INFORMATION ON THE PROCESSING OF PERSONAL DATA ACCORDING TO CURRENT LAW
(Regulation no. 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, as well as
free circulation of such data, so-called. General Regulation for the Protection of Personal Data, hereinafter for brevity "GDPR", as well as Legislative Decree 196 of 30 June 2003 and subsequent amendments, from
latest Legislative Decree 101 of 2019).

Dear Interested Party,
pursuant to the articles 13 and 14 of the GDPR, and in relation to the personal data that Studio Gabrieli Pierina will come into possession of through this website www.pieragabrieli.it (hereinafter for
brevity the “Site”), we inform you of the following.

Art. 1 "Data controller of personal data".
The Data Controller is Studio Gabrieli Pierina, VAT number IT02612820288 (hereinafter for brevity the “Data Controller”), with headquarters in Via Bosco, n.12, 35020 – Corezzola (PD), e-mail piera@pieragabrieli.it.
Art. 2 "Provision of personal data". The provision of personal data of the subject to whom such data refers (hereinafter for brevity the "Interested Party") is necessary for carrying out the activities referred to in the purposes indicated in the art. 3 of this information. In compliance with the principle of minimization, the Data Controller collects the minimum amount of data strictly necessary to pursue the relevant purposes. Generally, the Data Controller collects the data directly from the Interested Party. Nonetheless, the Data Controller may come into contact with the personal data of interested parties provided by third parties. In particular, in the event that the user who purchases the products intends to organize delivery to the interested party (e.g. to deliver a gift, etc.).

Art. 3 "Purpose of the processing of personal data and categories of personal data processed".

3.1. Purchase of products

The processing of the data provided is aimed at the correct and complete execution of the purchase and delivery of the product(s) selected by the customer. The processing of such data may also take place for the purpose
to respond to questions and/or requests made by the interested party in relation to such products. Data processing may also take place in the case of creating accounts on the Site, in order to provide services reserved for registered users (for example: Wish List, Cart, etc.). For this purpose, the Data Controller processes the following personal data: name, surname, e-mail address, shipping address, billing address, bank details, credit/debit cards.

3.2 Legal obligations
The processing of the data provided is also aimed at fulfilling the obligations that the law imposes on the Data Controller, including those of a fiscal nature. For this purpose, the Data Controller processes the following personal data: i) name, surname, e-mail address, and may process ii) "bank/postal" personal data (by way of example but not limited to, IBAN code, current account details postal, etc.).

3.3 Protection of the interests of the Data Controller
The processing of the data provided may be aimed at communicating the data to third parties (e.g. legal consultants/lawyers, etc.) for the purpose of protecting the interests and rights of the Data Controller. For this purpose, the Data Controller processes the following personal data: i) (name, surname, e-mail address) and may process ii) "banking/postal" personal data (by way of example but not
exhaustive information, IBAN code, postal current account details, etc.).

3.4. Users registered for the informative newsletter
The processing of the data provided is aimed at sending periodic communications of an informative nature, concerning products similar to those already selected in the context of a purchase through the website, even where such purchase has not been concluded, and in any case if expressly requested by the interested party. For this purpose, the Data Controller processes the following personal data: (name, surname and email address).

3.5 Communications (email) of a commercial nature
The processing of the data provided is aimed at sending communications of a commercial nature, concerning information and offers in relation to the products, if expressly requested
by the interested party. For this purpose, the Data Controller processes the following personal data: name, surname, e-mail address.

3.6 Statistics and management of the Site.
The processing of the data provided is aimed at the correct management of the Site and the improvement of the functionality and user experience. For this purpose, the Data Controller processes the following personal data: age, location, the customer's device has interacted with the Site, including the pages visited and links clicked, how it moves to and from the Site (e.g. the way in which the website and the content uploaded therein, which parts you click on and how much time you spend on each page), your preferences, the products and/or services you have viewed or searched for, computer crashes, download errors and response, the IP address of the interested party and other device identifiers, the operating system and browser type and information concerning the pages of the Site visited, collected through cookies or other tracking technologies.

Art. 4 "Legal bases for the processing of personal data".
The processing for the purposes referred to in point 3.1 is necessary for the execution of contractual or pre-contractual activities requested from, or agreed upon with, the Data Controller, pursuant to art. 6 paragraph 1 letter. b) of the GDPR. The processing for the purposes referred to in letters 3.2 and 3.3 is necessary for the fulfillment of the legal obligations to which the Data Controller is subject, pursuant to art. 6 paragraph 1 letter. c) GDPR.
Any refusal to provide the data referred to in points 3.1, 3.2 and 3.3 will make it impossible to carry out these activities. The processing for the purposes referred to in point 3.5 and may only take place following the free, informed, specific and unequivocal consent of the interested party, pursuant to art. 6 paragraph 1 letter. a) of the GDPR. The processing for the purposes referred to in points 3.4 and 3.6 is necessary to pursue a legitimate interest of the Data Controller, pursuant to art. 6 paragraph 1 letter. f) of the GDPR.

Art. 5 "Methods of processing personal data".
The processing of personal data, both as owner and as manager, will be based on the principles of correctness, lawfulness, transparency and protection of privacy and rights.
of the interested party. The processing of personal data is carried out by means of the operations or set of operations indicated in the art. 4 paragraph 1 n. 2 of the GDPR (collection, recording, organisation, structuring, conservation, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation and destruction of data) . The personal data provided are processed at the headquarters of the Data Controller and any of his managers
data processors who assist him in carrying out the activity. These data are also processed by any personnel authorized to process pursuant to art. 29 of the GDPR (hereinafter for
brevity the "Authorized Parties"), under the authority of the Data Controller and/or any of its data processors, to whom detailed operating instructions have been given with particular reference to the adoption of the necessary and adequate security measures required by the GDPR. The processing operations will be carried out with or without the aid of electronic tools or
automated, with logic strictly related to the purpose, by the Owner, any of his managers and/or the respective Authorized Parties.

Art. 6 “Duration of processing”.
The processing of personal data for the purposes referred to in point 3.1 will take place for the entire duration of the contractual relationship stipulated between the interested party and the Data Controller or for the time necessary
to carry out the required pre-contractual measures and activities. With the registration of the account or in any case after a purchase has been made, the data will be stored for the purposes referred to in points 3.2 and 3.3, when required by law and for the period prescribed by the specific regulations, beyond the duration of the relationship or service, whether continuous or occasional.
The processing of data for the purposes referred to in points 3.4 and 3.5 will continue until the possible exercise of the right of limitation, opposition to the specific processing or cancellation: i) by clicking on the appropriate unsubscribe link present in the newsletter at the time of receipt of the itself, or ii) in any case, by written request sent to the Data Controller at the e-mail address: piera@pieragabrieli.it.
Beyond the terms indicated above, the data may be stored for the purposes referred to in point 3.7 until the interested party exercises his right to object or to
cancellation.

Art. 7 “Communication of personal data”.

Personal data may be communicated exclusively for the purposes indicated above i) to any Authorized Parties or ii) to any external parties, independent data controllers or duly appointed data controllers, who operate in aid and on behalf of the Data Controller (e.g. IT consultants, collaborators of consultants, accountants, lawyers, banks, etc.), iii) Public bodies and other authorities in the fulfillment of legal obligations.

Art. 8 “Dissemination of personal data”.

The personal data provided are not subject to disclosure.

Art. 9 “Transfer of personal data abroad”.

The personal data provided may be transferred to other countries of the European Union. The Data Controller guarantees that such transfers will take place in compliance with the provisions imposed by the regulations
applicable regarding the protection of personal data.

Art. 10 “Rights of the interested party”.
The articles 15 and following of the GDPR grant the interested party a series of rights and faculties to guarantee the lawfulness of the processing that the Data Controller, any managers and the respective Authorized Parties carry out on their personal data. In particular, the interested party may at any time obtain confirmation as to the existence or otherwise of processing operations on their personal data, as well as communication of the categories of data in possession of the Data Controller, of the purposes and methods of the processing, of the recipients to whom your data are communicated, the retention period, the indication of the origin of the data. You may request the communication of the data in an intelligible form, their rectification or integration or cancellation (so-called "right to be forgotten"), blocking or transformation into anonymous form if the data are processed in violation of the law, including those of which conservation is not necessary in relation to the purposes for which the data were provided. In any case, for legitimate reasons, you may object to their processing or request its limitation. Pursuant to art. 7 paragraph 3 of the GDPR, furthermore, the interested party who has given consent for the processing for the purposes referred to in letters 3.4, 3.5 and 3.6 may at any time revoke the consent given without however compromising the validity and lawfulness of the processing carried out before such revocation. Finally, the interested party has the right to lodge a complaint with the supervisory authority pursuant to art. 15 paragraph 1 letter. f) of the GDPR. The rights mentioned may be exercised against the Data Controller by contacting Studio Gabrieli Pierina, VAT number IT02612820288 with registered office Via Bosco, n.12, 35020 – Corezzola (PD), e-mail piera@pieragabrieli.it.

Our website uses cookies (such as Google Analytics, Hotjar), for more information see our information on cookies Cookie.