INFORMATION ON THE PROCESSING OF THE PERSONAL DATA
This information is provided in accordance with Articles 13 and 14 of the European Regulation 2016/679 on the protection of personal data. This information page is made available to you to allow you to understand how and for what purposes your Personal Data is collected and processed in the context of the use of the website www.baemi.it
The information we provide below is therefore related to the website www.baemi.it (hereinafter "Site") and does not concern other websites and/or applications that may be consulted through links to external third-party pages.
1. Holder of the treatment
The Owner of the processing of personal data processed through the Site, for the purposes described below, is Baemi Srl, Via Galilei 2 Faenza 48018 (RA) p.iva: 02675610394
2. Personal data processed
During the navigation of the Site and within the Services offered, the Owner will process information that concerns you and that may be collected automatically during your navigation of the Site, or provided by you directly (for example, when you use the form on the Contacts page, when you want to subscribe to the newsletter or when you request to use the Services offered through the Site).
In particular, the Personal Data processed through the Site are:
a) Name and contact details and other Personal Data
In the sections that provide free entry fields or if you want to send us requests for contact details, we invite you not to send us Personal Data suitable to reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, data relating to health or sexual orientation.
If you intend to communicate Personal Data of other persons to us, you set yourself as an independent controller of the processing and then you assume accordingly any burden and obligation provided by current legislation, including verification of the suitability of the legal basis of the processing. In such cases, you provide the Data Controller with any broadest indemnity and guarantee with respect to possible disputes or claims of third parties to whom the Personal Data you have communicated or transmitted to us refers.
b) Personal data functional to the purchase of products on the Website
When you purchase the products through the Site, thus using the Services, the Personal Data provided by you during the purchase process will be collected and processed to manage the activities related to and functional to the sale.
You will be asked to enter your Personal Data such as: name, surname, email address and shipping address of the Products. When using the Services, you may also be asked for information about payment methods, such as Paypal and ShopifyPay..
In the event that you have given your consent for profiling purposes, as better described in the next paragraph, the purchase data will be analysed by the Owner to send you promotional communications responding to your preferences and interests.
Further Personal Data may be collected during the management of any relationship with the Owner after the sale, for example for the Data that you decide to provide us by contacting the contact details on the Site.
c) Navigation data and cookies
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
3. Purpose of processing and legal basis
The Data Controller will process your Personal Data for the purposes described below.
a) Provision of Services and sale of products: your Data will be processed to perform all activities related to the purchase of products and to provide assistance before, during and after a purchase. In particular, your Data will be processed to provide assistance, to verify your identity, to allow you to consult the history of your purchases, to finalize your purchase order and deliver the products purchased through the Site and, in general, to provide any other Service you require.
The optional, explicit and voluntary sending of messages to the contact addresses on the Site involves the acquisition of the Data necessary to respond to your requests, as well as any Personal Data included in your communications.
The legal basis of the processing is the execution of a sale and purchase contract of which you are a party or the execution of pre-contractual measures adopted at your request. This processing is necessary to receive your order, to process it correctly and to deliver the products;
b) Marketing: only if you have given your specific consent, by means of a special checkbox or by subscribing to the newsletter, your data will be processed to provide information on the products and services of the Owner, and to carry out promotional, commercial, market research and marketing activities. This activity can be carried out either through the use of automated systems without the intervention of the operator, such as email, or with traditional contact methods such as the postal service and the telephone. By deciding to subscribe to the newsletter using the appropriate forms on the Site, you will receive promotional and commercial communications via email on the services and activities of the Owner.
Such processing is based on your explicit and free consent: you are not obliged to provide such consent and, if you do, you are always free to revoke it at any time without suffering any consequences other than that of not receiving marketing communications. You can revoke your consent for this purpose by following the instructions contained in the paragraph "Rights of the interested party" or, with regard to receiving communications via email, by clicking on the cancellation link that you will find at the bottom of each email received;
Profiling: only in the event that you have expressed your specific consent through a specific checkbox, your Data will be processed to understand and/or predict your purchase preferences, also taking into account your provenance, in order to send you commercial communications and offer you Services in line with your interests and with your purchases.
c) Legal obligations: your Data may be processed to allow the Data Controller to comply with the obligations provided for by national, Community or international laws, regulations and regulations, or by mandatory provisions issued by the competent authorities. The legal basis of the processing is the fulfilment of legal obligations by the Owner. The provision of Personal Data for this purpose is necessary to allow the Owner to comply with the regulatory obligations to which it is subject;
d) Security: your Data may be processed to prevent and/or detect any anomalies, fraudulent activities and/or abuses in the use of the Site or Services. The legal basis for processing is the Data Controller’s legitimate interest in preventing or detecting illegal activities or abuses.
Your Personal Data may be shared with the following parties:
a) Authorized to process by the Data Controller, duly designated and who have committed to confidentiality or otherwise have received an appropriate legal obligation of confidentiality;
b) Third parties designated as Data Processors, with the task of processing the Data on behalf of the Data Controller, for example, persons with whom it is necessary to interact for the provision of services such as hosting providers, providers of email platforms, persons delegated to carry out maintenance of network equipment and electronic communications networks;
c) Third parties with whom it is necessary to interact to provide the Services made available through the Site and who also act as independent data controllers (for example, couriers and forwarders for the delivery of your purchases); d) Persons, bodies or authorities to whom it is mandatory to communicate your Data for purposes of compliance with legal obligations or for security issues.
Your Personal Data is not intended for publication or dissemination.
Some of your Personal Data may be shared with recipients in countries outside the European Union or the European Economic Area. The Data Controller ensures that in such cases the processing of your Personal Data will take place in compliance with the applicable legislation and, therefore, the transfers will be carried out with adequate guarantees, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission or other appropriate guarantees.
5.Conservation times and criteria
The Personal Data processed for the purpose of "Provision of Services and sale of products" will be kept for the time strictly necessary for the proper execution of your requests and the pre-contractual or contractual relationship with you in progress, unless there is a need or legal obligation for a longer retention period.
The Personal Data processed for the purposes of "Marketing" and "Profiling" will be stored until the withdrawal of your consent or your opposition to the processing. In particular, the Purchase Data collected for Marketing and Profiling purposes may be stored for 12 and 24 months respectively.
The Personal Data processed for the purpose of "Legal Obligations" will be kept for the period provided for by specific legal obligations or by the applicable legislation.
The Personal Data processed for the purpose of "Security" will be kept for the time strictly necessary for the aforementioned purpose, also taking into account the time necessary for the protection in court and/or for the communication of such Data to the competent authorities.
6. Rights of the data subject
As a data subject, you have the right to obtain from the Data Controller, in the cases provided, access to your Personal Data and rectification or deletion of the same.
You also have the right to obtain the limitation of the processing of data concerning you and to object to the processing (art. 15 and ss. of the Regulation).
You can also revoke your consent at any time for the purposes of "Marketing" and "Profiling". The express consent for the forwarding of promotional communications for the purposes of Marketing and Profiling extends not only to communications sent through the use of automated systems without the intervention of the operator (for example, the e-mail)but also to traditional contact modes such as postal service or telephone. You can then revoke your consent to the processing also in a separate and granular way, deciding for example to receive such communications only through postal service and not through automated systems such as email. You can also stop receiving promotional communications for the purposes of Marketing, Profiling and Soft Spam sent to your email also using the appropriate unsubscribe or cancellation link that you find at the bottom of each email received.
The appropriate request can be submitted preferably by email to firstname.lastname@example.org, or to the contact details of the Data Controller indicated in the first paragraph of this Policy.
Data subjects who believe that the processing of personal data relating to them carried out through this Site is in violation of the provisions of the Regulations, have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to refer to the appropriate courts (art. 79 of the Regulation).
7. Updates and amendments
The Data Controller reserves the right to amend, supplement or periodically update this Policy in accordance with the applicable legislation or the measures adopted by the Guarantor for the Protection of Personal Data.