In compliance with articles 13 (for data collected from the interested party) and 14 (for data not collected from the interested party) of the Regulation (EU) 2016/679 (GDPR) the Users of this Website are given the following information, which refers to exclusively to the processing carried out through the Bio-Natural.eu website referred to as the Website and not through other websites that may be visited through links published on the pages of the present, for which it is suggested to read the relative information provided by the respective Owners.
The Bio-Natural.eu site and any services offered on the pages during navigation are reserved for individuals who have reached the age of eighteen. Therefore, the Data Controller does not collect personal data relating to subjects under the age of 18. Upon request by such Users, the Data Controller will promptly cancel all personal data inadvertently collected.
1. Data Controller
Smart Plus by Meneghel Elvio based in Via Vittorio Emanuele II, 13 - 20814 Varedo MB (Italy) PI 03059820963 (hereinafter also "Smart Plus" or "Owner"), as owner of the processing of personal data of site users Bio-Natural.eu (hereinafter, "Users") provides the following privacy information pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter, the "Privacy Code") and pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter the "Regulation", the Regulation and the Privacy Code are together defined as "Applicable Regulations").
The Data Controller and the Data Processor also process the Users' data thanks to their own in-house representatives, specially designated and provided with instructions for the correct processing of personal data, also orally.
The person responsible for the protection of personal data can be contacted by email: firstname.lastname@example.org
2. Category of processed data and sources of origin / Purpose of processing
Category of processed data and sources of origin
- Common data provided voluntarily by the user, such as:
- identification data
- adresses and contact details
- others similar to common data
- Navigation data
Sources: user; navigation, other sites, cookies and the like; public sources.
We will be able to treat, firstly, the data provided voluntarily by the user, for the completion of the process of purchasing goods such as common personal data (identifiers, personal details, billing addresses and the like) through the obligatory forms for the confirmation of the purchase or through applications for contact requests or for telephone communications or sent by e-mail.
We may process navigation data as well as cookies.
The data could also be given: voluntarily by the user or by subjects related to it during the purchase process; other data may come from the user's navigation, which could also carry information relating to previous consultations with other sites, including in particular cookies and other similar technologies. Other data could come from public sources, such as those dealt with in the context of research and coming from surveys, public databases and the like.
Purpose of the processing
The personal data of the Users of the Bio-Natural.eu site, as described above, will be processed in the manner and in the forms prescribed by the GDPR, for the performance of the functions of the website, with particular, but not exclusive, reference to the procedures described herein as collecting data, completing the purchase process, contact form, any registration / access procedure for the reserved area, newsletter subscription and similar.
In particular, the personal data provided to the Data Controller will be processed for the following purposes:
• To follow up the payment check, the completion of the purchase process and the shipment of the goods to the recipient (electronic shopping cart form)
• The data may be transferred to third parties exclusively for the management of services which are ancillary to the purchase such as payment and shipment of the goods.
• to respond to the specific requests made to the Owner by the Website and its communication tools (contact applications, information request forms and the like);
• for the possible subscription to the newsletter and the consequent sending of various commercial and informative communications concerning the sector in which the Owner operates, with the appropriate consent given by the user
• for informational communications concerning the services of the same Owner, following the request for information by e-mail messages or by filling in applications for contacts and other communication tools;
• for other purposes ancillary to or related to those indicated above and in any case within the scope of the activities of the Website;
• for the processing of the e-mail address, provided by the interested party in the context of the sale of a product or service, also aimed at sending, without further consent, communications for the subsequent direct sale of products or services similar to those subject of the sale itself; the interested party can in any case express his / her refusal and oppose such treatment, both initially and subsequently, in an easy and free manner, following the instructions given in each subsequent communication.
3. Legal basis of the treatment
The processing of personal data is based on the right to information, on the fulfillment of contractual obligations or social contact, or where necessary on consent by free and consciously filling in the appropriate information fields in the dedicated forms.
4. legitimate interest of the Owner
The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the information society, the performance of the contractual service and the implementation of direct marketing operations.
5. Mandatory transfer
The provision of data relating to navigation by Users during the purchase process is mandatory for the purposes of selling and shipping the goods and will be endorsed by the user through a specific check box; the data may be transferred to third parties exclusively for the specific purposes of the case, information on the data processing of the respective Owners will be available on the integration pages.
The provision of data relating to navigation by Users for the aforementioned purposes depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases the disabling may affect navigation on this website. For certain modules of this website, the provision of navigation data and / or the use of technical cookies is mandatory for the proper functioning of the website.
The provision of some personal data is in any case necessary for the structure of the Website and its procedures.
6. Any recipients of personal data
The data may be communicated to connected companies, connected or controlled by the Data Controller, as well as to consultants, or even to third parties that operate, also in the name and on behalf of the Data Controller, for the evasion of the services connected to the purposes indicated in this information, both within the EU and outside the EU (in the latter case, they will be exclusively subjects adhering to the Privacy Shield protocol).
The navigation data and the like (for which we refer the above), as well as the profiling cookies also from third parties (for which we refer to the Cookie Information of this Web Site), which will be communicated to the respective third parties concerned, where these do not manage them directly as Data Controllers.
7. Period of conservation
The data provided by the interested party will be stored until the revocation is expressed by the interested party, including through action on his browser, cleaning of cookies, express request or otherwise expressed.
The navigation data will be kept for the technical time necessary to fulfill the functions for which they were collected.
Accounting data will be kept until the legal deadline expires.
8. Rights of the interested party
Each interested party has the right of access, rectification, cancellation (oblivion), limitation, receipt of notification in the event of rectification, cancellation or limitation, of portability, of opposition and of not being subject to an individual decision automated, including profiling, pursuant to articles from 15 to 22 of the GDPR.
These rights can be exercised in the forms and terms of art. 12 GDPR, by written communication sent to the Owner via e-mail to the address email@example.com
The Holder will make an adequate reply as soon as possible and in any case within 1 month from receipt of the request. Pursuant to articles 15 and following of the Regulations, the user has the right to request access at any time.
9. Right to revoke consent
This consent can be revoked at any time via
• sending an email to the Owner address firstname.lastname@example.org;
• express communication at the owner's offices.
Each interested party has the right to lodge a complaint pursuant to articles 77 and following of the GDPR to a supervisory authority, which for the Italian State is identified in the Guarantor for the protection of personal data.
The forms, methods and terms for proposing the complaints are provided for and regulated by the national legislation in force. The complaint is without prejudice to administrative and jurisdictional actions, which for the Italian State can be proposed alternatively to the same Guarantor or the competent Court.
The personal data provided with the form may be subject to profiling.
The profiling allows the Data Controller to evaluate certain personal aspects of the Interested party related in particular to his preferences, his interests, his tastes with reference to the products sold and the activities carried out by the Owner, in order to allow the Owner to offer the Interested in a more specific sales service aimed at his needs.
Last updated: 19 August 2019
Consult the Official Journal of the European Union for the full text of the EU Regulation 2016/679 (GDPR).