Privacy Policy

Source of the personal data

Your personal data are collected directly by RIVAIR.

Types of data collected

The personal data collected and processed consists of common data that allows for your direct or indirect identification (such as your first name and surname, email address, telephone number and IP address), including through the use of cookies, as further detailed in the Cookie Policy.

Purpose and legal ground

Your personal data will be processed for the following purpose and on the following legal grounds:

Legal basis: fulfilment of contractual obligations and/or the implementation of pre-contractual measures — Article 6(1)(b) of the GDPR. This concerns the processing of personal data collected by filling out the purchase orders sent by the Data Subject to sales@barbararizzi.com and collected in the performance of the relevant supply contracts, or in the registration form.

Legal basis: compliance with legal obligations — Article 6(1)(c) of the GDPR. Personal data will, in any event, be processed in order to comply with the obligations arising from national and/or European Union law to which RIVAIR is subject.

Methods of processing

Your personal data will be processed by formally appointed data processors and data controllers, using tools and media — whether paper-based, magnetic, computerised or electronic — that are suitable for ensuring the security and confidentiality of your data. The processing may also be carried out using automated tools designed to store, manage and transmit the data electronically.

Nature of the processing

The provision of data is mandatory with regard to the purpose set out in point A). Therefore, any refusal to provide such data, in whole or in part, or any failure to authorise their processing and/or disclosure to the relevant third parties, will result in RIVAIR being unable to carry out the requested activity.

Rights of the Data Subject

With respect to your personal data, in your capacity as Data Subject, you may — by sending a written request by email to sales@barbararizzi.com — request from RIVAIR S.r.l., as the data controller, access to your personal data, the rectification or erasure of such data, the restriction of processing, or to object to the processing (pursuant to Articles 15, 16, 17, 18, 19 and 21 of EU Regulation 679/2016). In particular:

• Rectification. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.
• Restriction of processing. You have the right to obtain this where: (a) you contest the accuracy of the personal data, for the period necessary for RIVAIR to verify it; (b) the processing is unlawful and you oppose erasure, requesting instead a restriction of use; (c) RIVAIR no longer needs the data for processing purposes but you require it to establish, exercise or defend a legal claim; (d) you have objected to processing pursuant to Article 21(1), pending verification as to whether RIVAIR's legitimate grounds override yours.
• Erasure without undue delay. You have the right to have your data erased where: (a) the data are no longer necessary for the purposes for which they were collected; (b) you withdraw the consent on which the processing is based and there is no other legal basis; (c) the data has been processed unlawfully; (d) the data must be erased to comply with a legal obligation under Union or Member State law to which RIVAIR is subject.
• Data portability. You have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from RIVAIR (Article 20 of EU Regulation 679/2016).
• Withdrawal of consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (pursuant to Article 8(3) of EU Regulation 679/2016).

Your personal data will not be disclosed and will not be transferred to third countries or international organisations. Your personal data is stored on servers located within the EU.

Data Controller & external data processors

The data controller is RIVAIR S.r.l., with registered office at Via I Maggio 12, 24040 Canonica d'Adda (BG), which can be contacted at sales@barbararizzi.com. The full list of external data processors can be viewed by writing to the email address above.

Communication during the processing

Without prejudice to disclosures made in compliance with legal obligations, your personal data may be disclosed as follows. As far as the contractual / pre-contractual purposes are concerned, your data will be communicated to the courier for shipment, to service and content providers (providers of electronic and telematic communication services), and to professionals providing judicial or extrajudicial assistance in matters concerning the contract with the Buyer.

Data retention period

The personal data you have provided will be stored in a form that allows you to be identified as the Data Subject until the pre-contractual and/or contractual purpose ceases to apply. Thereafter, the data will no longer be processed for that purpose and will be erased, subject to compliance with any applicable legal obligations.

There is no automated system for deleting personal data at the end of the retention period, as this is done manually.

Complaints

If you believe that the processing of your data infringes Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you usually reside, where you work, or where the alleged infringement occurred.