Index
1. The Data Controller
2. What Personal Data are collected and for what purposes are they processed?
3. How are Personal Data processed?
4. Who processes Personal Data? to whom are they communicated? Are Personal Data transferred outside the EU?
5. How long will the Data be kept?
6. Rights of the interested party
7. Contact the Owner
8. Cookie Policy
1. The Data Controller
The Data Controller, i.e., the entity that determines the purposes and means of processing the Personal Data of users of the website, is the company Barovier&Toso Vetrerie Artistiche Riunite S.r.l. (“Barovier” or the “Company”), with registered office in Fondamenta Vetrai, 28, Murano (Venice).
The processing concerns the Personal Data collected and/or provided by the user when using the services provided by the website www.barovier.com (“Site”).
For further information you can contact the Company directly at the following e-mail address: privacy@barovier.com.
2. What Personal Data are collected and for what purposes are they processed?
A) Simply browsing the Site does not involve the collection of any type of Personal Data by Barover
The Site's computer systems only collect some technical usage data, the transmission of which is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with the user, but which by its very nature could, through processing and association with data held by third parties, allow you to be identified only if this is necessary in relation to the commission of illicit.
This data is used to extract anonymous statistical information on the use of the Site and to check its correct functioning and the correct provision of the various requested functions.
|
Purpose of the processing |
Legal basis |
|
Allow navigation on the Site. |
The processing is necessary for the execution of pre-contractual measures adopted at the request of the interested party (art. 6, par. 1, letter b GDPR). |
|
Obtain information necessary to identify anomalies, fraudulent activities and/or abuses in the use of the Site or exercise the Company's rights in court |
Legitimate interest of the Data Controller in the correct functioning of the Site and in the prevention of illicit behaviour, as well as in asserting its rights (art. 6, par. 1, letter f GDPR). |
B) Through the Site, the user also has the possibility to voluntarily provide Personal Data and, in particular:
1. Contact data (email address) used to register for the newsletter, through the forms on the web pages of the Site.
2. Identification data (name, surname) and contact data (e-mail address, country) provided through the "Contact us" form on the Site.
3. Identification data (name and surname) and contact data (e-mail address) used for sending informative and commercial communications, including of a promotional nature, advertising material and/or offers of goods and services, by any means ( known or not), including, by way of example and not limited to, post, Internet, telephone, e-mail, MMS, SMS, etc.
4. Identification data (name and surname) and contact data (e-mail address) used to create a personal user profile through the "Log in" form of the Site to have access to reserved content.
|
Purpose of the processing |
Legal basis |
|
Respond to a contact request forwarded by the user to the Company via the appropriate form on the Site. |
The processing is necessary for the execution of pre-contractual measures adopted at the request of the interested party (art. 6, par. 1, letter b GDPR). |
|
Manage the request to subscribe to the newsletter service to receive promotional communications and updates on the Company's activities. |
The processing takes place on the basis of the express consent of the interested party to the processing (art. 6, par. 1, letter a GDPR). |
|
Sending commercial communications regarding new products and activities of the Owner (unless denied or subsequently revoked the consent given) - marketing |
The processing takes place on the basis of the express consent of the interested party to the processing (art. 6, par. 1, letter a GDPR) |
|
User registration on the web page |
The processing is necessary for the execution of pre-contractual measures adopted at the request of the interested party (art. 6, par. 1, letter b GDPR). |
C) Information relating to the use of Cookies is available both in the Cookie Policy which can be consulted from the link in the specific section of this Privacy Policy, and from the link located at the bottom of the web pages of the Site.
|
Purpose of the processing |
Legal basis |
|
Allow navigation on the Site. |
The processing is necessary for the execution of pre-contractual measures adopted at the request of the interested party (art. 6, par. 1, letter b GDPR). |
|
Profiling visitors' interests or showing relevant ads on other websites |
The processing takes place on the basis of the express consent of the interested party to the processing (art. 6, par. 1, letter a GDPR) |
Barovier will process Personal Data in compliance with applicable legislation, if they refer to you or to third parties who have expressly granted you authorization to provide them.
At any time, you can withdraw the consent previously expressed for marketing purposes and/or subscription to the newsletter, via the "unsubscribe" link at the bottom of the newsletters themselves.
3. How are Personal Data processed?
Personal Data may be freely provided by the user or, in the case of navigation data, collected automatically during use of the Site. Where specified in the forms on the web pages of the Site (this is data marked with an asterisk), the provision of Personal Data is necessary to provide the requested service (e.g. request for information, subscription to the Barovier newsletter, consent to marketing activities): if the user refuses to communicate such data, it may be impossible to follow up on the relevant request. On the contrary, with reference to Personal Data not marked as mandatory, the user is free to refrain from communicating them, without this having any consequence on the availability of the services or the operation of the Site.
It may also happen that incidental processing of the Personal Data of third parties provided by the user to Barovier occurs. With respect to these hypotheses, the user can be classified as an independent data controller, assuming all the related legal obligations and responsibilities and, in particular, that this processing hypothesis is based on an appropriate legal basis pursuant to art. 6 of the GDPR. In this sense, the user undertakes to hold Barovier harmless from any dispute, claim, request for compensation for damage, etc. that should reach Barovier itself from third parties whose Personal Data have been processed through spontaneous sending by the user, in violation of the applicable Personal Data protection regulations.
The user's Personal Data is processed by the Data Controller in accordance with the provisions of current legislation, both in paper and digital form, in compliance with the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, data minimization, accuracy, integrity and confidentiality required by the GDPR.
Adequate technical and organizational measures have been adopted to guarantee the security of Personal Data, with logic strictly related to the processing purposes indicated in this Privacy Policy, as well as in consideration of the nature, object, context, and purposes of the processing, as well as of the risks (of varying probability and severity) to the rights and freedoms deriving from the processing activities described in this Policy.
4. Who processes Personal Data? To whom are they communicated? Are Personal Data transferred outside the European Economic Area?
The Personal Data provided through the Site are processed by Company personnel expressly authorized to process and adequately trained in the correct methods of processing for the purposes indicated in this Privacy Policy.
The management of the Site also takes place with the support of specialized third-party suppliers, appropriately appointed by Barovier as "Data Controllers" pursuant to art. 28 of the GDPR and have received specific instructions from Barovier for the correct processing of Personal Data.
Personal Data is processed via servers located within the European Economic Area. In cases where Personal Data is transferred outside the European Economic Area, this occurs in compliance with the applicable legislation and, in particular, with the signing of standard European contractual clauses or in compliance with the other measures provided for by the articles. 44 and following of the GDPR.
5. How long will the data be kept?
The Personal Data provided will be kept for as long as there is a relationship between the user and the data controller and, subsequently, for the time permitted based on the purposes for which the Personal Data was collected.
After the periods indicated, the data will be deleted or anonymized, unless the Company is required to retain the Personal Data for longer periods in compliance with legal or regulatory obligations or if necessary for the resolution of disputes/pre-disputes or assessment judgments in court.
6. Rights of the interested party
By virtue of the provisions of the GDPR, you have the right to exercise the following rights towards the Company:
|
Access to Personal Data |
To obtain confirmation that Personal Data concerning the user is being processed, further information on the processing activities and copy of the Personal Data processed. |
|
Rectification of Personal Data |
You can request the rectification of incorrect or outdated Data to guarantee the correctness of the Personal Data processed. |
|
Deletion of Personal Data |
You can obtain the deletion of your Personal Data if you consider the processing unnecessary or illegitimate. |
|
Limitation of the processing of Personal Data |
You may request that the processing be limited if you believe that the Personal Data is inaccurate, the processing is unlawful, the Personal Data is necessary for the establishment of a right in court, the user has exercised the right to object. |
|
Data portability (with reference to Personal Data processed using automated methods) |
You have the right to receive Personal Data in a structured format commonly used and readable by automatic device, in order to transfer them to a different owner. |
|
Opposition to the processing of Personal Data |
You have the right to object to the processing for reasons related to particular situations, unless the Data Controller demonstrates the existence of compelling legitimate reasons to proceed with the processing. You also have the right to object to processing where personal data is used for direct marketing purposes (so-called soft spam). |
|
Revocation of consent (where the legal basis of the processing is the consent of the interested party) |
You have the right to revoke the consent expressed at any time, without prejudice to the lawfulness of the processing based on the consent expressed before the revocation. |
|
Submit a complaint |
You have the right to lodge a complaint with the Supervisory Authority or with the Guarantor for the Protection of Personal Data. For more information on the right to lodge a complaint with the Authority, you can visit the following web page: https://goo.gl/GLbTN9 |
7. Contact the Owner
The user can exercise their rights, or request information from the Company by sending an email to the address privacy@barovier.com.
8. Cookie Policy
Cookies are tracking tools that consist of small portions of data stored within the user's browser and used by the Company for various purposes. For further details, please refer to the Cookie Policy.
***
Barovier reserves the right to modify or update this information, also to comply with new obligations imposed by current laws or for technical needs.
Last modified: September 2023