Privacy disclaimer

Last updated: 2020-05-09

PRIVACY AND COOKIES INFORMATION PURSUANT TO EU REGULATION 2016/679.

This information is provided pursuant to and for the purposes of EU Regulation 2016/679 on data protection (GDPR, General Data Protection Regulation UE 2016/679).

On this page we describe the ways in which the personal data of site visitors are processed:

• maspesfiori.it

The information is provided only for the indicated website and not for other addresses also accessible by the user through links.

1. HOLDER OF THE TREATMENT

The data controller is:

Maspes Piante e Fiori of Maspes & CSncVia Leone Leoni 2 - 22100 Como (CO)

For any information or to exercise the rights referred to in articlesfrom 15 to 22 of EU Regulation N2016/679, it is possible to contact the Data Controller at the following addresses:

• Email: info@maspespiantefiori.it;
• PEC: maspespiantefiori@pecpostasicura.it;
• Telephone: 031 271136

2. GENERAL INFORMATION AND VALID FOR ANY TREATMENT

All the treatments carried out through this website are based on the principles of lawfulness, correctness and transparency.

At any time it is possible to exercise the rights set out in the aforementioned articles of law by making an explicit request to the owner or manager of the treatmentIt is also possible to request precise information about the subjects who process the data on behalf of the owner (Managers, Officers, etc...).

During the processing operations, an adequate level of protection and confidentiality will be guaranteed and compliant with the provisions of art32 of the GDPR.

In the event that the Website should use personal information for purposes other than those set out in this statement, the User will be asked for specific consent.

3. SPECIFIC INFORMATION FOR EVERY TYPE OF TREATMENT

1. Data collected by the use of our services by the User :
   We may collect information on the services displayed and / or used by the User, as well as on the method of use (for example when the User interacts with our content);
   This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI / URL (Uniform Resource Identifier / Locator) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
   
   These data, necessary for the use of web services, are also processed for the purpose of:
   1. obtain statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
   2. check the correct functioning of the services offered.

Navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need for the detection of crimes by the judicial authorities).

2. Cookies and similar technologies :
   Our website uses different technologies to collect and store information when one of our services is visited, which could involve the use of cookies and / or similar technologies to identify the user's browser or device; we also use these technologies to collect and store information when the User interacts and / or purchases our services and / or the services of our partnersFor more information visit our Cookie Policy.
3. Registration on the website
   Registration on the Website takes place by creating a profile (associated with a username and password chosen by the user himself) linked to the user's e-mail address; the provision of data is not mandatory, but it is strictly essential for the conclusion of the registration and to be able to take advantage of the services reserved for Registered users, therefore, any refusal to communicate such data is equivalent to the impossibility of completing the registrationThe personal data communicated and not strictly necessary for registration will be used for statistical analysis and profiling, as well as to improve the service offered by the WebsiteThe information collected for this purpose will be kept until the request for cancellation by the user.
4. Registration and online shopping
   The data that we ask to provide within our online store, through various forms to be filled in, is collected for the purpose of finalizing the ordering and purchase of products and / or services that can be purchased on our website and for post- assistance. saleTo conclude the transactions only personal information such as name, surname, shipping address, billing address will be required, the mandatory fields are marked with the symbol *Other personal data such as mobile or landline numbers are not considered mandatory, however they can be useful to allow us to provide the best possible assistance.Any refusal to send us your mandatory personal data during registration will make it impossible for the owner to complete the purchase transactionsThe information collected for this purpose will be kept until the user requests a cancellationBilling data will be stored according to legal terms (10 years)If you use the personal profile to make purchases, the legal basis is the need to fulfill the obligations of a contract or pre-contract of which the interested party is a part (art6.1b)In the case of purchase without registration, the legal basis is the legitimate interest of the data controller (art6.1f)In all other cases, explicit consent will be requested from the interested party on which the legal basis for the processing will be based (art 6.1a).

INFORMATION SHARED BY US

The Website provides personal data to third parties in the following cases:

1. With the User's consent : the Website, in case of need to share sensitive personal data, with companies, organizations and people unrelated to the Website itself, requires the User's authorization;
2. To domain administrators : the domain administrator and / or third party resellers who provide assistance in using the service may have access to the personal data of the interested parties;
3. For external treatments : the Website provides personal information to its affiliates and / or companies and / or trusted persons to treat it according to the instructions provided and in compliance with the Privacy rules applied by the Website itself (as well as in compliance with any other measures appropriate privacy and security issues);
4. For legal reasons : the Website provides personal information to companies, organizations and / or people who are not part of the team of the Website if the same believes that access, use, protection or disclosure of such information is necessary for:
   • Comply with applicable laws or regulations, a judicial proceeding and / or a mandatory government request;
   • Apply the applicable terms of service, including investigations of potential violations;
   • Detect, prevent or manage fraudulent activities or security or technical problems;
   • Protect the rights, property and / or security of the Website, our Users or the public, as required and permitted by law.

The Website may share information that does not allow personal identification with its partners, for example to show trends relating to the general use of our services and / or purchasing preferences.
Should the Website Owner be involved in a merger, acquisition and / or transfer, the same will continue to guarantee the confidentiality of personal information and communicate to the Users concerned the transfer of personal information or the application of privacy rules other than those adopted here.

THE SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED

Where necessary, the communication of data will eventually be carried out only to competent authorities, trusted subjects appointed by the Website Owner for the performance of technical and / or organizational tasks (provision of legal, accounting, tax, consultancy services, etc...).
Personal data are not subject to disclosure.

RIGHTS OF THE INTERESTED PARTY
(Articles15-21 EU Regulation 679/2016)

1. The interested party has the right to obtain confirmation that personal data concerning him or her is being processed, even if not yet registered, and their communication in an intelligible form.
2. The interested party has the right to obtain access to personal data and the following information:
   1. the indication:
      • the purpose of the treatment;
      • the categories of personal data in question;
      • of the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients from third countries or international organizations;
      • the expected retention period of personal data or the criteria used to determine this period;
      • of the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
      • the right to lodge a complaint with a supervisory authority;
      • if the data are not collected from the data subject of all the information available on their origin;
      • the existence of an automated decision-making process, including profiling and, at least in such cases, of significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
   2. the correction of inaccurate personal data concerning him without undue delayTaking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration;
   3. the cancellation of personal data concerning him without undue delay; the data controller is obliged to delete personal data without undue delay if one of the following reasons exists:
      • personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
      • the interested party revokes the consent on which the treatment is based and if there is no other legal basis for the treatment;
      • the interested party opposes the treatment and there is no prevailing legitimate reason to proceed with the treatment;
      • personal data have been unlawfully processed;
      • personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
      • personal data have been collected in relation to the offer of information society services.
   4. the limitation of treatment when one of the following hypotheses occurs:
      • the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
      • the treatment is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
      • although the data controller no longer needs it for processing purposes, personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
      • the interested party has opposed the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party;
      • the interested party who has obtained the limitation of treatment is informed by the data controller before said limitation is lifted.
3. The data controller informs each of the recipients to whom the personal data have been transmitted of any corrections or cancellations or limitations of the processing carried out.
4. The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit these data to another data controller without impediments on the part of the data controller to whom you have provided themIn exercising his rights regarding data portability, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
5. The interested party has the right to object:
   • at any time, for reasons related to your particular situation, to the processing of personal data concerning you, including profilingThe data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court;
   • if personal data are processed for direct marketing purposes, including profiling insofar as it is connected to such direct marketing;
   • if the interested party objects to the processing for direct marketing purposes, the personal data are no longer processed for these purposes.

A form is available below, through which by entering your email you will be sent a link to view and possibly modify (including the possibility to request automatic deletion) of personal data.