Ditta Massa Elio, represented by the owner, with its registered office at c.so Torino n.72, San Maurizio Canavese (TO), VAT number 03987900010 – Tax Code MSSLEI53T24C722N hereinafter referred to as "Owner"), in its capacity as data controller, informs you pursuant to Article 13 of EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the following ways and for the following purposes:

According to the aforementioned legislation, the processing of your personal data will be based on the principles of fairness, lawfulness, relevance, transparency, and protection of your privacy and rights.

PRINCIPLES APPLICABLE TO PERSONAL DATA PROCESSING

Personal data are:

1. processed lawfully, fairly, and transparently in relation to the data subject (lawfulness, fairness, and transparency);
2. collected for specified, legitimate, and explicit purposes;
3. adequate, relevant, and limited to what is necessary for the purposes for which they are processed;
4. accurate and, where necessary, kept up to date; all reasonable measures will be taken to ensure the correction or deletion of inaccurate data, where necessary;
5. stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

PURPOSE OF DATA PROCESSING

The processing

1. is aimed at the completion, management, and execution of supply and sales contracts for household products, accessories, and fabrics, both online via our e-commerce and in-person;
2. is necessary for fulfilling fiscal and administrative obligations, accounting management, and compliance with Italian law and European regulations;
3. may be carried out for market analysis and statistics: marketing and references;
4. may be used by Ditta Massa Elio for promotional purposes;
5. is directed to collecting data for direct marketing purposes, including sending commercial communications by email;
6. is intended to create a promotional database;
7. may be used to identify perpetrators of illegal activities only in response to specific requests from the competent authorities;
8. is intended, via a video surveillance system, to monitor access to the store and warehouse for security purposes, with recordings kept for 15 days.

PROCESSING METHODS

The processing:

1. is carried out through operations such as collection, registration, organization, structuring, processing, modification, comparison; use, including consultation, communication, storage, selection, extraction; blocking, interconnection, deletion, destruction; security, protection, including accessibility, confidentiality, integrity, and safeguard;
2. is conducted with the help of electronic or automated means, with data entry and collection in electronic databases owned by Ditta Massa Elio, where operations listed in item a) are carried out;
3. can also be performed using non-electronic tools and organized in paper archives;
4. is carried out by the owner's organization and third parties collaborating with Ditta Massa Elio for production, commercial, and logistics activities, as well as by professionals the company uses for accounting, fiscal, and legal compliance;
5. personal data will be processed for the time necessary to fulfill the purposes outlined above and, in any case, for no longer than 10 years after the end of the contractual relationship for contractual and legal compliance purposes, and no longer than 2 years from the collection of data online for marketing purposes, provided the individual has not become a customer. If a quotation request is only paper-based, the quotation proposal will be kept for a maximum of six months, after which it will be destroyed. Data collected via the video surveillance system will be automatically deleted after 15 days and will leave no trace.

The processing is not fully automated, profiling is done for statistical purposes and to optimize online sales of the best-selling and most searched products, and direct marketing is carried out strictly for sending communications about new promotions to acquired customers and those who request them by completing the form on the website www.labiancheriaperlacasa.com.

COOKIES

Cookies are text files that websites send to the computer or other device connected to the internet, used by the visitor to uniquely identify the visitor's browser or to store information or settings in the browser.

Cookies are used to improve websites and provide services and features to customers. Specifically, they may be used to remember information provided by the user, store user preferences regarding the website's usage, allowing Ditta Massa Elio to improve the website's performance and design. They may also be shared with analytics tool providers, and could also allow for promotional information to be provided.

You can limit or disable cookies through your browser, but in this case, some website functionalities may become inaccessible.

Ditta Massa Elio uses Google Analytics, a tool provided by Google to understand visitors' interactions with their websites, so that they can improve them. The collected information is completely anonymous and does not identify individual visitors.

Users have the option to deactivate Google Analytics by downloading and installing the deactivation component.

PROVISION OF DATA

While maintaining the personal autonomy of the data subject, the provision of personal data may be:

1. mandatory according to law, regulation, or EU legislation;
2. strictly necessary for the activation and execution of the offered services, as well as for fulfilling fiscal and accounting obligations;
3. optional for the purposes of providing information, marketing, and promoting services to the data subject.

The owner indicates that any error in the communication of mandatory data (letters a-b) may result in the impossibility for the owner to ensure the consistency of the processing with the contractual terms under which it is executed, as well as the failure to comply with the results of such processing according to legal obligations.

REFUSAL TO PROVIDE DATA

The refusal by the data subject to provide personal data

1. in cases of point 5, letters a) and b), results in the impossibility of executing contracts;
2. in the case of point 5, letter c), does not affect the existing or prospective legal relationships but precludes the possibility of performing activities related to information and promotion of other initiatives directed at the data subject.

COMMUNICATION OF DATA

1. Personal data may be communicated and transferred to affiliated and/or controlled companies, commercial partner companies of Ditta Massa Elio, third-party companies carrying out activities on behalf of Ditta Massa Elio in outsourcing, companies providing commercial information and authorized to access public offices, registers, and bulletins, and banks for the purposes prescribed by law.
2. In this case, the identifying details of the corresponding owners and possible responsible parties may be acquired at Ditta Massa Elio's office.
3. Furthermore, personal data may be communicated to Public Authorities to comply with contractual obligations and legal requirements.
4. Personal data may also be communicated to group companies, service companies, for the provision of IT services or archiving services.
5. Commercial communications may be sent through the web, mail, or email.

DISSEMINATION OF DATA

Personal data are disclosed to the entities indicated in point n.7 (by way of example but not limited to, credit institutions, professional firms, consultants).

Any further communication beyond those mentioned above and any additional dissemination will occur only with your explicit consent.

DATA CONTROLLER

Ditta Massa Elio, represented by the owner, with its registered office at via Torino n.72, San Maurizio Canavese (TO) VAT number 03987900010, phone 0119277642, email info@labiancheriaperlacasa.com

The Data Controller is Mr. Massa Paolo, email paolo.massa.17@alice.it.

RIGHTS OF THE DATA SUBJECT

Articles 15/16/17/18/19/20 of the GDPR confer specific rights to the data subject, including the right to obtain from the controller or the data processors confirmation of whether or not personal data concerning them exists and to have the data communicated in an intelligible form; to be informed about the origin of the data, as well as the logic and purposes of the processing; to obtain the erasure, anonymization, or blocking of data processed in violation of the law, as well as updating, rectification, or, if necessary, supplementation of the data; to object to processing for legitimate reasons. Here is a list of the rights of the data subject for your reference:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, and to have it communicated in an intelligible form.
2. The data subject has the right to obtain the following information:
   - the origin of the personal data;
   - the purposes and methods of processing;
   - the recipients or categories of recipients to whom the personal data have been or will be communicated
   - the retention period for the personal data or the criteria used to determine that period;
   - the right to request the rectification or erasure of personal data or the limitation of processing, or to object to processing;
   - the right to lodge a complaint with a supervisory authority;
   - the existence of automated decision-making, including profiling
   - the logic applied in the case of processing carried out with the aid of electronic tools;
   - the identifying details of the controller, processors, and the data protection officer designated in accordance with Articles 37 and following of the GDPR 679/2016;
3. The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning them without undue delay. They also have the right to obtain the completion of incomplete personal data, even by providing a supplementary statement.
4. The data subject has the right to obtain the erasure of personal data concerning them without undue delay if any of the following reasons apply:
   - the personal data are no longer necessary for the purposes for which they were collected or processed;
   - the data subject withdraws their consent for processing based on Article 6(1), and no other legal basis exists for processing;

- the data subject objects to the processing, and there are no overriding legitimate grounds for the processing, or they object to the processing under Article 21;
- the data have been processed unlawfully;
- the personal data must be erased to comply with a legal obligation

1. The data subject has the right to obtain the restriction of processing when any of the following applies:
   - the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of the data;
   - the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of its use;
   - even though the controller no longer needs the data for processing purposes, the personal data are required by the data subject for the establishment, exercise, or defense of a legal claim;
   - the data subject has objected to processing under Article 21
2. The data subject has the right to receive personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance, where:
   - the processing is based on consent
   - the processing is carried out by automated means

In exercising their right to data portability, the data subject has the right to obtain the direct transmission of personal data from one controller to another, where technically feasible;

The exercise of this right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

The right referred to in this paragraph must not adversely affect the rights and freedoms of others.

The controller

The undersigned data subject, having received the information provided by the data controller and having reviewed the privacy notice as required by the above law:

gives consent for the processing of their personal data for the purposes of completing and executing the contract, as outlined in the privacy notice reviewed, which are mandatory and necessary for the controller to properly perform the contractual relationship.

I give my consent        

gives consent for the processing of their personal data for optional promotional and marketing purposes, as outlined in the privacy notice reviewed.

 I give my consent                                   I do not give my consent

gives consent for their personal data to be processed and transferred to companies that carry out activities on behalf of Ditta Massa Elio in outsourcing, and to commercial partner companies of Ditta Massa Elio that provide commercial information.

I give my consent                                   I do not give my consent

Having reviewed the cookie usage and Google Analytics privacy notice, I authorize their use.

I give my consent                                   I do not give my consent