“Save the Olives”, with head office in Piazza Antonio Dell’Abate 4, 73039 – Tricase (LE), in its capacity as Data Controller pursuant to EU Regulation 2016/679 (hereinafter, GDPR), intends to provide clear and complete information on the methods and rights that may be exercised by individuals in relation to the processing of their Personal Data, drawing inspiration from the expected principles of lawfulness, fairness and transparency to protect the freedoms and rights of the data subjects.
1. DATA CATEGORY
The Personal Data, i.e. that information which allows the direct or indirect identification of data subjects, that we collect here for processing are:
a) identification data (first and last name, site access credentials;
b) contact data (1. postal address, 2. e-mail, 3. telephone number)
2. PURPOSE AND LEGAL BASIS
The Personal Data acquired here will be processed by “Save the Olives” as Data Controller (ex Art. 4.7 of the GDPR) for the following purposes:
(a) management of requests for information relating to orders or purchases made;
b) execution of activities functional to the sale of articles, (e.g. verification of the means of payment indicated
by the user/customer, fulfilment of internal procedures or obligations under the law or regulations in force in Italy, shipment of articles by courier, etc.)
c) sending periodical publications (to the postal address, by e-mail, SMS etc.) containing information and updates on the activities and initiatives, including fundraising initiatives, of “Save the Olives”, with possible personalisation according to the interests and preferences expressed.
The legal basis of the processing for purposes 2.a) and 2.b) is the conclusion and execution of the sales contract; failure to provide the data or a subsequent refusal to process them will make it impossible to complete the activities functional to the sale.
The legal basis of the processing for the purpose 2.c) is the legitimate interest of “Save the Olives” in ensuring that the choice to purchase a solidarity gadget in support of its activities is as informed and therefore conscious and lasting as possible.
For the rights that may be exercised in relation to the processing operations listed, and in particular to oppose those based on legitimate interest, see point 5 below.
The operations that we foresee as necessary in relation to the purposes described are: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction.
Personal Data will be subject to both paper and electronic processing, including automated processing, in ways that ensure high levels of security and confidentiality of processing, including storage.
Personal Data may be known and processed only by personnel specifically appointed by “Save the Olives” and communicated to third parties who may be entrusted, on the basis of formal appointments (ex Art. 28 of the GDPR), with specific processing activities.
In particular, customer service and all sales operations are delegated to “Save the Olives” The updated list of these subjects can always be requested from “Save the Olives”.
The data will not be communicated for other purposes or disseminated.
5. RIGHTS AND METHODS OF EXERCISE
Data subjects may at any time exercise their rights under Articles 15 et seq. of the GDPR, namely:
(a) to have access to the Personal Data being processed;
b) always obtain rectification, integration or deletion of the same or, under certain conditions, limitation of the processing; c) in the cases provided for, object to the processing
d) to know the updated list of Data Processors;
by addressing a request to the Data Protection Officer, Mauro Arena, at the Tricase office, or by e-mail to email@example.com.
In the cases provided for, they may also lodge a complaint with the Supervisory Authority (‘Garante Privacy’).
6. TERMS OF PRESERVATION
The Personal Data collected will be kept for as long as necessary to fulfil the above purposes, without prejudice to any other rights, obligations or protection requirements under the law.
7. PERSONAL DATA PROTECTION OFFICER
The Personal Data Protection Officer pursuant to the GDPR is Mauro Arena and can be contacted by e-mail at firstname.lastname@example.org or at the Tricase office.
8. APPLICABLE LAW AND JURISDICTION
The contractual relationship and all rights and obligations arising therefrom are governed by Italian law. The Court of Lecce shall have exclusive jurisdiction.
Information updated 01/06/20