Sign up to our newsletter and always stay updated on Visconti’s new releases, latest news and promotions.
Privacy policy
VISCONTI has established its Privacy Policy in respect of the confidence its clientele places in it and in conformity with high standards of data protection to which it is committed.
Privacy Policy – Visconti
Last update: 18/04/2023
| What is this document? Pursuant to art. 13 European Reg. n. 679/2016 (“General Data Protection Regulation” or “GDPR”) and in compliance with the principles contained therein, Visconti S.r.l. intends to inform each user (the “User”) about the processing of personal data happening on its website www.visconti.it (the “Website”). |
Controller and Contact details
Visconti S.r.l. (hereinafter the “Controller”, pursuant to art. 4(7) GDPR)
with registered offices in Via dell’Osservatorio, 120 50141, Firenze (FI) Italy
Contact details: info@visconti.it
Purposes of processing, Legal Basis, Personal Data and Retention period
The Controller processes Personal Data for the following purposes, as specified here in below. The table also shows the legal basis which justifies the processing and the period of data retention.
| Purposes | Personal Data | Legal Basis | Data Retention |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Performance of pre contractual provisions [Art. 6, 1, lett. b) GDPR] | Until the User deletes the account. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email, phone number) ✓ Shipment address |
Performance of a contract [Art. 6, 1, lett. b) GDPR] | Until the account is deleted, but no later than 24 months from the date of last contact. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email, phone number) ✓ Purchase history |
Performance of pre contractual provisions [Art. 6, 1, lett. b) GDPR] | For the period of time necessary to answer the customer. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Consent [Art. 6, 1, lett. a) GDPR] | Until withdrawal of consent and in any case not later than 24 months from the date of last contact. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Consent [Art. 6, 1, lett. a) GDPR] | Until withdrawal of consent and in any case not later than 24 months from the date of last contact. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Consent [Art. 6, 1, lett. a) GDPR] | Until withdrawal of consent and in any case not later than 12 months from the date of last contact. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Legitimate interest
[Art. 6, 1, lett. f) GDPR] |
For the time
strictly necessary for the achievement of the interest legitimate interest and until to the eventual opposition of the User. |
|
✓ Anagraphic information (Name and surname)
✓ Contact details (email) |
Legal obligation [Art. 6, 1, lett. c) GDPR] | Until the expiry of the data retention period, as provided by the applicable law. |
|
✓ IP Address | Legitimate interest
[Art. 6, 1, lett. f) GDPR] |
Not applicable (aggregate or anonymous data). |
|
✓ Anagraphic information
✓ Contact details |
Legitimate interest
[Art. 6, 1, lett. f) GDPR] |
10 years |
In case the User prefers not to communicate mandatory and/or necessary data for the fulfillment of certain purposes, Visconti S.r.l. reserves the right to not provide the service.
The use of some services of the website may require the processing of personal data of third parties sent by you to the Controller. Compared to these assumptions, you act as an independent controller, assuming all the obligations and responsibilities of the law. In this sense, you grant the most extensive indemnity with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that may be received by the Controller from third parties whose personal data have been processed in violation of the law on the protection of personal data applicable. In any case, if you provide or otherwise process personal data of third parties in the use of the website, you warrant as of now – assuming all related responsibility – that this particular case of treatment is based on a suitable legal basis under Art. 6 of the GDPR that legitimizes the processing of information in question.
Processing modalities
The processing of Personal Data will take place through automated and/or manual tools in order to ensure proper security measures to prevent access, disclosure, loss, incorrect, illegal or unauthorized use of data.
Data sharing
Your Personal Data may be shared with the following external subjects: (i) Internet service providers and platforms used by the Controller as organization tools, channels of communication and/or promotion (e.g. Smartsupp for the live chat service whose privacy policy is available at the following link; ii) consultants and other third-party service providers who perform services for us or on our behalf and require access to such information to do that job; iii) persons or organizations involved in the shipping, delivery, and transportation of goods (e.g., couriers and freight forwarders), online payment processing and brokerage companies, and marketing companies.
These subjects act as autonomous data controllers or data processors. In the latter case, the Controller has signed a contract pursuant to Art. 28 GDPR (Data Protection Agreement or “DPA”).
The list of data processors is available by sending a request to the Data Controller at info@visconti.it.
Personal data will also be processed by the Controller’s internal staff specifically authorised pursuant to Article 29 of the GDPR.
Data Processing Locations
Personal data are processed at the headquarters of the Controller, as well as in the servers that host the website visconti.it. The Controller ensures that when using cloud providers established outside the EEA, the processing of personal data by these recipients is carried out in accordance with applicable law. Transfers shall be carried out by means of appropriate safeguards, such as adequacy decisions, standard contractual clauses approved by the European Commission or other safeguards provided for in the GDPR.
Data subject’s rights
The User may exercise all the rights provided for by Articles 15-21 of GDPR, at any time and without unjustified limitations, by contacting the Controller at info@visconti.it. Requests shall be filed free of charge and processed by the Controller within 30 days.
Specifically, the User can:
- Obtain from the controller confirmation as to whether or not personal data are being processed (Art.15);
- Obtain from the controller the rectification of inaccurate personal data (Art. 16);
- Obtain from the controller the erasure of personal data (Art. 17);
- Obtain from the controller restriction of processing (Art. 18);
- Have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (Art. 20);
- Have the right to object (Art. 21);
- With regard to the purposes of processing based on consent, withdraw it at any time.
Complaints
In any case, Users are always entitled to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), under Art. 77 of the Regulation, if they believe that the Data Controller’s processing of their Personal Data is in violation of the applicable law.
Amendments
The Controller reserves the right to amend and update the Privacy Policy as a result of any further new or revised provisions of any national and EU laws and regulations on personal data protection.
