INFORMATION REGARDING THE TREATMENT OF PERSONAL DATA (Art. 13 Reg. UE 2016/679 and Art. 13 D.Lgs. 196/2003) - SITE

Pursuant to art. 13 of Legislative Decree no. 196/2003 and art. 13 of EU Regulation no. 2016/679, laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data supplied by you will be processed in compliance with the above mentioned law and the obligations of confidentiality which APETITUS SRL with registered office in Via Archimede 10, Rome, owner of the website APETITUS VAT No.: 02245170564, is obliged to fulfil.

A) Data controller

The data controller is APETITUS SRL with registered office in Via Archimede 10, Rome, owner of the site APETITUS VAT No.: 02245170564 , in the person of the legal representative p.t.. You can contact the owner using the following e-mail address: [email protected] or the following telephone numbers 06 64002366 and 3913112314.

B) Purpose and legal basis of processing

APETITUS s.r.l. a will process your personal data for the following purposes:

1. registration on the APETITUS website by entering personal data;
2. order processing and activities related to the delivery of orders;
3. management of payments;
4. handling of your commercial enquiries or order status;
5. managing and taking orders by telephone;
6. request for CV evaluation;
7. sending, with your consent and for marketing purposes, commercial communications by e-mail;
8. sending, with your consent, for profiling purposes in order to improve your browsing experience on the site, commercial proposals in line with your interests. In this regard, we invite you to read our Cookie Policy in the Cookies section.

The legal basis for the processing of personal data provided by the data subject is the performance and management of the contract (Art. 6 par. 1 lett. B EU Reg. 2016/679). The provision of the data referred to in letter B) is not mandatory. Such provision and subsequent processing is necessary to enable the provision and management of the service, any refusal to provide the data in question will make it impossible to obtain the use of the service offered by the Owner.

C) Categories of personal data collected

The personal data that APETITUS collects when you browse or shop on our site are as follows:

1. personal data: first name, last name, billing address, shipping address, e-mail address and telephone number;
2. We also record your e-mail address when you subscribe to our newsletter, independently and independently of your registration on our website. This choice is always optional and can be changed at any time;
3. We process your personal data when you contact our Customer Service to request assistance with an order you have placed. We record and process your data if you contact our Customer Service to place an order by telephone;
4. through cookies we collect certain information about your navigation on APETITUS, such as the pages you visit;
5. We may collect data from third parties, for example if your order is sent to a third party, or if you have purchased a product that is to be delivered to a party other than the purchaser by filling in the "Other destination" box on the relevant page. In these occasions APETITUS will make sure to deliver to the third party the privacy policy at the time of the first communication and to keep the data of third parties only for the completion and delivery of the order. It remains your responsibility to obtain the consent of the person to whom the data relates before disclosing it to APETITUS and to inform them of this Privacy Policy.

D) Special categories of personal data

Pursuant to articles 9 and 10 of the EU Regulation n. 2016/679, APETITUS S.R.L., due to the nature of its activity and the purpose of the personal data processing, does not require the provision of special categories of personal data pursuant to articles 9 and 10 of the EU Regulation n. 2016/679.

E) Modalities of data processing and security measures

The data will be processed mainly with the aid of electronic or otherwise automated tools, in accordance with the methods and by means suitable to ensure the security and confidentiality of the data, in accordance with the provisions of Article 32 EU Reg. 2016/679 and in compliance with the principle of accountability of the owner. In particular, all technical, IT, organisational, logistical and procedural security measures will be adopted, so that the appropriate level of data protection provided for by current legislation is guaranteed, allowing access only to persons authorised to process the data by the Data Controller or any Managers appointed by the same and in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 EU Reg. 2016/679.

F) Period of data retention

a) 10 years for data related to invoicing, starting from the date of invoicing; b) up to the request of deletion for data you communicated at the time of registration; c) CV for 1 year after receipt; d) up to the request of deletion or unsubscription, e.g. for newsletters, for data used for commercial communication activities.

G) Scope of data communication

The personal data you provided, for the purposes described, could be brought to the attention of employees and/or collaborators of APETITUS S.R.L., Appointed as authorized subjects to the treatment (art. 2-quaterdecies D.Lgs. 196/2003), and communicated to the following subjects: a) associated and controlled companies; b) third companies appointed by APETITUS S.R.L. to provide the execution of specific executive phases of the supplied Services and, in particular: 1) DHL Corriere Espresso: for the treatment of the data necessary to execute the shipping activities in Italy and in the EU Countries, for the delivery and return (through our Return service) of the products you purchased on our web site. 2 ) DHL: for the processing of the data necessary for the management, preparation and shipment of your order. 3 ) PayPal: for the payment of orders through the PayPal platform, with any credit card or personal account. c ) third party companies or consultants responsible for the installation, maintenance, updating and, in general, the management of hardware and software used by APETITUS SRL; d ) all public and/or private, natural and/or legal persons (administrative, fiscal and legal consultancy firms), if the communication is necessary or functional to the correct fulfilment of the contractual obligations assumed in relation to the services provided, as well as the obligations deriving from the law; e) all subjects (including Public Authorities) who have access to the data by virtue of regulatory or administrative measures. The personal data provided by you and subsequently processed in relation to the management of the service are not subject to disclosure.

H) Rights of the data subject

In relation to the data processed under this notice, you have the right at any time to:

• Access (Art. 15 EU Reg. 2016/679);
• Corrigendum (Art. 16 EU Reg. 2016/679);
• Cancellation (Art. 17 EU Reg. 2016/679);
• Limitation (Art. 18 EU Reg. 2016/679);
• Portability (Art. 20 EU Reg. 2016/679);
• Opposition (Art. 21 EU Reg. 2016/679).
• The exercise of the above rights may be exercised by written communication to be sent by registered letter with return receipt to the address of the data controller.

I) Complaint

Pursuant to Art. 77 EU Reg. 2016/679, you may lodge a complaint with the Supervisory Authority in the event of a breach of current legislation on the protection of personal data.

L) Transfer of personal data

The processing and storage of personal data shall take place on servers located within the European Union of the Data Controller and/or third party companies appointed and duly appointed as Data Processors pursuant to Article 28 GDPR. The servers are located in Italy. The data shall not be transferred outside the European Union. It is in any case understood that the Data Controller, where necessary, shall have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable provisions of law, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission (Corporate Binding Rules).

M) Existence of automated decision-making, including profiling

The data controller does NOT adopt any fully automated decision-making process, including profiling, as referred to in Article 22(1) and (4) of EU Regulation 679/2016.

Privacy Policy updated 30/5/2020