Privacy

https://shop.rivamare1952.com collects some Personal Data from its Users

DATA PROCESSING HOLDER

Riva Mare Srl - Calata G.B. Cuneo 63 - 18100 Imperia (IM) VAT / tax code 00902280080 Owner contact email: rivamare@rivamare1952.com

PEC address of the Data Controller: rivamare@pec.confcommercioim.it

TYPES OF DATA COLLECTED

Riva Mare Srl - Calata G.B. Cuneo 63 - 18100 Imperia (IM) p.ica / tax code 00902280080 Among the Data Personal collected by https://shop.rivamare1952.com, independently or through third parties, there are: Owner's email address, Cookies, Usage data, email, name, surname, date of birth, various types of data, telephone number, country, province, website, sector of activity, city e password. Full details on each type of data collected are provided in the sections dedicated to this privacy policy or through specific information texts displayed before the data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected when using https://shop.rivamare1952.com. Unless otherwise specified, all the data requested by https://shop.rivamare1952.com is mandatory. If the Userrefuses to communicate them, it may be impossible for https://shop.rivamare1952.com to provide the service. In cases where https://shop.rivamare1952.com indicates some Data as optional, the users are free to refrain from communicating such data, without this having any consequence on the availability of the Service or on its operation.

Users who have doubts about which Data is mandatory are encouraged to contact the owner. Any use of Cookies - or other tracking tools – by part of https://shop.rivamare1952.com or the owners of third party services used by https://shop.rivamare1952.com, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through https://shop.rivamare1952.com and guarantees that you have the right to communicate them or disseminate them, freeing the owner from any liability to third parties: rivamare@rivamare1952.com PEC address of the Data Controller: rivamare@pec.confcommercioim.it

Processing methods

The Owner adopts the appropriate security measures to prevent access, disclosure,unauthorized modification or destruction of Personal Data.

The treatment is carried out using IT and / or telematic tools, with modalities organizational and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, other parties involved in the organization may have access to the Data https://shop.rivamare1952.com (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, couriers postal services, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

Legal basis of the processing

The Owner adopts the appropriate security measures to prevent access, disclosure, unauthorized modification or destruction of Personal Data.

However, this is not applicable if the processing of Personal Data is governed by the European legislation on the protection of Personal Data; treatment is necessary the execution of a contract with the User and / or the execution of pre-contractual measures; the processing is necessary to fulfill a legal obligation to which the Data Controller is subject; the processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Data Controller; the processing is necessary for the prosecution of the legitimate interest of the Data Controller or third parties. In any case, it is always possible to request the Owner of clarify the concrete legal basis of each treatment and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.

Place

The Data Controller adopts the op The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the treatment are located. For more information, contact the owner. The User's Personal Data may be transferred to a different country from the one in which the User is located. To obtain further information on the place of processing the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information on the legal basis of the data transfer outside the European Union or to an international organization of international law public or consisting of two or more countries, such as the UN, as well as regarding the measures security adopted by the Data Controller to protect the Data. If one of the transfers just described, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at the details indicated in opening. appropriate security measures to prevent access, disclosure, modification or unauthorized destruction of Personal Data.

The Data Controller processes Personal Data relating to the User if one of the following conditions exists: the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without consent of the User or another of the legal bases specified below, until the User does oppose ("opt-out") to this treatment. However, this does not apply if the processing of Personal Data is governed by European legislation on data protection Personal; the processing is necessary for the execution of a contract with the User and / or the execution of pre-contractual measures; the processing is necessary to fulfill an obligation legal to which the Owner is subject; processing is necessary for the performance of a task of public interest or for the exercise of public powers vested in the owner; the treatment it is necessary for the pursuit of the legitimate interest of the Data Controller or third parties. And in any case It is always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

The treatment is carried out using IT and / or telematic tools, with modalitiesorganizational and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, other parties involved in the organization may have access to the Data https://shop.rivamare1952.com (administrative, commercial, marketing, legal,system administrators) or external subjects (such as third party technical service providers, couriers postal services, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

Retention period

The Data Controller adopts the op The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the treatment are located. For more information, contact the owner. The Personal Data of the Data are processed and stored for the time required the purposes for which they were collected. Therefore: Personal Data collected for related purposes upon the execution of a contract between the Owner and the User will be retained for as long as it is completed the execution of this contract. Personal Data collected for traceable purposes the legitimate interest of the Data Controller will be retained until this interest is satisfied.

The User can obtain further information regarding the legitimate interest pursued by Owner in the relevant sections of this document or by contacting the Owner. When the processing is based on the consent of the User, the Data Controller can keep the Personal Data more than a long until said consent is revoked. Furthermore, the Owner could be obliged to keep Personal Data for a longer period in compliance with an obligation by law or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised. The data

The User's personal data may be transferred to a country other than that in which the User is finds. To obtain more information on the place of processing, the User can refer to to the section relating to the details on the processing of Personal Data. The User has the right to obtain information regarding the legal basis for the transfer of data outside the European Union or to an international organization of public international law or made up of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data. If one of the transfers described above takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at details given at the beginning. appropriate security measures to prevent access, the unauthorized disclosure, modification or destruction of Personal Data. The Data Controller processes Data Personal relating to the User in the event that one of the following conditions exists: the User has provided the consent for one or more specific purposes; Note: in some jurisdictions the Owner can be authorized to process Personal Data without the User's consent or another of the legal bases specified below, as long as the User does not object ("opt- out ") to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data; the treatment is necessary for the execution of a contract with the User and / or for the execution of measures pre-contractual; the processing is necessary to fulfill a legal obligation to which it is subject the Owner; the processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Data Controller; processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties. However, it is always possible request the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract. The processing is carried out using tools IT and / or telematic systems, with organizational methods and logics strictly related to purposes indicated.

In addition to the Data Controller, in some cases, other parties involved may have access to the Data in the organization of https://shop.rivamare1952.com (administrative, commercial, marketing, legal, system administrators) or external parties (such as service providers third party technicians, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The list updated of the Managers can always be requested from the Data Controller.

Purpose of the processing of collected data

The User Data is collected to allow the Owner to provide its Services, as well as for the following purposes: Statistics, Registration and authentication, Remarketing and behavioral targeting, support and contact request management, content performance testing e functionality (A / B testing), Contacting the User, Social Features, Database Management of Users, Payment Management, Tag Management, Heat mapping and session recording, Hosting and backend infrastructure, Interaction with platforms for online surveys, Interaction with data collection platforms and other third parties, Infrastructure monitoring e Managing contacts and sending messages.

To obtain further detailed information on the purposes of the processing and on Personal Data concretely relevant for each purpose, the User can refer to the relevant sections of this document.

DETAILS ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and using the following services:

Contact the user

Mailing list or newsletter (https://shop.rivamare1952.com)

By registering on the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages can be sent containing information, including commercial and promotional information, relating to https://shop.rivamare1952.com.

The User's email address may also be added to this list as a result of the registration at https://shop.rivamare1952.com or after making a purchase. Data Personal collected: surname, email and name.

Social features

Invite and suggest friends (https://shop.rivamare1952.com) https://shop.rivamare1952.com can use the Personal Data provided to allow Users to invite their friends - for example through the address book, if access has been granted - and to suggest friends or connections to the inside.

Personal data collected: various types of data.

Managing contacts and sending messages

This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.

These services may also allow you to collect data relating to the date and time of display of messages by the User, as well as the User's interaction with them, such as information about clicks on links inserted in messages. Place of processing: USA - Privacy Policy.

Payment management

The payment management services allow https://shop.rivamare1952.com to process payments by credit card, bank transfer or other means. The data used for the payment are acquired directly by the manager of the requested payment service without being treated in any way by https://shop.rivamare1952.com.

Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment. Satispay (Satispay Limited) Satispay is a payment service provided by Satispay Limited Personal data collected: various types of data as specified in the privacy policy of the service. Place of treatment: United Kingdom - Privacy Policy. Stripe (Stripe Inc) Stripe is a service of payment provided by Stripe Inc. Personal data collected: various types of data according to what specified by the privacy policy of the service. Place of processing: USA - Privacy Policy. PayPal (Paypal) PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.

Personal Data collected: various types of Data as specified in the privacy policy ofservice. Place of processing: See the Paypal privacy policy - Privacy Policy.

Management of support and contact requests

This type of service allows https://shop.rivamare1952.com to manage requests for support and contact received by email or through other tools, such as the contact form. The Personal Data processed depend on the information provided by the User within the messages e by the tool used for communication (for example the email address). Place of treatment: United States - Privacy Policy. GLS (General Logistics Systems Italy SpA)

For shipments of ordered goods, https://shop.rivamare1952.com uses the GLS courier - General Logistics Systems Italy S.p.A .. Personal data collected: The data is processed by General Logistics Systems Italy S.p.A., with headquarters in San Giuliano Milanese (MI), Via Basento 19 for the time required to provide the requested services and to carry out related activities and instrumental to the same, and are canceled when the purposes for which they were collected cease to exist and treated, including any limitation periods provided for by the Civil Code.

Place of processing: Italy and European Community - Privacy Policy.

Hosting and backend infrastructure

This type of service has the function of hosting data and files that allow https://shop.rivamare1952.com to function, allow its distribution and put a provision of a ready-to-use infrastructure to provide specific functions of https://shop.rivamare1952.com.

Some of these services work through servers that are geographically dispersed in places different, making it difficult to determine the exact place where the Data is stored Personal. Blix.it (Alessandro Ippolito) Blix.it is a hosting and backend service provided by Blix.it by Alessandro Ippolito.

Personal Data collected: various types of Data as specified in the privacy policy of service. Place of processing: Italy - Privacy Policy.

Registration and authentication

By registering or authenticating, the User allows the Application to identify him and to give him access to dedicated services. Depending on what is indicated below, the services of registration and authentication could be provided with the help of third parties.

If this happens, this application will be able to access some data stored by third party service used for registration or identification. Direct registration

(https://shop.rivamare1952.com) The User registers by filling out the registration form e providing your Personal Data directly to https://shop.rivamare1952.com.

Personal Data collected: surname, date of birth, email, name and password.

Remarketing and behavioral targeting

This type of service allows https://shop.rivamare1952.com and its partners to communicate, optimize and serve advertisements based on past use of https://shop.rivamare1952.com by the User.

This activity is carried out by tracking Usage Data and the use of Cookies, information that is transferred to the partners to whom the remarketing and behavioral targeting activity is carried out it's linked. In addition to the possibility of opting out offered by the services listed below, the User can opt for the exclusion from receiving cookies relating to a third party service, by visiting the Network Advertising Initiative opt-out page.

Remarketing with Google Analytics for display advertising (Google Inc.) Google Analytics for Display advertising is a remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity carried out by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Data of use.

Place of processing: United States - Privacy Policy - Opt Out. Subject adhering to the Privacy Shield. Facebook Custom Audience (Facebook, Inc.) Facebook Custom Audience is a service remarketing and behavioral targeting provided by Facebook, Inc. that connects the activity of https://shop.rivamare1952.com with the Facebook advertising network. Personal data collected: Cookies and emails. Place of processing: United States - Privacy Policy - Opt Out.

Subject adhering to the Privacy Shield. Facebook Remarketing (Facebook, Inc.) Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of https://shop.rivamare1952.com with the Facebook advertising network. Data Personal collected: Cookies and Usage data. Place of processing: United States - Privacy Policy - Opt Out. Subject adhering to the Privacy Shield. AdWords Remarketing (Google Inc.) AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that connects the activity of https://shop.rivamare1952.com with the Adwords advertising network and the Doubleclick cookie.

Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy - Opt Out.

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. Google Analytics (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. ("Google").

Google uses the Personal Data collected for the purpose of tracking and examining the use of https://shop.rivamare1952.com, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements from your own advertising network.

Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy - Opt Out. Subject adhering to the Privacy Shield. Facebook Analytics for Apps (Facebook, Inc.) Facebook Analytics for Apps is a statistical service provided by Facebook, Inc. Data Personal data collected: Usage data and various types of data as specified by the privacy policy of the service.

Place of processing: United States - Privacy Policy. Subject adhering to the Privacy Shield.

Further information on Personal Data

Sale of goods and services online The Personal Data collected are used for the provision of services to the User or for the sale of products, including payment and possible delivery.

The Personal Data collected to complete the payment may be those relating to the card credit, to the current account used for the transfer or to other payment instruments provided. The data payment methods collected by https://shop.rivamare1952.com depend on the payment system used. Unique device identification https://shop.rivamare1952.com can track the

Users by saving a unique identification code of their device, for statistical purposes or to store Users' preferences. User Data Analysis e forecasts ("profiling").

The Data Controller may process the usage data collected through https://shop.rivamare1952.com for create or update user profiles. This type of treatment allows the Owner to evaluate User choices, preferences and behavior for the purposes specified in the respective sections of this document. User profiles can also be created thanks to tools automated, such as algorithms, which may also be offered by third parties.

To obtain further information on the profiling activity, the User can refer to respective sections of this document. The User has the right to object to this profiling activity at any time. To find out more on the User's rights and how to exercise them, the User can refer to the section of this document relating to the rights of Users.

User rights

Users can exercise certain rights with reference to the Data processed by the Data Controller. In in particular, the User has the right to: withdraw consent at any time. The User can revoke consent to the processing of their Personal Data previously expressed. oppose the processing of their data. The User may object to the processing of their data when it takes place on a legal basis other than consent. Further details on the right to object are indicated in the section below. access their data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the processed data. verify and request rectification.

The User can verify the correctness of his / her data and request its updating or the correction. obtain the limitation of the treatment. When certain conditions are met, the User may request the limitation of the processing of his / her data. In this case, the Owner does not will process the data for any purpose other than their conservation. obtain cancellation or removal of your Personal Data.

When certain conditions are met, the User can request the deletion of their data by the Owner. receive their data or have them transferred to another owner. The User has the right to receive their data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain the transfer without obstacles to another holder.

This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it. propose a complaint. The User can lodge a complaint to the competent personal data protection supervisory authority or to act in court.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of public powers of in which the Owner is invested or to pursue a legitimate interest of the Owner, the User have the right to oppose the processing for reasons connected to their particular situation.

Users are reminded that, if their Data are processed for direct marketing purposes, they can oppose the treatment without giving any reasons. To find out if the Owner deals data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

To exercise the User's rights, Users can direct a request to the details of contact of the Data Controller indicated in this document. Requests are filed free of charge e processed by the Data Controller as soon as possible, in any case within one month.