PRIVACY POLICY OF JULIAGRAF-GROUP.COM

Information pursuant to art. 13 and request for consent pursuant to art. 23 of Legislative Decree 196/2003 (“Code regarding the protection of personal data”) updated with the prescriptions of European Regulation on the protection of personal data 2016/679

‍Foreword

Juliagraf spa is aware of the importance of protecting the confidentiality of personal data and intends to make every effort to comply with rules of conduct that are in line with Legislative Decree 30 June 2003, n. 196 (Code regarding the protection of personal data) and with the European Regulation on the protection of personal data 2016/679.

In light of the above, the Customer is invited and recommended to carefully read this regulatory document, in general, the rules that Juliagraf spa observes in collecting and processing personal data and in always providing a satisfactory service to its Customers.

‍Basic principles for the processing of personal data

‍Notwithstanding what is better specified in the following paragraphs, the Customer is informed that the processing of personal data carried out by Juliagraf spa is based on the following basic principles:

— process data exclusively for the purposes and in the manner described in the information;
— process data for purposes for which the prior consent of the interested party is necessary only in the presence of an express authorization in this regard;
— make data available to third parties only for purposes instrumental to the provision of the requested supply or service or in other cases, except where permitted by law, only when the interested party has given their consent;
— respond to requests for cancellation, modification, integration of the data provided, for opposition to the processing of data for the purpose of sending commercial and advertising information;
— ensure correct and lawful management of personal data, safeguarding the right to confidentiality of the interested party, as well as apply appropriate security measures to protect the confidentiality, integrity and availability of the data provided.

‍Purposes of the processing of personal data

‍Pursuant to article 4, first paragraph letter b) of Legislative Decree no. 196/2003, “personal data” must be understood as”any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number”.
Personal data must therefore be understood as the name, contact information and contact details, as well as any other information of the Customer that is, directly or indirectly, obtainable from the latter.

Pursuant to article 13 of Legislative Decree no. 196/2003, please note that the personal data provided by the Customer will be processed by the company Juliagraf spa, with headquarters in Premariacco (UD), Via Arturo Malignani, n. 14, as Data Controller pursuant to and for the purposes of art. 4, paragraph 1, letter f) of Legislative Decree no. 196 of 30 June 2003 and of the European Regulation on the protection of personal data 2016/679.
Your data will be processed by personnel within the company specifically authorized and designated “Data Processor”, periodically trained and updated on their roles, responsibilities, tasks and methods of processing and are placed under the direct control of the data controller.

The Customer's personal data will be processed by the subject indicated above for the following purposes:

(a) for purposes strictly necessary and/or related to the satisfaction of requests made, from time to time, by the Customer, through the Site or by e-mail or other communication tool;
(b) for carrying out the activities necessary or in any case related to the conclusion, management and execution of product purchase contracts and for sending, even by email, commercial information;
(c) for the execution of obligations established by laws, regulations and legislation, national and/or community, as well as by provisions issued by authorities empowered to do so by law or by supervisory and control bodies ;(
d) for sending, even by email, promotional and advertising material concerning products and/or services similar to those purchased previously;
(e) for sending, even by email, other promotional and advertising material concerning the products and/or services offered by the Data Controller;
(f) to carry out analysis and study of the user's consumption habits and choices (so-called “profiling”), based on the type of purchases made, for the purpose of conducting market research and personalized promotional activities.

With reference to the purposes indicated above, the Data Controller informs that the provision of data is mandatory for the pursuit of the purposes referred to in points (a) to (c) above, with the consequence that, in such cases, a possible refusal to provide it will make it impossible for the Data Controller to satisfy and fulfill the Customer's orders or requests.

In relation to the provision of data for the purposes referred to in point (d) above, the user, at the time of data collection or when sending any communication made for the purposes referred to in the mentioned point (d), will have the right to express his opposition to the processing of data in the manner indicated in paragraph 7 below or as indicated in each communication.

On the contrary, with reference to the processing for the purposes referred to in points (e) and (f) above, the user will be asked, from time to time, through special masks placed on the Site, to give consent to the carrying out of this type of treatment.

‍Data processing methods

‍The processing of personal data collected (also through the Website) will be carried out with methods and procedures strictly necessary for the pursuit of the purposes set out in this information and will include all the operations provided for by Legislative Decree no. 196/2003 and the European Regulation on the protection of personal data 2016/679 and necessary for the processing in question, including communication to the subjects referred to in paragraph 4. In particular, the processing is carried out, through people specifically appointed and employed by the Technical Department, the Quality Department and the Logistics Department, mainly with the aid of electronic or automated means, through the use of electronic mail or other remote communication techniques.

Personal data will be stored on the Data Controller's server/database located within the territory of the European Union.

‍Communication of personal data

‍For the pursuit of the purposes referred to in paragraph 2 above and, in particular, for the provision and supply of the goods and/or services requested by the Customer, the same's personal data may be communicated to other subjects, as managers and/or independent controllers of the processing of personal data, including, in particular, credit card issuers, couriers or Poste Italiane S.p.A., companies responsible for carrying out administrative and/or accounting services that provide services instrumental to satisfying the request of Customer.

The subjects indicated above will be appointed as data processors and must comply with the same high data protection conditions as applied by our company as well as the same privacy legislation contained in this form. Personal data and payment information, therefore relating to credit cards or bank details for the transfer, will not be processed directly by the Data Controller, as the user is directed to third-party payment platforms (for example Paypal, Hipay), with their direct responsibility for data management.

In any case, only the data necessary and relevant to the purposes of the processing to which the individual processors are responsible will be transferred/communicated, who must comply with the same conditions of confidentiality and data protection indicated in this information. Apart from the cases indicated above, personal data will not be disclosed or communicated to third parties, without the prior and explicit consent of the Customer.

‍Cookies and browsing data

‍While accessing and browsing the Site, some non-personal information regarding the user's computer may be collected. This type of information includes, but is not limited to:
the type of browser used (for example, Internet Explorer, Mozilla Firefox, Google Chrome);
the domain name from which the user accesses the Internet;
the website from which the user reached the Site;
the date and time of access;
the pages that were visited.

This information is collected through the user's computer browser also through so-called cookies. Cookies are small data files, often containing an anonymous identification code, which are sent from a web server to the user's browser and can then be stored on the hard drive of the user's computer. The cookie is then reread and recognized by the website that sent it every time a subsequent connection is made to it. Cookies contain information that makes it possible to store the user's browsing preferences and then customize a site according to their needs.

The cookies collected by the Data Controller while browsing the Site are temporary (they do not remain on the user's hard disk once the session is over) and consist exclusively of so-called session cookies, necessary to allow safe and efficient browsing of the Site.

The Data Controller may use cookies for statistical purposes regarding the use of the services available through the Site and for the purpose of improving their use by users. In this case, cookies will be used exclusively anonymously.

Most browsers are set to accept cookies, but it is possible to reset your browser so that it rejects cookies or notifies the user when you are receiving one. The user may decide to reject/disable cookies on the Site, if the browser provides this option, but, in this case, some pages of the Site may not be accessible and/or not work properly. For example, by refusing cookies, the user will be obliged to log in again every time they want to access their personal account on the Site. To change the settings of their browser in such a way as to disable cookies, please refer to the information on cookies.

In any case, the user is recommended to check the instructions and indications of their browser.

Finally, the user is informed that accessing the Site, consulting the related contents and using the services offered within it allows the web server to automatically record so-called “system logs”, i.e. the information that the user's browser sends while browsing the Site. This information consists of the web pages requested by the User, the documents consulted, modified or created, the Internet protocol address, the type of browser, the browser language, the date and time of the request. Such information and browsing data, such as cookies, are used only to obtain anonymous statistical information on the use of the Site and to check its proper functioning. These data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.

‍Consultation, modification and cancellation of personal data pursuant to Article 7, Legislative Decree no. 196/2003 And ex Article 13 of the GDPR 679/2016

‍In any case, the possibility for the user to exercise the rights referred to in article 7 of Legislative Decree no. 196/2003 and article 13 of the GDPR 679/2016, which are retranscribed in full below, remains unaffected. ”
‍Art. 7. Right of access to personal data and other rights

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
‍
The interested party has the right to obtain the indication:
a) the origin of the personal data;
b) the purposes and methods of the processing;
c) the logic applied in the case of treatment carried out with the aid of electronic tools;
d) the identification details of the owner, managers and designated representative pursuant to article 5, paragraph 2; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as a designated representative in the territory of the State, managers or agents.
‍
The interested party has the right to obtain:
a) the updating, the correction or, when you are interested, the integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves the use of means that are clearly disproportionate to the protected right.

The interested party has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if relevant to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication” . ”

‍Article 13 - EU RGPD - Information to be provided if personal data are collected from the interested party. If data concerning him is collected from the interested party, the data controller provides the interested party, at the time the personal data are obtained, with the following information: a) the identity and contact details of the data controller and, where applicable, of his representative; b) the contact details of the data protection officer, where applicable; c) the purposes of the processing for which the personal data are intended and the legal basis for the processing; d) if the processing is based on article 6, paragraph 1, letter f), the legitimate interests pursued by the data controller or third parties; e) any recipients or categories of recipients of the personal data; f) where applicable, the intention of the data controller to transfer personal data to a third country or an international organization and the existence or absence of an adequate decision by the Commission or, in the case of transfers referred to in Article 46 or 47, or Article 49, second paragraph, the reference to appropriate or appropriate guarantees and the means to obtain a copy of such data or the place where they were made available. In addition to the information referred to in paragraph 1, when the personal data are obtained, the data controller provides the interested party with the following additional information necessary to ensure correct and transparent processing: a) the retention period of personal data or, if this is not possible, the criteria used to determine that period; b) the existence of the right of the interested party to ask the data controller for access to personal data and the correction or cancellation of the same or the limitation of the processing concerning him or to oppose their processing, in addition to the right to data portability; c) if the processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation; d) the right to lodge a complaint with a supervisory authority; e) if the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the interested party has the obligation to provide personal data and the possible consequences of not communicating such data; f) the existence of an automated decision-making process, including profiling referred to in article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party. If the data controller intends to further process personal data for a purpose other than the one for which they were collected, before such further processing, it provides the interested party with information regarding this different purpose and any other relevant information referred to in paragraph 2. Paragraphs 1, 2 and 3 do not apply if and to the extent that the data subject already has the information.”The rights referred to in the articles mentioned above can be exercised by the interested party, at any time, by writing (by means of a letter to a .r.) to Juliagraf spa, with headquarters in Premariacco (UD), Via Arturo Malignani, n. 14, or to the e-mail address info@juliagraf.itIn added to the above, the user is informed that he can at any time view, modify, delete his personal data, simply by accessing the self-service interface available in his personal account (only for registered users), as well as to grant or revoke the consent previously provided for the purposes indicated in the previous paragraphs of this information or to express your opposition to the processing of data in the cases and for the purposes mentioned in the previous paragraphs.

‍Final Provisions.

‍Juliagraf spa adopts appropriate and preventive security measures aimed at safeguarding the confidentiality, integrity, completeness and availability of the personal data of the interested party. In any case, the Data Controller is not responsible for untrue or incomplete information sent directly by the Customer (example: correctness of the e-mail address or credit card details or postal address), as well as information concerning him and that has been provided by a third party, even fraudulently.