Privacy Policy
DATA PROTECTION STATEMENT
– consumers and customers –
pursuant to art. 13 of EU Regulation 2016/679 of the European Parliament and Council (hereinafter “GDPR”)
In order to make you (“Data Subject”) fully aware of the processing of your data, Convivio Srls (“Data Controller”), – the owner of the name, of the trademark and of the internet domain “Secret Garden Firenze” -, informs you of the following.
Purposes
Your personal data will be processed for the following purposes:
1. to deliver advertising, newsletters for informational and promotional activities and/or products marketed by the Owner, to suggest functions, products and services that may interest you based on your preferences
2. to interact with social networks (Facebook and Instagram) for promotional activities also through the use of cookies (see specific section)
3. to receive and manage purchase orders, supply of products, to process payments and communicate using the contact details supplied by you in relation to the orders, products and promotional offers
4. to manage the functions of the site to make it suitable for commerce, analyze performance, correct errors and improve its utilization and efficiency
5. to preventing and detect fraud and abuse in order to protect the safety of the site
6. to fulfill the obligations of the law concerning accounting, taxes, health and food safety, trade and consumption
Lawfulness of the processing
With reference to the purposes referred to in points 1., 2., 4. and 5., the processing of your personal data has its legal basis in activities necessary for the purposes of the legitimate interests pursued by the Data Controller, in order to communicate and promote its commercial activities, also through direct marketing, and to maintain the site and the on-line platform suitable for the function of e-commerce and in proper state of effectiveness and efficiency.
With reference to the purposes referred to in point 3., the processing of your personal data has its legal basis in activities necessary for the performance of a contract with you or in order to take steps at one of your requests prior to entering into a contract with Data Controller.
With reference to the purposes referred to in paragraph 6., the processing of your personal data has its legal basis in activities necessary for compliance with a legal obligation to which the Data Controller is subject.
Categories of personal data
The data that are the subject to processing are those collected from you for the purposes above mentioned indicated above. They are personal data, addresses and other identifying information collected during navigation of the website (see cookies section). Instead, not subject to processing are the personal data of particular categories indicated in art. 9 of the GDPR (formerly “Sensitive Data”).
Duration of the data retention
Your personal data will be stored for no longer than is necessary for the purposes (as specifically mentioned above) for which they are collected. The retention will not last however beyond the possible and legitimate opposition to the processing, without prejudice to the processing necessary for compliance with a legal obligation to which the personal data will be kept for a period of 10 (ten) years. After this legitimate retention period has expired, the data will be destroyed or made anonymous.
Data recipients
The data provided will not be in any way subject to disclosure, but can be communicated to people who, within the limits of the above indicated purposes and in respect of expressed contractual constraints to guarantee data protection, operate under the direct authority of the Data Controller (administrator and employees) or for performing tasks on behalf of the Data Controller (“Data Processor”) (for example: couriers, supplier services, on-line platforms, processing payments on-line, accountant, credit recovery agencies and law firms).
In no case your data will be subject to transfer and/or communication outside of the European Union.
Rights of the concerned party
In accordance with articles 15, 16, 17, 18, 20 and 21 of the GDPR, it is the right of the Data Subject to be able consult the Data Controller at any time, in order to access your personal data, have it rectificated, to erase it, for the restriction of its processing or to object to the same, in addition to the right to “data portability”.
In addition, in the case of violations, the Data Subject has the right to lodge a complaint with the supervisory authority of the State of habitual residence, employment or the place where it is verified that alleged violation occurred.
Data Controller Contact Details
The Data Controller is Convivio Srls, Via della Colonna 31, 50121 (Florence) (“Headquarter”).
Contact details for information regarding the use of personal data, the list of the Data Processor to whom the data are disclosed in the context of the processing and, possibly, to exercise the rights mentioned above as Data Subject, are: i) postal address: Headquarter; ii) email: secretgardenfirenze@gmail.com
Cookies
Cookie Policy
The Cookie consists of a portion of data stored within the User device which can access this application or duly authorised third party applications, in order to identify the user and to improve navigation, or to enable certain services.
This site (hereinafter Application) makes use of cookies, as described below.
Under what circumstances and for what purposes do we use cookies and similar technologies?
Interaction with social networks and external platforms
This type of service allows for interacting with social networks, or other external platforms, directly from the pages of this Application. The interaction and information obtained from this Application is in any case subject to the User’s privacy settings relative to each social network.
If an interaction service with social networks is installed, even if Users do not use the service, the service may still collect traffic data for the pages on which it is installed.
AddThis (Addthis Inc.)
Personal Data collected: Cookies and Usage data.
Processing location: USA – Privacy Policy.
Personal Data collected: Cookies and Usage data.
Processing location: USA – Privacy policy.
Advertising
This type of service enables use of User Data for the purposes of commercial communication in various advertising forms, such as banners, even in relation to the User’s interests. This does not mean that all personal data are used for this purpose. Data and usage conditions are given below.
Google AdSense (Google)
Personal Data collected: Cookies and Usage data.
Processing location: USA – Privacy Policy – Opt Out.
Access to statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Google Inc.)
Personal Data collected: Cookies and Usage data.
Processing location: USA – Privacy Policy – Opt Out.
Pursuant to EU Regulation UE 2016 n.679 on the processing and protection of privacy, please do not send curriculum vitae or other information that may contain sensitive personal data because they will be trashed.
Last edit: 28 April 2021
