PRIVACY POLICY
The personal data provided directly by the user to Vincenzo Toscani Spedizioni S.r.l. in the pages of the website that can be reached at the address toscanishipping.com at the time of registration and subsequently for the use of the services provided by Vincenzo Toscani Spedizioni S.r.l. from time to time. will be treated in compliance with the provisions of Legislative Decree 196/2003 on the protection of personal data (“Privacy Code”) and following the entry into force of EU Regulation No. 679/2016 (“GDPR”) in accordance with the provisions of art. 13 of the aforementioned European Regulation.
Vincenzo Toscani Spedizioni S.r.l. informs the user of the following:
Processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, deletion or destruction.
It is specified :
CO-OWNERS OF THE TREATMENT.
The Joint holders of the treatment of personal data in accordance with art. 26 are:
– Vincenzo Toscani Spedizioni s.r.l. with registered office in Via Reggia di Portici 69, 80146 Naples, registered at the Chamber of Commerce of Naples with C.F & P.IVA 08810901218
PURPOSE OF THE PROCESSING.
The user’s personal data, freely communicated and acquired as a result of the activity carried out by Vincenzo Toscani Spedizioni S.r.l., will be processed lawfully and correctly for the following purposes:
A – Without the express consent of the user (art. 24 lett. a, b, c Privacy Code and art. 6 lett. b, and GDPR): – the data will be collected and used exclusively for purposes directly related and instrumental to the activation and operation of the services provided by Vincenzo Toscani Spedizioni S.r.l., for example to allow the registration of the Account, the Customer Service as well as for the fulfillment of obligations provided by law, regulation or EU legislation and for the exercise of their rights in court.
B – Only after specific and separate consent of the user and until revocation of the same (Articles 23 and 130 of the Privacy Code and Article 7 GDPR): – use of their personal data, in particular e-mail address and paper mail, by the Owners, for the management of orders, processing, billing and delivery of products ordered, commercial communication services, including the newsletter relating to offers on the Site, as well as for carrying out market research also aimed at assessing the degree of user satisfaction.
The user may object to the processing referred to in art. 2 B at any time after having given his/her consent:
– through a link at the bottom of any e-mail with promotional content sent by Vincenzo Toscani Spedizioni S.r.l.;
– by sending an e-mail to info@toscanishipping.com ;
– by accessing the “contact us” section within the site and sending a specific request for cancellation\changing the preferences granted;
C – Soft Spam: The email address indicated by the user in a service offered on the Site may be used by the Owners to send email communications regarding information or services similar to those requested by the User, provided that the user does not exercise the right to object in the ways described in point B above.
MODALITIES OF DATA PROCESSING.
The data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the interested party, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the aid of electronic and automated tools (collection of data via computer, directly from the interested party).
LEGAL BASIS OF THE TREATMENT.
The legal basis for the processing is the user’s consent, the fulfilment of a contractual obligation and the provisions of the law.
LEGITIMATE INTERESTS PURSUED BY THE CO-OWNERS OF THE TREATMENT.
The legitimate interests pursued by the Data Controllers in the processing of data is given by the need to respect and honor the contractual obligations signed between the parties. According to art. 6 the lawfulness of the treatment is based on the manifestly expressed consent by the interested party, documented in written form.
NATURE OF THE CONFERMENT OF DATA.
The provision of the data requested at the time of activation of the services, for the purposes referred to in section 2A above, is mandatory, as it is strictly functional to the performance of the same. Any refusal to provide the data makes it impossible for Vincenzo Toscani Spedizioni S.r.l. to complete the user’s registration process and therefore to provide the services offered. The provision of data for the purposes described in section 2B above is optional.
COMMUNICATION OF DATA AND POSSIBLE RECIPIENTS OF PERSONAL DATA.
The user’s personal data may be communicated, to specific subjects appointed by the Owner to provide services that are instrumental or necessary for the execution of the obligations connected to the registration to the site toscanishipping.com, within the limits and in compliance with the instructions given. In particular, the data may be communicated to
1. persons, companies or professional firms, who provide assistance, advice or collaboration to the Owner in accounting, administrative, legal, tax and financial matters;
2. persons delegated and/or appointed by Vincenzo Toscani Spedizioni S.r.l. to carry out the activities or part of the activities related to the provision of sales services, such as Customer Service, even if managed in outsourcing; the logistics center responsible for the packaging of products; the carriers responsible for the delivery of purchased products; persons who carry out on behalf of Vincenzo Toscani Spedizioni S. r.l. the activity of after-sales assistance and any other external collaborator to whom the communication is necessary for the correct fulfillment of the obligations assumed by Vincenzo Toscani Spedizioni S.r.l. in relation to the contract for the supply of its services;
3. to Public Administrations for the performance of institutional functions within the limits established by law or regulations. The Owners have appointed a number of persons responsible for the processing of users’ personal data, depending on the functions performed. The updated list of all data processors is available at the headquarters of Vincenzo Toscani Spedizioni S.r.l. and can be requested at the following e-mail address: info@toscanishipping.com . This list may be subsequently integrated and / or updated as necessary.
MODALITIES OF THE TREATMENT.
The data is collected electronically and processed through registration, consultation, communication, storage, deletion, mainly with the aid of electronic instruments, ensuring the use of appropriate measures for the security of data and ensuring the confidentiality of the same.
The user’s data, stored on electronic media, are stored and archived on a server owned by Vincenzo Toscani Spedizioni S.r.l. located in Italy. In particular, the Owners declare that the data recorded on the server are protected against the risk of intrusion and unauthorized access and that they have also adopted appropriate security measures to ensure the integrity and availability of the data as well as the protection of areas and premises relevant to their custody and accessibility.
Personal data will be processed by collaborators and/or employees of the Data Controllers in their capacity as data processors or persons in charge of processing, within the scope of their respective functions and in accordance with the instructions given by the Data Controllers.
The Contributors guarantee the highest level of security in the management of user data. Credit card information is stored only in encrypted format and in accordance with the security requirements of PCI certification. The Account holders do not have access to confidential information relating to credit cards, which will be processed by intermediaries and card issuers in accordance with the Privacy Code.
RIGHTS OF THE INTERESTED PARTY.
The user (hereinafter also “interested party”), in accordance with the provisions of art. 7 Privacy Code and art. 15 GDPR, is entitled to:
– obtain confirmation as to whether or not personal data concerning him/her exist, even if not yet recorded, and their communication in an intelligible form;
– to be informed: a) of the source of the personal data; b) of the purposes and methods of processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designated as per art. 5, paragraph 2, Privacy Code and art. 3, paragraph 1, GDPR; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing;
– get: a) the updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
– object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys, using automated calling systems without the intervention of an operator by means of email and/or traditional marketing methods by telephone and/or paper mail. It should be noted that the right of opposition of the interested party for direct marketing purposes through automated methods extends to traditional methods and that in any case the interested party may exercise the right of opposition even only in part. Therefore, the interested party may decide to receive only communications through traditional methods or only automated communications or neither;
– request to the Data Controller the access to personal data (art. 15 GDPR), the rectification (art. 16 GDPR) or the cancellation (art. 17 GDPR) of the same, the limitation of the treatment or to oppose their treatment (art. 18 GDPR); ;
– the external portability of your data processed in automated form where applicable; ;
– to revoke your consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation; ;
– to submit a complaint to the Guarantor Authority for the protection of personal data. ;
In order to exercise the above mentioned rights, as well as to receive information regarding the subjects where the data is stored or to whom the data is communicated or to the subjects who, as data processors or persons in charge, may become aware of your data, you may contact the Data Controller by sending a request to the following e-mail address info@toscanishipping.com.
DURATION OF DATA PROCESSING AND STORAGE PERIOD.
The processing of personal data with reference to the purposes set out in section 2.A, will have a duration equal to that necessary to perform the services requested, to which must be added the additional period provided for by law in compliance with civil, fiscal and tax obligations in force.
INTENTION OF THE JOINT HOLDERS TO TRANSFER PERSONAL DATA.
The management and storage of personal data will take place on servers located within the European Union of Vincenzo Toscani Spedizioni S.r.l.. Currently the servers are located in Italy. The data will not be transferred outside the European Union.
PRIVACY POLICY UPDATES.
This Privacy Policy is subject to occasional revisions. If changes are introduced to the treatment, Vincenzo Toscani Spedizioni S.r.l. will give appropriate notice to the user, by publishing the changes on the Site. Where required by current legislation, the user will have the right to give his consent to any new processing. In case of refusal, the user’s data will not be treated according to the changes contemplated by the privacy policy.