Privacy policy




INTRODUCTION:

Nunzio Alfonso S.r.l. uses the collected data to enhance your experience with us and, with your consent, tailor offers to you, save you time, and make your purchases even more convenient.

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ("GENERAL DATA PROTECTION REGULATION")

  1. INTRODUCTION: NUNZIO ALFONSO S.R.L.'S ROLE REGARDING THE PROCESSING OF PERSONAL DATA
  2. IDENTITY AND CONTACT DETAILS OF NUNZIO ALFONSO S.R.L. AS DATA CONTROLLER
  3. CONTACT DETAILS
  4. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR THE PURPOSES OF ACCESS AND REGISTRATION TO THE WEBSITE, FULFILLMENT OF THE PURCHASE CONTRACT AND/OR EXECUTION OF PRE-CONTRACTUAL MEASURES AT THE DATA SUBJECT'S REQUEST
  5. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR GENERAL MARKETING PURPOSES
  6. PROCESSING OF EMAIL ADDRESS BY NUNZIO ALFONSO S.R.L. AND FOR SOFT-SPAM PURPOSES
  7. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR PROFILING FOR MARKETING PURPOSES
  8. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR CUSTOMER SUPPORT PURPOSES
  9. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR PREVENTION OF IMPROPER USE OF WEBSITE SERVICES, INCLUDING MONITORING
  10. PROCESSING OF PERSONAL DATA BY NUNZIO ALFONSO S.R.L. FOR ADMINISTRATIVE, ACCOUNTING AND TAX PURPOSES
  11. PROCESSING OF PERSONAL DATA BY NUNZIO ALFONSO S.R.L. TO ENABLE THE EXERCISE OF RIGHTS BY THE USER
  12. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR ASCERTAINMENT, EXERCISE OR DEFENSE OF A RIGHT
  13. CATEGORIES OF ENTITIES TO WHOM NUNZIO ALFONSO S.R.L. COMMUNICATES THE USER'S PERSONAL DATA (RECIPIENTS)
  14. RIGHT TO OBJECT
  15. RIGHT OF ACCESS
  16. RIGHT TO RECTIFICATION
  17. RIGHT TO ERASURE
  18. RIGHT TO RESTRICTION OF PROCESSING
  19. RIGHT TO DATA PORTABILITY
  20. TIMELINES AND PROCEDURES FOR RESPONDING TO THE DATA SUBJECT'S EXERCISE OF RIGHTS
  21. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

1. NUNZIO ALFONSO S.R.L.'S ROLE REGARDING THE PROCESSING OF PERSONAL DATA

The following information is provided pursuant to Article 13 of EU Regulation 2016/679 ("Regulation") by Nunzio Alfonso S.r.l., regarding the personal data of users collected when accessing and/or registering on the website www.alfonsoforni.com ("Website") and/or making a purchase on the Website and/or requesting the Website's assistance and customer care services (collectively, the "Website Services").

Nunzio Alfonso S.r.l. operates on the Website as the provider of the registration service and the sales service.

The user's personal data is therefore processed by Nunzio Alfonso S.r.l.

The following information is provided pursuant to Article 13 of the Regulation, with reference to Nunzio Alfonso S.r.l..

As the provider of the registration service, as a seller in its own right, and as the entity exclusively responsible for identifying and implementing the technical and organizational measures governing the processing of personal data residing on the Platform, Nunzio Alfonso S.r.l. assumes the role of "data controller" of the user's personal data, pursuant to Article 4.7) of the Regulation, for the purposes outlined in sections 4, 5, 6, 7, 8, 9, 10, 11, and 12 of this information.

2. IDENTITY AND CONTACT DETAILS OF NUNZIO ALFONSO S.R.L. AS DATA CONTROLLER

Nunzio Alfonso S.r.l., with registered office at Zona Industriale Giammoro, 98042 Pace del Mela (ME), VAT/tax code IT03655770836 registered with the Companies Register of Messina under number ME-252028, email info@nunzioalfonso.it, is the data controller of the personal data of users collected when using the Website Services, including access and/or registration on the Website, making a purchase on the Website, and requesting the assistance and customer care services of the Website.

Nunzio Alfonso S.r.l. will process the user's personal data as the data controller for the purposes described in the following sections of this notice:

5 PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR GENERAL MARKETING PURPOSES

6 PROCESSING OF EMAIL ADDRESS BY NUNZIO ALFONSO S.R.L. AND FOR SOFT-SPAM PURPOSES

7 PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR PROFILING FOR MARKETING PURPOSES

8 PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR CUSTOMER SUPPORT PURPOSES

9 PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR PREVENTION OF IMPROPER USE OF WEBSITE SERVICES, INCLUDING MONITORING

10 PROCESSING OF PERSONAL DATA BY NUNZIO ALFONSO S.R.L. FOR ADMINISTRATIVE, ACCOUNTING AND TAX PURPOSES

3. CONTACT DETAILS

  • Email address: info@nunzioalfonso.it
  • Phone number: +39 3791579517
  • Postal address: Zona Industriale Giammoro - 98042 Pace del Mela (ME)

4. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR THE PURPOSES OF ACCESS AND REGISTRATION TO THE WEBSITE, FULFILLMENT OF THE PURCHASE CONTRACT AND/OR EXECUTION OF PRE-CONTRACTUAL MEASURES AT THE DATA SUBJECT'S REQUEST

NUNZIO ALFONSO S.R.L. will process the user's personal data to:

  • Allow registration on the Website and use of services reserved for registered users, including the ability to make online purchases through the Website.
  • Allow the conclusion of the purchase contract through the Website and the correct execution of the obligations arising from such contract, including, by way of example, delivery and payment, also online, of the purchased products and/or services;
  • Execute requests sent by the user.

The legal basis for this processing is the performance of the contract or, depending on the case, the execution of pre-contractual measures taken at the request of the data subject (Article 6.1.b) of the Regulation).

For this purpose, NUNZIO ALFONSO S.R.L. will process the user's data for the time strictly necessary for the performance of each processing activity (e.g., registration data will be processed until the account is closed, taking into account the technical time required for the same; data necessary for the execution of the purchase contract will be processed until the product is delivered or, in case of non-delivery, until the contract is resolved), provided that, after this period, NUNZIO ALFONSO S.R.L. may retain the data for the purposes and for the maximum retention periods specified in sections 8, 9, 10, 11, and 12 of this notice and/or, in any case, as provided for by the Regulation and/or by law.

5. PROCESSING OF DATA BY NUNZIO ALFONSO S.R.L. FOR GENERAL MARKETING PURPOSES

With the express consent of the user, NUNZIO ALFONSO S.R.L. will process the user's personal data to send informational and promotional communications, including newsletters, discount vouchers, and special offers, related to its own and/or third-party products and/or services, as well as for direct sales purposes and market research, by email and by postal service.

The legal basis for this processing is the express consent of the user (Article 6.1.a) of the Regulation).

The user may revoke the consent given at any time and/or object, at any time, to the processing of his/her data for marketing purposes:

  • Contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it
  • Using the specific link provided in each promotional communication sent by NUNZIO ALFONSO S.R.L.;
  • Through the account section.

The provision of data for general marketing purposes is optional: there is no legal or contractual obligation on the user to provide such data for this purpose and/or to give consent to the processing of his/her personal data for this purpose.

For general marketing purposes, NUNZIO ALFONSO S.R.L. will process the user's data until the consent is revoked and/or the right to object is exercised and, in any case, no later than four years from the data collection, reserving the right, before the expiry of this period, to ask the user to renew the consent and/or update the data.

6. PROCESSING OF EMAIL ADDRESS BY NUNZIO ALFONSO S.R.L. FOR SOFT-SPAM PURPOSES

NUNZIO ALFONSO S.R.L. will process the user's email address provided in the context of the purchase of a product and/or service offered and sold on the Website directly by NUNZIO ALFONSO S.R.L., to enable NUNZIO ALFONSO S.R.L. to carry out direct sales of similar products or services (and therefore send promotional communications by email to the user regarding such products and/or services) without the need for the express and prior consent of the data subject, as provided for by Article 130, IV paragraph, Privacy Code, provided that the user does not exercise the right to object as indicated below (so-called soft-spam).

The legal basis for this processing is Article 130, IV paragraph, of the Privacy Code, which expressly allows the processing in question.

The user can object to receiving soft-spam communications:

  • Contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it
  • Using the specific link provided in each promotional communication sent by NUNZIO ALFONSO S.R.L..

For soft-spam purposes, NUNZIO ALFONSO S.R.L. will process the user's data until the right to object is exercised and, in any case, no later than 4 years from the collection, except for purchase details which will be retained and processed for soft-spam purposes for a period of 24 months from the collection.

The provision of data for the purpose in question is optional: there is no legal or contractual obligation on the user to provide such data for this purpose. The failure to provide data for soft-spam purposes or the objection to such processing will not have any consequences on the user's ability to register on the Website and/or make purchases on it.

The user is hereby informed:

  • for soft-spam purposes, NUNZIO ALFONSO S.R.L. uses personal data initially collected for other purposes, specifically for registration on the Website and/or conclusion and/or execution of the purchase contract through the Website; this additional processing is permitted, as it is based on Article 130, IV paragraph, of the Privacy Code;
  • in case the user objects to the processing of his/her data for soft-spam purposes, his/her data will no longer be processed by NUNZIO ALFONSO S.R.L. for this purpose and will be retained by NUNZIO ALFONSO S.R.L. only if there is another legal basis (such as the establishment, exercise or defense of a right in judicial or administrative proceedings).

7. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. FOR MARKETING PROFILING PURPOSES

With the explicit consent of the user, NUNZIO ALFONSO S.R.L. will process users' personal data, automatically, for:

  • monitoring and tracking user behavior on the Site, collecting and recording browsing data (e.g., visited pages, product categories viewed, whether the user has made a purchase or not, abandoned carts, access device) and purchase data (e.g., type of product purchased, purchase frequency, amounts spent, payment methods);
  • analyzing and processing such data, together with other user-related information (such as, for example, gender, order status, postal code, date of birth, IP address), in order to identify correlations between user behaviors and place them in various "clusters" or sets of customer types that may have common characteristics;
  • sending personalized offers via email or mail, and/or displaying them on the Site to users, tailored to the cluster in which the user has been placed and, therefore, presumed to be of specific interest to them.

All stages of processing, including the final decision regarding the promotional communication to be sent or displayed to the user based on the cluster(s) to which they belong, take place entirely automatically, without any human intervention, based on an algorithm whose parameters have been previously set by NUNZIO ALFONSO S.R.L.

The decision based solely on automated processing, including profiling, produces legal effects concerning the data subject, i.e., the limitation of their freedom of choice, and is permitted by the exemption clause under Article 22.2.a) of the GDPR, as it is necessary for the performance of the contract between the data controller and the data subject and/or otherwise connected to such contract and its validity and effectiveness.

The user has the right, at any time, to:

  • request human intervention from NUNZIO ALFONSO S.R.L.;
  • express their opinion;
  • challenge the decision made by NUNZIO ALFONSO S.R.L. (e.g., inclusion in a specific cluster).

To exercise this right, the user can:

  • contact NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it

The legal basis for this processing is the explicit consent of the data subject (Article 21.1.c) of the Regulation).

The user may revoke their consent at any time and/or object, at any time, to the processing of their data for marketing profiling purposes:

  • by contacting NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it
  • via the appropriate link included in every promotional communication sent by NUNZIO ALFONSO S.R.L.;
  • via the account section.

For the purpose of marketing profiling, NUNZIO ALFONSO S.R.L. will process the user's data until the consent is revoked and/or the right to object is exercised, and in any case, for no more than 12 months from the collection.

The provision of data for marketing profiling purposes is optional: there is no legal or contractual obligation for the user to provide such data for this purpose and/or to give consent to the processing of their data for this purpose.

The user is hereby informed of the following:

  • users, with their consent, are grouped based on characteristics identified by NUNZIO ALFONSO S.R.L. and for these reasons inserted into specific clusters. Clusters are created based on both individual characteristics related to the Site Service used by users (e.g., pages visited, products viewed, frequency and type of purchases) and other user information (e.g., gender, age group, order status, device used, postal code, profession, interests). NUNZIO ALFONSO S.R.L. then sends or displays "targeted" promotional communications to users, as they correspond to the user's profile that has been created and automatically matched to the cluster in which the user has been placed. Each user can be included in more than one cluster. Clusters can be intersected. As a result of this processing activity, therefore, the user receives promotional communications with different content from those received by another user, or the user views recommended or suggested products on the Site different from those viewed by another user, or in a different order from that of another user;
  • for the purpose of marketing profiling, NUNZIO ALFONSO S.R.L. also uses personal data initially collected for other purposes, namely for registration on the Site and/or for the conclusion and/or execution of the online purchase contract and/or for browsing the Site; this further processing is permitted, as it is based on the consent of the data subject;
  • the revocation of consent does not affect the lawfulness of processing based on consent before its revocation;
  • in the event that the user objects to the processing of their data for marketing profiling purposes and/or revokes consent to processing for marketing profiling purposes, their data will no longer be processed by NUNZIO ALFONSO S.R.L. for this purpose and will be kept by NUNZIO ALFONSO S.R.L. only if there is another legal basis (such as, for example, the establishment, exercise, or defense of a legal claim in court or administrative proceedings, or compliance with a legal obligation);
  • failure to provide data for marketing profiling purposes and/or failure to give consent to such processing and/or revocation of such consent and/or exercise of the right to object shall not affect the user's ability to register on the Site and/or make purchases thereon.

8. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. FOR ASSISTANCE/CUSTOMER CARE PURPOSES

NUNZIO ALFONSO S.R.L. will process user data for general assistance and customer care activities, and therefore to respond to user inquiries or to respond to complaints, reports, disputes, as well as to allow the user, if desired, to leave a review.

The legal basis for this processing is the execution of pre-contractual measures adopted at the request of the data subject (Article 6.1.b, last paragraph, of the Regulation) or, as appropriate, the legitimate interest of NUNZIO ALFONSO S.R.L. (Article 6.1.f) of the Regulation).

It is a legitimate interest of NUNZIO ALFONSO S.R.L. to respond to requests for information and/or reviews and/or to reports and/or complaints of Site users (to which, moreover, NUNZIO ALFONSO S.R.L. is required to respond, also based on the legislation under the Consumer Code). This legitimate interest of NUNZIO ALFONSO S.R.L. also coincides with the legitimate interest of the Site users themselves and, generally, of the community, who also have a legitimate interest in ensuring that fraudulent activities are deterred and identified when they occur; it can therefore be considered that users, within the scope of their relationship with NUNZIO ALFONSO S.R.L., reasonably expect their personal data to be used by NUNZIO ALFONSO S.R.L. for the purpose of assisting and providing customer care.

The legitimate interest of NUNZIO ALFONSO S.R.L. thus identified may therefore be considered to outweigh the fundamental rights and freedoms of the data subject, also in view of such reasonable expectations and the existing relationship between the data subject and NUNZIO ALFONSO S.R.L., as well as considering the nature of the data processed and the coinciding interest of the data subjects themselves.

The user has, in any case, the right to object, at any time, for reasons related to their particular situation, to the processing of personal data concerning them for the purpose in question (i.e., assistance and customer care).

To exercise this right, the user can:

  • contact NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it

In the event of exercising the right to object to the processing of data for assistance/customer care purposes, NUNZIO ALFONSO S.R.L. refrains from further processing the personal data of users for this purpose, unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of a legal claim in court.

The provision of personal data for the purpose in question is optional: there is no legal or contractual obligation to provide such data for this purpose; however, given the purpose of the processing, failure to provide the data and/or exercise the right to object may make it impossible to respond to user requests and/or reports and/or complaints and/or disputes if responding to such requests involves the processing of the user's personal data.

For this purpose, NUNZIO ALFONSO S.R.L. will process the user's data for the time necessary to carry out the requested activities, and therefore, in particular, for the time necessary to provide the information requested by the user or to respond to complaints and/or reports and/or disputes submitted by the user or to publish the review provided by the user.

9. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. FOR THE PURPOSE OF PREVENTING MISUSE OF SITE SERVICES, INCLUDING MONITORING

NUNZIO ALFONSO S.R.L. will process users' personal data in order to prevent the improper use of its services, particularly the failure to pay for purchases made on the Site, including through monitoring users' behavior. This processing will take place through an automated system that operates based on the rules set by NUNZIO ALFONSO S.R.L. and that takes into account the user's payment history for purchases made on the Site.

The legal basis for this processing is the legitimate interest of NUNZIO ALFONSO S.R.L. (Article 6.1.f) of the Regulation).

The user has, in any case, the right to object, at any time, for reasons related to their particular situation, to the processing of personal data concerning them for the purpose in question (i.e., fraud prevention).

To exercise this right, the user can contact NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it

All stages of processing, including the analysis of the system to decide whether a user is a good or bad payer and the decision regarding the resolution of the purchase contract, in the latter case, take place entirely automatically, without any human intervention, based on an algorithm whose parameters have been previously set by NUNZIO ALFONSO S.R.L. and which provides for the resolution of all contracts relating to subjects identified by the system as "bad payers".

The decision based solely on automated processing, including profiling, produces legal effects concerning the data subject, i.e., the resolution of the purchase contract, and is permitted by the exemption clause under Article 22.2.a) of the GDPR, as it is necessary for the performance of the contract between the data controller and the data subject and/or otherwise connected to such contract and its validity and effectiveness.

The user has, therefore, the right, at any time, to:

  • request human intervention from NUNZIO ALFONSO S.R.L.;
  • express their opinion;
  • challenge the decision made by NUNZIO ALFONSO S.R.L..

To exercise these rights, the user can contact NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it

For the purpose of preventing the improper use of Site Services, NUNZIO ALFONSO S.R.L. will process users' personal data for 24 months from collection.

Regarding the legitimate interest of NUNZIO ALFONSO S.R.L., the system and logic used to make the decision regarding the resolution of the purchase contract, the user is informed as follows:

  • it is a legitimate interest of NUNZIO ALFONSO S.R.L. to protect itself from the risk of fraud or non-payment by users who fail to fulfill their obligations under the purchase contract, as well as to identify such users through an automated system;
  • the user is always entitled to exercise their rights to human intervention, to express their opinion, and to challenge the decision made by NUNZIO ALFONSO S.R.L., as well as to object, for reasons related to their particular situation, to the processing of their personal data for the purpose in question.

10. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. FOR ADMINISTRATIVE, ACCOUNTING, AND TAX PURPOSES

NUNZIO ALFONSO S.R.L. will process users' data for the purpose of fulfilling administrative, accounting, and tax obligations related to the provision of Site Services and/or the purchase contract concluded through the Site, such as, for example, keeping accounting records and issuing sales invoices.

The legal basis for this processing is the fulfillment of legal obligations to which NUNZIO ALFONSO S.R.L. is subject.

The provision of data for the purpose in question is mandatory because their processing is necessary to allow NUNZIO ALFONSO S.R.L. to comply with legal obligations concerning them. The refusal to provide data for this purpose will make it impossible for the user to use the Site Services and, in particular, to conclude the purchase contract through the Site.

For this purpose, NUNZIO ALFONSO S.R.L. will process the user's data until the expiration of the legal deadlines for the performance of each administrative, accounting, and tax obligation and/or for the retention periods provided by law for the preservation of related documentation.

11. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. OR THIRD-PARTY SELLER TO ENABLE THE USER TO EXERCISE RIGHTS

NUNZIO ALFONSO S.R.L. will process users' data for the purpose of:

  • responding to requests to exercise the right of withdrawal and/or requests to exercise the legal warranty of conformity and/or other rights arising from the purchase contract concluded on the Site and/or provided by law in relation to such contract and/or, as far as NUNZIO ALFONSO S.R.L. is concerned, in relation to the provision of Site Services;
  • carrying out activities that are necessary as a consequence of exercising such rights and to proceed, if necessary, with the related refunds;
  • receiving and responding to requests to exercise rights regarding personal data protection provided by the Regulation and performing all consequent activities.

The legal basis for this processing is the fulfillment of legal obligations to which NUNZIO ALFONSO S.R.L. is subject.

The provision of data for the purpose in question is mandatory because their processing is necessary to allow NUNZIO ALFONSO S.R.L. to comply with legal obligations as well as for the user to exercise the rights attributed to them by law or contract. The refusal to provide data for this purpose will make it impossible for the user to exercise such rights.

For this purpose, NUNZIO ALFONSO S.R.L. will process the data until the expiration of the legal deadlines for exercising the right (statute of limitations and/or forfeiture) or, in the case of exercising such rights, for the time necessary for the management and closure of the case; in the case of exercising the rights provided by the Regulation, the data will be processed until the confirmation, by the data controller, of having complied with the request or until the fulfillment itself, depending on which of the two events occurs last.

12. DATA PROCESSING BY NUNZIO ALFONSO S.R.L. FOR THE PURPOSE OF ASCERTAINMENT, EXERCISE, OR DEFENSE OF A RIGHT

NUNZIO ALFONSO S.R.L. will process users' data for the ascertainment, exercise, or defense of a right in all competent venues.

The legal basis for this processing is the legitimate interest (Art. 6.1.f) of the Regulation).

It constitutes a legitimate interest of the data controller to resort to means of redress to ensure compliance with its contractual rights or to demonstrate compliance with the obligations arising from the contract with the data subject or imposed on the data controller by law. This legitimate interest is based on the constitutionally protected right to defense. It can therefore be considered to prevail over the fundamental rights and freedoms of the data subject, also in light of their reasonable expectations.

The user has, in any case, the right to object, at any time, for reasons related to their particular situation, to the processing of personal data concerning them for the purpose in question (i.e., defense of a right/legal purposes).

To exercise this right, the user can contact NUNZIO ALFONSO S.R.L. at the following address: info@nunzioalfonso.it

13. CATEGORIES OF ENTITIES TO WHICH NUNZIO ALFONSO S.R.L. COMMUNICATES THE USER'S PERSONAL DATA (RECIPIENTS)

The personal data provided by the user may be communicated by NUNZIO ALFONSO S.R.L. to the categories of recipients indicated below.

The entities to which NUNZIO ALFONSO S.R.L. communicates the data act as external data processors designated by NUNZIO ALFONSO S.R.L. through a specific contract ("Data Processors") or as persons authorized to process personal data under the direct authority of NUNZIO ALFONSO S.R.L. or, in the case of third parties used by the Data Processor, as "Sub-Processors," pursuant to Article 28.4 of the Regulation, except in cases where the recipients act as independent data controllers, such as, for example, in the case of the Payment Service Provider, or as independent data controllers, as in the case of couriers.

The personal data of users may be communicated by NUNZIO ALFONSO S.R.L. to the following categories of recipients:

  • employees and/or collaborators of NUNZIO ALFONSO S.R.L., for the performance of administrative, accounting, and IT support activities;
  • companies, consultants, or professionals possibly entrusted with the installation, maintenance, updating, and, in general, management of NUNZIO ALFONSO S.R.L.'s hardware and software (including the platform), including cloud computing service providers, and third parties they use;
  • companies appointed by NUNZIO ALFONSO S.R.L. to send commercial communications via email or mail;
  • companies providing logistical support and/or warehouse and/or packaging and/or shipping and delivery or collection of Products purchased on the Site and third parties they use;
  • Payment Service Providers and/or acquirers and/or banks to enable payment for purchases made on the Site or their refund, if applicable, and third parties they use;
  • companies providing software for tracking, monitoring, and profiling activities for marketing purposes as well as for fraud prevention and improper use of services and third parties they use;
  • companies and/or individuals responsible for repairing products purchased on the Site in execution of the legal warranty of conformity and third parties they use;
  • all those subjects, including public authorities, who have access to data by virtue of regulatory or administrative provisions.
  • all those public and/or private subjects, natural and/or legal persons (legal, administrative, and tax consulting firms), if communication is necessary or functional to the correct fulfillment of contractual obligations assumed in relation to Site Services, including the purchase contract, as well as obligations arising from the law or in the case of ascertainment, exercise, or defense of a right.

14. RIGHT TO OBJECT

The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them carried out for the purposes referred to in sections 8, 9, and 12 of this notice and based on the legitimate interest of the data controller.

In the event that data are processed for direct marketing purposes (and therefore in the case of processing for the purposes referred to in sections 5, 6, and 7 of this notice), the data subject also has the right to object at any time to the processing of personal data concerning them carried out for such purposes, including profiling to the extent that it is related to such direct marketing.

The data subject can exercise the right to object against the data controller by:

  • contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

The data subject may also object to further processing of their data for direct marketing purposes (purposes referred to in sections 5, 6, and 7 of this notice):

  • through the appropriate link present in each promotional communication sent by NUNZIO ALFONSO S.R.L.;
  • through the account section named.

In the event of exercise of the right to object, the data controller refrains from further processing the personal data, unless it demonstrates the existence of compelling legitimate reasons for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a legal claim.

If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

15. RIGHT OF ACCESS

The data subject has the right to obtain from the data controller (and, therefore, from NUNZIO ALFONSO S.R.L. ) confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and the following information.

The data subject can exercise the right of access by contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

In the event of exercise of the right of access, the data subject can obtain access to personal data and the following information:

  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. the existence of the right of the data subject to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data are not collected from the data subject, any available information as to their source;
  8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 of the Regulation.

The data controller provides a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information is provided in a commonly used electronic format.

16. RIGHT TO RECTIFICATION

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The data subject can exercise the right of rectification by contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

or directly from the following link: https://www.alfonsoforni.com/il-mio-account

17. RIGHT TO ERASURE

The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  2. the data subject withdraws consent on which the processing is based (and therefore in cases where consent is withdrawn for the purposes referred to in sections 5, 7 and of this notice), and where there is no other legal ground for the processing;
  3. the data subject objects to the processing based on the legitimate interest of the data controller for reasons relating to their particular situation (and therefore in cases of objection to processing for the purposes referred to in sections 8, 9 and 12 of this notice) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing of their personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing (and therefore in cases of objection to processing for the purposes referred to in sections 5, 6, and 7 of this notice);
  4. the personal data have been unlawfully processed;
  5. the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.

The data subject can exercise the right of erasure by contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

or directly from the following link: https://www.alfonsoforni.com/il-mio-account

Where the data controller has made the personal data public and is obliged to erase it, taking into account available technology and the cost of implementation, it shall take reasonable steps, including technical measures, to inform other data controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data.

The right to erasure shall not apply to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  3. for reasons of public interest in the area of public health;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise or defense of legal claims.

18. RIGHT TO RESTRICTION OF PROCESSING

The data subject has the right to obtain from the data controller restriction of processing where one of the following applies:

  1. the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data;
  2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  3. the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
  4. the data subject has objected to processing pursuant to processing based on the legitimate interest of the data controller, for reasons relating to their particular situation (and therefore in cases of objection to processing for the purposes referred to in sections 8, 9, and 12 of this notice), pending the verification whether the legitimate grounds of the data controller override those of the data subject.

The data subject can exercise the right to restriction by contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

or directly from the following link: https://www.alfonsoforni.com/il-mio-account

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

The data subject who has obtained restriction of processing shall be informed by the data controller before the restriction of processing is lifted.

19. RIGHT TO DATA PORTABILITY

The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided, where:

  1. the processing is based on consent or on a contract;
  2. the processing is carried out by automated means.

The data subject can therefore exercise the right in question in relation to the purposes of the following sections of this notice: 4, 5, 7.

The data subject can exercise the right to data portability by contacting NUNZIO ALFONSO S.R.L. at the following addresses: info@nunzioalfonso.it

or directly from the following link: https://www.alfonsoforni.com/il-mio-account

In exercising their right to data portability, the data subject shall have the right to have the personal data transmitted directly from one data controller to another, where technically feasible. Exercise of the right to data portability shall not adversely affect the rights and freedoms of others.

20. TIMELINES AND PROCEDURES IN CASE OF EXERCISE OF DATA SUBJECT RIGHTS

The data controller provides the data subject with information on the actions taken in relation to a request to exercise the rights recognized by Articles 15 to 22 of the Regulation (i.e. right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object) and in the sections 15, 16, 17, 18, 19, and 20 of this notice ("Data Subject Rights"), without undue delay and in any event within one month of receipt of the request. This period may be extended by two months if necessary, taking into account the complexity and number of requests. The data controller informs the data subject of any such extension within one month of receipt of the request. If the data subject submits the request by electronic means, the information shall be provided, where possible, by electronic means unless otherwise requested by the data subject.

If the data controller does not take action on the request of the data subject, the data controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

Communications in response to the exercise of Data Subject Rights and the actions taken are free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the data controller may:

  1. charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested; or
  2. refuse to act on the request.

Where the data controller has reasonable doubts concerning the identity of the natural person making the request regarding Data Subject Rights, the data controller may request the provision of additional information necessary to confirm the identity of the data subject.

21. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, the data subject who considers that the processing of personal data concerning them infringes the Regulation has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy.