect your purchase data, including order number, details on the goods being purchased, data on the means of payment, supply and billing addresses. The data necessary for the provision of the transport service will be communicated to the third company that manages the aforementioned service.

PAYMENT DATA

For the execution of the economic transaction, we collect the payment data indicated when filling in the PayPal form and / or gestpay form. The management of the aforementioned payment data is entirely left to the support platform for the economic transaction. This involves data that external service providers use for identification, such as your PayPal ID.
The payment methods are indicated on the page Terms and Conditions

CONSEQUENCES OF THE REFUSAL TO PROVIDE DATA

Apart from that specified for navigation data, the user is free to provide personal data contained in the request forms, registration to mailing list, participation in events or otherwise indicated in contacts to request the sending of informative, technical or commercial material or other communications. Failure to provide them will not entail any consequences, other than the impossibility of obtaining what is requested.

PROCESSING METHOD

The data are mainly processed with electronic and IT tools and stored both on IT media and on paper media and on any other type of suitable support, in compliance with the procedures set out in Articles 6, 32 of the GDPR and by adopting the appropriate security measures provided. To prevent data loss, illicit or incorrect use and unauthorized access.
We inform you that, in order to provide a complete service, our portal may contain links to other websites, not managed by us. We are not responsible for errors, contents, cookies, publications of illegal moral content, advertisements, banners or files that do not comply with current regulations and compliance with the Privacy legislation by sites managed by us to which reference is made. To improve the service offered, an immediate report of malfunctions, abuses or suggestions is encouraged to the e-mail address: info@suavisitaly.com
Your data will be processed only by personnel expressly authorized by the Data Controller.

PURPOSE OF THE TREATMENT

The data will be processed for the following purposes:
1. give the possibility to access the public and reserved sections of the site;
2. to carry out the obligations established by laws or regulations;
3. the protection of the Data Controller in court;
4. allow the carrying out of the purchase and the provision of the transport service and the purchase of the product;
5.execute the activation and maintenance of any services subscribed online or the sending of newsletters;

LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of personal data for purposes 1.5 is Article 6.1 lett. A) of the Regulations, as the processing is necessary to respond to the requests of the interested party. The provision of data for these purposes is optional, but failure to provide it would make it impossible to obtain the requested response.
The purpose referred to in number 2 represents the processing of personal data carried out pursuant to art. 6.1.lett. C) of the Regulations, for compliance with a legal obligation. Once the data has been provided, the processing is necessary to fulfill a legal obligation to which the Data Controller is subject. The processing for the purposes referred to in number 3 would be carried out pursuant to art. 6.1.lett. F) of the Regulation.
The processing for the purposes referred to in number 4 would be carried out pursuant to art. art. 6 lett. B) of the Regulations, for the execution of the contract put in place with the interested party.

SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

The personal data relating to the processing in question may also be communicated to subjects who are granted the right to access their personal data by law or secondary and / or community regulations. Your data may only be disclosed to competent and duly appointed subjects for the performance of the services necessary for proper management of the relationship, with a guarantee of protection of the rights of the interested party. Furthermore, some data may be communicated and disseminated to the internet operators of which DIFFUSION FOODS SRL uses for the management of its domains.
Your personal data will not be disclosed in any way.
Your data will not be transferred to third countries.

DATA RETENTION PERIOD

We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data is: for personal data, we adhere to a retention policy in line with legal and statutory requirements. For more information on this, you can contact us at: info@suavisitaly.com . We may also retain your data for the period necessary to pursue legitimate business interests, conduct reviews, comply with legal obligations, resolve disputes and enforce agreements.

RIGHTS OF THE INTERESTED PARTIES

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of the interested party
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
a. of the origin of the personal data;
b. of the purposes and methods of the processing;
c. of the logic applied in case of treatment carried out with the aid of electronic instruments;
d. of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2;
e. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents.
3. The interested party has the right to obtain:
a. update, rectification or, when interested, integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
c. the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means;
d. manifestly disproportionate to the protected right;
e. data portability.
4. The interested party has the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

THE DATA CONTROLLER

The data controller is DIFFUSION FOODS SRL with registered office in Turin, Via Peyron 38 - in the person of its pro tempore legal representative.
The user has the right to obtain from the owner the cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general can exercise all rights provided for by art. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
To exercise the rights listed above, the interested party must send a written request by e-mail. The e-mail should be addressed to: info@suavisitaly.com

COOKIES

By cookies we mean a textual element that is inserted into the hard disk of a computer or other device by the online service provider to visitors to the website. Cookies can collect information on visitor habits regarding the use of the aforementioned website, by recording the activities of their computer or other device regarding the aforementioned site, for example when it comes to making purchases.
COOKIES can be:

Proprietary cookies (also called first party)

Proprietary cookies are cookies that are saved directly on your computer or other device. They may include cookies such as session cookies and persistent cookies (described below). Proprietary cookies can be used to follow the movements made by the visitor's computer or other device by consulting the site, for example for analysis purposes.

Third party cookies

Third-party cookies are cookies managed by third parties that can collect and track some navigation data. This site uses the Google Analytcs service (described in navigation and statistical data collected by third parties)

Session cookie

The duration that elapses between the moment the Internet browser is opened and the moment it is closed is called the browsing session. Session cookies are cookies stored on the visitor's computer or other device during a browsing session, but which expire and are normally deleted at the end of a browsing session.

Persistent cookies

Persistent cookies are cookies stored on the visitor's computer or other device during a browsing session, but which remain on the computer or other device after the end of the aforementioned browsing session (e.g. password registration) Persistent cookies allow sites to recognize the visitor's computer or other device when it is used to access one of our sites again, after the end of a browsing session and at the beginning of a new browsing session, essentially to help the visitor reconnect quickly to our site.