Privacy Policy - Alstora

NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION NO. 679 OF 27 APRIL 2016

With this Privacy Policy, PLABER S.r.l. having registered offices at Via Divisione Tridentina 10 in 36061 Bassano del Grappa (VI), VAT reg. no. and Tax Code 03312270246, VI REA number 315124 – as Data Controller – wishes to inform you how it processes the personal data you provide when you browse this website.

For any further explanations or information, or if you wish to enforce the rights indicated by our Privacy Policy, you can contact the Data Controller using the following means: by post, address Plaber Srl, Via Divisione Tridentina 10, 36061 Bassano del Grappa (VI); by e-mail at info@plaber.com; Tel. +39 0424 809150.

Legislative Decree no. 196/2003 and EU Regulation 2016/679 set forth the rules to protect individuals when their personal details are processed; this privacy policy is drawn up in compliance with this new legislation.

It may be necessary to amend our Privacy Policy when new laws are introduced, and we therefore ask you to visit this area periodically for updates.

This Privacy Policy is applicable only to the website web www.alstora.com so that PLABER S.r.r. therefore declines all and any liability for the way personal data are processed by third party websites linked through the Cookie section or any other links that may be present on the website.

General processing principles

Data processing will be carried out through collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. It will be carried out by the Data Controller, by the managers and by the individuals authorised to carry out processing activities.

Personal data are: processed lawfully, correctly and transparently; collected for specific, explicit and legitimate purposes, and subsequently processed in a way that is not incompatible with these purposes; adequate, relevant, limited to what is necessary with respect to the purposes for which they are processed; accurate and up to date, the Data Controller committing to take the necessary measures to delete or rectify the data in view of the purposes for which they are processed; kept in a form that allows the identification of the Data Subject for the time strictly necessary to achieve the purposes for which they were processed; treated with the utmost confidentiality, both using computer and paper tools, in compliance with the principles dictated by the EU Regulation on the protection of personal data and the provisions issued by the Supervisory Authority and, in any case, in such a way as to guarantee adequate security, including protection, with adequate technical and organizational measures, from unauthorized or illegal processing or even accidental loss.

NAVIGATION ON THE WEBSITE

Non-registered users may browse this website (only registered users may however purchase products from the on-line store). No personal data are obtained if you simply browse the website. The use of cookies does however allow us to collect information that the user does not provide directly. For the purposes, the legal basis and any other information on the processing of data collected while browsing the Website, please refer to the cookie policy.

FILLING THE “CONTACTS” FORM

PURPOSES OF THE PROCESSING ACTIVITIES
When you fill in the form called “CONTACTS”, you provide your identification details (name, surname, company name, address, city, area code, etc.). This data is processed in order to provide the information requested from the user, through computerised systems.

LEGAL BASIS FOR DATA PROCESSING
The processing is lawful as, by completing the contact form, the Data Subject gives consent to the processing of their personal data, pursuant to art. 6, letter a) of EU Regulation 679/2016.

PERIOD OF CONSERVATION OF THE DATA
The data is processed for the time strictly necessary for the provision of the requested service.

MANDATORY OR VOLUNTARY NATURE OF THE SUPPLY OF DATA
Providing this data is not a legal or contractual obligation. Providing this data is therefore optional, but if you do not fill in the mandatory fields, we may be unable to provide the service requested.

THE RECIPIENTS, OR CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA
Personal data are not subject to disclosure and may come to the attention of the persons in charge of processing (employees and / or collaborators of PLABER srl).

DATA TRANSFER OUTSIDE THE EU: Personal data are not transferred outside the European Union. In the event that the transfer is necessary, this will take place in compliance with the provisions of art. 44 and subsequent of EU Regulation 679/2016.

NEWSLETTER SUBSCRIPTION PURPOSES OF THE PROCESSING ACTIVITIES
When you fill in the form called “SUBSCRIBE TO OUR NEWSLETTER”, you provide your identification details (e-mail – mandatory field -, company name, name, surname, country, province). The scope of processing such personal data is to send the user advertising messages and improve the service offered, and processing is carried out through computerised systems.

LEGAL BASIS FOR DATA PROCESSING
The processing is lawful as by signing up for the newsletter, you consent to the processing of your personal data, pursuant to art. 6, letter a) of EU Regulation 679/2016.

PERIOD OF CONSERVATION OF THE DATA
The retention period of the supplied data ends with the withdrawal of the consent previously issued by the user and in any case when the use of the personal data collected is no longer necessary for the pursuit of the aforementioned purposes. You may unsubscribe at any time by clicking on the link “deleted” at the bottom of all our advertising messages, or by writing to the addresses indicated in the section “general information”.

THE RECIPIENTS, OR CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA
The personal data that the Data Controller will come into possession of are not subject to disclosure.
Personal data may be known by the persons in charge and Data Processors. In particular, the data may be known by employees and / or collaborators, internal and external, of PLABER (e.g.: employees working in the marketing sector; external company that has access to the information system of the Data Controller). The complete list of external managers is available to the user who requests it.

DATA TRANSFER OUTSIDE THE EU: For the purposes indicated PLABER uses the Mailchimp platform, managed by the company Rocket Science Group // 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308.
The transfer of data abroad through the Mailchimp platform is lawful as the company Rocket Science Group has included the standard contractual clauses (SCC) approved by the European Commission in contracts with customers. Users are invited to read the privacy policy issued by Mailchimp, available at the following website: https://mailchimp.com

SELECT PRODUCTS AND ADD TO CART OR ADD TO WISHLIST PURPOSES OF THE PROCESSING ACTIVITIES
When you click on “ADD TO CART” or “ADD TO WISHLIST”, you are expressing your preference for a specific product and, only after filling in the registration form and/or sending the order, this personal data – which is crossed-referenced with other personal data provided previously – are used to improve the service offered and to send you advertising messages according to you preferences.

LEGAL BASIS FOR DATA PROCESSING
The processing of data for direct sales purposes, forwarding of advertising material, market research, commercial communications, is lawful if and insofar as the Data Subject has expressed specific consent to the processing of their personal data, pursuant to art. 6, letter a) of EU Regulation 679/2016.

PERIOD OF CONSERVATION OF THE DATA
The personal data processed for the purposes of direct sales, forwarding of advertising material, market research, commercial communications, will be kept for the duration of 2 years from the time of collection and in any case until the Data Subject has informed the Data Controller of his/her wish to delete his/her personal data from the Data Controller’s archives and/or not to receive promotional communications.

MANDATORY OR VOLUNTARY NATURE OF THE SUPPLY OF DATA
Providing this data is not mandatory, but failure to indicate your preferences will make the service offered by the company less efficient. You may request the deletion of your data at any time simply by accessing “My Area” and then clicking on the relevant links, or by contacting us at the addresses indicated in the “General Information” section of this Privacy Policy.

DATA TRANSFER OUTSIDE THE EU
For the purposes indicated PLABER uses the Mailchimp platform, managed by the company Rocket Science Group // 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308.
The transfer of data abroad through the Mailchimp platform is lawful as the company Rocket Science Group has included the standard contractual clauses (SCC) approved by the European Commission in contracts with customers. Users are invited to read the privacy policy issued by Mailchimp, available at the following website: https://mailchimp.com.

FILLING THE “COMPLETE YOUR PURCHASE ORDER” FORM PURPOSES OF THE PROCESSING ACTIVITIES
When you fill in the section “COMPLETE YOUR PURCHASE ORDER”, you purchase the product, and provide your personal data. The provision of these personal details stems from a contractual obligation, given that the purpose is the purchase of the product. Some personal details have already been entered at the time of registration (name, surname, address, etc.), while you will be asked to enter other details for the first time in this section (name of the credit card holder, credit card number, security code).
The processing of such data is aimed at the fulfilment of the purchase order and the fulfilment of the accounting, administrative, fiscal and civil law obligations, as well as, subject to the explicit consent of the user, the forwarding of commercial and promotional information. (newsletter, direct sales, forwarding of advertising material, market research, commercial communication, using traditional methods (standard mail or telephone calls with operator) and automated methods (e-mails, automated phone calls, mms, sms, whatsapp and similar). Your data may be disclosed to third-party companies for marketing purposes.
The Data Subject is also made aware that the personal data that the Data Controller will come into possession of at the time of the conclusion of the contract with the customer, and in particular the e-mail address, may be used in the future for promotional activities relating to services similar to those covered by the contract. The Data Subject can always oppose the processing, with a simple request to be sent to the Data Controller at the email address indicated.

LEGAL BASIS FOR DATA PROCESSING
The processing of personal data for the purposes of processing the purchase order is lawful as it is “necessary for the execution of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject” (art. 6, letter b) of the EU Regulation); the processing of personal data for the purpose of fulfilling accounting, administrative, fiscal and civil law obligations is lawful as it is “necessary for compliance with a legal obligation to which the controller is subject” (Article 6, letter c) of EU Regulation 679/2016). The processing of personal data for direct sales purposes, forwarding advertising material, market research, commercial communication and data communication to third parties for marketing purposes is lawful if and insofar as the Data Subject has given consent to the processing of their personal data, pursuant to art. 6, letter a) of EU Regulation 679/2016.
The processing of data that the Data Controller will come into possession of at the time of the conclusion of the contract with the customer for the forwarding of future commercial communications relating to services similar to those covered by the contract is lawful as it is necessary for the pursuit of the legitimate interest of the Data Controller (Article 6, letter f) of EU Regulation 679/2016).

PERIOD OF CONSERVATION OF THE DATA
The personal data processed for the purposes of fulfilling the purchase order and for the purpose of fulfilling the obligations in accounting, administrative, tax and civil matters provided for by the law, will be kept for the entire duration of the contractual relationship (negotiations, conclusion and execution of the contract) and for ten years following the termination of the contractual relationship itself, and / or in any case in compliance with the requirements of the current legislation regarding civil, fiscal and administrative matters on data retention. A longer period of retention of personal data may possibly be determined by requests made by the Public Administration or other judicial, governmental or regulatory body or by the participation of the undersigned company in judicial proceedings involving the processing of personal data provided by the Data Subjects.
The personal data processed for the purposes of direct sales, forwarding of advertising material, market research, commercial communications and communication to third parties for marketing purposes, will be kept for the duration of 2 years from the time of collection and in any case until the Data Subject has informed the Data Controller of his/her wish to delete his/her personal data from the Data Controller’s archives and/or not to receive promotional communications.

MANDATORY OR VOLUNTARY NATURE OF THE SUPPLY OF DATA
The provision of the data for the indicated purposes is not a legal or contractual obligation. Providing this data is therefore optional, but if you do not fill in the mandatory fields, we may be unable to provide the service requested.

Right to withdraw consent
The processing of data that has a legal basis in the consent of the Data Subject, gives the Data Subject the right to withdraw consent to the processing of personal data; in any case, the withdrawal of the consent to the processing does not affect the lawfulness of the processing based on the consent given before the withdrawal.
The Data Subject always has the right to withdraw consent to the processing of personal data for the purposes of direct sales, forwarding of advertising material, market research, commercial communication.

Right to file a complaint
The data subject shall have the right to file a complaint with the supervisory authority; in Italy, this is the Authority for the Protection of Personal Data. The complaint may be forwarded by the Data Subject in the manner deemed most appropriate: by hand, by registered letter with return receipt, or by mail. For information, the Data Subject is invited to consult the website of the Guarantor at www.garanteprivacy.it.

The rights of the Data Subject
The Data Subject has the right to obtain access to their personal data from the Data Controller.
In particular, the Data Subject has the right to obtain from the Data Controller confirmation as to whether or not data concerning him or her is being processed and, in this case, access to such personal data and the following information:
a) the origin of the personal data, if not directly collected from them;
b) the processing purposes and procedures;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;
d) the expected personal data retention period or, if this is not possible, the criteria adopted to determine such retention period;
e) the existence of the right of the Data Subject to ask the Data Controller to rectify or delete the personal data, or limit the processing of such data, or to oppose the processing;
f) the right to file a complaint with a supervisory authority;
g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the Data Subject;
h) if the data is transferred to a third country or to an international organization, adequate guarantees in relation to this transfer, pursuant to art. 46 of EU Regulation 679/2016.

COOKIE POLICY PURSUANT TO EU REGULATION 2016/679 (“GDPR”)

PLABER S.R.L. protects the confidentiality of personal data and guarantees them the necessary protection from any event that could put them at risk of violation. As required by EU Regulation no. 2016/679 (“GDPR”) and the current legislation on the processing of personal data, the user (“Data Subject”) is provided with information relating to the so-called “Cookies”.

Data Controller
The Data Controller is the company PLABER S.r.l. having registered offices at Via Divisione Tridentina 10 in 36061 Bassano del Grappa (VI), VAT reg. no. and Tax Code 03312270246, VI REA number 315124.
If you wish to enforce the rights indicated by this Policy, you can contact the Data Controller using the following means: ordinary mail, Plaber S.r.l., Via Divisione Tridentina 10, 36061 Bassano del Grappa (VI); e-mail address info@plaber.com; Tel. +39 0424 809150.

What are cookies?
Cookies are short strings of text that the websites visited by the user send to the terminal of the user (usually to the browser), where they are stored and then retransmitted upon subsequent access to the same sites by the same user.
While browsing a site, the user can also receive cookies on their terminal that are sent from different sites or web servers (so-called “third parties”), on which may reside some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) found on the site being visited.

Analytical, technical and profiling cookies
These are cookies that are only used for forwarding communications through an electronic communication network, or to provide a service requested by the user. For example, technical cookies are those that automatically recognize the language used by the user, that facilitate online purchases, that make home banking procedures less complex and safer, etc. (in the information, these cookies are also indicated as preference cookies).
Technical cookies are divided into session cookies, which are automatically deleted when the browser is closed, and persistent cookies, which remain stored in the user’s terminal until the set expiry date.
Analytical cookies are used by website managers to collect aggregate information of a statistical nature (e.g.: to know the number of visitors to the site).
Profiling cookies control the navigation of the user, tracing it in order to monitor and profile the user (for tastes, habits and consumption choices, for forwarding personalized advertising).

Treated data
Cookies can collect information and personal data such as IP address, nationality, city, date/time, device used, browser, operating system, screen resolution, navigation source, pages visited and number of pages, duration of the visit, number of visits made.
The use of third-party cookies is governed by the rules established by the third parties themselves. Therefore, the Data Subject is invited to read the information on the processing of personal data published on the own websites of such third parties.

Cookies installed, purposes, disabling and management of cookies
The cookies installed by the www.alstora.com site are specifically indicated in the “Details” section, which can be accessed from the information banner that appears when the site is first accessed, or from the following widget on each page.

In order to avoid improper use of the services provided, on its sites and services Plaber S.r.l. uses FriendlyCaptcha to check if data entry (for example in a contact or registration form) is done by a person or by an automated program. The use of FriendlyCaptcha is subject to the Privacy Policy and Terms of Service of FriendlyCaptcha, available at https://friendlycaptcha.com/legal/.
The use of third party cookies is governed by the rules established by third parties. Therefore, the Data Subject is invited to read the information on the processing of personal data and the instructions for managing or disabling the cookies published on the relevant web pages.
The third-party cookies used on this website are not directly controlled by the website owner, so that to disable the same, or for more detailed information, please follow the procedures described below:
1) click on http://www.youronlinechoices.com/ to obtain more information on the concept of behavioural advertising and the third-party cookies, promotional and targeting cookies stored on the terminal. You may in any case disable all or some of these cookies by clicking on the following link: http://www.youronlinechoices.com/
2) To manage and disable third-party cookies installed by the site, you need to access to the privacy policies and consent forms of the third parties in question, by clicking on the links indicated.
This website uses Google Analytics for the installation of analytic technical cookies on the terminal of the user. The data generated by Google Analytics are stored in accordance with the terms indicated by the privacy policy that is available at the following address:
https://support.google.com/analytics/answer/2838718
The privacy policy of Google Inc. can be found at the following address: https://policies.google.com/privacy?hl=it&gl=it
The user can disable Google Analytics by installing the opt-out add-on provided at the following address on their browser: https://tools.google.com/dlpage/gaoptout
Blocking these cookies will not compromise your browsing experience.
Some pages of the website have interactive maps provided by Google Inc., that may install cookies to detect information and your preferences relevant to the service. For more information on this service and to disable the cookies, please read Google’s privacy policy: http://www.google.it/intl/it/policies/privacy/.
There may be Facebook Pixels on the website pages, to measure the advertising campaigns and ensure more efficient advertising on Facebook. Thanks to these code fragments, the user can display targeted advertising on different social networks or partner sites. For further information see Facebook’s Privacy Policy:
https://www.facebook.com/about/basics/it/ To disable the Facebook profiling cookies, click on the following address: https://www.facebook.com/notes/the-sims-social-regali-gratis/come-svuotare-la-cache-ed-eliminare-i-cookie/323992957657211/<
This website also uses profiling cookies for ad targeting in order to send advertising messages to the user based on the tastes and preferences expressed by the user when it browses the website. For more information or to disable such cookies, click on the following addresses:
– in relation to “google.com” profiling cookies, https://tools.google.com/dlpage/gaoptout?hl=it
– in relation to “doubleclick.net” profiling cookies: https://support.google.com/adsense/answer/7549925?hl=it
The user may at any time manage or request the general disabling or deletion of cookies by changing the settings of their internet browser. However, disabling cookies may slow down or prevent access to some parts of the site, or make navigation less functional. The settings to manage or disable cookies may vary depending on the internet browser used. Therefore, for more information on how to perform these operations, we suggest that the user consult the manual of their device or the “Help” function of their internet browser.
Below are the links that show how to manage or disable cookies for the most popular internet browsers:
– Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies
– Google Chrome: https://support.google.com/chrome/answer/95647
– Mozilla Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie
– Opera: http://help.opera.com/Windows/10.00/it/cookies.html
– Safari: https://support.apple.com/kb/PH19255

Communication to third parties and categories of recipients
The personal data collected by the Data Controller through the use of cookies may be disclosed to third parties whose activities are necessary for the completion of operations connected to the processing carried out and to meet certain legal obligations. In particular, the data may be known by the Website service providers. The Data Controller appoints its suppliers as external Data Processors, binding the corresponding managers to comply with security and data protection measures.

Data transfer outside the EU
The site installs third-party cookies based outside the European Union: Facebook, Google Analytics. Users are invited to read the information issued by such third parties.

Data retention period
The data retention period is linked to the persistence of cookies.
Please refer to the table in the section “Cookies installed, purposes, disabling and management of cookies”.

The rights of the data subject
The Data Subject has the right to obtain access to their personal data from the Data Controller.
In particular, the Data Subject has the right to obtain from the Data Controller confirmation as to whether or not data concerning him or her is being processed and, in this case, access to such personal data and the following information:
a) the origin of the personal data, if not directly collected from them;
b) the processing purposes and procedures;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;
d) the expected personal data retention period or, if this is not possible, the criteria adopted to determine such retention period;
e) the existence of the right of the Data Subject to ask the Data Controller to rectify or delete the personal data, or limit the processing of such data, or to oppose the processing;
f) the right to file a complaint with a supervisory authority;
g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the Data Subject;
h) if the data is transferred to a third country or to an international organization, adequate guarantees in relation to this transfer, pursuant to art. 46 of EU Regulation 679/2016.

NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION NO. 679 OF 27 APRIL 2016

COOKIE POLICY PURSUANT TO EU REGULATION 2016/679 (“GDPR”)

Title