INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL OF 27 APRIL 2016 ("GENERAL REGULATION ON DATA PROTECTION - GDPR")
Version 1.0 - Update: 11/04/2022
INFORMATION AND CONTACT DETAILS OF THE DATA CONTROLLER
Data Controller
Mr. Ettore and Mrs. Maria Luisa Chiavassa, at Casa Chiavassa, located in Via Orti, 11 - Montaldo Roero - 12040 – CN - ITALY
Contact details of the Data Controller
E-mail:This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: 366/7436159
Ettore and Maria Luisa Chiavassa, as Data Controller of your personal data (hereinafter also the “Data Controller” or also “Casa Chiavassa”), informs you, pursuant to art. 12 and 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter referred to as "GDPR" for short), that your personal data will be processed by specifically authorized subjects and limited to the purposes and with the methods that will be specified below.
Casa Chiavassa is the owner and manager of this website www.casachiavassa.com, to which the information contained in the following information applies (hereinafter also the "Site").
Casa Chiavassa believes in the importance of privacy for all its users and uses the data collected only to improve the experience of using the site, respecting the standards set by European (GDPR) and national (Privacy Code) regulations, updating the information and making it easier to read and understand.
The GDPR is a regulation aimed at strengthening and unifying data protection for all subjects within the European Union and which requires a high level of transparency on the methods of collection, storage and use and more generally on the processing of personal data and imposes stringent limits on their use.
OOBJECT AND PURPOSES OF THE PROCESSING
Casa Chiavassa informs you that it will process, specifically, your common personal data, i.e. name and surname, contact details, or e-mail address, and IP address, according to the purposes and methods defined and specified below.
In particular, the personal data provided to Casa Chiavassa will be processed for the pursuit of the following purposes:
- for the use of the services offered by Casa Chiavassa through the Site, and in particular with reference to all the functions made possible by the interaction with the Site through the specific buttons.
- to ensure the functioning of the Site and all the technical features relating to it, in order to allow the user the best possible browsing experience and use of the services offered on the Site.
The data requested following your optional consent may be used:
- for the sending of commercial communications by Casa Chiavassa indicated in this information, through the use of automated tools (e-mail, sms, mms, fax, telephone without operator, post on social network accounts), including any subscribe to the “newsletter".
This information is effective only with reference to the Site, but not with reference to other and different portals or websites, for which Casa Chiavassa is in no way responsible.
The processing of the data provided by the user will be carried out, even as a result of automatic collection during navigation, for the sole purpose of ascertaining and/or controlling access to the Site and/or the sole purpose of improving the functionality of the same, in order to ensure a better browsing experience.
As regards the processing of IP addresses, as well as all user navigation data, carried out by Casa Chiavassa for the purpose indicated in point 2) above, please refer to the Cookie Policy
OBJECT AND PURPOSES OF THE PROCESSING
Casa Chiavassa informs you that it will process, specifically, your common personal data, i.e. name and LAWFULNESS OF PROCESSING
Except as specified above for navigation data, the communication by you to Casa Chiavassa of the personal data specified above has the following legal bases as prerequisites for the lawfulness of processing:
Art. 6, par. 1 letters b) and f) of the GDPR for the purposes referred to in points 1 and 2 above.
Art. 6, par. 1, letter a) of the GDPR for the purposes referred to in point 3 above.
The provision of your personal data is therefore necessary for the complete fulfillment of the purposes referred to in points 1 and 2 above, and, consequently, your refusal to provide personal data may result in the failure to perform these services and functions of this Site, preventing all or part of the functionality of the same.
The provision of your data is optional for the complete fulfillment of the purpose referred to in point 3 above, and, consequently, your refusal to provide personal data does not imply the failure to perform the said services and functions of this site, nor does it prevent all or part of its functionality. The data subject has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal. Consent is withdrawn as easily as it is granted.
Soft Spam. We also remind you that on the basis of current legislation, the Data Controller may use the e-mail coordinates you provide when purchasing a service to offer you services similar to those you have already purchased. However, if you do not wish to receive such communications, you can oppose (opt-out) by giving notice to the Data Controller at any time, using the addresses indicated in this privacy statement or directly using the link on the email communications you have received. In this case, the Data Controller will interrupt the aforementioned activity without delay. The legal basis that legitimizes the sending of promotional communications is found in the legitimate interest of the Data Controller ex art. 6, par. 1 letter f) of the GDPR. For more information or to oppose the service, you can write to This email address is being protected from spambots. You need JavaScript enabled to view it..
METHODS OF PROCESSING
The processing of personal data communicated by you is carried out by means of the operations indicated in art. 4 n. 2) of the GDPR, and more precisely: "collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, cancellation and destruction of data".
The personal data communicated by you are subjected to automated processing by Casa Chiavassa for the time strictly necessary to achieve the purposes for which they were collected, with technical and organizational methods adopted to prevent the loss of data, illicit and/or incorrect use and unauthorized access, and therefore such as to guarantee a level of security adequate to the risk pursuant to art. 32 of the GDPR, by specifically authorized subjects, in compliance with the provisions of art. 29 of the GDPR, or of employees and/or collaborators of Casa Chiavassa in their capacity as authorized subjects and/or system administrators, who will be able to carry out consultation, use, processing, comparison and any other appropriate operation in compliance with the provisions of law necessary to guarantee, among other things, the confidentiality and security of the data as well as the accuracy, updating and relevance of the data in compliance with the stated purposes and methods.
It should be noted, in particular, that the personal data communicated by you will be processed only at the Casa Chiavassa headquarters, except as specified below, they will therefore not be disclosed, and, pursuant to art. 13, paragraph 1, lett. (e), the same may be processed, if necessary, only by authorized subjects and/or by any external data processors pursuant to art. 28 of the GDPR (in the person of individual professionals and/or complex professional associations and/ or companies), and/or by subjects who operate as independent data controllers, and which explicitly include hosting companies and/or technical personnel in charge of the management and/or maintenance of the website, but only and exclusively for the purposes expressly and specifically indicated above.
SCOPE OF DATA COMMUNICATION
In relation to the aforementioned purposes, the data may be disclosed to the following subjects and/or to the categories of subjects indicated below, or may be disclosed to companies and/or persons who provide services, including external ones, on behalf of Casa Chiavassa.
Among these, for greater clarity, by way of example but not limited to: professionals and consultants also in associated form; subjects that provide services for the management of the information system and telecommunications networks (including e-mail and development and management of web portals and websites - cloud storage services - hosting); banks; credit recovery companies, legal, administrative and tax consultancy firms; subjects who carry out operations of control, revision and certification of the activities carried out by Casa Chiavassa which operate, if the conditions are met, as external data processors pursuant to art. 28 of the GDPR, or in total autonomy as separate subjects from Casa Chiavassa.
With exclusive reference to navigation data and IP addresses, this site may share some of the data collected with services located outside Italy and the European Union area, in particular, with Google, through Google Analytics. In the event that this should become necessary for any reason, Casa Chiavassa from now on ensures that the transfer of data will take place in compliance with the applicable legal provisions and, in particular, in accordance with articles 44 - 45 - 46 - 47 - 48. and 49 of the GDPR and other applicable laws.
Plugin Social Network
The Site also incorporates, if implemented, plugins and/or buttons in order to allow easy sharing of content on the most common social networks. When you visit a page of the website that contains a plugin, the user's browser connects directly to the servers of the social network from which the plugin is loaded, which server can track the visit to the website and, if necessary, associate it to the user account of the social network, in particular if the user is logged in at the time of the visit or if he has recently browsed one of the websites containing social plugins.
If the user does not want the social network to record the data relating to his visit to the Site, he must log out of his social network account and, probably, delete the cookies that the social network has installed in his browser.
A plugin with advanced user privacy protection functions is installed on this site, which does not send cookies or access cookies on the user's browser when the page is opened but only after clicking on the plugin.
The collection and use of information by these third parties are governed by their respective privacy policies to which you are kindly requested to refer.
Instagram
Facebook
Whatsapp
DATA RETENTION PERIOD
In compliance with the principles of lawfulness, purpose limitation and data retention and minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the aforementioned purposes for which they are collected and processed, or for the entire duration of the fulfillment of the aforementioned purposes, and, therefore, once the purposes of the processing have been completed, your data will be deleted from any physical and IT support.
In particular, personal data will be kept until the conclusion of the contractual relationship and for retention times dictated by binding laws for the administrative and accounting purposes referred to in points 1 and 2 above; until the consent is revoked and in any case no later than 24 months for the commercial purposes referred to in point 3.
AUTOMATED DECISION-MAKING PROCESSES AND PROFILING
Casa Chiavassa informs you that, for the purposes of processing your personal data, it does not make use of automated decision-making processes, i.e. those aimed at making decisions based solely on technological means based on predetermined criteria (i.e. without human involvement).
Casa Chiavassa carries out profiling activities with the help of third-party profiling cookies within the limits and in the manner better indicated in the Cookie Policy [insert hyperlink] to which express and full reference is made, to allow the user adequate and complete information on the matter and the consequent better management of the relative consents.
RIGHTS OF THE DATA SUBJECT (USER)
Right of Access pursuant to art. 15 of the GDPR and Right of Rectification pursuant to art. 16 of the GDPR
As a data subject, pursuant to art. 15 of the GDPR, the user has the right to obtain from the Data Controller confirmation of the existence or otherwise of the processing of personal data concerning him/her, to obtain access to them and to all the information referred to in the same art. 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured format, commonly used, readable by an automatic and interoperable device.
The user, pursuant to art. 16 of the GDPR, also has the right to obtain from the Data Controller the correction and/or integration of the data being processed if they are out of date and/or inaccurate and/or incomplete.
Right of erasure pursuant to art. 17 of the GDPR and right to restriction of processing pursuant to art. 18 of the GDPR
As a data subject, the user has the right to obtain, without undue delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters from (a) to (f), of the GDPR, the erasure of data concerning him/her - with the exception of the hypotheses specifically provided for by art. 17 paragraph 3.
As a data subject, pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, the user has the right to request and obtain from the Data Controller the restriction of processing of his/her personal data, or that such data are not subjected to further processing and can no longer be modified. The Data Controller ensures that the restriction of processing is implemented by means of adequate technical devices that guarantee its inaccessibility and immutability.
Right to data portability pursuant to art. 20 of the GDPR
As a data subject, the user has the right to receive, pursuant to art. 20 of the GDPR, by the Data Controller the personal data concerning him/her, the processing of which is carried out by automated means, in a structured format, commonly used and readable by an automatic device, and also has the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another specifically identified data controller.
Right to object pursuant to art. 21 of the GDPR
The user has the right to object at any time to the processing of personal data concerning him/her, for reasons connected with his/her particular situation, in cases where the processing of data is necessary (1) for the performance of a task in the public interest and/or connected to the exercise of public authority of which the Data Controller is invested; (2) for the pursuit of a legitimate interest of the Data Controller or a third party; (3) for profiling activities carried out by the Data Controller on the basis of the previous points.
The user has the right to object to the processing of his/her personal data for reasons connected to his/her particular situation if they are processed for scientific or historical research purposes or for statistical purposes pursuant to art. 89, par. 1, of the GDPR, except in the case in which the processing is necessary for the performance of a task of public interest.
METHOD OF EXERCISING THE ABOVE RIGHTS
The user can exercise the rights listed above by sending a request by email to the following address This email address is being protected from spambots. You need JavaScript enabled to view it..
The Data Controller will confirm receipt of his/her request and provide him/her with information relating to the action taken, with reference to the exercise of his/her rights provided for in articles 15 to 22 of the GDPR, within 1 (one) month of receipt of the request. If necessary, and taking into account the complexity and number of requests, the Data Controller may extend this term by 2 (two) months, subject to a reasoned communication to be sent within 1 (one) month of receipt of the request.
The Data Controller will communicate any rectification, erasure, restriction, object to all recipients, as identified by art. 4, paragraph 1, n. 9 of the GDPR, to which such data have been transmitted, unless this proves impossible and/or involves a disproportionate effort.
Following the sending of the request for rectification, erasure, restriction, object, if the Data Controller has reasonable doubts about the user’s identity, it will request further information to confirm it. These communications will be sent by email from the address This email address is being protected from spambots. You need JavaScript enabled to view it. and will be processed by the person specifically authorized for the purpose.
In the event that the Data Controller does not comply with the user’s request within the term of 1 (one) month from receipt of the request, it will inform the user of the reasons for the non-compliance, informing of his/her right to lodge a complaint with the Supervisory authority (Garante per la protezione dei dati personali), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR and 141 et seq. of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Document updated to 3.5.2022
The owners have the right to modify at any time and without notice the "Information on the processing of personal data pursuant to art. 13 of the GDPR" of this website. The user is bound by these changes and must therefore periodically consult this page to check its contents.