WHY THIS NOTICE
WHO WE ARE: THE "DATA CONTROLLER"
The "data controller" is Fiorirà un giardino S.r.l., VAT number 01354520304, with registered office at Via G. Galilei 10, 33042 Buttrio UD. The contact details are as follows: Tel: +39 0432 602332; Fax: +39 0432 526162; Email: email@example.com.
WHAT TYPE AND NATURE OF DATA ARE PROCESSED
When filling out the form on the website, personal data will be collected, which allows for your identification, even indirectly. This may include information such as your name, surname, address, email address, telephone number, Tax Identification Number, VAT number, password, or any other data that you voluntarily provide when contacting us directly.
PURPOSES AND LEGAL BASIS OF LAWFUL PROCESSING
The collected data will be used for the following purposes:
Allowing you to create and manage your personal account within the e-commerce platform to access the provided services.
Managing supply contracts and ensuring their proper execution from the moment of order placement to the delivery phase (registration, product selection and adding to the cart, purchase, payment, shipping and delivery, returns, handling any disputes). This includes managing accounting operations for billing purposes, maintaining communication regarding the supply contract, and collecting any feedback or reviews.
Providing information upon your request.
With your explicit consent, your email address will be processed to provide you with the company's newsletter service, which involves sending promotional or advertising communications. You can revoke your consent at any time by requesting to be removed from the newsletter, using the contact details provided above.
Common personal data may be processed even without your specific consent in order to fulfill your requests and for pre-contractual and contractual purposes related to the requested service, as well as to comply with legal obligations to which the Data Controller is subject. However, your consent is required specifically for receiving the Newsletter service.
You are free to provide or not provide your data, but in the absence of the requested data, it will not be possible to conclude or fulfill the service and your requests.
METHODS AND PLACE OF PROCESSING AND STORAGE PERIOD
The processing of your data takes place at our headquarters, using telematic, paper, electronic, or automated tools, and is carried out by authorized and trained individuals within the limits of their assigned tasks, for the time strictly necessary to achieve the purposes for which they were collected. Your data, in particular, will be kept for the duration of the contract and, subsequently, for the time necessary to fulfill tax obligations or for other purposes provided for by laws or regulations (usually 10 years).
If you do not perform any active actions (e.g., login with username and password) for a period exceeding 24 months, you will be classified as an inactive user and your personal data, the
retention of which is not necessary for tax or legal purposes, will be deleted.
COMMUNICATION AND DISCLOSURE OF DATA
Your personal data may be disclosed to the following categories of entities:
a) our suppliers with whom we collaborate to provide you with the requested service;
b) shipping companies and payment management companies (e.g., PayPal, credit institutions, credit card processing companies).
c) data processing and IT service companies, professionals, consulting firms, companies operating in the provision of services for contract execution.
These entities will operate as independent data controllers or will be designated as data processors with a specific contract or legal act. Data may also be accessed by entities authorized by law or regulations (e.g., public security authorities). The data will not be subject to automated decision-making processes, nor will any profiling be performed. Personal data will not be disclosed or transferred to third countries or international organizations.
RIGHTS OF THE DATA SUBJECT
Among the rights recognized to you are:
The right to request access to your personal data and information related to it; the rectification of inaccurate data or the integration of incomplete data; the erasure of personal data (when one of the conditions indicated in Article 17, paragraph 1 of the GDPR occurs and subject to the exceptions provided in paragraph 3 of the same article); the restriction of the processing of personal data (when one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR occurs).
The right to request and obtain, in cases where the legal basis for processing is a contract or consent, and the processing is carried out by automated means, your personal data in a structured, commonly used, and machine-readable format, and to transmit such data to another data controller (known as the right to data portability).
The right to object at any time to the processing of personal data, including profiling, when specific situations apply to you.
The right to withdraw consent at any time, limited to cases where the processing is based on consent for one or more specific purposes and concerns common personal data (such as date and place of birth or residence) or specific categories of data (such as data revealing health status or sexual life). However, processing based on consent carried out prior to its withdrawal remains lawful.
Your requests should be addressed to Fiorirà un giardino at the following email address: firstname.lastname@example.org.
If you believe that there has been a violation in the processing of your personal data, you can lodge a complaint with the Supervisory Authority of the country where you usually reside, work, or where the alleged violation occurred. Please note that in Italy, you can lodge a complaint with the Garante per la Protezione dei Dati (Data Protection Authority).