Updated April 12, 2023
ArteOlio Società Agricola provides the following privacy information in accordance with articles 13 and 14 of the EU Regulation 2016/679 (the "Regulation").
1. Data Controller
The data controller is ArteOlio Società Agricola Srl, REA GR-212311, tax code and VAT number 01658980535, with registered office at Via Trento 59, 58100 Grosseto (GR) (hereinafter "ArteOlio").
2. Personal Data Collected
The data collected may vary depending on the type of tool used for collection. With reference to users of the website, ArteOlio collects:
(A) Navigation data
The website www.arteolio.com uses computer systems and software to function properly. During this process, some personal data is acquired that is transmitted through Internet communication protocols to allow for the correct functioning of all sections of the website. This data is not collected to identify specific users, but could, through processing and association with data held by third parties, allow for the identification of users themselves. The data collected includes:
• IP addresses or domain names of the computers used by users who connect to the website
• URI (Uniform Resource Identifier) addresses of the resources requested
• Time of the request
• Method used in submitting the request to the server
• Size of the file obtained in response
• Numeric code indicating the status of the response given by the server (successful, error, etc.)
• Other parameters relating to the user's operating system and IT environment.
(B) Other data
• ArteOlio also collects personal data voluntarily provided by users, such as name and surname
• Contact details such as email address or phone number
• Other data contained in requests sent via the "contact" form on the website www.arteolio.com.
• Additionally, ArteOlio collects other personal data provided by users during telephone calls or written communications by letter, email, and/or fax with the Data Controller.
3. Data Processing Methods
The personal data of users who use the website www.arteolio.com will be processed for the following purposes:
(i) To fulfil a contract of which the user is a party and to take pre-contractual measures at their request: personal data will be processed to allow the purchase of products at Arteolio stores and points of sale or on the website, as well as to fulfil any pre-contractual measures requested by the user. In the event of a purchase or following it, it may be necessary to collect and process certain personal data of the user to carry out service communications or respond to specific requests. Providing data for this purpose is optional; however, if data is not provided, Arteolio will not be able to send service communications or provide requested services. The user is free to indicate their preferred contact methods.
4. Consent to data processing
A) Processing for marketing purposes
With the optional consent of the user (art. 6, paragraph 1, letter (a) of the Regulation), ArteOlio may process certain personal data (such as name, surname, address, landline/mobile phone number and email address) for marketing purposes, such as sending advertising material, direct selling, market research and commercial communications. In case of consent, ArteOlio may contact the user via mail, email, SMS/MMS, landline/mobile phone with operator and WhatsApp to propose the purchase of products and/or services offered by ArteOlio, present offers, promotions and commercial opportunities or propose to participate in surveys or market research.
Selecting the consent box relating to marketing purposes authorizes ArteOlio to contact the user through all the aforementioned means, including email, mail and landline/mobile phone with operator. Consent to the processing of data for marketing purposes is optional, and the user may revoke it at any time by requesting it from ArteOlio using the methods indicated in the following paragraph 11.
Even in case of consent, the user may selectively revoke their consent, objecting, for example, to the further sending of promotional communications through only one or some of the contact methods indicated. If the user does not give their consent, there will be no prejudice to the possibility of making online purchases. In addition, with regard to promotional communications sent via email, the user may revoke their consent to the processing of the email address for marketing purposes by clicking on the Unsubscribe (opt-out) link present in each promotional email.
B) Processing for profiling purposes
With the optional consent of the user (art. 6, para. 1, letter (a) of the Regulation), selectable by checking the appropriate box, ArteOlio may also process your personal data (both personal and contact information, as well as information on goods purchased) for profiling purposes, that is, to build a profile of your tastes and consumer habits, in order to send you commercial offers consistent with your profile. The consent to the processing of personal data for profiling purposes is entirely optional, and in case of non-provision or non-consent, the possibility to purchase goods will not be in any way affected. Even in case of consent, you may freely revoke it at any time by requesting it from ArteOlio using the methods indicated in the following paragraph 11.
With the optional consent of the user (pursuant to art. 6, para. 1, letter (a) of the Regulation), by selecting the appropriate box, some personal data of the user (such as name, surname, address, phone number, email address, and information on purchases made) may be used by ArteOlio for profiling purposes. This means that the user's data may be analysed to reconstruct their tastes and consumer habits, in order to send them commercial offers consistent with their consumer profile. The user has the option to revoke their consent to the processing of personal data for profiling purposes at any time, without affecting the ability to make online purchases. The user may request the revocation of consent from ArteOlio using the methods indicated in the following paragraph 11.
5. Communication of customer data to third parties: when and how it occurs
Upon request by judicial or police authorities, it may be necessary to communicate our customers' data to competent authorities. In such cases, the user's data may be communicated to lawyers or law firms if necessary to pursue a legitimate interest in the exercise or defense of a right in court. In addition, the user's data may be communicated to banks, payment institutions, and other payment intermediaries if necessary to receive payment from the user or make payment on their behalf. If required by law, the user's personal data related to a purchase made may be communicated to the Revenue Agency. The user's data will not be disclosed.
6. Recipients of your personal data
Employees and collaborators involved in customer support or marketing/profiling activities may become aware of your personal data. In addition, there are certain categories of entities that provide us with services aimed at carrying out our business, who may have access to the user's personal data as data processors. These include providers of IT and logistics services, outsourcing providers of cloud computing and analytics, and management services, external professionals and consultants, companies in our group that provide us with services, and companies responsible for carrying out marketing and/or shipping activities.
7. Optional provision of data
Providing your personal data is always optional; however, in case of failure to provide your personal data, we may not be able to respond to your requests or provide you with what you have requested. In case of purchases with a request for invoicing, the provision of your personal data is necessary to fulfil our legal obligations in tax matters.
8. Period of retention of user's personal data
Regarding data related to the user's purchases, they will be kept for a period equal to the duration required by the applicable tax law. In case the user has consented to the processing of their personal data for marketing and/or profiling purposes, such data will be processed for a period of 2 years starting from the date of consent, with the possibility for the user to revoke such consent at any time. Furthermore, the user's personal data may be kept for a longer period if necessary for other purposes outlined in this privacy notice.
9. User's rights concerning the protection of personal data
The user has the right to exercise, at any time, free of charge and without formalities, the following rights pursuant to Articles 15 to 22 of the Regulation: the right to request access to their personal data, rectification, erasure, restriction of processing, and the right to data portability. In addition, the user has the right to revoke their consent at any time. It is noted that the revocation of consent does not affect the lawfulness of processing based on consent before revocation. The user is also informed that they always have the possibility to lodge a complaint with the Italian privacy authority (www.garanteprivacy.it) or with the competent authority of the EU Member State in which they live or work.
10. The right to object to the processing of personal data
The user has the right to object, on grounds relating to your particular situation, at any time to processing of his personal data, which is based on Section 6, paragraphs 1, points e) (performance of a task carried out in the public interest or in the exercise of official authority vested in the controller) or f) (legitimate interest) of Reg., including profiling based on those provisions.
Where user personal data are processed for direct marketing purposes, user has the right at any time to object to processing of his personal data for such marketing, which includes profiling to the extent it is related to such direct marketing.
11. How to contact and exercise rights regarding personal data
ArteOlio S.r.l. customers can exercise their rights with regard to the processing of personal data by contacting the Legal Function of the company. Requests can be sent by registered mail to the address of the registered office of ArteOlio S.r.l., located in via Trento 59, 58100 Grosseto (GR), or via email at firstname.lastname@example.org. All requests will be handled by the Legal Function of ArteOlio S.r.l. in compliance with the European Regulation on the protection of personal data.