Customer Privacy Notice

Dear Customer,

We would like to inform you about the personal data you voluntarily provide (by phone, fax, email or by registering on our website), for what reasons this is necessary and what your rights are with regard to their processing.

The processing of data provided by you is carried out in compliance with the principles of legality, correctness and transparency, with the provisions of the law in force  the EU 2016/679 Regulation of the European Parliament and the Council (GDPR 2016/679).

The information is provided exclusively for the website of www.bebmimosaelilla.com and not for other websites that may be consulted by the user through the links on the site.

Owner and manager of data processing

The owner and manager of the processing of personal data collected from this site is:

B&B Mimosa and Lillà - VAT Number 04532580232, of Sembenini Giampaolo, with registered office in Fumane (VR), via Pietro Nicolis, 28.

For further information contact us at the following addresses:

Tel. +39 3491719809

E-Mail: info@bebmimosaelilla.com

Internet: www.bebmimosaelilla.com
 

Purposes of the treatment

The processing of your personal data will be carried out using paper and computerized methods, in compliance with the provisions on the protection of personal data and, in particular, the appropriate technical and organizational measures pursuant to art. 32.1 of the aforementioned Regulations and with the observance of every precautionary measure that guarantees its integrity, confidentiality and availability.

The owner of personal data undertakes to process your data in compliance with the principle of "minimization", or by acquiring and processing the data limited to what is necessary with respect to the following purposes:

a) to fulfil legal obligations

b) to fulfil contractual obligations

c) to make available the requested information and deliver the agreed services

d) to safeguard obligations (e.g.: payments)

e) to carry marketing activities, such as forwarding commercial information and advertising material, market research activities

f) to ascertain the level of satisfaction for the quality of the products and services offered.

Legal basis of processing:

The provision of your personal data is required for the purposes referred to in points a), b), c), d) above and your refusal to provide data will determine the total impossibility of stipulation and execution of the contract.
 

Type of treatment

Your personal data are treated manually, but also electronically, mainly through the use of automated processes, depending on the objectives. In this case, we specifically use databases and computerised platforms that may be managed by both us and third parties. Each type of treatment guarantees the respect and the confidentiality of the data treated. We store such data and general information in the database and in the servers as logfiles.
In order to provide you with a unique navigation experience we need to collect some technical data that are necessary for the correct operation of the website:

• Browser type and browser version
• Operating system
• The "referrer" website
• The on our website linked webpages
• Date and time of access
• IP address
• Other similar data and information.

The legal basis for this type of treatment is article 6 of the GDPR. By accessing the website computerised systems and management software automatically and indirectly collect and/or manage this number of data and information.

At first, the collection of these data in anonymous format is static. However, later on the data are treated to ensure a high level of protection and safety for any data that we collect.

Period of data conservation

In compliance with current laws, the owner of the treatment has defined different periods of data conservation depending on their usage:

a) as far as handling and answering your questions about products and activities your personal data will be stored for a period of time strictly necessary for processing your request;

b) as far as managing activities connected with the navigation through our website your personal data will be stored for a period of time strictly necessary to satisfy your requests;

c) as far as internal management and operational activities (for example time of conservation of invoices, administration, and tax information) your personal data will be treated for a period of time in line with the legal requirements for the specific purpose;

d) as far as the handling of disputes and litigations your personal data will be stored for the whole time strictly necessary for pursuing such matters, and in any case not beyond the applicable prescription limits.

Place of data processing

The processing of data generated by the use of www.bebmimosaelilla.com takes place at the headquarters of the Data Controller, via Pietro Nicolis 28, 37022, Fumane (VR)

Use of Cookies

To constantly improve navigation on our website we use cookies.

Cookies are text information which while browsing an Internet site are stored in the computer through the browser used. The storage of this data serves to recognize access. You can delete at any time, through the settings of the browser used, the cookies that are stored and at the same time set the browser so that cookies are no longer stored in the future. In the event that you opt for the latter choice we cannot guarantee normal use of our site and some services and functions may no longer be usable.

Further information on cookies and their use can be found in  the dedicated section.

Contact form

Should you decide to contact us using the contact form on our website you will be asked to enter some personal data. This enables us to process your query. This is also the reason why the corresponding fields of the contact form are marked with an asterisk, or in any another way, as mandatory fields. The entering of personal or sensitive data other than those marked as mandatory will be at your discretion. Failure to enter, even in part, the mandatory information marked with an asterisk or similar character may result in the impossibility for us to answer your requests or deliver the requested services. The forwarding of requests using the contact form constitutes your implicit acceptance of the treatment of your personal data. The data that you transmit are treated and stored for a period of time strictly necessary for the processing of your request.

Newsletter

The sending of a newsletter containing commercial information is subject to your prior consent or a legal provision. Our Newsletter contains information on the company's activities, our services, offers and news. The frequency of sending it Newsletter depends on the topics covered, in any case before sending a Newsletter we make sure that we have obtained your prior consent using a system called Double Opt-In as required by the legislation in force in Art . 6 paragraph 1 letter b) of the GDPR.

In compliance with the provisions in force  it is our task to monitor and store the consent received when sending the Newsletter. To this end we detect the time of registration and confirmation to the Newsletter; the personal data communicated on this occasion are used solely for the personalization and header of the Newsletter and recipients can unsubscribe at any time using the tools made available within the Newsletter itself. Data retention corresponds exclusively to the period of use and subscription to the service.

Profiling

Profiling is any type of automated personal data processing activity that consists in using the information to assess, analyse and predict certain aspects of a natural person. For this type of marketing activities we signed agreements with third parties.

Collaboration with third parties

In addition to the owner, in some cases, categories of employees involved in the organization of the site (eg system administrators) or external subjects (eg third party technical service providers, IT companies) may have access to the data. These third parties, who act as data controllers of personal data, guarantee that the data received are not stored and used for other purposes than those contractually agreed. In the context of these technical agreements, the email addresses made available to them are encrypted thanks to the use of technology such as Hashing so third parties are unable to trace the original addresses.

Our site may share some of the data collected with services located outside the European Economic Area (EEA) *, in particular with Google, Facebook through social plug-ins, Google Maps and the Google Analytics service. The transfer is authorized and strictly regulated by article 45, paragraph 1 of EU Regulation 2016/679, for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield. Data will never be transferred to third countries that do not comply with the conditions set out in Article 45 and subsequent of the EU Regulation.

* The European Economic Area (EEA) is made up of the countries of the European Union, Switzerland, Iceland, Lichtenstein and Norway.

Data dissemination

Personal data processed mainly are not disclosed, only and exclusively in certain cases personal data may be disclosed to the following applicants:

a) Subcontractors for technical analysis and verification, payments, identification and delivery services, analytical providers or credit insurance agencies

b) The public administration and the Authorities, if there is a legal obligation

c) Credit institutions with which we maintain commercial relations for the management of credits / debits and with financial intermediation

d) any natural or legal person, public and / or private (legal, administrative and tax advice, courts, chambers of commerce, etc.) if the forwarding of data is necessary or relevant for the performance of our activity.

User rights

We would also like to inform you that the European Regulation recognizes certain rights, below we are summarizing the rights of an affected person:

a) Right to receive confirmation of the data treatment

Each affected person has the right to ask the owner of the personal data treatment if the data are being treated. Anyone wishing to exercise this right may contact us at any time.

b) Right of information

Each affected person has the right to obtain at any time and free of charge information regarding the treatment of their own personal data. The notification must contain the following information:

• the purposes of the treatment
• the types of personal data being treated
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
• the period of conservation contemplated for the treatment and the storage of the personal data
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
• the possibility to issue a complaint with the data protection authorities
• in those cases when the personal data were not collected or treated by the company the possibility of obtaining appropriate information on their source and origin
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

c) Right of correction of personal data

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

d) Right to cancel

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
• the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
• the personal data have been processed in relation to the offer of services by minors referred to in Article 8, paragraph 1.

e) Right of limitation of the treatment

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
• the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

f) Right to data portability

Any person involved in the processing of personal data has the right I to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine‐readable format and to transmit them to another data controller, or have them transferred by the controller itself, if technically feasible.

g) Right to opposition

Any person concerned by the processing of personal data has the right to object to the processing of the same at any time for reasons deriving from his particular position.
The data controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights of the data subject or for the ascertainment, exercise or defense of legal claims.

In the event that we should use the processing of personal data for the purpose of direct marketing, the subject involved in the processing has the right to object at any time. This provision also applies to profiling when it is used for direct marketing purposes.

h) Automated decisions including profiling

Any person involved in the processing of personal data has the right to object to a decision based solely on automated processing, including profiling, which has legal consequences and effects on him and which affects him significantly, unless the decision is taken to conclude or fulfill a contract between the data subject and the data controller.

If the decision to conclude or fulfill a contract between the data subject and the data controller is requested or has been made with the explicit consent of the data subject, we will take reasonable steps to safeguard the rights and freedoms of the data subject.

i) Right to the opposition of a consent to the processing of data

Every person involved in the processing of personal data has the right to revoke at any time the consent given to the data controller.

For any further information, and to assert the rights recognized by the European Regulation, you can contact: info@bebmimosaelilla.com.

Google Analytics

This website uses Google Analytics, a Google Inc. (“Google”) advertising efficiency analysis service. Google Analytics uses so-called “cookies”, small text files that are stored on the visitor’s computers and allow assessing the use of the website. The information (including the user’s IP address) is collected through cookies and sent to a server in the USA, where it is stored. Google then uses this information to analyse the navigation of our website, create reports of the activities on the website and provide different services. In some cases, Google may also transfer the information to third parties, for example if required by law or to other companies that process data on its behalf. Your IP address can under no circumstances be used by Google for purposes other than those indicated above. By visiting the website users agree to the treatment of their own personal data by Google for the above purposes. The installation of cookies on your computer may be prevented by adjusting your browser settings accordingly. However, in this case you need to be aware that the disabling of cookies could limit the quality of your navigation through the website, or your use of the same. To prevent Google from collecting and processing data as explained above, you need to download and install the following plugin: https://tools.google.com/dlpage/gaoptout?hl=gb. Further information on the conditions of use and the Google Analytics data protection policy is available at the following link:

https://www.google.com/analytics/terms/gb.html or https://support.google.com/analytics/answer/6004245?hl=gb. The website uses Google Analytics in IP-Masking mode, to ensure that IP addresses are collected in an anonymous format. It is important to point out that we use Google Analytics to evaluate and analyse AdWords data for statistical purposes, and also Double-Click-Cookie. Should you not be happy with this activity, you can disable it by visiting https://adssettings.google.com/?hl=gb

Google Fonts

This website uses Web Fonts to correctly display the graphic characters that are made available to Google. When our website is loaded, your browser loads the necessary web sources within the browser's Cache space to display the graphic characters correctly.

To this end, the browser you choose must necessarily connect to Google's servers, which will then be aware of the fact that your IP address will have uploaded our website. The use of Google Web Fonts is a consequence of the desire to offer a clean and attractive navigation.      This represents a legitimate interest also based on the content of the art. 6 paragraph 1 letter f) of the GDPR.

More information on using Web Fonts can be found at the following link https://developers.google.com/fonts/faq or by consulting the information note on the processing of Google data at https://www.google.com/policies / privacy /.

SSL certificate

We treat personal data collected on the website using computerised processes. Personal data are protected by Secure Socket Layer (SSL) encryption. This technology protects the user from the risk of unintentional disclosure of personal data when using an unprotected connection.

The user is notified when accessing a protected connection by a padlock icon. By clicking the padlock icon, the user can then make sure that the SSL certificate is valid and up to date.
 

Google Maps

Our website uses the Google Maps service to display maps.

This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

The use of Google Maps is in the interest of the user to offer the location of places.

To use the functions of Google Maps it is necessary to save your IP address.

The information collected is transferred to Google's servers. This data processing is regulated in art. 6 par. 1 letter f) GDPR. We cannot influence the processing of the collected data in any way.

More information on the processing of user data is available by consulting the Google Data Protection Directive: https://policies.google.com/privacy.

.