Privacy Policy

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF CUSTOMERS

Pursuant to Article 13 of the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter "GDPR"), we inform you how we collect, process, communicate and protect your data.


WHO PROCESSES YOUR PERSONAL DATA?

The Data Controller is Zavatti S.r.l., responsible to you for the legitimate and correct use of your personal data and which you can contact for any information or request at the following addresses:
Headquarters:
Via Abetone Brennero, 144, 46025 Poggio Rusco MN

Contacts:

Telephone: +39 0386 740171 / + 39 0386 734513
Email: info@zavattishop.com / info@zavattipiscine.com

WHAT INFORMATION DO WE COLLECT?
The personal information we collect may include the following:
a) Personal data provided by the user.
We collect name, surname, email addresses, telephone number, data necessary to process the payment.
b) Navigation data
We automatically collect certain information when you visit and browse the website. This information does not reveal your specific identity (such as your name or contact information) but may include information about the device and its use, such as IP address, browser and device characteristics, operating system, language preferences, referrer URL, device name, country and other technical information. This information is mainly necessary to maintain the security and functioning of the services connected to the website and for internal analysis and reporting purposes.
b) Cookies
We use cookies, that is, small text files that are saved in the user's terminal when they visit the website. For a detailed description of the cookies used, please refer to the cookie policy of the site.

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?
Your personal data are collected and processed for the purposes set out below together with the legal basis of reference:

Purpose Data processed
Legal basis
A. Purchase management.
Creating your own user account in order
to proceed
to purchase the products
available on the site.
Identification data (name and surname);
E-mail; Necessary data to process
the payment

The processing is necessary for the execution
of a
contract of which the interested party is a party
or to the execution
of pre-contractual measures
adopted upon request
of the same
(Article 6 paragraph 1, letter b) GDPR).

B. Sending newsletters.
Periodic sending of emails to users
subscribed to the newsletter
list
relating to the products and services of the
Data Controller.
Identification data (name surname);
E-mail
The treatment is carried out with the consent
of the interested party (Article 6 par. 1, letter a) GDPR).
C. Sending information.
Sending information in response to requests
made by the user
by filling in the accessible form
to the site of the owner.
Identification data (name and surname);
E-mail; Telephone number

The processing is necessary for the execution of
a
contract of which the interested party is a party
or to the execution
of pre-contractual measures
adopted upon request
of the same
(Article 6 paragraph 1, letter b) GDPR).

D. Direct Marketing.
Sending of communications commercial,
promotional and advertising of
products and
services of the owner (direct marketing),
as well
as carry out investigations or
market research.
Identification data (name, surname);
E-mail
The processing is necessary for the prosecution of
the
legitimate interest of the Data Controller
(Article 6 par.1, letter f) GDPR).
Based on Article 130,
paragraph 4 of Legislative Decree 196/2003

(Privacy Code), if the Data Subject has
communicated
your email address to the Data Controller in context
of
the sale of a  product or service, the Owner
may use the
email address for sending communications
commercial
related to similar products or services without the explicit

consent of the Data Subject.


WILL YOUR INFORMATION BE SHARED WITH SOMEONE?
Your Data may be disclosed to third party suppliers and service providers who perform services for us or on our behalf and require access to such information, in particular the following categories of recipients:
• Subjects who carry out activities necessary for the provision of the services offered by the site, including, by way of example, management of the e-commerce platform, sending emails, analyzing the functioning of the site, who generally act as data controllers .
• Entities, professionals or other structures that assist the Owner in fulfilling administrative, accounting, insurance obligations.
• Public authorities and administrations for purposes related to the fulfillment of legal obligations or to subjects entitled to access it by virtue of the provisions of the law.
• Banks, credit institutions or other subjects to whom the communication of your data is necessary for the fulfillment of contractual obligations towards you.



CAN YOUR DATA BE TRANSFERRED TO THIRD COUNTRIES / INTERNATIONAL ORGANIZATIONS?
To provide the services offered through our site, your data may be transferred outside the European Economic Area, in particular:

Purpose: A. Purchasing management

Subject Country or organization Prerequisite
Adobe Inc. United States - San Jose, California Application of the standard contractual clauses of the
European Commission.
For more information:

www.adobe.com/legal/terms/enterprise-licensing/data-protection.html

HOW LONG ARE THE DATA KEPT?
In general, we will retain your data for as long as your account is active, unless a longer retention period is required or permitted by law (such as for tax and accounting obligations).
When we have no legal obligation or legitimate interest to process your Personal Data, we will delete or anonymize it, or, if this is not possible (for example, because they are backed up), we will keep them securely and isolated to prevent any further processing until cancellation is possible.
The data processed to send you newsletters and commercial information will be kept until the individual consent is revoked or the right to object is exercised.

To this end, simply click on the Unsubscribe button at the bottom of the emails received.

WHAT ARE YOUR PRIVACY RIGHTS?
In your capacity as data subject, you have the right to request from the Data Controller, pursuant to articles 15, 16, 17, 18, 19 and 21 of the GDPR:
• access to your personal data and all information referred to in Article 15 of the GDPR;
• the correction of your inaccurate personal data and the integration of incomplete ones;
• the cancellation of your data, except for those contained in documents that must be kept by the Data Controller and unless there is a legitimate overriding reason to proceed with the processing;
• the limitation of processing in the cases referred to in Article 18 of the GDPR.
You also have the right:
• to oppose the processing of your personal data, without prejudice to the provisions regarding the need and mandatory nature of data processing in order to use the services offered;
• to revoke any consent given for non-mandatory data processing, without thereby compromising the lawfulness of the processing based on the consent given before the revocation.
You can exercise all the above rights by sending an e-mail to the Owner at the e-mail address info@zavattishop.com. You also have the right to lodge a complaint with the Personal Data Protection Authority pursuant to Article 77 of the GDPR.



WILL CHANGES BE MADE TO THIS INFORMATION NOTICE?

This information may be subject to changes and additions. The date of the last update will be reported. If we make material changes to this statement, we will notify you by posting a visible notice on our site or by sending a notification directly.
Last update: 12/17/202