Privacy and Cookie Policy

The Tombolini group is aware of the importance of the personal data of its customers and users, therefore it intends to inform and provide them with the greatest possible control over the management of personal information collected through this website (the "Site").

Ownership of the data collected and processed on the Site and Data Protection Officer The Data Controller of the data collected on the Site is: - Area 62 srl - Co.da Fiastra 73 - 62020 Colmurano - Italy

2) Category of data processed, purposes of the treatments carried out on the Site Through the Site, different types of personal data are collected and processed, for different purposes and with different methods. More precisely: (a) Cookies: personal data relating to navigation, processed both in order to allow the Site to function properly and for marketing purposes. In this regard, we invite you to read the specific Cookie Policy; (b) Registration and Services: personal data provided voluntarily by the user (such as e-mail address, personal data, password and information provided by completing the registration form, or otherwise lawfully acquired, to respond to requests for the latter and offer the services, assistance and information requested about the products. (c) Social log-in: It should be noted that registration and access via a social profile involve the communication of certain data (including name, surname, email and any other data relating to the user and present on the social network itself) by of the chosen social network and require a specific authorization to proceed before logging in. In some cases, social networks require you to obtain some feedback and information about the use of the log-in. (d) Marketing: with the express consent of the user, Area 62 srl may process the personal data of the latter for marketing purposes, i.e. to send the user, including via newsletters, emails, sms and updates on products, sales, promotional campaigns, events and other initiatives promoted by Area 62 srl, also in collaboration with its commercial partners, as well as to carry out specific market research.

Source of personal data and legal basis of the processing

The personal data collected and processed by Area 62 srl are provided directly by the user, except for the navigation data referred to in the "Cookie" section of the previous point 2 (a) and for the data collected in case of registration and access via social profile referred to in the "Social log-in" section of point 2 (c) above. With the exception of navigation data, regulated by the Cookie Policy, the processing of personal data is based: - for the purposes of Registration and Services (point 2 b), in the legitimate interest of Area 62 srl to provide information, services on the Site and to respond to user requests (and in the contractual obligations arising in the case of use of specific services. As indicated in the previous point 2 de with the express consent of the user, Area 62 srl may process the personal data of the same user for the purpose of studying the habits and consumption choices of users to make its own products and initiatives more responsive to the tastes and needs of its customers. The data will be processed with the aid of automated tools, through which Area 62 srl will process data relating to the value and frequency of purchases as well as the type of products purchased over a specified period of time.

This study has the sole objective of offering customers and users products, services and initiatives more responsive to their tastes and needs, and will take place in a non-invasive manner.

As indicated in point 2 (a) above, with the express consent of the user, Area 62 srl may also process the personal data of the user himself, using automated tools to study cookies in order to verify navigation on the Site and propose services in line with the latter.

Methods of processing personal data and retention period

The personal data collected through the Site are processed using mainly IT and telematic methods and tools, adopting security measures in order to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access or processing that is not permitted or does not comply with the collection purposes indicated in this Privacy Policy. However, these measures, due to the nature of the online means of transmission, cannot absolutely limit or exclude any risk of unauthorized access or loss of data. To this end, it is advisable to periodically check that the computer is equipped with adequate software devices for the protection of data transmission over the network, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has adopted suitable measures. for the security of data transmission over the network (such as firewalls and spam filters). The personal data provided by the user during navigation and related to navigation itself, will be kept for a period not exceeding 1 (one) year. The personal data processed to provide feedback to the interested party, or to provide a service, will be kept for the time necessary to provide the user with the requested feedback or service. The data collected for marketing purposes will be kept for a suitable retention period in line with the reference sector and in consideration of the interest shown by the customer in receiving updates on products and events organized by Area 62 srl. For more information, you can contact the Data Protection Officer.

5) Compulsory or optional nature of providing data

With the exception of navigation data whose provision and collection are governed by the Cookie Policy, the provision of personal data collected through the Site, both to deal with user requests and queries, and for marketing and study of the consumption habits and preferences is free, optional and optional. Failure to provide it does not limit the use of the Site, however it may make it impossible for Area 62 srl to meet requests for information and questions, or to send information material, updates, newsletters and invitations to events organized by Area 62 srl and / or by its business partners, or to offer you products in line with your needs.

Categories of recipients of personal data

Area 62 srl communicates the personal data of users of the Site only within the limits permitted by law and in accordance with what is communicated below. In addition to what is indicated in point 2 (f) above. (i.e. the communication of personal data to third parties belonging to the Area 62 srl Group or to commercial partners upon express consent) and in the previous point 2 (c) (i.e. the use of the Social log-in), personal data will be processed and known by: 1. employees and consultants of Area 62 srl who will operate as subjects authorized to process and in this sense instructed by the Data Controller; 2. companies of the same Group, as appointed data processors, in order to carry out certain activities and services; 3. companies that perform specific technical and organizational services for Area 62 srl connected to the Site and the management of marketing and communication activities, as data processors. Furthermore, the data may be disclosed to police forces or judicial authorities, in accordance with the law and upon formal request by such subjects, or in the event that there are well-founded reasons to believe that the communication of such data is reasonably necessary. to (1) investigate, prevent or take action relating to suspected illegal activity or assist state control and supervisory authorities; (2) defend against any claim or accusation by third parties, or protect the security of its website and the company; or (3) exercise or protect the rights, property or safety of area 62 srl, of the companies of the same group, of its affiliates, of its customers, of its employees or of any other person.

Personal data will not be disclosed, but may be transferred abroad, even in non-EU countries, only by guaranteeing adequate levels of protection and safeguarding according to the law, such as the Standard Contractual Clauses approved by the European Commission. For more information regarding the location of data, you can contact the Data Protection Officer.

Rights recognized by the privacy law to the user

The user always has the right to obtain from Area 62 srl access to personal data concerning him, confirmation of the existence or not of such data, even if not yet registered, and their communication in an intelligible form. He also has the right to obtain information about the origin of personal data; the purpose and method of processing; the logic applied in case of treatment carried out with the aid of electronic instruments; the identification details of the data controller and data processors; the indication of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as, for example, managers or processors. The user also has the right to request the updating, correction or, when interested, the integration of personal data, the limitation of the treatments that concern him, the cancellation, transformation into anonymous form or blocking of data. personal, processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; the attestation that the above operations have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right. The user also has the right to data portability, oblivion, to lodge a complaint with the supervisory authority and to revoke the consent previously given. The user has, however, the right to object in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection, to the processing of personal data concerning him for the purpose of sending advertising or direct marketing material or for carrying out market research or commercial communication. The right to object may also be exercised specifically with regard to one or more methods of sending marketing communications. The rights listed above may be exercised by contacting Area 62 srl, for the attention of the Data Protection Officer.

The Tombolini Group is aware of the importance of its customers' personal data and therefore intends to inform and provide them with the greatest possible control over the management of personal information collected and processed during purchases made on this website (the "Site" ).

References of the Data Controller

Data Processors and Data Protection Officer: - Area 62 srl - C.da Fiastra 73 - 62020 Colmurano - Italy Furthermore, for exclusively organizational and functional needs, the Joint Controllers have appointed specific external subjects as data controllers, for purposes strictly connected and correlated to the sale of products and to the functional and instrumental activities (such as, for example, delivery). These managers were chosen because they have demonstrated their experience, ability and reliability and to provide a suitable guarantee of full compliance with the current provisions on processing, including the data security profile. The managers process the personal data of the users of the Site according to the instructions given by the Data Controller. It is also periodically verified that the managers have punctually fulfilled the tasks entrusted to them and that they continue to provide suitable guarantees of full compliance with the provisions on the protection of personal data.

The owner collects personal data directly from users as part of the registration processes, sending product purchase order forms, concluding e-commerce transactions and interrelating with users for functional and instrumental activities to the sale. , as well as for any necessary pre and post sales assistance. Further specific purposes may be better illustrated through specific information present on the Site from time to time.

Source of personal data and legal basis of the processing

The personal data collected and processed by the owner are provided directly by the user (as part of the sales process). The legal basis of the processing for the purposes referred to in the previous point (2), lies in the fulfillment of the contract and in the obligation to fulfill the pre and post contractual obligations.

3) Methods of processing personal data and data retention period

The personal data collected through the Site on the occasion of the activities inherent and instrumental to the sale of the products and everything related to it, are processed using mainly IT and telematic methods and tools, adopting security measures in order to minimize risks. destruction or loss, even accidental, of the data, unauthorized access or processing that is not permitted or does not comply with the collection purposes indicated in this Privacy Policy. However, these measures, due to the nature of the online means of transmission, cannot absolutely limit or exclude any risk of unauthorized access or loss of data. To this end, it is advisable to periodically check that the computer is equipped with adequate software devices for the protection of data transmission over the network, both incoming and outgoing (such as updated antivirus systems) and that the Internet service provider has adopted suitable measures. for the security of data transmission over the network (such as firewalls and spam filters). Personal data related to sales activities are kept for a period of time not exceeding that allowed by tax and civil legislation.

Compulsory or optional nature of providing data

The provision of personal data, in particular personal data, e-mail address, postal address and telephone number, as well as bank data in case of payment by credit card, is necessary with regard to the conclusion of the contract for the purchase of products through the Site. Conversely, some of these data could be indispensable for the provision of other services rendered on the Site and related to the sale or to fulfill obligations deriving from laws or regulations. Any refusal to indicate certain data necessary for these purposes could make it impossible to execute the contract for the purchase of products on the Site or to provide other services connected to it - such as assistance services (Customer Service), use of the Wish List - or, again, to properly fulfill legal and regulatory obligations. Failure to provide the data may therefore constitute, depending on the case, a legitimate and justified reason for not executing the contract for the purchase of products on the Site for the provision of related services. The communication of further data, other than those of mandatory conferment, for the purpose of fulfilling one's legal or contractual obligations or for the provision of certain services on request is, on the other hand, optional and does not entail any consequences for the purchase of products or for services strictly connected and correlated to this. Depending on the case and, if necessary, the mandatory or optional nature of the data communication will be indicated from time to time, by adding a special character (*) to the mandatory information or only the data necessary for the provision of services and for purchase of products on the Site. Failure to provide optional personal data will not entail any obligation or disadvantage.

Categories of recipients of personal data

Personal data may be made available to third-party companies that perform, on behalf of the Joint Controllers, specific services, as data processors (such as, for example, logistics services, anti-fraud services and IT services), to companies of the same. group or other recipients, who will process the data only to execute the contract for the purchase of products on the Site (such as the credit institution, for the execution of remote electronic payment services, by credit / debit card ) and in any case only if these treatments were not in contrast with those for which the data were collected and processed as well as in compliance with the applicable legislation. The data will not be disclosed, sold or otherwise transferred to other third parties, without the users being previously informed and, with their consent, when this is required by law. The data will not be disseminated in any way and will be transferred abroad, even to non-EU countries (including countries such as Israel, the United States and Nepal for the execution of specific anti-fraud activities) only by guaranteeing adequate levels of protection and safeguarding. according to the law, adopting specific safeguard measures such as the Standard Contractual Clauses, approved by the European Commission.

Rights recognized by the privacy law to the user.

The user always has the right to obtain from the owner access to personal data concerning him, confirmation of the existence or not of such data, even if not yet registered, and their communication in an intelligible form. He also has the right to obtain information about the origin of personal data; the purpose and method of processing; the logic applied in case of treatment carried out with the aid of electronic instruments; the identification details of the data controller and data processors; the indication of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as, for example, managers or processors. The user also has the right to request updating, rectification or, when interested, integration of personal data, limitation of processing that concerns him, cancellation, transformation into anonymous form or blocking of data. personal, processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; the attestation that the above operations have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right. The user also has the right to data portability, to lodge a complaint with the supervisory authority as well as to revoke the consent previously given. The user has, however, the right to object in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of collection, to the processing of personal data concerning him for the purpose of sending advertising or direct marketing material or for carrying out market research or commercial communication. The right to object may also be exercised specifically with regard to one or more methods of sending marketing communications. It will be possible at any time to exercise the rights listed above, provided that within the limits of the law, with a request addressed to the owner, for the attention of the Data Protection Officer