Privacy policy
Privacy policy
Laura Ellecosta, resident in 39042 Brixen (BZ), Dorfgasse 10, as data controller (hereinafter “Controller”), informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter “GDPR”) that your data will be processed in the following ways and for the following purposes:
1. object of the treatment
The Holder processes the personal data provided by you when contracting the Holder’s products/services (e.g. surname, first name, company name, address, telephone number, mobile number, fax number, e-mail, PEC mail, SDI code, tax code, VAT no. number, bank and payment information – hereinafter referred to as “personal data” or “data”).
2. purpose of the treatment
Your personal data will be processed:
A) pursuant to Article 6 b) and c) GDPR for the following purposes:
– Execution of the subject matter of the contract in which you are involved or performance of pre-contractual measures at your request;
– Fulfillment of pre-contractual, contractual and tax obligations arising from ongoing relationships with you
– compliance with obligations arising from laws, regulations, EU legislation or an order from the authorities (e.g. in the area of anti-money laundering)
– the exercise of the holder’s rights, such as the right of defense in legal proceedings;
We inform you that, if you are already our customer, we may send you commercial communications about products/services of the Owner that are the same as those you have already purchased from us through a previous commercial relationship, unless you disagree.
B) Only with your express and separate consent (Art. 7 GDPR), for the following marketing purposes:
– To send you, by newsletter, email, post, SMS, Facebook Messenger, Instagram Messenger, WhatsApp Messenger and/or telephone contacts, commercial communications and/or promotional material about the products/services offered by the Data Controller and to determine the level of satisfaction with the quality of the products/services;
3. treatment modalities
The processing of your personal data is carried out in accordance with (art. 4 n. 2) GDPR) and in particular:
The Controller will process personal data for the time necessary to fulfill the aforementioned purposes, but in any case no longer than 10 years after the termination of the relationship for the purposes indicated and no longer than 3 years after the collection of the data for marketing purposes.
4. access to the data
Your data may be accessible to the persons indicated in art. 2.A) and 2.B):
– to employees and collaborators of the Owner of the in Italy and abroad, in their capacity as authorized and/or internal data processors and/or system administrators;
– to third party companies or other subjects (e.g. credit institutions, specialized studies, consultants, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities on behalf of the Controller as external data processors.
5. data communication
Without express consent (ex art. 6 lit. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to supervisory authorities, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the fulfillment of these purposes. These subjects will process the data in their capacity as autonomous data controllers.
Your data will not be disclosed.
6. data transfer
Personal data is processed on paper as well as electronically and/or automatically at the legal domicile of the controller and stored within the European Union. Personal data that reaches us via e-mail, PEC mail or contact form on our website will be stored on servers of Aruba S.P.A. in Arezzo, Rome and Milan (Italy) within the European Union.
7. nature of data transmission and consequences of refusal to respond
The transmission of data for the purposes referred to in Art. 2.A) is mandatory. In their absence, we cannot guarantee the execution of the contract referred to in art. 2.A).
The transmission of data for the purposes of Art. 2.B) is optional. You may therefore decide not to provide any data or subsequently refuse the possibility of processing data already provided: In this case, you may not receive newsletters, commercial communications and promotional materials regarding the products/services offered by the Owner. In any case, you will continue to be entitled to the products/services listed in Art. 2.A).
8. rights of the data subject
As a data subject, you have the rights under Art. 15 GDPR, namely the rights to:
1. obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
2. information on: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in the processing carried out with the aid of electronic instruments; d) the identification details of the Data Controller, the managers and the person in charge pursuant to art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated or authorized representative in the territory of the State;
3. obtain: a) the updating, rectification or, where interested, integration of the data; b) the cancellation, anonymization or blocking of data processed in violation of the law, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been notified, also as regards their content, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right to be protected;
4. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication, by e-mail and / or by traditional marketing methods by telephone, WhatsApp Messenger, Facebook Messenger, Instagram Messenger and / or post.
Where applicable, you also have the rights under Articles 16-21 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object) and the right to lodge a complaint with the data protection authority.
9. methods of exercising rights
You may exercise your rights at any time by sending
– a registered letter with acknowledgment of receipt to the address of the registered office of the holder;
– an email to hello@lauraellecosta.com or to the certified email: lauraellecosta@pec.it
10. owner, responsible and authorized persons
The owner of the data processing is Laura Ellecosta, resident in 39042 Brixen (BZ), Dorfgasse 10.
The person responsible for data processing is Laura Ellecosta.
