PRIVACY POLICY

This privacy policy describes how Stefano Botta processes the personal data of its customers and the users of its online services and how one can influence the processing of personal data.
This privacy policy statement, provided pursuant to the European Regulation 2016/679 art. 13 and 14 – Data Protection Code for those who interact with the services of Stefano Botta, that can be accessed electronically from the web address botta-s.com.
The privacy policy statement complies with the provisions of the European Regulation 2016/679 and, more specifically, with article 13 and 14.

DATA PROTECTION OFFICER (DPO)

The Data Protection Officer for the processing of users’ data is Stefano Botta, with registered office on via Angela Veronese, 28 Breda di Piave – Treviso, the owner of the website botta-s.com.
To receive information on this privacy policy statement, users can contact the DPO at any time, as follows:

• by registered letter with advice of receipt sent to the registered office of the DPO;
• by email sent to info@botta-s.com

COLLECTED PERSONAL DATA

Stefano Botta collects and processes personal data only to the extent necessary for fulfilling the purposes of use described in this privacy policy:

• Connect with us so that we can answer to your specific requests;
• Provide you information regarding the services offered by Stefano Botta;
• Administration purposes or for other legal obligations;
• Create a database exclusively used by Stefano Botta to analyse clients’ needs in order to offer better services.

The provision of personal data for the processing purposes indicated above is optional but necessary. In case of consent, users can revoke it at any time by filing a request with the DPO.

Submitted personal data

Personal data submitted by the customer or user of online services to Stefano Botta at various times, such as during a product order or newsletter subscription or registration to an online service, may include the following:

• basic data, such as name and contact information
• ordering and billing data, such as information about the payer of the order, its recipient and their e-mail address and phone number
• customer service data, such as customer feedback and communication with customer service
• permit data, such as information about marketing permits or other permits and prohibitions related to the use of personal data
• data about responses to studies, surveys or contests conducted by Design Shop Finland
• phone data, such as customer service calls

Data collected from online service use

Data collected from the use of online services may include:

• collected data about the device or application used, such as browser version, device type or display size
• data about online service use, such as information about pages loaded, time spent at online services, navigation in online services or advertising or marketing content viewed
• data about web pages opened through customer communication
• location data by country based on IP address
• data collected by social plugins or other third parties

A user of online services can be identified through a digital identifier created in the services when the customer signs in or arrives at the online service through targeted customer communication, such as a newsletter.
When customers register or access the web service through a communication with the company, for example through a newsletter, users can be recognized on the basis of the digital credentials created on the website.
Data about the use of online services is collected using cookies. For more information, see the cookie policy.

Derived and combined data

In order to serve its customers and online service users better, A-lehdet refines collected personal data by analyzing it using various statistical methods and by combining data collected from different sources.
Using the aforementioned methods, it is possible to make assumptions about things such as interests, gender, age group, purchasing behavior or other similar characteristics. These assumptions are based on the submitted or collected data mentioned in the previous paragraph. In order to ensure consumers’ privacy, Stefano Botta shall not make assumptions about information that is considered sensitive.
Stefano Botta secures the privacy of its customers or users of online services by exercising special care when carrying out the derivation and combination of data described above, so that the privacy of customers or users of online services is not compromised.

COOKIE POLICY

The website uses the following types of cookies for the respective objectives:

• technical cookies to establish if users have granted their consent with regard to the information available, upon first access, in all the pages of the website;
• cookies associated with Youtube services to grant the possibility of incorporating content in our website contents to make them richer and more comprehensive;
• cookies associated with the advertising services offered by Google, Facebook to understand if users have visited our website and, if they satisfy certain conditions, to offer again our services through advertisements;
• anonymous cookies associated with Google Analytics and Google Tag Manager services to understand how users visit our website and how to make improvements;

The information generated by the Google Analytics cookie on the use of the website is then transmitted to Google and stored on its servers in the United States. Google uses this information to trace and examine how users use the website and then provides this data, in aggregate form and never associated with users’ identity, through Analytics reports and the other information services it provides (e.g. Google Trends).
Google may transfer this information to third parties if required by the law, or in the case of subjects processing this information on its behalf.
If you do not want to be “traced” through cookies, you can download additional browser components used for navigation; some browsers also allow for anonymous browsing, for which no cookies will be installed.

ADVERTISING

Sometimes we use anonymous information, i.e. that cannot be traced back to the user’s identity, information relating to your browsing within the site botta-s.com to propose advertisements during your browsing on search engines and on other websites: this type of Advertising is called retargeting.

PERSONAL DATA PURPOSES OF USE AND THE LEGAL BASIS FOR PROCESSING

Stefano Botta collects personal data for the maintenance of customer relationships, development of products and services and commercial purposes.

Maintenance of customer relationships

Stefano Botta uses customers’ personal data for various activities necessary for maintaining a customer relationship, including:

• delivering ordered products
• maintenance of a customer relationship or customer communication
• customer service or other customer support
• billing
• competitions or draws for prizes

Processing of personal data for maintaining a customer relationship is based on an agreement between Stefano Botta and the customer about the delivery of a product or service, or another action that leads to the formation of a customer relationship.

The customer can influence the processing of personal data for maintaining a customer relationship by contacting customer service.

Processing methods and data retention times

The DPO will process users’ personal data through manual and computerized tools, with logics strictly related to the processing objectives and, in any case, to guarantee the security and confidentiality of the data concerned.
The personal data of the users of the Site will be kept for the time strictly necessary to carry out the primary purposes illustrated in the privacy policy statement or, in any case, as may be necessary to protect the interests of both the users and the DPO under civil law.

Scope of communication and data dissemination

Users’ personal data may be disclosed to the employees and/or collaborators of the DPO in charge of managing the website and users’ requests. These subjects, who have been instructed to do so by the DPO pursuant to art. 29 of the regulation, will process users’ data solely for the purposes indicated in this privacy policy statement and in compliance with the provisions of applicable law.
Users’ personal data may also be disclosed to third parties that may process personal data on behalf of the DPO as “external data processing managers”, such as, for example, suppliers of IT and logistic services required for the operation of the website, outsourcing or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of any data processors appointed by the data controller, by submitting a request to the data controller according to the specified procedures.

RIGHTS OF DATA SUBJECTS

Users can exercise the rights guaranteed to them by currently applicable legal regulations, by contacting the DPO as follows:

• by sending a registered letter with advice of delivery to the registered office of the DPO: via Angela Veronese, 28 Breda di Piave – Treviso
• by sending an email to info@botta-s.com

In accordance with applicable law, the DPO informs that users have the right to obtain indication of (i) the origin of personal data; (ii) the purposes and methods of data processing; (iii) the logics applied if the processing is carried out using electronic tools; (iv) the identification details of the DPO and processing managers; (v) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as managers or officers in charge.

Furthermore, users have the right to:

a) access their data and have it updated, amended, and if necessary, integrated;
b) have their data cancelled, converted into anonymous form or blocked if processed in violation of the law, including data that is not required to be stored in relation to the purpose for which it was collected or subsequently processed;
c) obtain a statement to the effect that the operations set out in letters a) and b) have been disclosed, also with regard to their content, to those who have received such data, except for the case where such compliance turns out to be impossible or requires means that are clearly disproportionate to the protected right.

Moreover, users have:

a) the right to withdraw their consent at any time, if the processing of their data is based on their consent;
b) the right to the portability of data, i.e. the right to receive all personal data concerning them in a structured format, that is commonly used and readable by an automatic device, the right to limit the processing of personal data and the right to have it cancelled ( “Right to be forgotten”);
c) the right to object, either wholly or in part, for legitimate reasons, to the processing of the personal data concerning them, even if relevant to the purpose of collection.
d) if they consider that the processing of their data is in violation of the regulation, the right to file a complaint with a supervisory authority (in the Member State in which they usually reside, in the one where they work or in the one where the alleged violation occurred). The Italian supervisory body is the Data Protection Authority, with offices in Piazza di Monte Citorio no. 121, 00186 – Rome (sito web del Garante).
The DPO is not responsible for updating all the links that can be viewed in this privacy policy statement, therefore whenever a link is not working and/or updated, they acknowledge and accept that they must always refer to the document and/or section of the websites associated with that link.

INFORMATION SECURITY

Stefano Botta takes appropriate information security measures to ensure the secure processing of personal data. Personal data is protected from loss, destruction, abuse, unauthorized access and transfer. Secure processing is ensured by means such as restricting access to the data and ensuring that our employees and sub-contractors are using personal data in accordance with instructions and agreements.