Privacy disclaimer

1. Personal data collected by the Application

   The Data Controller collects the following types of Personal Data:

   1. Content and information voluntarily provided by the User
      • Contact data and contents: are those Personal Data that the User voluntarily provides to the Application during its use, such as for example personal data, contact details, access credentials to the services and / or products provided, personal interests and preferences and other content personal, etc.

      Failure by the User to provide Personal Data, for which there is a legal, contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will make it impossible for the Data Controller to provide in all or in part its services.

      The User who communicates to the Owner Personal Data of third parties is directly and exclusively responsible for their origin, collection, treatment, communication or diffusion.

   2. Data and content acquired automatically when using the Application
      • Technical data:during their normal operation, the IT systems and software procedures used to operate this Application may acquire some Personal Data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified Users, but which by its very nature could, through processing and association with Data held by third parties, allow users to be identified. This category includes the IP addresses, or the domain names used by the Users who connect to the Application, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained, etc.
      • Usage data: Data relating to the use of the Application by the User may also be collected, such as for example the pages visited, the actions performed, the functions and the services used.
   3. Personal data collected through cookies or similar technologiesThis application uses cookies, web beacons, unique identifiers and other similar technologies to collect data on the pages, links visited and other actions you perform when you use our services, within advertising or email content. They are stored to be retransmitted to the same sites on the next visit by the same User.The User can view the complete Cookie Policy at the following address: Via La Thuile 65/B – 10142 Torino.

2. Purposes

   The Personal Data collected can be used for the execution of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:

   • external management of payments by credit card, bank transfer or other instruments. The data used for payment are acquired directly by the payment service manager requested without being processed in any way by this Application. Payments are provided by communicating the Data to PayPal (Europe) S.à rl et Cie https://www.braintreepayments.com/en-it/legal/payment-services-agreement-eu
   • sending emails or newsletters and managing mailing lists by communicating the Data to SendinBlue SAS https://it.sendinblue.com/legal/privacypolicy/
   • archiving, hosting and backend infrastructure management by communicating the Data to Amazon Web Services, Inc
   • interaction with live chat by communicating the Data to Tawk.to inc. https://www.tawk.to/privacy-policy/
   • statistics only with anonymous data by communicating the data to Google LLC https://policies.google.com/privacy
   • communication and / or transfer for promotional and commercial purposes of third parties by communicating the Data to Data to Google LLC https://policies.google.com/privacy; Facebook Inc. https://www.facebook.com/privacy/explanation
   • monitoring, analysis and tracking of User behavior by communicating Data to Heap, Inc. https://heapanalytics.com/privacy; 200 OK LLC https://www.profitwell.com/privacy-policy; Baremetrics Inc. https://baremetrics.com/privacy; LinkedIn Corporation https://www.linkedin.com/legal/privacy-policy; Facebook Inc. https://www.facebook.com/privacy/explanation; Hotjar Ltd https://www.hotjar.com/legal/policies/privacy
   • User registration and authentication
   • provision of legal, tax, tax, accounting consultancy services, etc. communicating the data to external professionals
   • electronic invoicing service, communication to the Exchange System and electronic storage of invoices by communicating the Data to A-Via La Thuile 65/B – 10142 Torino. https://acubeapi.com
   • commercial affiliation by communicating the Data to Anafore Pte. Ltd. # 06-26, 71 Ayer Rajah Crescent, Singapore 139951, https://www.referralcandy.com/privacy/
   • remarketing and behavioral targeting by communicating the Data to Google LLC https://policies.google.com/privacy; Facebook Inc. https://www.facebook.com/privacy/explanation; Criteo SA https://www.criteo.com/privacy/
   • comment and feedback
   • management and hosting of promotional pages (landing page) by communicating the Data to Instapage Inc. https://instapage.com/privacy-policy

3. Method of treatment

   The processing of Personal Data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

   In some cases, subjects involved in the organization of the Data Controller may also have access to Personal Data (such as, for example, personnel management personnel, commercial area employees, system administrators, etc.) or external subjects (such as IT companies, suppliers of services, couriers, hosting providers, etc.). Said subjects, if necessary, may be appointed Data Processors by the Data Controller, as well as accessing Users’ Personal Data whenever necessary and will be contractually obliged to keep Personal Data confidential.

   The updated list of Managers can be requested via email at info@ivanparadisi.com.

4. Legal basis of the treatment

   The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

   • the User has given consent for one or more specific purposes
   • processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures
   • processing is necessary to fulfill a legal obligation to which the Data Controller is subject
   • processing is necessary for the pursuit of the legitimate interest of the owner or third parties

   However, it is always possible to request the Data Controller to clarify the concrete legal basis of each treatment.

5. Place

   The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller at the following email address info@ivanparadisi.com or at the following postal address Via La Thuile 65/B – 10142 Torino

   Personal Data can be transferred to non-EU countries: USA and Singapore.

   For these countries there is an adequacy decision of the European Commission or, in the absence of such a decision, it is possible to request more information from the Data Controller regarding the appropriate guarantees adopted, as well as the means to obtain a copy of such Data or the exact place where they were returned. available.

6. Security measures

   The treatment is carried out according to methods and with suitable tools to guarantee the security and confidentiality of the data, having the owner adopted adequate technical and organizational measures that guarantee, and allow to demonstrate, that the treatment is carried out in compliance with the reference legislation.

7. Data retention period

   The Data Controller will process the Personal Data for the time necessary to fulfill the purposes connected with the execution of the contract between the Data Controller and the User no longer than 11 years from the termination of the relationship with the User and in any case until the completion of the term. prescription provided by the standards in force.

   When the processing of Personal Data is necessary for the pursuit of a legitimate interest of the Owner, Personal Data will be kept until such interest is satisfied.

   If the processing of personal data is based on the consent of the user, the owner can keep the personal data until revoked by the same.

   Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.

   All Personal Data will be deleted upon expiry of the retention period. At the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

8. Automated decision-making processes

   All the collected data will not be subject to any automated decision-making process, including profiling, which can produce legal effects for the person or which can significantly affect them.

9. User rights

   Users can exercise certain rights with reference to the data processed by the owner. In particular, the User has the right to:

   • withdraw consent at any time;
   • oppose the processing of your data;
   • access your data;
   • verify and request correction;
   • obtain the limitation of the treatment;
   • obtain the cancellation of their Personal Data;
   • receive your data or have it transferred to another holder;
   • propose a complaint to the supervisory authority for the protection of personal data and / or act in court.

   To exercise their rights, Users can send a request to the owner’s contact details indicated in this document. Requests are made free of charge and processed by the Owner as soon as possible, in any case within 30 days.

10. Holder of the treatment

    The Data Controller is LexDo.it Srl, with registered office in Via San Tomaso 6 – Milan, Tax Code / VAT number 09021520961, MI 2064599, e-mail address supporto@lexdo.it, PEC address lexdoit@pec.it.

Last updated: 20/06/2019