Privacy policy

Privacy policy

This Privacy Policy is intended to describe how the website is managed (“Application”) regarding the processing of personal data of users who use the services offered.

This is an information that is made pursuant to art. 13 of the Privacy Code regarding the protection of personal data pursuant to Legislative Decree 196/2003 (hereinafter the “Privacy Code”), of the Provision issued by the Guarantor Authority “Identification of simplified procedures for information and acquisition of consent for the use of cookies “of 8 May 2014 and of Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46 / EC, adopted on May 17th 2001.

The Data Controller may modify or simply update, in whole or in part, this Privacy Policy. The changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to view the Privacy Policy at each access to the Application.

1. Principles

Personal data are processed according to the principles of relevance, lawfulness and correctness as required by the Privacy Code, through the use of suitable security measures and following the granting of consent by users where required.

These data are stored in a form that allows the identification of the interested party for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed.

2. Owner and place of data processing

Pursuant to art. 28 of the Privacy Code, the owner of the Application and data processing is Andrighetti Legnami, a company based in Via Zona Industriale 5, Vigorovea 35020 Sant’Angelo di Piove (PD), VAT number: 02562530283, email (hereinafter the “Owner”).

The data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located and are only handled by personnel in charge of processing, or by any persons in charge of occasional maintenance operations. For more information, contact the owner.

3. Purposes

Unless the communication of personal data is imposed by legal obligations or is strictly relevant and necessary for the fulfillment of requests or contractual obligations for the execution of the service, personal data are provided voluntarily and optionally by users at the time of activation of the service, for the following purposes:

Personalization of the customer experience

Registration and user authentication

Ensure the correct use of the ecommerce platform

4. Types of personal data processed

A. Personal data

Personal data can be entered voluntarily by the User or collected automatically during the use of this Application.

Failure by the user to provide some personal data could prevent this Application from providing its services.

The user assumes responsibility for the personal data of third parties published or shared through this Application and guarantees that he has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

B. Navigation data

The computer systems and software procedures used to operate this Application acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, or domain names used by users who connect to the site, addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server , the size of the file obtained, etc.

These data are used in order to obtain anonymous and aggregated statistical information on the use of the Application and to check its correct functioning, and permanently reside on third party servers (hosting provider). The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Application.

C. Cookies

The Application uses cookies that the Guarantor Authority defines as small text strings that the sites visited by the user send to his terminal (usually to the browser), where they are stored and then retransmitted to the same sites on the next visit of the same. user.

While browsing the Application, the user can also receive cookies on his terminal which are sent from different websites or web servers (called “third parties”), on which some elements may reside (images, maps, links, etc. .) on the site the user is visiting.

Cookies are used to access online services more quickly and to improve the user’s browsing experience (monitoring sessions, storing user information, faster loading of content, etc.).

The user at the first access has the possibility to confirm the installation or not of the available cookies, or alternatively, to view the Cookie Policy, containing all the event modes and denial of consent.

5. Links to third party sites

The Owner may present or offer third party products or services on its Application. As regards privacy, the sites of these subjects adopt different and independent criteria from ours. Therefore, the Data Controller declines all responsibility for the content or activities of these linked sites.

6. Processing methods

The processing of data may consist, in addition to their collection, also in their registration, storage, modification, communication, cancellation, diffusion, etc. and will be carried out both with the use of paper support, and with the aid of electronic, computerized and telematic tools or in any case innovative, according to methods and with suitable tools to guarantee the security and confidentiality of the data, in accordance with the provisions of the Articles 31 and following of the Privacy Code, relating to the “minimum security measures for the processing of personal data” aimed at ensuring a minimum level of protection of personal data.

In particular, all the technical, IT, organizational, logistical and procedural security measures will be adopted, as required by the Privacy Code, by “Annex B” to the same decree (so-called Technical Regulations), by the various Provisions issued after integration, so that at least the minimum level of data protection required by law is guaranteed.

In addition, the methodologies applied ensure that access to data is allowed only to the persons in charge of the processing by us.

7. Rights of the interested parties

Users have the right to contact us for any information on their personal data, to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating. , or rectification, cancellation, transformation into anonymous form or blocking in violation of the law, as well as to oppose in any case, for legitimate reasons, to their treatment.

Requests can be sent in the following ways:

E-mail that must be sent to the address;

Registered letter which must be sent to the address of the operational headquarters: Andrighetti Legnami – Via Zona Industriale 5, Vigorovea 35020 Sant’Angelo di Piove (PD).

8. Definitions

Application: site, app, hardware or software tool through which users’ personal data are collected.

Personal data: any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

User: the individual who uses this Application, which must coincide with the interested party or be authorized by him and whose personal data are being processed.

Data processor: natural person, legal entity, public administration and any other body, association or body appointed by the Data Controller to process personal data, in accordance with the provisions of this privacy policy.

Data controller: natural person, legal entity, public administration and any other body, association or body to which, even jointly with another owner, the decisions regarding the purposes, the methods of processing personal data and the tools used, including the safety profile, in relation to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

Treatment of personal data: according to Italian law, it indicates any operation or complex of operations, carried out even without the aid of electronic tools, concerning the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database.