INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE COMPILATION OF THE FORM PRESENT IN THE WEBSITE
This privacy policy supplements the policy of the navigation of the website, in order to illustrate how the data controller will deal specifically with the data entered in this form: we therefore invite you to review the privacy on the navigation [link[RP1]#atfp_close_translate_span# ].
Identity and contact data of the Holder of the treatment
White art Ltd, hereinafter also referred to as “White Art” or “Holder”, with registered office in Via Clover, 18/22 – 30175 Venezia (VE), Italy and contacted at the e-mail info@artebiancagroup.it the PEC artebiancagroup@pec.it or at the phone number 0415384233.
Categories of data and source
White art processes the personal data of a common nature (e.g. personal data, contact data, data relevant to the activity, education and culture and the image data), particular (e.g. health data), and relating to criminal convictions, offences, and security measures: this information can be collected from the subject to which they refer, and/or from third parties (e.g. companies that provide authentication tools).
Purposes and legal basis
- Management of requests for information: the personal data are processed for all the needs related to the execution of requests for information and/or quotes.
- Management of user registration: the personal data are processed to allow the creation of an account and subsequent access to the reserved area.
- Management of purchase: the personal data are processed for all the needs related to the management of the contractual relationship in all of its phases (e.g. the organization of logistics management, task management, customer support and fulfillment of regulatory obligations that weigh on the Holder).
- Newsletter: the contact details are used for the sending of advertising material.
- Marketing: the personal data are processed for the sending of advertising material or direct sales or for carrying out market research or commercial communication.
- Management of the event and of withdrawal of consent: the data controller processes the personal data to confirm your subscription to marketing communications will be done with a consensus has occurred (the double opt-in). The Holder registers revocation of consent, to avoid sending more communications to those who don’t want to (the blacklist).
- Profiling: the data are processed to analyze the behaviors, habits and propensities to consume in order to meet specific needs and improve the products and services offered by the Owner.
- Defensive purposes: the Holder may need to process personal data for the management of complaints and disputes out-of-court or in-court.
| Purpose | The legal basis (common data) | The legal basis (data, details) |
| To | The execution of pre-contractual measures; the Legitimate interest of the Owner to give feedback to the requests received. | / |
| B | The execution of the contract | / |
| C | The execution of the contract; Fulfilment of legal obligations. | / |
| D | Consent. | / |
| And | Consent. | / |
| F | Legitimate interest of the Owner to collect consents validly cast and keep track of the revocation to avoid unwanted contacts. | / |
| G | Consent. | / |
| H | Legitimate interest of the Owner to ascertain, exercise or defend a right. | To ascertain, exercise or defend a right. |
Retention period
| Purpose | Storage time |
| To | Time required to process the requests and the subsequent interlocution (normally 12 months from the last communications). |
| B | 12 months from the last interaction with the user (e.g. login) |
| C | 10 years from the termination of the contract. |
| D | Until the revocation of consent. |
| And | The purchase data are deleted after 24 months from the collection. Other information related to the static data (e.g. contact data, master data) are stored until the revocation of consent. |
| F | 1 month from registration data. The data stored in the black list are kept for 3 years. |
| G | 12 months from the registration of the data. |
| H | 10 years after the final resolution of the dispute. |
The nature of the data and consequences in case of refusal
| Purpose | Nature | Consequences | |
| To | Necessary | Unable to receive the requested information. | |
| B | Necessary | It is impossible to register for an account and receive the additional services provided for registered users. | |
| C | Necessary | The impossibility to start or continue the business relationship. | |
| D | Optional | The inability to receive communications relating to the advertising material. | |
| And | Optional | The inability to receive communications in relation to advertising material, direct sales or for carrying out market research or commercial communication. | |
| F | Optional | Impossible to receive promotional communications and marketing. | |
| G | Optional | Unable to take into account the tastes of the users, and send personalized communications. | |
| H | Necessary | The inability to manage the litigation. | |
Scope of communication
The data are processed by internal personnel authorized for specific tasks and are communicated to the outside according to the following rules
| Purpose | Categories of recipients |
| A. | Agents commercial consultants |
| B | Companies that offer hosting services/management of technological platforms, the companies that provide authentication tools. |
| C | Insurance company, or sale of credit agents, credit institutions, external consultants, the subjects to whom the communication is mandatory by law, our business partners (customers/suppliers). |
| D | External consultants, a company offering hosting services/management of technological platforms. |
| And | External consultants, a company offering hosting services/management of technological platforms. |
| F | Consulting company in the areas of marketing, a company offering hosting services/management of technological platforms. |
| G | External consultants, a company offering hosting services/management of technological platforms. |
| H | Legal studies; recovery company, or sale of credit; legal Authorities.[RP3] |
Since the data are processed by automated systems, may also be visible to all persons who carry out service/maintenance on these systems.
Data transfer to a third Country or to an international organisation
The data controller does not transfer personal data outside of the European Economic area. However, if this is necessary in order to achieve one of the purposes described above, such a transfer will take place in accordance with art. 44 ss Reg. EU 2016/679, and in particular, for transfers to the USA will be the agreement between the EU and the US, Data Privacy Framework.
Rights of the Interested parties
The person to whom the personal data refer are entitled to the following rights:
Access: is it possible to know if it is in a processing of their personal data, and if so, obtainaccess to and to request a copy.
Rectification: you can ask for the update of your personal data, the right to correction (if inaccurate) and the integration of incomplete ones.
Cancellation: you can obtain the erasure of their personal data with the use of certain assumptions (for more information, please contact the Owner).
Restriction: you can ask for that data to be marked, so as to limit future treatment, upon the occurrence of certain assumptions (for more information, please contact the Owner).
Objection: you can object to the processing of personal data, for reasons related to your particular situation, where the processing is based on legitimate interest, or is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the Owner; it is also possible to object to the processing of personal data for direct marketing purposes.
Portability: you can receive in a structured format, the personal data provided to the Owner and ask them to transmit them to another holder of the treatment in cases where such processing is based on consent or on a contract and is carried out by automated means.
Withdrawal of consent: you can withdraw your consent to the purposes that have required it, without prejudice to the lawfulness of the processing carried out up to that time.
Rights in concrete exercisable with respect to the processing activities carried out are:
| Purpose | Right, exercisable | ||||||
| Access | Grinding | Cancellation | Limitation | Opposition | Portability | Revocation of consent | |
| X | X | X | X | X | |||
| X | X | X | X | X | |||
| X | X | X | X | X | |||
| X | X | X | X | X | X | ||
| X | X | X | X | X | X | ||
| X | X | X | X | X | |||
| X | X | X | X | X | X | ||
| X | X | X | X | X | |||
To exercise the above rights it is possible to use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: info@artebiancagroup.it . The interested party may request to the same address to get more details in relation to the information above (e.g. a test of the balancing of legitimate interest or the list of those responsible for the treatment).
You can submit a complaint to a supervisory Authority: for Italy, the Guarantor for the Protection of Personal Data (www.garanteprivacy.it).
- I have read and understood the information on the processing of personal data (required)
The purpose of the“Newsletter”
◯ Allow ◯ do Not allow
The purpose of “Marketing”
◯ Allow ◯ do Not allow
☐ SMS
The purpose of “Profiling”
◯ Allow ◯ do Not allow
Ldisclosure must be reported under each form of the site (e.g. account registration, contacts, newsletters, marketing, profiling), with special check-box, distinct, related to: 1) a mandatory to attest loccurred acknowledgement of the privacy policy (and I have read and understood the information on the processing of personal data) 2) theother for consent in relation to a single purpose (as written in the text for example, the purpose of the newsletter, checkboxes, I consent or not consent).