This policy is the result of the provision by the Italian Data Protection Authority dated 8 May 2014 concerning “Simplified arrangements to provide information and obtain consent regarding cookies” (hereafter the “Provision”), of EU Regulation 2016/679 applicable starting 25 May 2018 (hereafter the “GDPR”), and of Italian standards regarding personal data protection to the extent in which they are valid following the GDPR going into force.
ITALPIZZA SPA is the data controller, with headquarters in Modena, VAT number 03095170365.
What is a cookie?
Cookies are small text files that are sent to the user’s device when the user visits a website. Every time the user revisits the website, the cookies are sent back to the site that generated them (first-party cookies) or to another site that recognizes them (third-party cookies). They have different purposes such as, for example, allowing users to browse through the pages efficiently, remembering site preferences and, in general, improving browsing experience. Cookies also contribute in providing targeted advertising based on user interests. Based on their function and on who generated them, cookies can be subdivided into technical cookies, analytical cookies, profiling cookies, first-party cookies, and third-party cookies.
How to disable cookies.
Most browsers are initially set to automatically accept cookies. Users can change this setting to block cookies or to prevent certain cookies from being stored on their device. There are different ways to manage cookies. Users can refer to the technical guide and/or the help page on their browser to manage or change the browser settings. Should there be multiple devices (for example, computer, smartphone, tablet, etc.), Users must make sure that the browser settings on each device are configured to reflect their preferences regarding cookies. As an example, below are some links to the online documents for the main browsers:
Internet Explorer tm : http://windows.microsoft.com/it-IT/windows-vista/Block-or-allow-cookies
Safari tm : http://www.apple.com/it/support/
In regards to the personal data gathered, Users can, at any time and even via proxy, exercise their rights as under sections 7 and 15 through 22 of the GDPR; specifically, the right to request access to their data, to request rectification or erasure of their data, the right to restrict or object to certain types of data processing we carry out, as well as the right to receive a copy of some of the above.
Rights of the Data Subject:
Right of access
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
Right to erasure
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;
c) the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
Right to restriction of processing
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to object
The data subject shall have the right to object at any time to processing of personal data concerning him or her for direct marketing, which includes profiling to the extent that it is related to such direct marketing.
Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
a) the processing is based on consent or on a contract; and
b) the processing is carried out by automated means.
In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
These rights can be exercised by contacting the controller, using the contact information below.
Strada Gherbella, 454
telephone: 059 465611