Privacy Policy | The Perla Company

The Organisation as Data Controller, in compliance with EU Regulation 679/2016- considers privacy and personal data protection the main objective of its activity.
We hereby invite you, before communicating any personal data to the Data Controller, to read this Privacy Policy carefully because it contains important information regarding your data protection.

This Privacy Policy:
   • is intended for the site www.italianpastryexcellence.com;
   • is an integral part of the Site and the services we offer;
   • is provided, pursuant to art. 13 of the Regulation, for those interacting with the Site's web services, both through simple consultation and through the use of specific services made available by the Site (e.g. contact form)

The Data Controller can be reached at: info@italianpastryexcellence.com.
This document has been drafted in compliance with art. 13 of EU Regulation 2016/679 for the purpose of allowing you to become acquainted with our privacy policy, to understand how your personal information is handled when using our site and, where appropriate, to give your express and informed consent to the processing of your personal data. The information and data you provided or otherwise acquired while using G.M. Piccoli S.p.A.’s services will be processed in compliance with the provisions of the Regulations and the confidentiality obligations governing G.M.’s Piccoli S.p.A. activities.
Pursuant to the standards of the Regulation, G.M. Piccoli S.p.A.’s data processing will be based on principles of lawfulness, fairness, transparency, limitation of purposes and storage, data minimisation, accuracy, integrity and confidentiality.

1. Data Controller and "DPO" Personal Data Protection Officer
The data controller of the processing conducted by the Site is G.M. Piccoli S.p.A, Via Toscana,9 - 24022, ALZANO LOMBARDO (BG), reachable at info@italianpastryexcellence.com.

2. Personal data subject to processing

We would like to inform you that while browsing the Site, G.M. Piccoli S.p.A will process your personal data, which may include an identifier such as your name, an identification number, an online identifier or one or more characteristic elements of your natural, economic, cultural or social identity capable of identifying the interested party or making it identifiable.
Personal Data processed by the Site are as follows:
Contact data such as name, surname, e-mail and telephone number.
Some particular data which you have freely provided in the “contact” form may be processed.

   a. Browsing data
Computer systems and software procedures used to operate the Site acquire, during their ordinary operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. These information are not collected to be associated with identified data subjects, but by its very nature could allow users to be identified through processing and association with data held by third parties. This category of data includes IP addresses or domain names of computers used by users connecting to the Site, URI (Uniform Resource Identifier) addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and computer environment of the user. These data are used for the sole purpose of obtaining anonymous statistical information regarding the use of the Site and to check its correct functioning, to identify anomalies and/or abuse. The data could be used to ascertain responsibility in case of hypothetical cyber-crimes against the site or third parties: apart from this possibility, at present data on web contacts are not stored for more than seven days.

   b. Special categories of personal data
When using the “Contacts” section on the Website, Personal Data included in the special categories of Personal Data referred to in art. 9 of the Regulation could be communicated, namely "[...] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic and biometric data aimed at uniquely identifying a natural person, or data referring to a person's health, sexual life or sexual orientation". We encourage you to communicate such data only where absolutely necessary. We would like to remind you that in the event of the transmission of special categories of personal data, but without specific consent to process such data (which of course allows you to send in a curriculum vitae), G.M. Piccoli S.p.A. cannot be held responsible for any kind of dispute, because in such a case processing will be allowed as it relates to data clearly made public by the person concerned, in compliance with art. 9(1)(e) of the Regulation. In any case, we would like to emphasise the importance, as already mentioned above - of expressing explicit consent to process the special categories of Personal Data, whenever you decide to share such information.

   c. Data provided spontaneously by the interested party.
When using some Site Services, there could be a possible processing of Third Parties' Personal Data sent by you to G.M. Piccoli S.p.A. With regard to these hypotheses, you stand as an autonomous data controller, assuming all legal obligations and responsibilities. To this effect, you give on this point the widest indemnity for any dispute, demand, compensation claim for damages caused by processing, etc.. that may be received by G.M. Piccoli S.p.A. from third parties whose Personal Data have been processed during your use of the Site functions in violation of the applicable legislation on personal data protection. In any case, should you provide or otherwise process third party Personal Data while using the Site, you guarantee from now on - assuming all related responsibilities - that this particular processing hypothesis is based on an appropriate legal basis pursuant to art. 6 of the Regulation that legitimises the processing of the information in question.

3. Data processing purpose

The data processing that we intend to conduct, with your specific consent where necessary, has the following purposes:
a. Enabling the provision of the Service you requested
b. responding to assistance or information requests;
c. fulfilling any legal, accounting and tax obligations.

4. Legal basis and mandatory or optional nature of the processing

The legal basis of Personal Data processing for the purposes referred to in section 3(a-b) is art. 6(1)(b) of the Regulation since the processing is necessary for the provision of Services or in response to data subjects' requests. The conferment of Personal Data for these purposes is optional but failure to do so would make it impossible to activate Services provided by the Site. The purpose referred to in section 3c represents a legitimate processing of personal data in compliance with art. 6(1)(c) of the Regulation. Once the Personal Data has been provided, processing operations are necessary to comply with a legal obligation that G.M. Piccoli S.p.A. is subject to.

5. Personal Data Recipients

Your Personal Data may be shared, for the purposes set out in the above mentioned section 3, with:
   • a. subjects who typically act as data processors pursuant to art. 28 of the Regulation or: i) persons, companies and professional firms providing assistance and advice to G.M. Piccoli S.p.A. in accounting, administrative, legal, fiscal, financial and credit recovery matters in relation to the provision of Services; ii) subjects with whom it is necessary to interact in order to provide Services (for example hosting providers) iii) or subjects delegated to carry out technical maintenance tasks (including the maintenance of network equipment and electronic communication networks); (collectively "Recipients"); the list of data processors responsible for processing data may be requested from the Data Controller.
   • b. subjects, entities or authorities, autonomous data controllers, to whom it is mandatory to communicate your Personal Data in compliance with legal obligations or orders issued by authorities;
   • c. persons authorised by G.M. Piccoli S.p.A to the processing of Personal Data pursuant to art. 29 of the Regulation necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of G.M. Piccoli S.p.A).

6. Data retention

Personal Data processed for the purposes set out in section 3(a-b) will be retained for the time strictly necessary to achieve those purposes in compliance with the principles of minimisation and storage limitation pursuant to art. 5.1.e) of the Regulation. In any case, the Owner will process Personal Data for the time necessary to fulfil contractual and legal obligations.
More information about the period of data retention and the criteria used to determine this period can be requested by writing to the Owner.

7. Data subjects rights

Pursuant to Articles 15 et seq. of the Regulation, you have the right to request, at any time, access to your Personal Data, their correction or deletion, the limitation of processing in the cases provided for by Article 18 of the Regulation, to obtain in a structured format, in common use and readable by automatic device, your data, in compliance with Article 20 of the Regulation. At any time, you may revoke your consent pursuant to art. 7 of the Regulation; lodge a complaint with the competent supervisory authority pursuant to art. 77 of the GDPR (Guarantor for the Protection of Personal Data) if you believe that the processing of your data is contrary to current legislation.
You can lodge a request to oppose the processing of your data pursuant to Article 21 of the GDPR in which you can give evidence of the reasons justifying the objection: the Owner reserves the right to assess the request, which would not be accepted if there are legitimate compelling reasons to proceed with the processing that prevail over your interests, rights and freedoms.
The requests must be addressed in writing to the Owner.

8. Changes

This privacy policy has been effective as of March 8, 2019. G.M. Piccoli S.p.A reserves the right to modify or simply update its content, in part or in full, also due to changes in the applicable regulations. G.M. Piccoli S.p.A will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the Site. G.M. Piccoli S.p.A. therefore invites you to visit this section regularly in order to familiarise yourself with the most recent and updated version of the privacy policy so as to be always informed about the collected data and its use by G.M. Piccoli S.p.A.

9. Cookies

Please refer to the Cookie policy section.