Data Controller
Company details and Controller contact information
The Data Controller of the personal data relating to the website https://lebalconieremorbidi.com/ is:
50032 Borgo San Lorenzo (FI) – Italy
The Controller processes personal data in compliance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation on personal data protection.
Privacy Policy
Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679
Pursuant to Regulation (EU) 2016/679, this page describes how the personal data of users who browse the website, register, purchase products, request information or subscribe to the newsletter on https://lebalconieremorbidi.com/ are processed.
TYPES OF DATA COLLECTED
The e-commerce website may collect and process the following categories of personal data:
Data provided directly by the user
- First name and last name
- Billing and shipping address
- Email address
- Phone number
- Tax code / VAT number, where required
- Data required for invoicing
- Data entered in contact forms and customer support or information requests
- Data possibly entered in reviews or product comments
Order-related data and commercial relationship data
- Purchased products
- Order history
- Data necessary for order management, delivery and after-sales service
- Data necessary for the management of any unpaid amounts or disputes
Technical browsing data
- IP address
- Session data
- Technical information relating to the device and browser used
PURPOSES OF PROCESSING
Personal data are processed for the following purposes:
- to provide the information requested by the user;
- to manage contact requests and customer support requests;
- to allow newsletter subscription and the sending of informational and promotional material, subject to consent;
- to allow registration and management of a personal account;
- to allow access to, updating and modification of customer account data;
- to initiate and manage the commercial relationship;
- to process and manage orders, delivery, invoicing and after-sales service;
- to manage any reviews, unpaid amounts and disputes;
- to comply with legal, administrative, accounting and tax obligations;
- to ensure website security and prevent misuse or unlawful use.
LEGAL BASIS FOR PROCESSING
The processing of personal data is based on the following legal grounds:
- Information and contact requests: performance of pre-contractual measures taken at the request of the data subject.
- Newsletter and promotional communications: the data subject’s explicit consent.
- Account registration, order management, delivery, invoicing and commercial relationship: performance of a contract or pre-contractual measures and compliance with legal obligations.
- Website security, fraud prevention and protection of the Controller: the Controller’s legitimate interest.
NATURE OF DATA PROVISION
- Providing data for information and contact requests is necessary in order for the Controller to respond.
- Providing data for newsletter subscription is optional; failure to provide such data only makes it impossible to send promotional communications.
- Providing the data necessary for account registration, purchases, invoicing and order management is necessary for the performance of the contractual relationship and compliance with legal obligations.
DATA RETENTION PERIODS
The Controller undertakes to minimise the use of personal and identifying data. Data are processed and stored for the period strictly necessary to achieve the purposes for which they were collected.
- Data relating to orders, invoicing and administrative, accounting and tax obligations: for the periods required by law.
- Customer account data: until a deletion request is received, unless longer retention is required by law.
- Data processed for marketing and newsletter purposes: until consent is withdrawn or the right to object is exercised.
- Data collected through contact requests: for the time necessary to handle the request and any related follow-up.
RECIPIENTS OF PERSONAL DATA
Personal data are processed by the Controller’s authorised staff, acting on the basis of specific instructions. They may also be disclosed to third parties providing services related to the operation of the website and the management of the business, including:
- IT and technical service providers;
- hosting, maintenance and website management service providers;
- email and newsletter service providers;
- couriers and parties involved in order delivery;
- consultants and parties providing administrative, tax, legal or accounting assistance;
- parties to whom disclosure is required by law.
The updated list of data recipients may be requested by writing to info@lebalconieremorbidi.com.
DATA SUBJECT RIGHTS
The data subject may exercise, where applicable, the rights recognised by Chapter III of the GDPR, including:
- the right to access personal data;
- the right to rectify inaccurate data;
- the right to erasure of data;
- the right to restriction of processing;
- the right to object to processing;
- the right to data portability;
- the right to withdraw consent at any time for processing based on consent.
To exercise these rights, the data subject may contact the Controller by writing to info@lebalconieremorbidi.com.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their personal data is carried out in breach of the applicable law.
Cookie Policy
Use of technical cookies on the website
The website only uses technical cookies that are necessary for the proper functioning of the PrestaShop platform and for the correct provision of the services requested by the user.
TECHNICAL COOKIES USED
- cart management;
- user authentication;
- session security;
- browsing preferences and proper website functionality.
No profiling cookies or third-party tracking tools are used for advertising or marketing purposes.
COOKIE MANAGEMENT
- Cookies may be limited or blocked through browser settings.
- Cookies already installed on the device may be deleted.
Disabling technical cookies may impair the proper functioning of the website and some of its features.