Information concerning the processing of personal data pursuant to Articles 13 and 14 of the GDPR EU 679/2016 (“GDPR”)

The GDPR EU 679/2016 ensures that personal data are processed respecting fundamental rights and freedoms and the dignity of the data subject, especially the confidentiality and the right to the protection of data.

Pursuant to Articles 13 and 14 of the GDPR, Immagine Ottica s.n.c. ("Data Controller" or "Immagine Ottica") provides this information to describe the processing of personal data collected through the website you can find at https://www.immagineottica.it (“Website”), the purposes and the methods of the processing and the security measures taken to ensure confidentiality, in compliance with the applicable law.

Usually, Immagine Ottica processes personal data when you browse on the website or when you send requests by email.

In some sections of the website, the user shall insert the purchaser’s data, who instructs the user to fill in, on his/her behalf, the form containing personal data. User and Customer’s data will be used by the Data Collector only to fulfil the request sent on behalf of the Customer and/or the User.

1. Data Controller

Immagine Ottica s.n.c., with registered office in Piazza S.Pertini 8, Camucia (AR), 52044, Italy, is the data controller.

You can contact the Data Protection Officer sending an email to [email protected] to receive information on the data processing.

2. Types of processed data

Immagine Ottica can collect the following types of data:

2.1 Requests relating to the services provided in the section CONTACTS:

when you fill in the forms you can find in the “Contacts” section, the User and/or the Customer will be asked to provide some personal data, for example: name, surname, mail address, shop of reference (if present), order data, photos to recommend a building, the object of the request or of the suggestion. These data are necessary to answer to the specific request of the User and/or the Customer, which, depending on the form, may concern:

- information on the use and maintenance of the product and/or, in general, information on the purchase made in our point of sale;

- information on the promotions you can find in our point of sale;

- suggestions to improve the website;

The data marked with an asterisk are required. In case they are missing or incorrect, the Data Collector cannot consider your request. As for the data not marked with an asterisk, even if they can be useful to facilitate the relationship with the Data Collector, you may decide not to provide them and your choice shall not affect the elaboration of the User/Customer’s request.

2.2 Browsing data

The technologies and procedures responsible for the functioning of the website collect, during their normal functioning, some personal data and their transmission is implied in the use of internet communication protocols.

These data are not collected to be associated to specific subjects but, given their nature, they could allow to identify users.

This category includes IP addresses or domain names of Users’ computers, URI (Uniform Resource Identifier) addresses of the requested sources, the time of the request, the method used to submit the request to the server, the dimension of the file obtained in answer, the numerical code which indicates the status of the answer given by the server (OK, error) and other parameters related to the operative system and to the informatics environment of the user.

These data are used only to collect statistical anonymous information on the website use and to control its proper functioning and they are delated right after the processing.

2.3 Cookies

Cookies collect several data, among those there are data that can allow the identification of a specific subject. For the processing of data through cookies, please read the policy available at this link.

3. Methods of collection

Data are collected directly by the specific subjects when they browse on the website, send email or communication to Immagine Ottica, also through the contact section (“Contacts”).

4. Purposes and legal basis of data processing; storage period

4.1. To answer to requests received through the communication channels published on the website (Contacts section).

The legal basis of this processing is the legitimate interest of Immagine Ottica to communicate with the customer and to answer to requests of potential customers, suppliers or other specific subjects. The storage period corresponds to the period necessary to process the request. This period could be longer when the data is subject of another processing. The legal basis of this processing is the execution of contractual obligations.

4.2. To prevent and control illicit behaviors and to protect and enforce personal rights.

Immagine Ottica could use these data to prevent or pursue illicit behaviors or violations of industrial/intellectual property rights or computer crimes. The legal basis of this processing is the legitimate interest of Immagine Ottica, as data controller of the processing. The storage period corresponds to the period reasonably necessary to enforce Immagine Ottica rights when Immagine Ottica learn about the illicit behavior or its potential perpetration.

In relation to the aforementioned purposes, the processing of personal data is made using manual, informatic and telematic tools with logic strictly related to the aforementioned purposes and, in any case, in order to ensure the security and confidentiality of the data in compliance with the law.

5. The rights of the subject.

User and Customer can address Immagine Ottica to enforce their right as referred to in Article 15 and the following of the GDPR and, specifically, ask to access his/her personal data, know about their existence, ask their rectification or erasure, limit or object such processing and ask the portability of the data. The User and Customer can also withdraw consent at any moment and this will not affect the legality of the processing based on the consent given before the withdrawal.

When exercising the right to access, the User and the Customer can require information about who processes his/her data, to which purpose and for how long, who the data are shared with and if they are transferred to third countries. They can also ask not to be subjected to automatized processing such as profilation.

User and Customer have the right to lodge a complaint with a supervisory authority and to ask the Data Controller information about the people in charge of the processing and the subject authorized by the Data controller to process data.

The User and the Customer can exercise their rights addressing Immagine Ottica (to the contacts indicated before or sending an email to [email protected]).

6. Where are data processed? Data transfer

The data of the processing are stored at Immagine Ottica in Italy.

Data can be stored also in the European Union by Immagine Ottica suppliers to whom the data are transmitted based on the subscription of contracts in accordance with Article 28 of the GDPR with contractual clauses in accordance with the decision of the European Commission relative to the protection clauses or by virtue of an adequacy decision of the European commission on the level of protection of data (Privacy Shield). The updated list of third suppliers, who operate as Data processors pursuant to Article 28 of the GDPR, is available upon request to [email protected].

7. Sharing of data – Data recipients

With the internal divisions and the group companies of Immagine Ottica. In accordance with Immagine Ottica policy, data can be communicated by Immagine Ottica s.n.c. from one internal division to another and to the group companies.

With subjects who can learn about the data, as people in charge to whom the Data Controller entrusts some processing activities relating to the purposes mentioned in the previous paragraph 4 (for example, carriers, shipping agents, consultants, companies that are in charge of sending communications, verifying customer satisfaction, conducting surveys etc.).

With subjects who can learn about your data as independent data controller of the processing to whom the Data Controller communicates data in order to execute a request of the specific subject.

With the service provider. Immagine Ottica uses third parties services (cloud, content management system, analysis, hosting, browsing functionalities) which operate as in charge of the processing according to arrangements in compliance with Article 28 of the GDPR. When these providers operate from a third country, they do it based on standard contractual clauses in accordance with the decision of the European Commission relative to the protection clauses or by virtue of an adequacy decision of the European Commission on the level of protection of data (Privacy Shield). These subjects acquire only those personal data necessary to execute their functions and they can use them only to perform those services for us or to fulfill their legal obligations. The updated list of third suppliers, which operate as in charge of the processing pursuant to Article 28 of the GDPR, is available upon request to [email protected].

With judicial or administrative authorities. When permitted or requested by the law, Immagine Ottica can share data requested by the judicial authority, by an administrative or governmental body in order to protect or exercise our right or those of third parties, or to comply with legal obligations.

8. Changes to the information

This information can be modified from time to time to reflect legal and/or technological changes, changes in the collection or use of data, commercial initiatives or to add new functionalities. In case of changes, we will notify the User and the Customer:

  • by mean of a notice published on the website homepage and/or
  • by mean of any other action Immagine Ottica will consider appropriate.

We invite the User and the Customer to consult our website periodically for updates. The possible changes will be effective starting from the date of their publishing, and the browsing on the website will be considered as an acceptance of these changes.

Latest update: 3nd July 2018