Privacy and Cookie Policy

INFORMATION FOR TREATMENT OF PERSONAL DATA

DISCLOSURE PURSUANT THE REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

Last update:  June 2020

This Privacy Policy contains information concerning the treatment of your personal data by ARTISAN DNA s.r.l. in pursuance and for the purposes of art. 13 of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).

Data controller

ARTISAN DNA s.r.l., Viale Europa 40, Porto Recanati (MC), Italy (hereafter also ‘we’ or ARTISAN DNA) is the Data Controller of personal data collected in accordance to this Privacy Policy.

The Data Controller does not fall within the cases provided for by Art. 37 c. 1, for this reason no Data Protection Officer (DPO) has been appointed.

CATEGORIES OF PERSONAL DATA PROCESSED

ARTISAN DNA may process the following categories of users' data:

Personal data : any information relating to an individual, identified or identifiable, even indirectly, by reference to any other information including a personal identification number; identification data, personal data that allow direct identification (such as but not limited to name, VAT number, address, email address, phone number, etc, see art. 4, par. 1, no. 1 GDPR).

Navigation data: The personal data acquired by computer systems and software procedures used to operate this website or the platform during their normal operation, whose transmission is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified people; however, by their nature through processing and association with data held by third parties they may allow to identify users.

This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) ​​of requested resources, time of request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. These data are used only to obtain anonymous statistical information about the website (most visited pages, number of daily visitors, geographical areas of origin, etc.) and to check its correct functioning and is deleted immediately after processing.

System logs: For needs related to operation and maintenance, this platform and any third-party services may collect system logs, which are files that record interaction between computer systems - including navigation information - and which may also contain personal data, such as IP Address.

Navigation data aimed at profiling: supplied indirectly by the user through the use of the services, or obtained and analysed following the user’s consent provided with the use of the website or the services;

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘data subject’ means an identified or identifiable natural person (“you”).

PURPOSES OF THE PROCESSING

The data and cookies transmitted  by you will be processed by ARTISAN DNA exclusively with the methods and procedures necessary to provide you with the requested or subscribed services (contractual purposes), to fulfil a legal obligation, or to satisfy a legitimate interest of the holder, and for the additional purposes for which you have given your consent. E.g., your data will be used by ARTISAN DNA to allow your registration on the site and to take advantage of all the services offered through the website and the platform.

(Direct marketing purposes) The processing of personal data for direct marketing purposes is regarded as carried out for a legitimate interest. The data can be used to send to you by email newsletters, promotional material or inform you of activities and services, carry out statistical analyses on anonymous basis, market surveys on anonymous basis, and sending commercial information to you about ARTISAN DNA’s products and promotional initiatives, similar to those you have previously chosen. We inform you that you can refuse or object to this purpose at any time as described below.

We inform you that some activities could be carried out through suppliers, specifically appointed Data Processors, also residing outside the European Union.

MODALITIES OF THE PROCESSING

The processing of your personal data is carried out using the modalities described in art. 4, no. 2 and in accordance with art. 32 of the GDPR. through automatic or manual methods.

Your personal data may be processed, pursuant to art. 6 letters a), b), c) and  f) GDPR, for the following purposes:

  • the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which the data subjects is a party or in order to take steps at the request of the data subject prior to entering into a contract;
  • processing is necessary to comply with a legal obligation to which the controller is subject;
  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

During the registration process to the website or to the platform and compatibly with the provisions of this privacy policy, the communication of certain data by you is required in order to register. The mandatory data are market with an *; their absence makes it impossible to register.

RECIPIENTS OF THE DATA

In pursuance of artt. 28 and 29 of the GDPR, your personal data will not be disclosed, but may be communicated where necessary for the provision of the service to employees and collaborators of the Data Controller in Italy and abroad without involving the data transfer outside Europe, or to other subjects appointed, if necessary, as Data Processors by ARTISAN DNA for technical or organizational tasks. Data may be communicated also to third-party companies or other subjects providing assistance and advice as external data processors.

The updated list of Data Processors can always be requested to the Data Controller.

Furthermore, your data may be communicated to competent authorities to execute the relevant laws and/or regulations, on request or when the communication is mandatory by law for the fulfilment of the mentioned purposes.

DATA RETENTION PERIOD

ARTISAN DNA, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, keeps your data for the duration of your consent, the contract, or that other retention period as required by law (e.g. accounting requirements). 

DATA TRANSFER

Your personal data will be processed by ARTISAN DNA within the European Union territory.

Should it be necessary to communicate your data outside the EU for purposes indicated in this Privacy Policy, or if it is necessary to transfer some of the data collected to technical systems and services managed in the cloud and located outside the European Union area, the treatment will be regulated in accordance with the provisions of Chapter V of the Regulation and authorized on the basis of specific decisions of the European Union. The proception of your data will therefore be guaranteed by: a) decision of adequacy of such third country as published by the European Commission; b) an adequate guarantee expressed by the recipient third party pursuant to art. 46 of the Regulation, in particular, application of binding corporate rules, so-called Corporate Binding Rules (BCRs) or standard data protection clauses approved by the Commission

RIGHTS OF DATA SUBJECTS

Pursuant to the GDPR, you can exercise some rights towards the Data Controller, such as obtaining from the Data Controller the cancellation of your data (right to be forgotten), the limitation, updating, rectification, portability, or right to oppose to the treatment of your personal data. More in detail, you can exercise the following rights (as set forth by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR):

  • to access to your personal data (article 15), i.e. confirmation of whether or not the processing of your personal data is being processed and, in this case, have access to the data;
  • to demand, to the data controller, a correction (article 16) and/or integration of your personal data;
  • to ask the data controller to delete your personal data (art. 17) without undue delay;
  • to ask the data controller to limit the processing of your personal data (Article 18), i.e. to obtain a confirmation that the processing of your personal data is limited to what is necessary for storing purposes;
  • to ask for data portability (article 20), that is to obtain in a structured common and legible format your personal data;
  • to object to their processing (article 21) or, at any time, to oppose, for any reason connected with your particular situation, the processing of your data;
  • with regard to automated decision-making processes (article 22), the right not to be subjected to a decision based uniquely on automated data processing without your explicit consent;
  • to cancel your personal data (Article 17), i.e. the right to obtain, in the cases provided for by the Regulations, the cancellation of your personal data;
  • to file a complaint with the Supervisory Authority (Article 77) for the protection of your personal data (for more info, please see www.garanteprivacy.it, email: garante@gpdp.it).

Furthermore, at any time, you may revoke the consent on which the treatment carried out is based. The withdrawal of your consent does not affect the lawfulness of the processing that took place on the basis of the consent given before the revocation.

MORE INFORMATION ABOUT THE EXERCISE OF YOUR RIGHTS

Any request for information or clarification about your rights and their execution can be addressed to the Data Processor by sending:

CHANGES TO INFORMATION 

The Data Controller reserves the right to modify, update, add or remove portions of this Privacy Policy at its discretion and at any time. The user should check it periodically. In order to facilitate the changes, it will be mentioned the date of such changes. Your use of the website, after the changes have been published will constitute acceptance of them.

 

INFORMATION ABOUT OUR USE OF COOKIES

DISCLOSURE PURSUANT THE REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR)

Last update: January 2022

Pursuant to and for the purposes of art. 13 of EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereafter, also, GDPR and subsequent changes) ARTISAN DNA, as a Data Controller, informs you that the consultation of this website and the use of the services offered involve the processing of some information directly or indirectly related to you.

Cookies are small aggregates of text stored locally in the temporary memory of your browser, and therefore on your computer, for periods of time varying according to the need and generally ranging from a few hours to a few years, with the exception of profiling cookies whose maximum duration is 365 calendar days.

Through cookies it is possible to record information relating to your preferences and other technical data in a semi-permanent way, which allow easier navigation and greater ease of use and effectiveness of the site itself. For example, cookies can be used to determine if a connection has already been made between your computer and our platform to keep “login” information. As a guarantee, only the cookie stored on your computer is identified.

In order to make your visit to our website as comfortable as possible and for the presentation of our assortment of products we use cookies or equivalent computer codes. We also use analysis tools for usability which by tracking user actions allow us to understand how our sites are used and improve their functionality and design.

Cookies Management

By using this website, the User expressly consents to the use of the strictly necessary cookies.

Cookies are connected to the browser used and can be disabled directly by the Cookie banner, thus refusing / withdrawing consent to their use, in compliance with the provisions of GDPR.

We inform you that disabling cookies may prevent the correct use of some functions of the site itself.

Further information on the procedures to be followed to disable cookies can be found on the website of the provider of your browser. As an example, in Firefox, through the menu Tools-> Options-> Privacy, you can access a control panel where you can define whether or not to accept the different types of cookies and proceed with their removal. Searching the web, you can easily find the documentation on how to set the cookie management rules for your browser, by way of example, here are some links relating to the main browsers:

Types of cookies

Cookies can be classified into:

  • Session cookies, or temporary, are those that expire or are deleted when the browser is closed, while persistent cookies have longer expirations (from a few minutes to whole months) depending on the functions they perform. It is these functions that distinguish cookies into two macro-categories: technical and non-technical (or profiling);
  • Technical cookies manage the data necessary for the delivery of the pages and facilitate navigation, allowing, for example, not to have to re-enter the user and password to access particular services, to remember the last page visited or to what extent you have seen a video, to recognize the type of device in use and to adapt the size of the images accordingly. Technical cookies also allow you to perform aggregate statistical analyses on the most visited pages and user preferences, but only anonymously, and are not used to analyse the behaviour or preferences of individual users (navigation, functional and analytical cookies);
  • Profiling cookies are permanent cookies used to identify (anonymously and not) user preferences and improve their browsing experience.

Cookies can be installed directly by the operator of the site on which you are browsing (so-called first-party cookies) or, if the site relies on external services for particular functions, from other websites (so-called third-party cookies).

The responsibility and management of first-party cookies is assumed directly by the owner.

The responsibility and management of third-party cookies falls instead on their respective owners and managers who must offer adequate rejection mechanisms in their privacy information.

Cookies belonging to the following types may be present on this site or product:

  • Cookies Issued without User Consent:
    • Strictly Necessary Cookies: to allow the user to view this website and make it work properly. These cookies are essential for the proper functioning of the site.
  • Cookies that can be disabled by the User
    • Functional cookies: to remember the preferences of the user and to help him use this website as effectively as possible, for example by storing the criteria, services and events that he previously viewed. Functional cookies are not essential for the Website to function, but add services by improving the overall browsing experience;
    • Analytical cookies: to better analyse how users use the Website and consequently optimize and improve it, and to ensure that it is always effective and efficient.
  • Third-party cookies:
    • While browsing this site, the user can receive third-party cookies (so-called “third-party” cookies) also for further non-technical purposes. The site, in fact, integrates features developed by third parties within its pages, such as icons and preferences expressed in social networks, for the purpose of sharing site content. An example is the presence of “social plugins” for Facebook, Twitter, or LinkedIn, or display systems for embedded (integrated) multimedia content such as YouTube, Vimeo or Flickr, as well as plugins for the weather. These are parts generated directly by the aforementioned sites and integrated into the web page of the visited host site. The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties. The management of the information collected by “third parties” is governed by the relevant information which please refer to. By accepting through the Cookie banner, you consent to the use of third-party cookies on this site, for the purposes indicated in the information. To ensure greater transparency and convenience, the web addresses of some of the various information notices and methods for managing cookies are shown below (others are accessible at the service providers’ respective web sites):
      Google services information: www.google.it/intl/it/policies/technologies/cookies/
      Google services configuration: www.google.it/intl/it/policies/technologies/managing/
      Google DFP: https://adssettings.google.com/authenticated?hl=it
      Facebook: https://www.facebook.com/about/privacy/update
  • Analytics cookies:
    • For the sole purpose of monitoring and improving the performance of the site, a statistical analysis market product is used to detect access to the site. It may resort to the use of cookies, permanent and otherwise, for the purpose of collecting statistical information and on the “unique visitors” of the site. Cookies, defined as “Unique Visitor Cookies”, contain an alphanumeric code that identifies the browsing computers, without however any collection of personal data.
      Google Analytics. The site may also make use of components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. (“Google”). These cookies are used for the sole purpose of monitoring and improving the performance of the site, for technical purposes. For more information, please refer to the following link: www.google.it/policies/privacy/partners/
      The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on his browser. To disable the action of Google Analytics, please refer to the following link: https://tools.google.com/dlpage/gaoptout

Data retention period

TThe cookies managed by us have a maximum duration of 365 days, except for voluntary renewals made by you by repeating the consent.

The profiling cookies managed by us are anonymous and, once expired, they remain within the sThe profiling cookies managed by us are anonymous and, once expired, they remain within the statistical systems and profiling platforms in aggregate form and not attributable to your browser for exclusive general statistical purposes.

Cookies managed by third parties have the durations indicated in the respective cookie policies of such third partiesy.

Right of data subjects

Pursuant to the GDPR, you can exercise some rights towards the Data Controller, such as obtaining from the Data Controller the cancellation of your data (right to be forgotten), the limitation, updating, rectification, portability, or right to oppose to the treatment of your personal data. More in detail, you can exercise the following rights (as set forth by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR):

  • to access to your personal data (article 15), i.e. confirmation of whether or not the processing of your personal data is being processed and, in this case, have access to the data;
  • to demand, to the data controller, a correction (article 16) and/or integration of your personal data;
  • to ask the data controller to delete your personal data (art. 17) without undue delay;
  • to ask the data controller to limit the processing of your personal data (Article 18), i.e. to obtain a confirmation that the processing of your personal data is limited to what is necessary for storing purposes;
  • to ask for data portability (article 20), that is to obtain in a structured common and legible format your personal data;
  • to object to their processto object to their processing (article 21) or, at any time, to oppose, for any reason connected with your particular situation, the processing of your data;
  • with regard to automated decision-making processes (article 22), the right not to be subjected to a decision based uniquely on automated data processing without your explicit consent;
  • to cancel your personal data (Article 17), i.e. the right to obtain, in the cases provided for by the Regulations, the cancellation of your personal data;
  • to file a complaint with the Supervisory Authority (Article 77) for the protection of your personal data (for more info, please see www.garanteprivacy.it, email: garante@gpdp.it).

Furthermore, at any time, you may revoke the consent on which the treatment carried out is based. The withdrawal of your consent does not affect the lawfulness of the processing that took place on the basis of the consent given before the revocation.

More information about the excercise of your rights

Any request for information or clarification or exercise of rights can be addressed to the Data Controller by sending:

Furthermore, you always have the right to lodge a complaint with the Supervisory Authority for the Protection of Personal Data, which can be contacted at garante@gpdp.it or through the website http://www.gpdp.it