Privacy policy

This Privacy Policy aims at providing details of the processing, and related methods of use, of personal data referred to users/visitors of this website that can be reached at the address www.damico.it.

Web users and visitors are recommended to read carefully this Privacy Policy before sending any personal information and/or filling in any electronic form posted on this website.

This information is given in accordance with European Union e Privacy law and REG. UE n 2016/679 (GDPR), art. 13.

Data controller

The Data controller is D&D ITALIA S.P.A., with registered office in Naples at Gramsci Street n.5, operational headquarters in Pontecagnano Faiano (SA) at Irno Street (hereafter referred to as the Data Controller)

The updated list of data processors, affiliates and associated companies is available by sending a request at privacyd&ditalia@damico.it

Scope of this policy

This Privacy Policy covers this web site only and no other websites that are not owned by D&D ITALIA S.P.A and accessed via the link navigation.

Policy and information notice

This site has been designed with the main function of providing information on the activities of the companies of D&D ITALIA S.P.A. Società Benefit. Therefore, in most cases, the collection of the user's personal data is not required.

In certain instances, such as the "newsletter" section and in order to allow the transmission of our newsletter, the interested user is required to fill out a data collection form.

In these cases, the user is always free to provide his/her own data and an information privacy notice specifying the use of data and other information required by law is provided.

We recommend to read these notices before providing the data.

In addition, should it be necessary in limited cases to collect personal information for other purposes, this will be clearly shown in the information privacy notices required by law, in order to enable transparency and user awareness.

These information notices aim to define limits and methods of personal data processing of each service, according to which the visitor can freely express his consent (if necessary) and eventually allow the collection of data and its subsequent use.

Data collected, data collection methods and processing purposes

D&D ITALIA S.p.A. may collect the following categories of Personal Data:

• Contact details such as first name, last name, tax code, company name, VAT number, address, telephone number, e-mail address and any other data released spontaneously by the User within the Site to proceed with online orders and to register;
• Demographic and interest data means data describing demographic characteristics or habits, such as date of birth, age or age group, gender, geographical origin (postal code/ZIP code), preferred products, hobbies, etc.;
• Payment data and information regarding the purchase made and the payment (e.g. credit/debit card number, IBAN) that are processed only for what strictly necessary to process the order placed on the e-shop. We also point out that our e-shop offers various payment methods (for example, credit card, Nexi, Paypal) and for the execution of payment we collect the data that is communicated by the user. We also receive additional data from external payment management services and solvency information services. We transmit to our payment management services only those data that are necessary for the payment. Payment details may be, for example: preferred means of payment; billing addresses; IBAN and BIC, account number and bank code; credit card details; credit card details. Additional data are also included in the payment data in relation to the payment process and the solvency check. This involves, for example, data that external service providers use for identification, such as your Paypal ID (if you pay via Paypal). Please note that platforms such as Nexi and Paypal that manage the payment service use, as independent data controllers, an automated system for controlling fraud prevention and combating. For more information see the privacy policy of Nexi and Paypal.
• Use of the website and therefore information on how the website is used or communications of D&D ITALIA S.p.A. Società Benefit and of the group companies including information collected through cookies, are forwarded. This data (such as, but not limited to, IP addresses, the browser type used, the operating system, the domain name and the websites addresses from which you accessed or exited, the visited pages information by users within the site, the access time, the single page stay, the internal path analysis and other parameters related to the operating system and the computer environment of the user) are collected and used exclusively in an aggregate and not immediately identifiable; they could be used to ascertain responsibility in case of hypothetical computer crimes against the site or at the request of the public authority. Regarding the installation of cookies by this website, please refer to the Cookie Policy https://www.damico.it/cookie-policy.
• Plug-ins related to social media features use on this Site (Facebook, Youtube, Instagram, Linkedin, Twitter, etc.) that do not involve the automatic acquisition by the Company of personal data of the User. However, if at the time of social plug-in the User logs into his personal account, the social network can associate the visit of our web pages to his account. Data transmissions between the social network and the User's system and interactions on the platform are exclusively subject to the data protection rules of the respective social network. Therefore, the User is invited to consult the social network privacy policies before using the plug-in. The social plug-in remains active until the User deactivates it or deletes the related cookies.
• Data provided by third parties (e.g.: postal service companies, couriers, data entry companies).

We may collect and process data:

• through website registration;
• by filling in the contract forms on the site, sending traditional or electronic mail, making comments or requests via social networks;
• by means of computer systems and software procedures for the operation of the site, which acquire certain data during their normal operation, the transmission of which is implicit in the use of internet communication protocols;
• if the site is accessed and registered,
• if online purchases are made.

The Personal Data required for the registration to the Sites or identified with an asterisk in the forms related to the various activities are necessary to allow the registration, as well as the data required to allow you to use the functionality of purchase and/ or booking and/ or order online or for the provision of the specific service requested. Unnecessary Personal Data is not identified with an asterisk in the various forms and may not be returned without any consequence.

The legal basis of the processing is the execution of the contract or other activities related to the conclusion of the same (art. 6, para. 1, lett. b) GDPR) and, specifically, D&D ITALIA S.p.A. Società Benefit may process your personal data for one or more of the following purposes and on the basis of the legal basis from time to time indicated.

Cookies (referral back)

Regarding the installation of cookies by this website, please refer to the Cookie policy https://www.damico.it/cookie-policy

Methods of processing and storage of data

The processing of personal data is mainly carried out using electronic procedures and media for the time strictly necessary to achieve the purposes for which the data were collected.

All data processed, are stored digitally in the manner, under the conditions and for the sole purposes of this Privacy Policy, in the database with hosting at the cloud of Amazon (AWS-Amazon Web Services), and servers located within the EU (Ireland) exclusively for the time of the intended purposes and in terms of law. The user, however, has the right to obtain the deletion of their data in the presence of legitimate reasons, as specified in the paragraph "personal data protection rights ".

Data retention duration

The personal data of the Users are kept for the time strictly necessary for the pursuit of the purposes indicated above, in compliance with the civil and tax retention obligations and limits provided by law. In any case, after the expiration of the ten-year limitation period (art. 2946 of the Italian Civil Code; art. 8, L. 27 luglio 2000 n. 212) and the - also ten-year - mandatory retention of accounting records (art. 2220 of the Italian Civil Code), failing the need for the Data Controller to keep the information in view of possible tax checks, the data are destroyed, deleted or transformed in a form that is not intelligible, provided that there are no additional requirements justifying their storage (e.g. settlement of legal disputes).

For the purposes of profiling or marketing to which the interested party has consented by ticking the flag provided in the respective boxes of the forms on the site, The personal and contact data and the details of the goods or services requested will be kept for a period of 12 months for profiling purposes and 24 months for marketing purposes. After which the Data Controller reserves the right to send you a reminder to ask for confirmation of the consent given. In case of inertia, the consent will be automatically extended.

In relation to the registration of the site, personal data will be processed until the account is deactivated by the User.

Optional nature of the provision of data

The provision of personal data requested from the interested party - unless otherwise specified - is optional, however their failure to provide may make it impossible to obtain what is requested or to perform the indicated activity.

Data processing Place

The treatments connected to the web services of this site take place at D&D Italia Spa, as well as at third-party companies that perform instrumental activities on behalf of the owner. Personal data are handled only by technical staff of such companies, specifically in charge of the processing, or by any persons in charge of occasional maintenance operations.

Data circulation scope and data dissemination

Personal data acquired through this website are accessed only by persons acting on behalf of the Owner, specifically designated as responsible for the management of the requested service; the same data are not disseminated.

User's personal data may also be accessed by the other companies of the D&D ITALIA S.p.A. Società Benefit, meaning all the companies directly or indirectly controlled by D&D Invest S.r.l. for intragroup agreements and connection with the needs and activities carried out within it, as well as external consultants and providers such as: cloud service providers, IT providers or hosting providers, tax and legal consultants, etc. In addition, where required, Your Personal Data and information about transactions carried out and other activities carried out through the Sites can be made available to the authority and the judicial police in compliance with procedural rules or other administrations of the State where expressly requested.

User's personal data may be shared with our instrumental services suppliers to the Owner rendered services (e.g. forwarding companies, site maintenance and technical management companies, mail marketing agencies, etc.). These latter parties will act as data controllers, on the basis of specific agreements concluded pursuant to. Art. 28 GDPR.

More detailed information on privacy roles names can be requested by writing to privacyd&ditalia@damico.it

SAFETY AND SECURITY MEASURES

D&D ITALIA S.p.A. Società Benefit adopts adequate security measures to ensure the protection, security, integrity and accessibility of personal data. All personal data collected is stored on secure servers (or suitable stored hard copies) accessible and usable according to our standards and our security policies.

Personal data protection rights

The subjects to whom the personal data refer, according to art. 15 and ss. of the GDPR, have at any time the right to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or, request its integration or updating, or rectification.

In addition, you have the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing.

Requests should be addressed to privacyd&ditalia@damico.it

Moreover, in case of failure or partial response of the Data Controller to the aforementioned requests, the User will have the right to lodge a complaint with the Guarantor for the protection of personal data or recourse to the competent judicial authority, in the terms and in the manner provided by EU Regulation 2016/679 (GDPR) and by the national legislation in force.

How to lodge complaints

Any complaints may be submitted to the competent Supervisory Authorities:

Personal Data Protection Guarantor
Piazza di Monte Citorio n. 121
00186 Rome
Italy
Fax: (+39) 06.69677.3785
Tel: (+39) 06.696771
E-mail: garante@gpdp.it
Certified mail: protocollo@pec.gpdp.it

Policy changes

The possible entry into force of new sectoral regulations, as well as the constant user services examination and updating, may entail the need to vary the methods of processing personal data. It is therefore possible that our policy changes over time and we invite the visitor to periodically consult this page. For this purpose the policy document highlights the update date.

Date of writing: 15/05/2018

Last Updated: 21/07/2021