PRIVACY NOTICE FOR WEBSITE USERS

 according to article 13 of the Regulation (EU) 2016/679 (“GDPR”) General Data Protection Regulation

 

DATA CONTROLLER

Pavia & Pavia International Design S.r.l.

VAT n. IT05292500013

Place of business: Via Ala di Stura 71/16 n – 10148 Torino (TO)

In accordance with Art. 13 of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), Pavia & Pavia International Design S.r.l. (hereinafter “Data Controller” or “P&P”), as Data Controller, inform you (hereinafter “User”) that your personal data will be processed for the following purposes and in the following manner:

  1. Types of data collected

The Data Controller processes identification data and usage data of the User collected during the User’s navigation through the Data Controller’s website (hereinafter “Website”). The Data Controller’s website can be reached at https://paviaepavia.it/ (hereinafter, “Personal data” or “Data”).

The information relating to the network used by the User (e.g. IP address) may also be collected and processed by the Data Controller.

  1. Purposes and legal basis of processing

Your Personal data will be processed for the following purposes:

  1. respond to User’s requests for information (Contact form);
  2. acquire statistics and metrics to ensure the proper functioning of the Website;
  3. exercise the rights of the Data Controller (e.g. data processing for exercise or defence of legal claims).

The legal basis for the data processing is the following:

The Users are free not to communicate the Data for the above-mentioned purposes. Failure to provide the Data, however, may make it impossible for the Website to provide its services.

The Data could be also used for Marketing purposes. For more information, please consult the following URL: https://paviaepavia.it/informativa-privacy-per-la-newsletter/

The User’s Data can also be processed through Cookies. In order to obtain more information about the processing, please visit the Cookie Policy at the following link: INSERIRE LINK COOKIE POLICY.

  1. Retention time

The Data Controller will store and process Personal data for the period of time necessary to fulfill the purposes specified in this Privacy notice. Your Data will not be retained for a longer period of time unless the current law requires a more extended retention period. The Italian Civil Code requires to store all the documents of commercial or legal relevance for a period of 10 years. The Personal Data can also be stored for the period of time necessary for the establishment, exercise or defence of legal claims.

 

  1. Disclosure of personal data

The User’s Personal data will not be disseminated but may be made accessible where necessary to:

The Data Controller may communicate your Personal data for the purposes established by Art. 2 of the present Privacy notice to supervisory authorities, legal authorities, public authorities to which it is obligatory to communicate the Data, as well as to those subjects to which the communication is mandatory by law for the fulfillment of the above-mentioned purposes.

  1. Transfer of personal data

The Personal data will be stored on servers located within the European Union and managed by third-party companies duly appointed as Processors.

The Data Controller may transfer the User’s Personal data to a third country. The data will be transferred exclusively to countries considered “adequate” and therefore, “safe” by the European Commission or to the companies which ensure appropriate safeguards pursuant to Articles 44-50 of the GDPR.

  1. Users Rights

You may exercise the rights granted by the GDPR (articles 15-22), including:

  1. The right to receive confirmation as to whether the Data Controller is processing the User’s Personal data (access rights);
  2. The right to update, modify and/ or correct Personal data (right of rectification);
  3. The right to request the erasure of data or the restriction of the processing. This right can be granted if the process is unlawful or the Data Controller no longer needs the Personal data for the purposes of the processing (right to be forgotten and right to restriction of processing);
  4. The right to oppose to the processing (right of opposition);
  5. The right to propose a complaint to the Supervisory Authority in case of violation of the regulations regarding the protection of Personal data;
  6. The right to receive an electronic copy of the User’s Personal data (in a structured, commonly used and machine-readable format) and right to transmit those Data to another Data Controller without hindrance from the Data Controller to which the Personal Data have been provided (right to Data portability).

 

 

  1. Data Controller contact information

The Data Controller: Pavia & Pavia International Design S.r.l.

Registered Office: Via Ala di Stura 71/16 n – 10148 Torino (TO)

You can contact the Data Controller to exercise your rights granted by the GDPR by sending the registered letter to Pavia & Pavia International Design S.r.l. at Via Ala di Stura 71/16 n – 10148 Torino (TO) or by sending e-mail at info@paviaepavia.it providing the following information: name, surname, a copy of your identity document.

  1. Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.

  1. Changes to this privacy policy

The Data Controller reserves the right to make changes to this Privacy notice at any time by notifying its Users within this Website at the following link: https://paviaepavia.it/en/privacy-policy/

 

Privacy Notice updated on: October 13th, 2022