Privacy Policy

Privacy Policy Statement

• The purpose of this document is to inform the natural person (hereafter “Data Subject”) regarding the processing of his/her personal data (hereafter “Personal Data”) collected by the data controller, Art Decor Suites Srl, with registered office in via Angelo Cosenza 90, 80062, Meta, CF/VAT number 10361701211, e-mail address gierc@artdecorsuites.com, (hereafter “Data Controller”), through the website www.ercolano.it (hereafter “Application”).
  Changes and updates will be binding as soon as they are published on the Application. In case of non-acceptance of the changes made to the Privacy Policy, the Data Subject shall cease using this Application and may request the Data Controller to delete his/her Personal Data.

• Categories of Personal Data processed
  

  The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:
  Contact Data: first name, last name, address, e-mail, telephone, pictures, authentication credentials, any additional information sent by the Data Subject, etc.
  The Data Controller processes the following types of Personal Data collected in an automated manner:
  Data on navigation and use of the Application: such as, for example, pages visited, number of clicks, actions performed, duration of sessions, etc.
  Failure on the part of the Data Subject to provide Personal Data for which there is a legal or contractual obligation, or if they constitute a necessary requirement for the conclusion of the contract with the Data Controller, will result in the impossibility for the Data Controller to establish or continue the relationship with the Data Subject.
  The Interested Party who communicates to the Controller Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.

• Cookies and similar technologies
  

  The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data of the Data Subject about the pages, links visited and other actions performed when the Data Subject uses the Application. They are stored and then transmitted the next time the Data Subject visits.

• Legal basis and purpose of processing

  The processing of Personal Data is necessary:
  for the performance of the contract with the Interested Party and precisely:<br> fulfillment of any obligation arising from the pre-contractual or contractual relationship with the Interested Party registration and authentication of the Interested Party: to allow the Interested Party to register on the Application, access and be identified also through external platform support and contact with the Interested Party: to respond to the requests of the Interested Party payment management: to manage payments by credit card, bank transfer or other instrumentsfor legal obligation and specifically:the fulfillment of any obligation provided for by the current rules, laws and regulations, in particular, in tax and fiscal matters based on the legitimate interest of the Owner, for:
  statistics with anonymous data: to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject, to improve the products and/or services provided by the Controller and better meet the expectations of the Data Subject
  The Data Subject’s Personal Data may also be used by the Data Controller to protect itself in court before the competent judicial bodies.

• Processing methods and recipients of Personal Data
  

  The processing of Personal Data is carried out by means of paper and computer tools with organizational methods and logics strictly related to the indicated purposes and through the adoption of adequate security measures.
  Personal Data are processed exclusively by:
  persons authorized by the Data Controller for the processing of Personal Data who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality;subjects operating independently as separate data controllers or by subjects designated as data processors by the Data Controller in order to carry out all the processing activities necessary to pursue the purposes set out in this policy (for example, business partners, consultants, IT companies, service providers, hosting providers);
  subjects or entities to whom it is mandatory to disclose Personal Data by law or by order of the authorities.
  The entities listed above are required to use appropriate safeguards to protect Personal Data and may only have access to those necessary to perform the tasks assigned to them.
  Personal Data will not be disseminated indiscriminately in any way.
  

• Location

  Personal Data will not be subject to any transfer outside the territory of the European Economic Area (EEA).

• Period of Retention of Personal Data 
  

  Personal Data will be kept for the period of time necessary to fulfill the purposes for which it was collected, in particular:
  for purposes related to the performance of the contract between the Data Controller and the Data Subject, it will be kept for the entire duration of the contractual relationship and, after termination, for the ordinary limitation period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of esperibilità of the actions of appealfor purposes related to the legitimate interest of the Owner, they will be kept until the fulfillment of such interestfor the fulfillment of a legal obligation, by order of an authority and for the protection in court, they will be kept in compliance with the timeframes provided for by such obligations, regulations and in any case until the fulfillment of the prescriptive period provided for by the regulations in force
  for purposes based on the consent of the Data Subject, will be kept until the consent is revoked
  At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.
  
  

• Rights of the Data Subject
  

  Data Subjects may exercise certain rights with respect to Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:
  be informed about the processing of his or her Personal Datarevoke consent at any timelimit the processing of his or her Personal Dataoppose the processing of his or her Personal Dataaccess to his or her Personal Dataverify and request the rectification of his or her Personal Dataobtain the restriction of the processing of his or her Personal Dataobtain the deletion of his or her Personal Datatransfer his or her Personal Data to another controller file a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.
  
  To exercise their rights, Data Subjects may address a request to the following e-mail address sales@artdecorsuites.com.
  Requests will be taken care of by the Data Controller immediately and processed as soon as possible, in any case within 30 days.