Privacy Policy

Privacy Policy

PRIVACY POLICY - Information document pursuant to Article 13 of EU Regulation 2016/679 - GDPR - Information on the processing of personal data collected from the data subject

In compliance with the provisions of EU Regulation 2016/679 (General Data Protection Regulation), we provide you with the necessary information regarding the processing of your personal data. This information does not apply to other websites that may be accessed via links on the owner's domain. The owner is in no way responsible for third-party websites.
This notice is provided pursuant to Art. 13 of EU Regulation 2016/679 (General Data Protection Regulation) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies, as well as the provisions of the Provision of the Italian Data Protection Authority of 08.05.2014 regarding cookies.

Processable personal data : «personal data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30).

Specific information
Specific information may be provided on the site pages in relation to particular services or data processing provided.

Cookie
See the cookie policy at the following link.

1. THE "DATA CONTROLLER" , pursuant to Article 4.7 of Regulation (EU) 2016/679 is L'Artigianato di Lusso Bijoux srls - Via Piero Calamandrei 249/L- 52100 Arezzo (AR), Tel. 05751380459, e-mail info@lartigianatodilusso.com in the person of its legal representative pro-tempore.

2. PURPOSE, LEGAL BASIS OF THE PROCESSING, AND LEGITIMATE INTEREST
Pursuant to Article 6, paragraph 1, letters b) and f), the personal data voluntarily provided will be processed for the following purposes, until you object:

• navigation on this website;
• possible contact request, with the sending of information requested by you;
• possible completion of data collection forms in dedicated areas;
• Administrative and accounting activities in general. For the purposes of applying the provisions on personal data protection, processing for administrative and accounting purposes is that related to the performance of organizational, administrative, financial, and accounting activities, regardless of the nature of the data processed. Specifically, these purposes include internal organizational activities, those necessary for fulfilling contractual and pre-contractual obligations, and information activities.

Data processing is based on Article 6, paragraph 1, letter f): (recital 47), taking into account the reasonable expectations of the data subject at the time and in the context of the collection of personal data, when the data subject can reasonably expect that processing for this purpose will take place.

3. PROCESSING METHODS – STORAGE
The processing will be carried out both in paper and electronic format, both automated and manual, using methods and tools designed to ensure maximum security and confidentiality. This will be carried out by persons specifically appointed for this purpose, in compliance with Article 32 of Regulation (EU) 2016/679. Pursuant to Article 5, paragraph 1, letter e), of Regulation (EU) 2016/679, the personal data collected will be retained in a form that permits identification of data subjects for a period of time not exceeding the purposes for which the personal data are processed. The retention of the personal data provided depends on the purpose of the processing:

• browsing this website (see the cookie policy );
• for contact request (maximum 12 months).

The processing operations connected to the web services offered by this site are physically hosted by Aruba SpA with servers located in Italy.

4. SCOPE OF COMMUNICATION, DISSEMINATION AND TRANSFER OF DATA ABROAD
Your data, subject to processing, will not be disclosed and may be shared with companies contractually associated with EL-AR Srl within the European Union, in accordance with and within the limits of Article 44 of Regulation (EU) 2016/679, for the purpose of fulfilling contractual obligations or for related purposes.
Your data may be disclosed to third parties belonging to the following categories:

• employees and collaborators;
• freelancers;
• firms or companies in the context of assistance and consultancy relationships;
• competent authorities to fulfill legal obligations and/or provisions of public bodies, upon request.

The entities belonging to the above categories act as Data Processors (Article 28 of EU Regulation 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Regulation 2016/679), or operate completely independently as separate Data Controllers. The list of data processors is constantly updated and available at the headquarters of L'Artigianato di Lusso Bijoux srls - Via Piero Calamandrei 249/L - 52100 Arezzo (AR).

5. AUTOMATED PROCESS AND PROFILING
Your data will not be processed automatically or through profiling.

6. NATURE OF THE PROVISION AND REFUSAL
Aside from what is specified for browsing data, the user is free to provide personal data. Providing data is optional but necessary.
Failure to provide the data marked with the * symbol may make it impossible to obtain what you have requested or to use the data controller's services.

7. RIGHTS OF THE INTERESTED PARTIES
You may exercise your rights as set forth in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 by contacting the data controller:

• by contacting our office at 0575362344;
• by sending an email to info@el-ar.com ;
• by sending a registered letter with return receipt to EL-AR Srl - Loc. Ponte alla Chiassa, 446 - 52100 Arezzo (AR).

Pursuant to Articles 13, paragraph 2, and 15 to 22 of the Regulation, we inform you that in relation to the processing of your personal data, you may exercise the following rights:
a) Right to obtain access to personal data and the following information:

• confirmation as to whether or not your personal data is being processed;
• the purposes of the processing;
• the categories of personal data;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed;
• where the personal data are not collected from the data subject, any available information as to their source;
• the existence of automated decision-making, including profiling;
• a copy of the personal data undergoing processing.

b) Right to rectification and integration of personal data;
c) Right to erasure of data (“right to be forgotten”) if one of the following reasons applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the interested party withdraws consent to the processing of data and there is no other legal basis for the processing;
• the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
• personal data have been unlawfully processed;
• the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

If the data controller has made personal data public and is required to delete it, the data controller must inform other controllers processing the personal data of the request to delete any links to, copies or replications of, that data.
d) Right to restriction of processing in the event that:

• the data subject contests the accuracy of the personal data, for a period enabling the data controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• although the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;
• the interested party has objected to the processing, pending verification of whether the legitimate grounds of the data controller prevail over those of the interested party.

e) Right to lodge a complaint with the Italian Data Protection Authority, following the procedures and instructions published on the Authority's official website www.garanteprivacy.it.
f) Right to data portability, or the right to receive the personal data concerning him or her, provided to a data controller, in a structured, commonly used, and machine-readable format, and, where applicable, to transmit that data to another data controller, if the processing is based on consent or a contract and is carried out by automated means. Where technically feasible, the data subject has the right to have the data transmitted directly from one data controller to another.
g) Right to object at any time to the processing of personal data, including profiling, in particular where:

• the processing is based on the legitimate interest of the owner, subject to the explicit explanation of the reasons for the opposition;
• Personal data are processed for direct marketing purposes.

h) Right not to be subject to a decision based solely on automated processing, including profiling, except where the decision: is necessary for entering into, or performance of, a contract between the data subject and a data controller, is authorised by Union or Member State law to which the data controller is subject, or is based on the data subject's explicit consent.
i) Right to withdraw consent at any time.
The exercise of these rights is not subject to any formal constraints and is free of charge.

8. MINORS
This Site and the Data Controller's Services are not intended for minors under 18, and the Data Controller does not intentionally collect personal information from minors. If information about minors is inadvertently recorded, the Data Controller will promptly delete it upon request.