Privacy Policy

Dear Interested Party, We wish to inform you that “European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”) provides for the protection of individuals with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we, therefore, inform you that:

 

1. CATEGORIES OF DATA: the company RIMAR SRL, Via Cellini, 1 – 62011 Cingoli (MC), P.IVA 01610520437 will process your personal data such as:

 

• Automatically collected data. The computer systems and applications dedicated to the operation of this website collect, in the course of their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected include the IP addresses and domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system, the browser and the IT environment used by the user. This data is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular operation. The provision of such data is compulsory as it is directly related to the web browsing experience.

 

• Data provided voluntarily by the user. The voluntary and explicit sending of e-mails to the addresses indicated in the various access channels of this site does not imply any request for consent, and any completion of specifically prepared forms entails the subsequent acquisition of the sender’s/user’s address and data, which are necessary to respond to the requests made and/or provide the service requested. The voluntary sending, on your part, of e-mails to our e-mail addresses does not require any further information or requests for consent. On the contrary, specific summary information will be reported or displayed on the pages of the site set up for particular services on request (forms). The user must therefore explicitly consent to the use of the data in these forms in order to send the request.

 

• Cookies. The site does not use third-party technical/profiling cookies that may collect navigation data from users, the provision of which is optional and takes place through the expression of free and informed consent. Cookies operate in order to analyse the effectiveness of the site and make it easier and more intuitive over time. The data collected thanks to cookies is used to make the browsing experience more pleasant and more efficient in the future, trying to assess user behaviour and modify the content offered according to their behaviour. A separate cookie policy is available for more information.

 

2. SOURCE OF PERSONAL DATA: The personal data in RIMAR SRL’s possession are collected directly from the person concerned.

 

3. DATA CONTROLLER: The data controller is RIMAR SRL, Via Cellini, 1 – 62011 Cingoli (MC), P.IVA 01610520437, who can be contacted by phone on 0733/610345 or by e-mail at info@rimar.eu

 

4. PURPOSE OF DATA PROCESSING AND LEGAL BASIS.

The purposes of data processing are:

 

1. Carrying out administrative, accounting, commercial, tax, and fiscal activities to fulfil contractual and statutory obligations.
2. Carrying out promotional activities such as: responding to requests for information sent via the form, providing assistance and support services, proceeding with a newsletter subscription, sending educational, informative and commercial communications, managing commercial profiling activities, sending email newsletters, commercial communications and/or advertising material on products and/or services, different and/or dissimilar from those already purchased, offered by the Controller.
3. Enable the use of www.rimar.eu specifically for both viewing products and making online purchases.

Legal basis of the stated purposes:

1. For automatically collected data, the legal basis is the legitimate interest of the owner and the purpose is to guarantee and improve the web browsing experience.
2. For data provided voluntarily by the user, the legal basis is consent to send via email newsletters, commercial communications and/or advertising material on products and/or services, different and/or dissimilar to those already purchased, provided by the Controller.
3. For cookies: see the specific cookie policy.

 

5. RECIPIENTS OF THE DATA:

Personal data may be shared, for the purposes specified in section 4, with:

 

• external parties in their capacity as autonomous data controllers such as, by way of example but not limited to, authorities and supervisory and control bodies and, in general, public or private parties entitled to request the data;
• external parties in their capacity as data processors appointed pursuant to Article 28 of the GDPR which activities are necessary for the provision of the services offered by the Site, including, by way of example, sending e-mails and analysing the operation of the Site;
• employees expressly authorised by the company to process personal data, to fulfil your specific requests.

Your data will not be disclosed in any way, except as required by law and/or to comply with your specific requests. The Data Processors and Persons in Charge of Processing in the office are punctually identified in the Privacy Document, which is updated periodically.

 

6. DATA OF USERS UNDER 16 YEARS OLD

The Site is not aimed at minors under the age of 18 and the DATA CONTROLLER does not knowingly collect personal data from them. In the event of the accidental registration of any information on minors, the DATA CONTROLLER shall delete it as soon as it becomes aware of it and in a timely manner upon request by users.

 

7. TRANSFER OF DATA ABROAD

The management and storage of personal data will take place on servers of the Data Controller and/or of third-party companies appointed and duly appointed as Data Processors, located within the European Union. Should the data be transferred outside the European Union, however, the Data Controller assures as of now that the transfer of the data outside the EU will take place in compliance with the applicable legal provisions (in accordance with the provisions of Art. 45 et seq. of the GDPR) by entering into, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided for by the European Commission.

 

8. RETENTION PERIOD

The data collected will be retained for a period of time not exceeding the fulfilment of the purposes for which they are processed (‘principle of limitation of storage’, Art. 5, GDPR) or in accordance with the deadlines stipulated by legal regulations. A check on the obsolescence of the retained data in relation to the purposes for which it was collected is carried out periodically.

 

• For the purpose of point 4(a), the legal basis is the performance of a contract to which the data subject is a party and the data will be retained for the duration of the contract and, after termination, for ten years.
• the purpose of point 4(b) is only possible with the user’s consent (optional and revocable at any time) and will be retained until revoked.
• With regard to the purposes referred to in point 4 letter c), the respective processing operations are necessary for the pursuit of a legitimate interest of the DATA CONTROLLER; the data will be retained for the duration of the browsing session on the www.gardenideaverde.it website, respectively.

 

9. RIGHTS OF THE DATA SUBJECT

Articles 15 et seq. of the GDPR grant data subjects the exercise of specific rights vis-à-vis the Data Controller. In particular, the data subject may:

 

• request from the controller access to the data concerning them, their deletion, the rectification of incorrect data, the integration of incomplete data, as well as the restriction of processing in the cases provided for by Article 18 of the GDPR;
• revoke any consent given with regard to the processing of personal data for marketing purposes, without prejudice to the lawfulness of the processing carried out up to that point;
• receive, in the case of processing based on consent or on contract and carried out by automated means, in a structured, commonly used and machine-readable format the Personal Data processed and, except where it is not technically feasible, transmit them directly from the controller;
• oppose, in whole or in part, the processing of data for the above-mentioned marketing purpose, or, for legitimate interest of the Controller;
• propose a complaint to the competent Control Authority
• The data subject may exercise these rights at any time by writing to the Data Controller by mail at the above address or by e-mail at info@rimar.eu

 

10. DATA PROCESSING METHODS

The personal data you provide will be processed in compliance with the aforementioned legislation and with the confidentiality obligations that govern the Controller’s activities. The data will be processed both by computer and on paper or any other suitable support, in compliance with the appropriate security measures pursuant to Article 5(1)(F) of the GDPR.

 

11. COMPULSORY OR NON-COMPULSORY PROVISION OF DATA

We inform you that the provision of data is optional for some fields and mandatory for others (marked with an asterisk) and failure to provide the mandatory data will result in the form NOT being sent.

 

12. MANDATORY NATURE OF CONSENT

Giving consent to data processing by ticking the appropriate box is optional, but indispensable in order to proceed with sending the form.

 

13. CHANGES TO THE PRIVACY POLICY

This Privacy Policy is effective as of 25 May 2018. the DATA CONTROLLER reserves the right to amend or simply update its content, in part or in full, also due to changes in applicable legislation.

You are therefore advised to regularly check this section to become aware of the most recent and up-to-date version of the privacy policy so that you are always up-to-date on the data collected and the use made of it by the DATA CONTROLLER. Should the DATA CONTROLLER make any changes deemed relevant, users will be informed via the Site.

 

Last updated: 30/05/2022