RIVAIR S.r.l with registered office at Via I Maggio, 12, 24040 Canonica d’Adda BG inform you that it is the owner of the data processing of all personal data of the Buyer (hereinafter “Data Subject”) contained in the purchase orders sent to sales@barbararizzi.com and collected in the performance of the relevant supply contracts, or in the registration form. The processing will be based on principles of correctness, lawfulness and transparency, protecting the privacy and rights of the data subject. RIVAIR deals with the following types of common data: name, surname, locality, address, country, telephone number of the data subject and related e-mail address (in the latter case, the e-mail address is acquired during registration / account creation).
This data protection notice has the purpose of informing you on the processing of your personal data, collected in the manner described herein, for the following purposes:
A) contractual and/or pre-contractual purposes;
B) to send you the newsletter by RIVAIR
Your personal data are collected directly by RIVAIR
The personal data collected and processed consists of common data that allows for the direct or indirect identification of you (such as your first name and surname, email address, telephone number and IP address), including through the use of cookies, as further detailed in the Cookie Policy.
Your personal data will be processed for the following purpose and on the following legal grounds:
A. CONTRACTUAL AND PRECONTRACTUAL
(Legal basis: Fulfilment of contractual obligations and/or the implementation of pre-contractual measures – Article 6(1)(b) of the GDPR).
This concerns the processing of personal data collected via:
filling out the purchase orders by the Daya Subject sent to sales@barbararizzi.com and collected in the performance of the relevant supply contracts, or in the registration form.
The legal basis for the processing is the fulfilment of contractual obligations and/or the implementation of pre-contractual measures.
B. NEWSLETTER (legal basis: consent, Article 6(1)(a) of the GDPR).
This concerns the processing of personal data collected via the newsletter subscription form. Data will only be processed with the user’s prior consent.
Consent may be withdrawn at any time.
In the case referred to in point B), following the withdrawal of your consent, your personal data will no longer be processed by Rivair Srl for the purpose for which consent was withdrawn; consequently, you will no longer receive the newsletter. The data will therefore be deleted, unless there is a legal basis as referred to in point C) that justifies their retention by Rivair Srl. or a different legal basis that renders the processing lawful..
C. FULFILLMENT OF LEGAL OBLIGATIONS ((legal basis: compliance with legal obligations – Article 6(1) of the GDPR)).
Personal data will, in any event, be processed in order to comply with the obligations arising from national and/or European Union law (Article 6(1)(c) of the GDPR) to which RIVAIR. is subject.
Your personal data will be processed by formally appointed data processors and data controllers who will use tools and media – whether paper-based, magnetic, computerised or electronic – that are suitable for ensuring the security and confidentiality of your data. The processing may also be carried out using automated tools designed to store, manage and transmit the data electronically.
– Mandatory – with regard to the purpose set out in point A); therefore, any refusal to provide such data, in whole or in part, or failure to authorise their processing and/or disclosure to the relevant third parties, will result in RIVAIR being unable to carry out the requested activity.
– Optional – with regard to the purpose set out in point B; therefore, any refusal to provide such data, in whole or in part, or failure to authorise their processing and/or disclosure to third parties involved in the sending of the newsletter by RIVAIR may result in the latter being unable to carry out the relevant activities.
With respect to your personal data, in your capacity as data subject, you may, by sending a written request by email to the following address: sales@barbararizzi.com.
* to request the access to your personal data, the rectification or erasure of such data, or the restriction of processing, or to object to the processing (pursuant to Articles 15, 16, 17, 18, 19 and 21 of EU Regulation 679/2016). In particular:
* with reference to the rectification of personal data, taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement;
* with reference to the restriction of processing, you have the right to obtain this where any of the following circumstances apply: a) you contest the accuracy of the personal data, for the period necessary for RIVAIR to verify the accuracy of such personal data; b) the processing is unlawful and you oppose the erasure of the personal data and request instead that its use be restricted; c) although RIVAIR no longer requires the personal data for processing purposes, you require the personal data for the establishment, exercise or defence of legal claims; d) the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the controller override those of the data subject.
* with reference to the erasure of personal data without undue delay, you have the right to have your data erased where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) you, as the data subject, withdraw the consent on which the processing is based and there is no other legal basis for the processing; c) the personal data has been processed unlawfully; d) the personal data must be erased to comply with a legal obligation under Union or Member State law to which RIVAIR is subject;
* to receive the personal data concerning you, which you have provided to a data controller, in a structured, commonly used and machine-readable format, and to have the right to transmit those data to another data controller without hindrance from RIVAIR (the so-called “right to data portability” pursuant to Article 20 of EU Regulation 679/2016);
* withdraw your consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal (pursuant to Article 8(3) of EU Regulation 679/2016).
Your personal data will not be disclosed and will not be transferred to third countries or international organisations.
Your personal data is stored on servers located within the EU
7. Data Controller – External data processor.
The data controller is RIVAIR SRL, with registered office at Via I Maggio, 12, 24040 Canonica d’Adda BG, which can be contacted at the following address: sales@barbararizzi.com. The full list of external data processors can be viewed by writing to the email address above.
Without prejudice to disclosures made in compliance with legal obligations, your personal data may be disclosed:
As far as the CONTRATTUAL/ PRECONTRACTUAL PURPOSES are concerned:
As far as the NEWSLETTER is concerned;
– to service and content providers (providers of electronic and telematic communication services).
The personal data you have provided will be stored in a form that allows you to be identified as the data subject for the following period:
(contractual purposes – pre-contractual measures) until the pre-contractual and/or contractual purpose with you ceases to apply: thereafter, personal data will no longer be processed for that purpose and will be erased, subject to compliance with any legal obligations, where applicable.
(newsletter) until consent is withdrawn: thereafter, personal data will no longer be processed for this purpose and will be deleted, subject to compliance with any legal obligations, where applicable.
There is no automated system for deleting personal data at the end of the retention period, as this is done manually.
If you believe that the processing of your data infringes Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority, specifically in the Member State where you usually reside, work, or where the alleged infringement occurred.
Regarding Rivair’s use of cookies, including for profiling purposes, please read our Cookie Policy.
