Privacy and Cookie policy
Privacy policy
Privacy Policy on the Usage of Personal Data
In accordance with Article 13 of Regulation (EU) 2016/679 (“Privacy Policy”)
This privacy policy is pursuant to Regulation (EU) 2016/679 (hereafter “Regulation” or “GDPR”) and lays out the methods for the usage of personal data of users that consult and utilize this website, accessible at the following link https://www.ruggine.bo.it/ (hereafter “website”) or that utilize the services offered by the website.
On the basis of the current European Regulation regarding the protection of personal data n. 679/2016 (“GDPR”), the collection and usage of said data will always follow the principles of lawfulness, fairness, and transparency.
A. Data Controller
The controller of said personal data is the company RUGGINE S.N.C. DI RICCARDO VASTOLA & CO., PI: 03397931209, with headquarters in Vicolo Alemagna n. 2/C, Bologna (BO), 40125, e-mail info@ruggine.bo.it (hereafter “Controller”).
B. Categories of Data Collected, Purpose, Legal Basis and Retention Time
1. Navigation Data
Navigation data can be collected autonomously by the Controller or through third parties.
In these cases, the systems and software utilized for the proper functioning of this website gather user’s technical data (for example: IP address, browser used, operating system, domain name, and websites on which users may have signed in or out of an account, etc.), whose transmission is inherent to normal internet usage.
Purpose: this data can only be used anonymously and for statistical purposes related to the usage of this site and/or to control its proper functioning.
Retention: this data will be immediately deleted after processing.
Legal basis: the usage of this data is carried out on the basis of the legitimate interest of the Controller to improve the site’s accessibility and security (art. 6, par. 1 lett.f). Exclusively for profiling purposes the consent expressed by the interested party (art. 6, par. 1 lett.a).
2. User’s Contacts via email and cell phone
Any communication, whether optional, explicit or voluntary, by email to the email addresses indicated on this website, will result in the acquisition of data provided by the user, including their email address, and the consent to receive messages in response to any requests made.
In these cases, providing an email address or other personal data is optional, but necessary in order to utilize this service of the website and receive a reply to any requests made. Without this data, we will be unable to process the user’s request.
Purpose: The personal data provided are utilized exclusively to satisfy or respond to the requests made and are communicated to third parties only if necessary.
Retention: The personal data is saved for the period of time necessary to respond to the request made and in accordance with current legislation.
Legal Basis: the usage of this data is carried out in order to fulfill a contractual and pre-contractual obligation taken on by the Controller through this service (art. 6, par. 1 lett.b).
3. Newsletters and commercial/promotional communications
If explicitly requested by the user, their contact details can be shared in order to receive commercial and informative communications regarding the Controller’s activities.
The provision of personal data for this purpose is entirely voluntary, but necessary in order to provide the service indicated above.
We use Mailchimp to send our newsletters, their privacy policy can be accessed here.
Purpose: The personal data provided are utilized exclusively to satisfy or respond to the requests made and are communicated to third parties only if necessary and with prior explicit consent by the interested party.
Retention: Personal data is saved for the period of time necessary to carry out the activities for which they were requested, and exclusively for the purposes indicated above, for no longer than the two years expressly indicated by law (unless the interested party renews consent for other purposes as indicated by the current legislation).
Legal Basis: the usage of this data is carried out only with the explicit consent of the interested party (art. 6, par. 1 lett.a).
4. This site uses technical, tracking, and profiling cookies. For more details, consult our cookie policy.
C. DATA RECIPIENTS
The personal data gathered are handled by the Controller’s staff, which acts with previous consent and following the specific instructions given, based on the purposes and modality of the processing of said data.
In addition, the processors or sub-processors responsible for data processing under art. 28 of GDPR, whom the Controller employs in order to provide certain services or to carry out activities under his jurisdiction, may be recipients of the data gathered after visiting the site or using its services, within the limits of the activity assigned.
You can request the relative list from the Controller using the contact information indicated in section A.
If and when a data processor or sub-processor becomes responsible for any personal data through the site’s services in accordance with art. 28 of GDPR, this data will be communicated to the Controller and/or other responsible parties.
D. DATA TRANSFER
There is no international transfer of the personal data provided.
E. RIGHTS OF INTERESTED PARTIES
The interested parties- the identified or identifiable individuals that the data refers to- are entitled to specific rights regarding data protection, as listed below:
Right to access: the right to obtain from the Controller confirmation that their data is being utilized, and if so, to obtain access to the personal data and detailed information regarding the origin, the purposes, the category of data being processed, the recipients of communication or transfer of data, and more;
Right to rectification: the right to obtain from the Controller the correction of any incorrect personal data without unjustified delay, as well as the integration of any incomplete personal data, supplying a supplementary statement if required;
c) Right to elimination (“obscurity”): the right to obtain from the Controller the elimination of any personal data without unjustified delay in the following cases: i. the data that was necessary to process certain requests is no longer necessary; ii. the agreement that the data usage was based on has been revoked and there is no other legal basis for the processing of said data; iii. the personal data has been unlawfully utilized; iv. the personal data must be eliminated for a legal obligation;
d) Right to object to data usage: the right to object at any time to the usage of personal data that is, in a legal sense, of legitimate interest to the Controller;
e) Right to restriction: the right to obtain from the Controller the restriction of data usage, in the case that the accuracy of the personal data becomes disputable (for the period of time necessary for the Controller to verify the accuracy of said data), or that the usage is unlawful and/or if the interested party objects to the usage of their data;
f) Right to data portability: the right to receive in a structured format, easily legible and machine-readable, one’s personal data and to send said data to another data controller, if technically feasible, only in the case that the data usage is based on an agreement or contract, and only for the specific data being electronically utilized;
g) Right to lodge a complaint to a supervising authority: notwithstanding any other administrative or legal appeals, if the interested party believes that the usage of their data violates the Regulation, they have the right to lodge a formal complaint to the supervising authority of the government in which they reside or regularly work, that is, the country in which the violation has taken place.
These rights can be exercised by contacting the Controller using the contact information indicated in sections A and B, repeated here:
Controller info@ruggine.bo.it
This privacy policy has been updated on 31/01/2023.