Information on personal data processing of website users and "Zainoil" e-commerce mobile application
This information ( Information ) is given in relation to the processing of personal data of users of the e-commerce platform on the website www.zainoil.com owned by Zaino Rocco Srl.
This Notice is intended for all those who access the e-commerce platform, both those who use it without registering ( Guest User ) and those who, as a result of the registration process, use services dedicated to registered users with reference to the e-commerce functionality ( Registered User ).
This information does not refer to other Internet sites that users can access through the hypertext links present in the Site, which will be subject to the regulations provided by the respective privacy policies.
1. Data controller
For the purposes of the information, the data controller is Zaino Rocco Srl, with registered office in Via Galileo Galilei 29, 65026 Popoli (PE), VAT number 02102730682 (the Owner ).
The Owner is a company whose object is the wholesale sale of products and / or services intended for professionals in the food and hospitality sector (the Activities ).
2. Collected Data
It is possible to access the Site without the user being asked to provide any personal data.
However, the computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but also due to their very nature could, through processing or associations, allow the identification of the user.
This category includes the IP addresses of the computers used by the users connecting to the platform, the URL of the requested resources, the time of the request, the size of the file obtained in response, etc.
These data are used only to obtain anonymous statistical information on the use of the platform (such as, in particular, the number of accesses) and to check its correct functioning and are deleted immediately after processing. In this process it is not; envisaged the processing of information directly identifying users.
The data collected through access to the pages of the Site are therefore limited to those necessary for the usability of the Site and navigation in the same by the Visitors Users.
Personal data - collected through the registration and creation of an account on the Site, as well as the forwarding of purchase orders through the available e-commerce functionality - are limited to those necessary to allow the registration of the account, even through the function of "Facebook Connect", as well as those necessary for the completion of purchase orders through the available e-commerce functionality.
Both Registered Users and Visitors Users can subscribe to the newsletter service offered through the Website. The personal data collected through the subscription to the newsletter service are limited to those required for the receipt of the related communications by e-mail.
Data voluntarily communicated by users
Both Registered Users and Visitors Users can send messages via the "contact" page. Personal data collected through this method will be those communicated by users in order to obtain information in relation to the services / products provided by the Site / Application.
3. Purpose and legal basis of the processing
The purposes for which personal data will be processed are as follows:
a) registration and management of the Registered User's account and overall execution and management of purchase orders and therefore (i) order management, (ii) supply of products and services, (iii) processing of payments, (iv) processing of requests by Registered Users or Visitors Users also forwarded through the "contact" page of the Site;
b) subscription to the newsletter service made available through the Website;
c) send advertising / promotional communications relating to products and services similar to those purchased after making a first purchase through the e-commerce of the Data Controller;
d) sending of advertising / promotional material, by ordinary mail, e-mail, phone calls, text messages or "reserved area of the Website"zainoil.com” to promote products or services and offers within the scope of their points of sale, of the Site;
e) analysis of the user's performance and business attitudes through automated processes (so-called "profiling") aimed at sending advertising / promotional material profiled on each user;
The legal basis of the processing referred to in point a) is the execution of a contract to which the data subject is a party.
The legal basis of the treatment referred to in point b) is the execution of measures requested by the interested party.
The legal basis of the processing referred to in points d), e) is the consent of the data subject.
The legal basis of the processing of the data referred to in the aforementioned purpose c) is the legitimate interest of the Owner to send advertising / promotional material relating to products / services already acquired by you.
The consent can be validly given and revoked with reference to one or more of the aforementioned processing purposes.
The consent given may at any time be revoked in a manner similar to those envisaged for its conferment, without prejudice to the lawfulness of the treatment based on consent before the revocation.
The processing of personal data for the purposes referred to in points a) above is mandatory and necessary for the correct execution of the contract to which the data subject is a party. Any partial or total refusal to provide the Data for such purposes will make it impossible for the Data Controller to execute the contract.
The processing of personal data for the purposes referred to in paragraph b) above is optional, however any partial or total refusal to provide data for such purposes will make it impossible for the Data Controller to follow up to the newsletter subscription request.
The processing of personal data for the purposes referred to in points d) above, e) is optional. Any partial or total refusal to process the Data for this purpose will make it impossible for the Data Controller to proceed with the related activities.
4. Method of treatment
The Data Controller and the subjects of which the same makes use to process the Data by means of paper and electronic instruments or anyway automated, according to logic strictly related to the purposes themselves and in any case in order to guarantee the security and confidentiality of the Data.
5. Communication (recipients) of Data
The Data will be processed by the Data Controller and by the persons appointed by the same and may
be disclosed to third parties only where necessary for the performance of activities
referred to in paragraph 3 above.
The third parties of the Data, duly designated as data controllers, belong to the following categories:
i) subjects who perform, on behalf of or in favor of the Data Controller, technical and organizational tasks or professional assistance / consultancy, accounting consultants, legal and in particular managers of software infrastructures used by the Data Controller as platforms for sending SMS and / or e-mail.
The complete list of data controllers is kept at the headquarters of the Data Controller and can be consulted on request to be sent to the addresses indicated in the following article 8.
6. Data Disclosing
The data will not be disclosed.
7. Data retention period
The Data are processed only for the time strictly necessary to achieve the purposes for which they were collected, in particular for the purposes referred to in point a) of paragraph 3 until you will maintain the registration to the Site / Application and in any case no later than 12 months and, as regards the Data processed for the purposes referred to in points b), c), d) and e) of paragraph 3, no later than 24 months from the communication.
8. Rights of the interested party.
You have the right at any time to: (i) obtain confirmation of the existence or not of personal data concerning you; (II) know the purposes of the processing and the methods, the recipients of such Data, the retention period; (III) obtain rectification or cancellation, and where applicable, the limitation of processing; (IV) oppose the treatment; (V) where applicable, receive in a structured format, in common use and legible by automatic device, the Data relating to it supplied to the Data Controller and transmit such data to another data controller without hindrance by the Data Controller; (VI) to propose a complaint to the Guarantor for the protection of personal data; (VII) select the modalities with which it wishes to be contacted for the purposes referred to in point d) of paragraph 3 above, and in particular indicate whether it wishes to be contacted using the so-called modalities. traditional (paper mail, telephone with operator), using the so-called modalities. automated (e-mail, sms, telephone without operator etc.) or both categories.
The above rights may be exercised at any time, by simple request to the Data Controller, to be transmitted:
- by e-mail, at: [email protected] , or
- writing to the administrative office of the owner located in Via Bruno Buozzi, 12 - 65026 - Popoli (PE), to the attention of the person in charge of the Customer Area.