PRIVACY PROTECTION
WHY THIS NOTICE?
This page describes the management methods of the website www.spectacles.it (hereinafter the "Site"), with regard to the processing of personal data of users who visit it. This information is also provided pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter the "Regulation"), to those who interact with the Site. Please note that this information applies exclusively to the aforementioned domain, and not to other websites that may be accessed via links.
By reading this information, users will be informed of the purposes and methods of collection and processing of personal data disclosed while browsing the Site.
THE "OWNER" OF THE TREATMENT
Following consultation of this Site, the data controller may process data relating to identified or identifiable individuals.
The data controller is Spectacles srl, with registered office at Via A. Bortolini, 5 32020 – Borgo Valbelluna (BL), Italy, which independently decides the purposes and methods of processing.
In addition to the data controller, the data may be processed by persons appointed as "Data Processors" by Spectacles srl, for the purpose of allowing the user to use the Site and/or the service requested through the Site.
TYPES OF DATA PROCESSED
The Site offers informational and sometimes interactive content (e.g., newsletter subscription, order entry).
While browsing the Site, information about the user may be acquired, including, in particular:
– Browsing data
. The computer systems and software procedures used to operate the Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes: IP addresses, browser type, operating system, domain name and website addresses from which access or exit was made, information on the pages visited by users within the Site, access time, length of time spent on each page, internal navigation analysis, and other parameters relating to the user's operating system and IT environment.
This technical/IT data is collected and used by the data controller exclusively in an aggregated and non-identifying manner and may be used to ascertain liability in the event of hypothetical cybercrimes against the Site.
–Data provided voluntarily by the user
This includes all personal data freely provided by visitors to the Site for the purpose of registering and/or accessing a reserved area, requesting information on a specific product or service, or contacting an email address.
In this case, the processing of such personal data will be carried out after providing the user with specific information, pursuant to Art. 13 of the Regulation, relating to the type of service requested through the Site, which requires the processing of personal data.
Spectacles srl does not perform profiling activities through the features available on the Site.
For further details, please refer to the specific information provided on the Site from time to time.
DATA PROCESSING METHODS
Personal data is processed primarily using electronic procedures and media.
The data controller will process personal data only to the extent necessary to provide the requested service. Specifically, personal data will be processed for the minimum period of time necessary, as indicated in Recital 39 of the Regulation, i.e., until the termination of the contractual relationship between the data subject and the data controller, without prejudice to any further retention period that may be required by law, as also provided for in Recital 65 of the Regulation.
REDIRECT TO EXTERNAL SITES
Spectacles srl has implemented so-called "social plug-ins" on the Site. Social plug-ins are special tools that allow you to incorporate social network features directly into the Site (e.g., the Facebook "Like" function).
All social plug-ins on the Site are marked with the respective logo owned by the social network platform.
When you visit a page on the Site and interact with the plug-in (e.g., by clicking the "Like" button) or decide to leave a comment, the corresponding information is transmitted from your browser directly to the social network platform and stored there.
For information on the purposes, types, and methods of collection, processing, use, and storage of personal data by the social network platform, as well as how to exercise your rights, please consult the privacy policy of the individual social network.
LINKS TO/FROM THIRD PARTY SITES
From the Site, you can connect via dedicated links to other third-party websites.
In this regard, please note that Spectacles srl cannot be held responsible for the possible handling of personal data by third-party websites or for the management of authentication credentials provided by third parties.
RIGHTS OF THE INTERESTED PARTY
As provided for in Article 15 of the Regulation, the data subject may access his or her personal data, request its rectification and updating if incomplete or incorrect, request its deletion if its collection violated a law or regulation, and object to its processing for legitimate and specific reasons. Specifically, the following are all the rights that can be exercised at any time against the data controller and/or joint data controllers:
-Right of access: this means the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain from the data controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of an automated decision-making process, including profiling, pursuant to Article 22, paragraphs 1 and 4, of the Regulation and, at least in such cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. All this information can be found in the privacy policy that will always be available in the Privacy section of the Website.
- Right to rectification: this means the right to obtain, pursuant to Article 16 of the Regulation, the rectification of inaccurate personal data, taking into account the purposes of the processing. Furthermore, it is possible to have incomplete personal data completed, including by providing a supplementary statement.
- Right to erasure: this means the right to obtain, pursuant to Article 17, paragraph 1 of the Regulation, the erasure of personal data without undue delay. Furthermore, the data controller will be obliged to erase the data subject's personal data if even one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject has withdrawn consent on which the processing of his or her personal data is based, and there is no other legal basis for the processing; c) the data subject has objected to processing pursuant to Article 21, paragraph 1 or 2 of the Regulation, and there are no overriding legitimate grounds for the processing; d) the personal data have been unlawfully processed; e) the erasure of personal data is necessary for compliance with a legal obligation under EU or national law. In some cases, as provided for by Article 17, paragraph 3 of the Regulation, the data controller is entitled not to delete the data subject's personal data if their processing is necessary, for example, to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes, or for the establishment, exercise, or defense of legal claims.
- Right to restriction of processing: this means the right to obtain restriction of processing, pursuant to Article 18 of the Regulation, where one of the following applies: a) the data subject contests the accuracy of the personal data (the restriction will continue for a period enabling the data controller to verify the accuracy of the personal data); b) the processing is unlawful, but the data subject has not objected to the erasure of the personal data, requesting instead the restriction of their use; c) the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; d) the data subject has objected to processing pursuant to Article 21, paragraph 1 of the Regulation pending the verification whether the legitimate grounds of the data controller override his or her own. If processing is restricted, personal data will be processed, except for storage, only with consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person, or for reasons of substantial public interest.
- Right to data portability: this means the right to request from the data controller, pursuant to Article 20, paragraph 1 of the Regulation, all personal data processed by the data controller and/or joint controllers in a structured, commonly used, and machine-readable format, or to request that such data be transmitted to another data controller without hindrance. In this case, the data subject shall provide all the precise details of the new data controller to whom he or she intends to transfer his or her personal data in a written declaration.
Right to object: this means the right, pursuant to Article 21, paragraph 2 of the Regulation and as provided for in Recital 70, to object, at any time, to the Processing of your personal data when processed for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
-Right to lodge a complaint with the supervisory authority: the data subject has the right to lodge a complaint with the Italian Data Protection Authority if he or she believes that the processing of his or her personal data violates the Regulation and/or applicable law.
EXERCISE OF RIGHTS BY THE INTERESTED PARTY
To exercise all the rights identified above, simply contact the data controller and/or joint data controllers using the following methods:
Spectacles srl
Via A. Bortolini, 5 - 32020
Borgo Valbelluna (BL) Italy
Tel. +39 0437 552 436
Whistleblowing
The term "whistleblower" refers to someone who reports, to the bodies authorized to intervene, violations or irregularities that undermine the integrity of a company, thus bringing to light any unlawful conduct. Reporting is intended to prevent or resolve a current or potential problem in a timely manner: it is an act through which the whistleblower contributes to the emergence and prevention of risks and situations detrimental to a company.
Whistleblowing is a corporate compliance tool aimed at encouraging reporting and protecting both the company and the person making the report, guaranteeing the latter a protectionist system based on the protection of confidentiality and the prohibition of the application of retaliatory measures.
Reports can be sent through the following channel: