Privacy policy of the Biancocasa® property of Tavella Due of Tavella Alberto and Manuel & C. Snc GDPR 14/05/2018

We are very pleased that you have shown interest in our site. Data protection is a particularly high priority for the management of Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. snc. The use of the Internet pages of the sites www.biancocasashop.com, www.biancocasashop.it, www.biancocasa.com, www.biancocasa.it is possible without any indication of personal data; however, if an interested person wishes to use special business services through our website, personal data may need to be processed. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as a person's name, address, e-mail address or telephone number must always be in line with the General Data Protection Regulation (GDPR) and in accordance with the regulations data protection regulations applicable to Biancocasa di Tavella due di Tavella Alberto and Manuel & C. Snc. With this declaration on data protection, our company wishes to inform the general public about the nature, purpose and purpose of the personal data we collect, use and process. Furthermore, the data subjects are informed by this declaration on the protection of data of rights to which they are entitled.

As a controller, Biancocasa of Tavella Due di Tavella Alberto & C. Snc has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this site. However, Internet-based data transmissions may, in principle, present security gaps, so absolute protection may not be guaranteed. For this reason, each interested person is free to transfer his personal data by alternative means, e.g. by phone.

1. Definitions

The data protection declaration of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc is based on the terms used by the European legislator for the adoption of the general regulation on data protection (GDPR). Our data protection statement should be legible and understandable to the general public as well as to our customers and business partners. To guarantee this, we would first like to explain the terminology used.

In this declaration on data protection, we use, inter alia, the following terms:

a) Personal data

personal data indicate any information relating to an identified or identifiable natural person ("subject involved"). An identifiable physical person is one who can be identified, directly or indirectly, in particular by referring to an identifier such as a name, identification number, location data, an online identifier, or one or more appearance-specific factors. physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Object of the data

The data object is an identified or identifiable natural person whose personal data is processed by the processing manager for processing.

c) Processing

Processing is any operation or set of operations performed on personal data or on personal data sets, even with automated tools, such as collection, recording, organization, structuring, archiving, adaptation or alteration, recovery, consultation, use, transmission for transmission , dissemination or otherwise made available, alignment or combination, restriction, cancellation or destruction.

d) Limitation of treatment

The treatment restriction is the marking of personal data stored in order to limit processing in the future.

e) Profiling

Profiling: any form of automated processing of personal data consisting in the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning the performance of that physical person at work, economic situation, health, personal preferences, interests, reliability, behavior, position or movements.

f) Pseudonymisation

Persecution is the processing of personal data so that personal data can no longer be attributed to a specific person without the use of additional information, provided that such additional information is stored separately and is subject to technical and organizational measures for ensure that personal data are not attributed to an identified or identifiable natural person.

g) The controller or the privacy officer

the responsible person or the controller is the natural or legal person, the public authority, the agency or other entity that, alone or in collaboration with others, determines the purposes and means of processing personal data; if the purposes and means of such processing are determined by the law of the Union or of the Member State, the controller or the specific criteria for his appointment may be provided for by Union or Member State legislation.

h) Processor

Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

i) Recipient

The recipient is a natural or legal person, a public authority, an agency or another entity to whom personal data are disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the context of a particular investigation in accordance with Union or Member State legislation are not considered to be recipients; the processing of such data by these public authorities must comply with the data protection rules applicable according to the purposes of the processing.

j) Third part

The third party is a natural or legal person, a public authority, an agency or an entity other than the data subject, the data controller, the processor and the persons under the direct authority of the controller processing or processing, are authorized to process personal data.

k) Consent

The consent of the interested party is an indication freely provided, specific, informed and unequivocal of the will of the interested party with which he or she, with a declaration or a clear affirmative action, signifies consent to the processing of personal data concerning him or her .

2. Name and address of the controller

The controllers for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in the EU Member States and other data protection provisions are:

Biancocasa of Tavella Due of Tavella Alberto & Manuel & C. Snc

Registered office Via Scaluggia, 41

25069 Villa Carcina Brescia Italy

Operating office via Europa 107

25062 Concesio Brescia Italy

tel. +39 030 2753362

http://www.biancocasashop.com

http://www.biancocasashop.it

http://www.biancocasa.com

http://www.biancocasa.it

3. Name and address of the data protection officer

The controller's data protection officer is:

Mr. Alberto Tavella

Biancocasa of Tavella di Tavella Alberto and Manuel & C. Snc

Registered office via Scaluggia 41

25069 Villa Carcina Brescia Italy

Operating office via Europa 107

25062 Concesio Brescia Italy

tel. +39 030 2753362

e-mail. tavella@biancocasa.com

http://www.biancocasashop.com

http://www.biancocasashop.it

http://www.biancocasa.it

http://www.biancocasa.com

Any interested person can, at any time, directly contact our data protection officer with all questions and suggestions related to data protection.

4. Cookies

The Internet pages of the above sites Tavella Due di Tavella Alberto & C. Snc use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Many websites and Internet servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which it is possible to assign Internet pages and servers to the specific Internet browser in which the cookie was stored. This allows Internet sites and visited servers to differentiate the individual browser of test subjects from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc can provide users of this website with more user-friendly services that would not be possible without setting cookies.

By means of a cookie, the information and offers on our website can be optimized taking into account the user. Cookies allow us, as mentioned above, to recognize users of our site. The purpose of this recognition is to make it easier for users to use our website. The user of the website that uses cookies, e.g. it is not necessary to enter the access data every time you access the website, as this is taken over by the website and the cookie is then stored on the user's computer system. Another example is a shopping cart cookie in an online store. The online store stores the items that a customer has placed in the virtual shopping cart through a cookie.

The interested party may, at any time, prevent the setting of cookies through our website through the corresponding setting of the Internet browser used, and can therefore permanently deny the setting of cookies. In addition, cookies already set can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all the functions of our website can be entirely used.

5. Collection of general data and information

The websites of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc collect a series of general data and information when a data subject or an automatic system invokes the website. This data and general information are stored in the log files. of the server. The types of browsers and versions used can be collected (1), (2) the operating system used by the access system, (3) the website from which an access system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the access system and ( 8) any other similar data and information that can be used in case of attacks on our computer systems.

When these data and general information are used, Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. Snc does not draw conclusions on the subject. Rather, this information is necessary for (1) correctly providing the content of our website, (2) optimizing the content of our website and its advertising, (3) ensuring the long-term viability of our information systems and technology of the website and (4) provide the law enforcement authorities with the information necessary for prosecution in the event of an IT attack. Therefore, Biancocasa di Tavella Alberto and Manuel & C. Snc statistically analyzes data and information collected anonymously, in order to increase data protection and data security of our company and to ensure an optimal level of protection of processed personal data . The anonymous data of the server's log files are stored separately from all personal data provided by an interested party.

6. Registration on our website

The interested party has the opportunity to register on the website of the controller with the indication of personal data. What personal data is transmitted to the controller is determined by the respective input mask used for recording. The personal data entered by the interested party are collected and stored exclusively for internal use by the controller and for their own purposes. The controller may request the transfer to one or more processors (for example a parcel service) which also uses personal data for an internal purpose attributable to the controller.

By registering on the controller's website, the IP address assigned by the Internet service provider (ISP) is also stored and used by the data-date object and the time of recording. The storage of this data takes place in the background, which is the only way to prevent the misuse of our services and, if necessary, to make it possible to investigate committed crimes. Therefore, storing this data is necessary to protect the controller. This data is not transmitted to third parties unless there is a legal obligation to transmit data, or if the transfer serves the purpose of a prosecution.

The registration of the data subject, with the voluntary indication of personal data, is intended to allow the data controller to offer data subjects or services that can be offered to registered users only because of the nature of the matter in question. The registered persons are free to modify

The registration of the data subject, with the voluntary indication of personal data, is intended to allow the data controller to offer data subjects or services that can be offered to registered users only because of the nature of the matter in question. Registered persons are free to modify the personal data specified during registration at any time or to have them completely deleted from the controller's data stock.

The data controller, at any time, provides information on request to each interested party about which personal data are stored on the data subject. Furthermore, the data controller will correct or delete personal data on request or indication of the interested party, to the extent that there are no custody obligations required by law. All the employees of the data controller are available to the interested parties in this area as contact persons.

7. Registration for our newsletter

On the websites of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc, users have the opportunity to subscribe to our newsletter. The input mask used for this purpose determines which personal data are transmitted, as well as when the newsletter is ordered by the controller.

Biancocasa di Tavella Alberto and Manuel & C. Snc regularly informs its customers and business partners through a newsletter about their offers. The Biancocasa newsletter of Tavella Alberto and Manuel & C. Snc can be received by the interested party only if (1) the person concerned has a valid e-mail address and (2) the records of the person concerned for the mailing of the newsletter. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for sending the newsletter, for legal reasons, in the double acceptance procedure. This confirmation e-mail is used to show if the owner of the e-mail address as the subject of the data is authorized to receive the newsletter.

8. Newsletter-Tracking

The Biancocasa newsletter by Tavella Alberto and Manuel & C. Snc contains the so-called tracking pixels. A tracking pixel is a miniature chart embedded in these emails, which are sent in HTML format to allow logging and analysis of log files. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc can see if and when an e-mail was opened by a subject of the data, and which links in the e-mail were recalled from the interested parties.

This personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the data processor in order to optimize the sending of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. This personal data will not be transmitted to third parties. The interested parties have at any time the right to revoke the respective separate declaration of consent issued through the double acceptance procedure. After a revocation, this personal data will be deleted by the controller. Biancocasa di Tavella Due di Tavella Alberto & C. Snc automatically considers a withdrawal from the receipt of the newsletter as a revocation.

2, lettera a), del GDPR, e laddove non vi sia altra base legale per l'elaborazione. L'interessato si oppone al trattamento ai sensi dell'articolo 21, paragrafo 1, del GDPR e non sussiste alcun motivo legittimo legittimo per il trattamento o l'interessato si oppone al trattamento ai sensi dell'articolo 21, paragrafo 2, del GDPR. I dati personali sono stati trattati illecitamente. I dati personali devono essere cancellati per il rispetto di un obbligo legale nel diritto dell'Unione o dello Stato membro a cui è soggetto il responsabile del trattamento. I dati personali sono stati raccolti in relazione all'offerta dei servizi della società dell'informazione di cui all'articolo 8, paragrafo 1, del GDPR. Se si applica uno dei suddetti motivi e l'interessato desidera richiedere la cancellazione dei dati personali archiviati da Biancocasa di Tavella Due Snc di Tavella Alberto e Manuel & C. Snc, egli può, in qualsiasi momento, contattare qualsiasi dipendente del responsabile del trattamento. Un dipendente di Biancocasa Due Snc di Tavella Alberto e Manuel & C. Snc provvederà prontamente a soddisfare immediatamente la richiesta di cancellazione. Qualora il responsabile del trattamento abbia reso pubblici dati personali e sia tenuto, ai sensi dell'articolo 17, paragrafo 1, a cancellare i dati personali, il responsabile del trattamento, tenendo conto della tecnologia disponibile e dei costi di attuazione, adotta misure ragionevoli, comprese misure tecniche, per informare altri responsabili del trattamento dei dati personali che l'interessato ha chiesto alla cancellazione da parte di tali controllori di qualsiasi collegamento, copia o replica di tali dati personali, per quanto non sia richiesta l'elaborazione. Un dipendente di Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. Snc provvederà a predisporre le misure necessarie nei singoli casi. e) Diritto di restrizione del trattamento Ogni interessato ha il diritto conferito dal legislatore europeo di ottenere dal responsabile del trattamento la limitazione del trattamento qualora si applichi una delle seguenti condizioni: L'accuratezza dei dati personali è contestata dall'interessato, per un periodo che consente al responsabile del trattamento di verificare l'esattezza dei dati personali. Il trattamento è illegale e l'interessato si oppone alla cancellazione dei dati personali e richiede invece la limitazione del loro uso. Il responsabile del trattamento non ha più bisogno dei dati personali ai fini del trattamento, ma è richiesto dall'interessato per l'istituzione, l'esercizio o la difesa di rivendicazioni legali. L'interessato ha contestato il trattamento ai sensi dell'articolo 21, paragrafo 1, del GDPR in attesa della verifica che i motivi legittimi del responsabile prevalgono su quelli dell'interessato. Se una delle condizioni di cui sopra è soddisfatta e l'interessato desidera richiedere la limitazione del trattamento dei dati personali memorizzati da Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. Snc, può in qualsiasi momento contattare qualsiasi dipendente del responsabile del trattamento. Il dipendente di Biancocasa di Tavella Due Snc di Tavella Alberto e Manuel C. Snc provvederà alla restrizione dell'elaborazione. f) Diritto alla portabilità dei dati Ogni persona interessata ha il diritto, riconosciuto dal legislatore europeo, di ricevere i dati personali che la riguardano, forniti a un responsabile del trattamento, in un formato strutturato, comunemente utilizzato e leggibile da una macchina. Egli ha il diritto di trasmettere tali dati a un altro responsabile del trattamento senza impedimenti al responsabile del trattamento cui sono stati forniti i dati personali, a condizione che il trattamento si basi sul consenso di cui all'articolo 6, paragrafo 1, lettera a), del il GDPR o il punto (a) dell'articolo 9 (2) del GDPR, o un contratto ai sensi dell'articolo 6, paragrafo 1, lettera b), del GDPR, e il trattamento è effettuato con mezzi automatizzati, a condizione che il trattamento non è necessario per l'esecuzione di un compito svolto nell'interesse pubblico o nell'esercizio di pubblici poteri conferiti al responsabile del trattamento. Inoltre, nell'esercizio del suo diritto alla portabilità dei dati ai sensi dell'articolo 20, paragrafo 1, del GDPR, la persona interessata ha il diritto di trasmettere dati personali direttamente da un controllore a un altro, ove tecnicamente fattibile e nel fare ciò non influenzare negativamente i diritti e le libertà degli altri. Per far valere il diritto alla portabilità dei dati, l'interessato può in qualsiasi momento contattare qualsiasi dipendente di Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. Snc. g) Diritto di obiettare Ogni interessato ha il diritto, riconosciuto dal legislatore europeo di opporsi, per motivi relativi alla sua particolare situazione, in qualsiasi momento, al trattamento di dati personali che lo riguardano, che si basa sul punto ( e) o (f) dell'articolo 6, paragrafo 1, del GDPR. Questo vale anche per la profilazione basata su queste disposizioni. Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. Snc non elaborerà più i dati personali in caso di obiezione, a meno che non siamo in grado di dimostrare validi motivi legittimi per l'elaborazione che prevalgono sugli interessi, i diritti e le libertà dell'interessato, o per l'istituzione, l'esercizio o la difesa di rivendicazioni legali. Se Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc tratta i dati personali per scopi di marketing diretto, l'interessato ha il diritto di opporsi in qualsiasi momento al trattamento dei dati personali che lo riguardano per tale marketing. Ciò si applica alla profilazione nella misura in cui è correlata a tale marketing diretto. Se l'interessato si rivolge a Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. Snc per il trattamento a fini di marketing diretto, Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc non tratterà più i dati personali per tali scopi. Inoltre, l'interessato ha il diritto, per motivi relativi alla sua situazione particolare, di opporsi al trattamento di dati personali che lo riguardano da parte di Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc a fini di ricerca scientifica o storica oa fini statistici ai sensi dell'articolo 89 (1) ) del GDPR, a meno che il trattamento non sia necessario per l'esecuzione di un'attività svolta per motivi di interesse pubblico. Per esercitare il diritto di opporsi, l'interessato può contattare qualsiasi dipendente di Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc. Inoltre, l'interessato è libero nel contesto dell'uso dei servizi della società dell'informazione e, in deroga alla direttiva 2002/58 / CE, di avvalersi del proprio diritto di opporsi mediante strumenti automatizzati utilizzando specifiche tecniche. h) Processo decisionale individuale automatizzato, compresa la profilazione Ogni soggetto interessato ha il diritto, concesso dal legislatore europeo, di non essere soggetto a una decisione basata esclusivamente sul trattamento automatizzato, compresa la profilazione, che produce effetti giuridici che lo riguardano, o allo stesso modo in modo significativo si ripercuote su di lui, purché la decisione (1) non sia necessaria per stipulare o eseguire un contratto tra l'interessato e un responsabile del trattamento dei dati, oppure (2) non sia autorizzata dalla legislazione dell'Unione o dello Stato membro cui il responsabile del trattamento è soggetto e che stabilisce anche misure idonee a salvaguardare i diritti e le libertà dell'interessato e gli interessi legittimi dell'interessato, oppure (3) non si basa sul consenso esplicito della persona interessata. Se la decisione (1) è necessaria per stipulare, o eseguire un contratto tra l'interessato e un responsabile del trattamento dei dati, o (2) è basata sul consenso esplicito della persona interessata, Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc attua misure idonee a salvaguardare il i diritti e le libertà dell'interessato e gli interessi legittimi dell'interessato, almeno il diritto di ottenere l'intervento umano da parte del responsabile del trattamento, di esprimere il proprio punto di vista e di contestare la decisione. Se l'interessato desidera esercitare i diritti relativi al processo decisionale individuale automatizzato, può, in qualsiasi momento, contattare qualsiasi dipendente di Lime di Mark Chambers. i) Diritto di revoca del consenso alla protezione dei dati Ogni interessato ha il diritto, concesso dal legislatore europeo, di ritirare il proprio consenso al trattamento dei propri dati personali in qualsiasi momento. Se l'interessato desidera esercitare il diritto di revocare il consenso, può, in qualsiasi momento, contattare qualsiasi dipendente di Biancocasa di Tavella Due di Tavella Alberto e Manuel & C. snc. 12. Disposizioni sulla protezione dei dati in merito all'applicazione e all'uso di Facebook Su questi siti web, il controller ha integrato componenti della società Facebook. Facebook è un social network. Un social network è un luogo per incontri sociali su Internet, una comunità online, che di solito consente agli utenti di comunicare tra loro e interagire in uno spazio virtuale. Un social network può fungere da piattaforma per lo scambio di opinioni ed esperienze o consentire alla comunità di Internet di fornire informazioni personali o relative al business. Facebook consente agli utenti di social network di includere la creazione di profili privati, caricare foto e rete attraverso richieste di amicizia. La compagnia operativa di Facebook è Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, Stati Uniti. Se una persona vive al di fuori degli Stati Uniti o del Canada, il controller è Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublino 2, Irlanda. Con ogni chiamata a una delle singole pagine di questo sito Internet, gestita dal controller e in cui è integrato un componente di Facebook (plug-in di Facebook), il browser Web sul sistema informatico della persona interessata è automaticamente richiesto di scaricare la visualizzazione del componente Facebook corrispondente da Facebook attraverso il componente di Facebook. È possibile accedere a una panoramica di tutti i plug-in di Facebook sotto https://developers.facebook.com/docs/plugins/. Durante il corso di questa procedura tecnica, Facebook è a conoscenza di quale specifico sito secondario del nostro sito Web è stato visitato dall'interessato. Se la persona interessata ha effettuato l'accesso nello stesso momento su Facebook, Facebook rileva ogni chiamata al nostro sito Web da parte dell'interessato - e per l'intera durata della sua permanenza sul nostro sito Internet - quale specifico sito secondario della nostra Internet la pagina è stata visitata dall'interessato. Queste informazioni vengono raccolte attraverso il componente di Facebook e associate al rispettivo account Facebook dell'interessato. Se l'interessato fa clic su uno dei pulsanti di Facebook integrati nel nostro sito Web, ad es. il pulsante "Mi piace", o se l'interessato sottopone un commento, Facebook corrisponde a queste informazioni con l'account personale Facebook dell'utente e memorizza i dati personali. Facebook riceve sempre, tramite la componente di Facebook, informazioni su una visita al nostro sito Web da parte dell'interessato, ogni volta che l'interessato si connette allo stesso tempo su Facebook durante il periodo di chiamata al nostro sito web. Ciò si verifica indipendentemente dal fatto che l'interessato abbia fatto clic sul componente di Facebook o meno. Se tale trasmissione di informazioni a Facebook non è auspicabile per l'interessato, allora è possibile che ciò impedisca la disconnessione dal proprio account Facebook prima che venga effettuata una chiamata al nostro sito Web. La linea guida sulla protezione dei dati pubblicata da Facebook, disponibile all'indirizzo https://facebook.com/about/privacy/, fornisce informazioni sulla raccolta, l'elaborazione e l'uso dei dati personali da parte di Facebook. Inoltre, viene spiegato quali sono le opzioni di impostazione offerte da Facebook per proteggere la privacy dell'interessato. Inoltre, sono disponibili diverse opzioni di configurazione per consentire l'eliminazione della trasmissione dei dati su Facebook. Queste applicazioni possono essere utilizzate dall'interessato per eliminare una trasmissione di dati su Facebook.

9. Possibility of contact via the website

The websites of Biancocasa di Tavella Due Snc di Tavella Alberto and Manuel & C. Snc contain information that allows a rapid electronic contact with our company, as well as a direct communication with us, which also includes a general address of the so-called electronic mail (address e-mail). If a data subject contacts the controller via e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a subject interested in the controller is stored for processing purposes or to contact the data subject. There is no transfer of this personal data to third parties.

10. Routine cancellation and blocking of personal data

The controller processes and stores the personal data of the data subject only for the period necessary to achieve the filing purpose, or to the extent that this is granted by the European legislator or other legislators in laws or regulations to which the manager is subject of treatment a.

If the archival purpose is not applicable or if a retention period prescribed by the European legislator or another competent legislator expires, personal data is regularly blocked or deleted in accordance with legal requirements.

11. Rights of the interested party

a) Confirmation right

Every interested party has the right conferred by the European legislator to obtain from the controller the confirmation of the existence or not of personal data concerning him / her. If an interested party wishes to make use of this confirmation right, he can, at any time, contact any employee of the controller.

b) Right of access

Each data subject has the right conferred by the European legislator to obtain from the data controller free information on his personal data stored at any time and a copy of that information. In addition, the European directives and regulations grant the data subject access to the following information:

the purposes of the processing;

the categories of personal data concerned;

the recipients or categories of recipients to whom personal data have been or will be communicated, in particular recipients in third countries or international organizations;

where possible, the period for which personal data will be stored or, if not possible, the criteria used to determine this period;

the existence of the right to request the controller to rectify or delete personal data, or limit the processing of personal data relating to the data subject, or to object to such processing, the existence of the right to file a complaint with the authority control, if the personal data are not collected by the data subject, any information available on their origin, the existence of automated decision-making processes, including profiling, referred to in Article 22 (1) and (4) of the GDPR and, at least in such cases, significant information on the logic in question, as well as on the significance and expected consequences of this treatment for the data subject.

Furthermore, the data subject has the right to obtain information on the transfer of personal data to a third country or an international organization. In this case, the data subject has the right to be informed of the appropriate guarantees relating to the transfer. If an interested party wishes to make use of this right of access, he can, at any time, contact any employee of the controller.

c) Right of rectification

Each interested person has the right conferred by the European legislator to obtain from the controller, without undue delay, the correction of inaccurate personal data concerning him / her. Taking into account the purposes of the processing, the data subject has the right to complete incomplete personal data, also by submitting an additional declaration. If an interested party wishes to exercise this right of rectification, he may at any time contact any employee of the controller.

d) Cancellation right (right to be forgotten)

Each interested party has the right, granted by the European legislator, to obtain from the data controller the deletion of personal data concerning him without undue delay and the controller is obliged to delete personal data without undue delay if one of the following applies reasons, provided that the treatment is not necessary:

Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

The data subject withdraws the consent to which the processing is based in accordance with Article 6 (1) (a) of the GDPR, or Article 9 (2) (a) of the GDPR, and where there is no another legal basis for processing.

The data subject opposes the processing pursuant to Article 21 (1) of the GDPR and there is no legitimate legitimate reason for the processing or the data subject opposes the processing pursuant to Article 21 (2) of the GDPR.

Personal data have been processed unlawfully.

Personal data must be deleted for compliance with a legal obligation in the law of the Union or of the Member State to which the controller is subject.

Personal data have been collected in connection with the provision of information society services as referred to in Article 8 (1) of the GDPR.

If one of the aforementioned reasons is applied and the interested party wishes to request the deletion of the personal data filed by Biancocasa di Tavella Due Snc of Tavella Alberto and Manuel & C. Snc, he may, at any time, contact any employee of the controller. An employee of Biancocasa Due Snc di Tavella Alberto and Manuel & C. Snc will promptly respond to the request for cancellation immediately.

Where the controller has made personal data public and is required to delete personal data pursuant to Article 17 (1), the controller shall take reasonable steps to take account of available technology and implementation costs. including technical measures, to inform other data controllers that the data subject has requested the cancellation by such controllers of any connection, copying or replication of such personal data, even if processing is not required. An employee of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc will arrange the necessary measures in individual cases.

e) Right to restriction of treatment Every interested party has the right conferred by the European legislator to obtain from the controller the limitation of the treatment if one of the following conditions applies:

The accuracy of personal data is challenged by the data subject, for a period that allows the data controller to verify the accuracy of personal data.

The treatment is illegal and the interested party opposes the cancellation of personal data and instead requires the limitation of their use.

The controller no longer needs personal data for processing purposes, but is required by the data subject for the establishment, exercise or defense of legal claims.

The interested party has contested the treatment pursuant to Article 21 (1) of the GDPR pending verification that the legitimate reasons of the manager prevail over those of the interested party.

If any of the above conditions is met and the interested party wishes to request the limitation of the processing of personal data stored by Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. Snc, he may at any time contact any employee of the controller. The Biancocasa employee of Tavella Due Snc di Tavella Alberto and Manuel C. Snc will provide for the restriction of processing.

f) Right to data portability

Each interested person has the right, recognized by the European legislator, to receive personal data concerning him, provided to a controller, in a structured format, commonly used and readable by a machine. He shall have the right to transmit such data to another data controller without impediment to the controller whose personal data have been provided, provided that the processing is based on the consent referred to in Article 6 (1) (a) , the GDPR or point (a) of Article 9 (2) of the GDPR, or a contract within the meaning of Article 6 (1) (b) of the GDPR, and the processing is carried out by automated means, provided that processing is not necessary for the performance of a task carried out in the public interest or in the exercise of public authority conferred on the controller. Furthermore, in the exercise of its right to data portability pursuant to Article 20 (1) of the GDPR, the data subject has the right to transmit personal data directly from one controller to another, where technically feasible and in doing so does not adversely affect the rights and freedoms of others. To assert the right to data portability, the data subject may at any time contact any employee of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc.

g) Right to object

Every interested party has the right, recognized by the European legislator to oppose, for reasons related to his particular situation, at any time, to the processing of personal data concerning him, which is based on point (e) or (f) of article 6 , paragraph 1 of the GDPR. This also applies to profiling based on these provisions. Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. Snc will no longer process personal data in case of objection, unless we are able to demonstrate valid legitimate reasons for the processing that prevail over the interests, rights and freedoms of the interested party, or for the establishment, exercise or defense of legal claims. If Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. snc processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such marketing. This applies to profiling in so far as it is related to such direct marketing. If the interested party turns to Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. Snc for the treatment for direct marketing purposes, Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. snc will no longer process personal data for such purposes. Furthermore, the interested party has the right, for reasons related to his particular situation, to oppose the processing of personal data concerning him by Biancocasa di Tavella Due of Tavella Alberto and Manuel & C. snc for scientific or historical research purposes. or for statistical purposes in accordance with Article 89 (1)) of the GDPR, unless the processing is necessary for the performance of an activity carried out for reasons of public interest. To exercise the right to object, the interested party may contact any employee of Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. snc. Furthermore, the data subject is free in the context of the use of information society services and, by way of derogation from Directive 2002/58 / EC, to avail himself of his right to oppose using automated tools using technical specifications.

h) Automated individual decision-making process, including profiling

Each interested party has the right, granted by the European legislator, not to be subject to a decision based exclusively on automated processing, including profiling, which produces legal effects concerning him, or in the same way significantly affects him, provided that decision (1) is not necessary to enter into or execute a contract between the data subject and a data controller, or (2) is not authorized by Union or Member State legislation to which the controller is subject and which also establishes appropriate measures to safeguard the rights and freedoms of the data subject and the legitimate interests of the data subject, or (3) is not based on the explicit consent of the data subject. If the decision (1) is necessary to stipulate, or execute a contract between the data subject and a data controller, or (2) it is based on the explicit consent of the person concerned, Biancocasa di Tavella Due di Tavella Alberto and Manuel & C. snc implements appropriate measures to safeguard the rights and freedoms of the data subject and the legitimate interests of the data subject, at least the right to obtain human intervention from the controller, to express their point of view and challenge the decision. If you wish to exercise your rights in the automated individual decision-making process, you may contact any Lime employee of Mark Chambers at any time.

i) Right of withdrawal of data protection consent

Every interested party has the right, granted by the European legislator, to withdraw their consent to the processing of their personal data at any time.

If the interested party wishes to exercise the right to withdraw the consent, he / she may, at any time, contact any Biancocasa di Tavella Due employee of Tavella Alberto and Manuel & C. snc.

12. Data protection provisions on the application and use of Facebook

On these websites, the controller has integrated components of the Facebook company. Facebook is a social network.

A social network is a place for social gatherings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network can act as a platform for exchanging views and experiences or allowing the Internet community to provide personal or business-related information. Facebook allows users of social networks to include the creation of private profiles, upload photos and network through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way,Menlo Park, CA 94025, United States. If a person lives outside the United States or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

With each call to one of the individual pages of this Internet site, managed by the controller and integrating a Facebook component (Facebook plug-in), the web browser on the computer system of the data subject is automatically requested to download the display of the Facebook component corresponding by Facebook through the component of Facebook. You can access an overview of all Facebook plugins under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is aware of which specific secondary site of our website has been visited by the interested party.

If the person concerned has logged in at the same time on Facebook, Facebook detects any call to our website by the interested party - and for the entire duration of his stay on our website - as a specific secondary site of our Internet the page was visited by the interested party. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If you are interested in clicking on one of the Facebook buttons integrated into our website, e.g. the "Like" button, or if the person submits a comment, Facebook matches this information with the user's personal Facebook account and stores personal data.

Facebook always receives information on a visit to our website by the interested party, via the Facebook component, each time the user connects at the same time on Facebook during the call period to our website. This occurs regardless of whether you have clicked on the Facebook component or not. If such transmission of information to Facebook is not desirable for the person concerned, then it is possible that this will prevent the disconnection from your Facebook account before a call is made to our website.

The data protection guide published by Facebook, available at https://facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. In addition, it is explained what are the setting options offered by Facebook to protect the privacy of the person concerned. In addition, several configuration options are available to allow deletion of data transmission on Facebook. These applications can be used by the data subject to eliminate a data transmission on Facebook.

13. Data protection provisions regarding the application and use of Google AdSense

On these websites, the controller integrated Google AdSense. Google AdSense is an online service that allows the placement of advertising on third-party sites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party sites to match the content of the respective third-party site. Google AdSense allows targeting based on the interests of the Internet user, which is implemented through the generation of individual user profiles.

The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States.

The purpose of the Google AdSense component is to integrate advertisements on our website. Google AdSense inserts a cookie on the computer system of the interested party. The definition of cookies is explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. At each call to one of the individual pages of this Internet site, managed by the controller and integrated with a Google AdSense component, the Internet browser on the data technology system of the data subject will automatically send data via the Google AdSense component. for the purposes of online advertising and commission regulation to Alphabet Inc. During this technical procedure, Alphabet Inc. acquires the knowledge of personal data, such as the IP address of the party concerned, which serves the alphabet Inc., among other things, to understand the origin of visitors and clicks and then create commission agreements.

The person concerned may, as indicated above, prevent the setting of cookies through our website at any time by means of a corresponding modification of the web browser used and thus permanently deny the setting of cookies. This adaptation to the Internet browser used would also prevent Alphabet Inc. from setting a cookie on the data subject's computer system. Furthermore, cookies already in use by Alphabet Inc. can be deleted at any time via a web browser or other software. In addition, Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature chart embedded in Web pages to allow registration of a log file and analysis of log files through which a statistical analysis can be performed. Based on the built-in tracking pixels, Alphabet Inc. can determine if and when a website has been opened by a data subject and which links have been clicked by the data subject. The monitoring pixels serve, among other things, to analyze the flow of visitors on a website.Through Google AdSense, data and personal information, which also include the IP address, and is required for collection and accounting displayed advertisements are transmitted to Alphabet Inc. in the United States of America. This personal data will be stored and processed in the United States of America. The Alphabet Inc. may disclose personal data collected through this technical procedure to third parties. Google AdSense is further explained under the following link https://www.google.com/intl/en/adsense/start/

14. Data protection provisions regarding the application and use of Google Analytics (with anonymity function)

On this website, the controller integrated the Google Analytics component (with the anonymizer function). Google Analytics is a web analytics service. The analysis of Web data is the collection, collection and analysis of data on the behavior of visitors to websites. A web analysis service collects, among other things, data on the website from which a person has arrived ( the so-called referrer), which secondary pages were visited, or how often and for what duration a subpage was displayed. The analysis of web data is mainly used to optimize a website and to perform a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States.

For web analysis through Google Analytics, the controller uses the application "_gat. _anonymizeIp". Through this application, the IP address of the data subject's internet connection is shortened by Google and made anonymous when accessing our websites from a Member State of the European Union or from another Contracting State to the Agreement on the European Economic Area .

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses data and information collected, among other things, to evaluate the use of our website and to provide online reports, which show the activities on our websites and to provide other services related to the use of our website for us.

Google Analytics places a cookie on the computer system of the person concerned. The definition of cookies is explained above. By setting the cookie, Google is enabled to analyze the use of our website. At each call to one of the individual pages of this Internet site, managed by the controller and in which a component of Google Analytics has been integrated, the Internet browser on the computer system of the data subject will automatically send the data through the Google Analytics Component for the purposes of online advertising and commission regulation to Google. During this technical procedure, the Google company acquires knowledge of personal information, such as the IP address of the data subject, which provides Google with, among other things, an understanding of the origin of visitors and clicks and subsequently the creation of committee agreements.

The cookie is used to store personal information, such as access time, the position from which it was accessed and the frequency of visits of our website by the interested party. With each visit to our website, such personal data, including the IP address of the internet access used by the person concerned, will be transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected through the technical procedure to third parties.

The person concerned may, as indicated above, prevent the setting of cookies through our website at any time by means of a corresponding modification of the web browser used and thus permanently deny the setting of cookies. This adaptation to the Internet browser used would prevent Google Analytics from setting a cookie on the computer system of the data subject. In addition, cookies already in use by Google Analytics can be deleted at any time via a web browser or other software programs.

15. Data protection provisions regarding the application and use of Google+

On this website, the controller integrated the Google+ button as a component. Google+ is a so-called social network. A social network is a social gathering place on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network can act as a platform for exchanging views and experiences or allowing the Internet community to provide personal or business-related information. Google+ allows social network users to include creating private profiles, upload photos and network via friend requests.

The operating company of Google+ is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

With each call to one of the individual pages of this website, managed by the controller and integrated with a Google+ button, the Internet browser on the affected person's computer system automatically downloads a display of the corresponding Google Google+ button through the respective component Google+ button. During this technical procedure, Google is aware of which specific subpage of our website has been visited by the interested party. More detailed information on Google+ can be found under https://developers.google.com/+/. If the person concerned is logged in at the same time as Google+, Google recognizes each and every call to our website by the person concerned and for the entire duration of your stay on our website, which specific sub-pages of our site The Internet page was visited by the interested party. This information is collected through the Google+ button and Google matches this with the respective Google+ account associated with the person. If you click on the Google+ button integrated on our website and then provide a recommendation of Google+ 1, Google will assign this information to the personal Google+ user account of the data object and store your personal data. Google stores the recommendation of Google+ 1 of the party concerned, making it publicly available in accordance with the terms and conditions accepted by the interested party in this regard. Subsequently, a recommendation of Google+ 1 provided by the person concerned on this website together with other personal data, such as the name of the Google+ account used by the interested party and the stored photo, is stored and processed on other Google services, such as search engine results of the Google search engine, the Google account of the person concerned or in other places, eg on Internet pages or in relation to advertisements. Google is also able to link the visit to this website with other personal data stored on Google. Google further records this personal information for the purpose of improving or optimizing the various Google services.

Through the Google+ button, Google receives information that the person has visited our website, if the person at the time of the call to our website is connected to Google+. This occurs regardless of whether you have clicked or not clicked on the Google+ button.

If you do not want to transmit personal data to Google, you can prevent this by disconnecting your Google+ account before calling our website.

Further information and data protection provisions of Google can be found at https://www.google.com/intl/en/policies/privacy/. Additional Google references for the Google+ 1 button can be found at https://developers.google.com/+/web/buttons-policy.

16. Data protection provisions on the application and use of Instagram

On this website, the controller has integrated components of the Instagram service. Instagram is a service that can be qualified as an audiovisual platform, which allows users to share photos and videos, as well as to disseminate such data on other social networks.

The operating company of the services offered by Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

At each call to one of the individual pages of this Internet site, managed by the controller and on which an Instagram component has been integrated (Insta button), the Internet browser is automatically requested on the computer system of the person concerned. to download a display of the corresponding Instagram component of Instagram. During the course of this technical procedure, Instagram becomes aware of which specific sub-page of our website has been visited by the interested party.

If the person concerned is logged in on Instagram at the same time, Instagram detects each call to our website by the person concerned - and for the entire duration of our stay on our website - which specific page on the Internet the page has been visited by the interested party. This information is collected through the Instagram component and is associated with the respective Instagram account of the data subject. If the person concerned clicks on one of the Instagram buttons integrated on our website, then Instagram will match this information with the person's personal Instagram user account and store the personal data.

Instagram receives information via the Instagram component that the person has visited our website as long as the person concerned is registered on Instagram at the time of the call to our website. This occurs regardless of whether the person clicks on the Instagram button or not. If such transmission of information to Instagram is not desirable for the person concerned, then he or she can prevent it by disconnecting from their Instagram account before a call is made to our website.

Further information and applicable provisions on data protection of Instagram can be retrieved at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

17. Data protection provisions regarding the application and use of LinkedIn

The controller has integrated components of LinkedIn Corporation on this website. LinkedIn is a web-based social network that allows users with existing business contacts to connect and create new business contacts. Over 400 million people registered in over 200 countries use LinkedIn. Therefore, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

The LinkedIn operating company is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy issues outside the United States, LinkedIn Ireland is responsible for privacy issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With each call to one of the individual pages of this Internet site, which is managed by the controller and on which a LinkedIn component has been integrated (the LinkedIn plug-in), the Internet browser on the computer system of the data subject is automatically requested to download a view of the LinkedIn LinkedIn component. For more information on the LinkedIn plug-in, visit https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn acquires the knowledge of which specific sub-page of our website has been visited by the interested party.

If the user is connected at the same time on LinkedIn, LinkedIn detects with every call to our website from the interested party - and for the entire duration of his stay on our website - which specific page of our Internet page has been visited by the interested party. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the person concerned clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn will assign this information to the LinkedIn personal user account of the person concerned and store your personal data.

LinkedIn receives information via the LinkedIn component that the person has visited on our website, provided that the individual is logged in on LinkedIn at the time of the call to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such transmission of information to LinkedIn is not desirable for the data subject, it may be possible to disconnect from your LinkedIn account before a call is made to our website.

LinkedIn provides https://www.linkedin.com/psettings/guest-controls the ability to unsubscribe from emails, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame. The setting of these cookies can be denied in https://www.linkedin.com/legal/cookie-policy. The privacy policy applicable for LinkedIn is available at https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available at https://www.linkedin.com/legal/cookie-policy.

18. Data protection provisions on the application and use of Twitter

On this website, the controller has integrated Twitter components. Twitter is a multilingual microblogging service accessible to the public on which users can publish and spread the so-called "tweets", eg. short messages, which are limited to 140 characters. These short messages are available to everyone, including those that are not connected to Twitter. Tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Furthermore, Twitter allows you to target a large audience via hashtags, links or retweets.

The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

With each call to one of the individual pages of this Internet site, which is managed by the controller and on which a Twitter component has been integrated (Twitter button), the Internet browser is automatically requested on the computer system of the person concerned. to download a view of the Twitter correspondent Twitter component. More information on Twitter buttons is available at https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter acquires the knowledge of which specific sub-page of our website has been visited by the interested party. The purpose of the integration of the Twitter component is the retransmission of the contents of this website to allow our users to present use this web page to the digital world and increase the number of visitors. If the person concerned has logged in at the same time on Twitter, Twitter will detect every call to our website by the interested party and for the entire duration of his / her stay on our Internet site that has been submitted to a specific subpage of our Internet page. visited by the interested party. This information is collected via the Twitter component and associated with the respective Twitter account of the data subject. If the person concerned clicks on one of the Twitter buttons integrated on our website, Twitter assigns this information to the affected user's personal Twitter account and stores the personal data. Twitter receives information via the Twitter component that the person concerned has visit our website, provided that you have logged in on Twitter at the time of the call to our website. This occurs regardless of whether the person clicks on the Twitter component or not. If this transmission of information to Twitter is not desirable for the data subject, it may be possible to disconnect from your Twitter account before a call is made to our website. The applicable provisions on data protection of Twitter are accessible to you. address https://twitter.com/privacy?lang=en.

19. Data protection provisions regarding the application and use of YouTube

On this website, the controller has integrated YouTube components. YouTube is an Internet video portal that allows video editors to set up video clips and other users for free, which also provides free review, review and commentary on them. YouTube allows you to publish all types of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers and videos made by users via the Internet portal.

The YouTube operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

With each call to one of the individual pages of this Internet site, managed by the controller and on which a YouTube component has been integrated (YouTube video), the Internet browser is automatically requested on the computer system of the data subject. to download a view of the corresponding YouTube component. Further information on YouTube can be obtained under https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google acquire knowledge of the specific subpage of our website visited by the interested party.

If the individual is logged in on YouTube, YouTube recognizes with each call that a secondary page contains a YouTube video, which specific subpage of our website has been visited by the person concerned. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the person has visited our website, if the person at the time of the call to our website is connected to YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such transmission of this information to YouTube and Google is not desirable to the data subject, delivery may be prevented if the individual disconnect from their YouTube account before a call is made to our website.

The data protection provisions of YouTube, available at https://www.google.com/intl/en/policies/privacy/, provide information on the collection, processing and use of personal data by YouTube and Google.

20. Payment method:

Data protection provisions regarding the use of PayPal as a payment processor

On this website, the controller has integrated components of PayPal. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or corporate accounts. PayPal is also able to process virtual payments via credit cards when a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there are no classic account numbers. PayPal allows you to activate online payments to third parties or receive payments. PayPal also accepts fiduciary functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as a payment option in the online store during the order process, we will automatically transmit your data to PayPal. By selecting this payment option, the interested party accepts the transfer of personal data necessary for processing payments.

Personal data transmitted to PayPal are usually name, surname, address, e-mail address, IP address, telephone number, mobile phone number or other data required for processing payments. The processing of the purchase contract also requires such personal data, which are related to the respective order.

The transmission of data is aimed at processing payments and preventing fraud. The controller will transfer personal data to PayPal, in particular, if a legitimate interest in the transmission is provided. Personal data exchanged between PayPal and the data controller will be transmitted by PayPal to the economic credit agencies. This transmission is intended for checks on identity and creditworthiness.

PayPal, if necessary, will transmit personal data to affiliates and service providers or subcontractors to the extent that this is necessary to fulfill the contractual obligations or data to be processed in the order.

The interested party has the possibility to withdraw consent for the processing of personal data at any time from PayPal. A revocation has no effect on the personal data that must be processed, used or transmitted in accordance with the processing of payments (contractual). The applicable provisions on data protection of PayPal can be retrieved at https://www.paypal.com/us/webapps / mPP / ua / privacy-full.

21. Legal basis for processing

Art. 6 (1) turned on. a GDPR serves as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6 (1) lit. b GDPR. The same applies to the processing operations necessary for the execution of pre-contractual measures, for example in the case of requests relating to our products or services. Our company is subject to the legal obligation that provides for the processing of personal data, for example for the fulfillment of tax obligations, the treatment is based on the art. 6 (1) turned on. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our company and his name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third party. . So the elaboration is based on the art. 6 (1) turned on. d GDPR. Finally, processing operations could be based on Article 6 (1) lit. f GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds, if the processing is necessary for the legitimate interests pursued by our company or a third party, except where such interests are overwritten by interest or fundamental rights and freedoms of the data subject requiring the protection of personal data. Such processing operations are particularly admissible as they have been expressly mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, sentence 2, GDPR).

22. The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6 (1) lit. For GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and shareholders.