This Website collects certain Personal Data from its Users.

This privacy notice is provided pursuant to Article 13 of Italian Legislative Decree No. 196/2003 to visitors of the website www.daleomobili.it and users of the services offered through the website starting from the address https://www.daleomobili.it, excluding external links.

Data Controller

Fulvio D’Aleo
c/o D’Aleo Mobili srl
Via Baccio da Montelupo, 132
50142 Florence, Italy

Tel. +39 055 780772

VAT number and tax code: 01081190488

Data Controller’s email address: info@daleomobili.it

In compliance with EU Regulation 2016/679, known as the GDPR — General Data Protection Regulation — the following information is provided.

Types of Data Collected

Among the Personal Data collected by this Website, either independently or through third parties, are: telephone number, first name, email address, Cookies, Usage Data, surname, date of birth, address, username, password, company name, tax code, VAT number, fax number, country, state, province, postal code, city and various other types of Data.

Full details regarding each type of Data collected are provided in the dedicated sections of this Privacy Policy or through specific information notices displayed before the Data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.

Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide such Data, it may be impossible for this Website to provide the relevant Goods or Services. Where this Website indicates that certain Data is optional, Users are free not to provide such Data without this affecting the availability or operation of the Service.

Users who are uncertain about which Data is mandatory are encouraged to contact the Data Controller. Any use of Cookies or other tracking tools by this Website or by the owners of third-party services used by this Website, unless otherwise specified, is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, where available.

The User assumes responsibility for any Personal Data relating to third parties obtained, published or shared through this Website and guarantees that they have the right to disclose or distribute such Data, thereby releasing the Data Controller from any liability towards third parties.

Methods and Place of Processing the Collected Data

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, according to organisational procedures and methods strictly related to the purposes indicated.

In addition to the Data Controller, in some cases the Data may be accessible to certain persons involved in the operation of this Website, such as administrative, sales, marketing and legal personnel and system administrators, or to external parties, such as third-party technical service providers, postal couriers, hosting providers, IT companies and communication agencies, who may also be appointed as Data Processors by the Data Controller where necessary.

An up-to-date list of Data Processors may always be requested from the Data Controller.

Legal Basis of Processing

The Data Controller processes Personal Data relating to the User where one of the following conditions applies:

• the User has given consent for one or more specific purposes. In certain jurisdictions, the Data Controller may be permitted to process Personal Data without the User’s consent or another of the legal bases specified below until the User objects to such processing by opting out. This does not apply where the processing of Personal Data is governed by European data protection legislation;
• processing is necessary for the performance of a contract with the User and/or in order to take steps at the User’s request before entering into a contract;
• processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

The User may always ask the Data Controller to clarify the specific legal basis applicable to each processing activity and, in particular, whether processing is based on the law, required by a contract or necessary in order to enter into a contract.

Place

The Data is processed at the Data Controller’s operating offices and at any other location where the parties involved in the processing are located.

For further information, please contact the Data Controller.

Retention Period

The Data is processed and retained for as long as required for the purposes for which it was collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the contract has been fully performed.
• Personal Data collected for purposes connected with the legitimate interests of the Data Controller will be retained until those interests have been satisfied. The User may obtain further information regarding the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

Where processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period, until such consent is withdrawn.

The Data Controller may also be required to retain Personal Data for a longer period in order to comply with a legal obligation or an order issued by an authority.

At the end of the retention period, Personal Data will be deleted. Once this period has expired, the rights of access, erasure, rectification and data portability may no longer be exercised.

Purposes of Processing the Collected Data

The User’s Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes:

• contacting the User;
• payment management;
• interaction with social networks and external platforms;
• registration and authentication;
• analytics;
• access to accounts on third-party services;
• contact management and message sending;
• interaction with live chat platforms.

For more detailed information about the purposes of processing and the Personal Data specifically relevant to each purpose, the User may refer to the relevant sections of this document.

Contacting the User

Telephone Contact — This Website

Users who have provided their telephone number may be contacted for commercial or promotional purposes connected with this Website, as well as to respond to support requests.

Personal Data collected: telephone number and email address.

Contact Form — This Website

By completing the contact form with their Data, the User consents to the use of such Data for the purpose of replying to requests for information, quotations or any other type of request indicated in the form’s heading.

Personal Data collected: email address, first name, address and telephone number.

Mailing List or Newsletter — This Website

By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list that may receive email messages containing information, including commercial and promotional information, relating to this Website.

The User’s email address may also be added to this list as a result of registering with this Website or after making a purchase.

Personal Data collected: email address and first name.

Contact Management and Message Sending

These services make it possible to manage a database of email contacts, telephone contacts or contacts of any other kind used to communicate with the User.

These services may also make it possible to collect Data concerning the date and time when messages are viewed by the User, as well as the User’s interaction with those messages, including information about clicks on links contained within them.

Interaction with Social Networks and External Platforms

These services allow Users to interact with social networks or other external platforms directly from the pages of this Website.

The interactions and information obtained through this Website are always subject to the User’s privacy settings for each social network.

Where a social-network interaction service is installed, it may collect traffic Data relating to the pages on which it is installed, even when Users do not actively use the service.

Facebook Like Button and Social Widgets — Facebook, Inc.

The Facebook “Like” button and social widgets are services allowing interaction with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Twitter Tweet Button and Social Widgets — Twitter, Inc.

The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network, provided by Twitter, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Google+ +1 Button and Social Widgets — Google, Inc.

The Google+ “Like” button and social widgets are services allowing interaction with the Google+ social network, provided by Google, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Instagram Like Button — Facebook, Inc.

The Instagram “Like” button is a service allowing interaction with the Instagram and Facebook social networks, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

The Instagram service is one of the Facebook Products provided by Facebook Ireland Limited. The relevant Terms of Use constitute an agreement between the User and Facebook Ireland Limited.

Place of processing: United States — Privacy Policy.
https://www.instagram.com/legal/privacy/

YouTube Like Button, Channel Subscription Button and Social Widgets — YouTube, LLC and Google, Inc.

The YouTube “Like” and “Subscribe to channel” buttons and social widgets are services allowing interaction with the YouTube platform, provided by YouTube, LLC and Google, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Pinterest Button and Social Widgets — Pinterest

The Pinterest button and Pinterest social widgets are services allowing interaction with the Pinterest social network, provided by Pinterest Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

PayPal Button and Widgets — PayPal

The PayPal button and widgets are services allowing interaction with the PayPal platform, provided by PayPal Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: please refer to PayPal’s Privacy Policy.

Infrastructure Monitoring

These services allow this Website to monitor the use and behaviour of its components in order to improve performance and functionality, carry out maintenance or troubleshoot problems.

The Personal Data processed depends on the characteristics and implementation methods of these services, which by their nature filter the activity of this Website.

UptimeRobot — UptimeRobot

UptimeRobot is a monitoring service provided by UptimeRobot.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Registration and Authentication

By registering or authenticating, the User allows the Application to identify them and grant them access to dedicated services.

Depending on the arrangements described below, registration and authentication services may be provided with the support of third parties. Where this occurs, this Application may access certain Data stored by the third-party service used for registration or identification.

Direct Registration — This Website

The User registers by completing the registration form and providing their Personal Data directly to this Website.

Personal Data collected: postal code, city, tax code, surname, date of birth, email address, address, country, first name, fax number, telephone number, VAT number, password, province, company name, state and username.

Analytics

The services described in this section allow the Data Controller to monitor and analyse traffic Data and are used to track the User’s behaviour.

Google Analytics — Google Inc.

Google Analytics is a web analytics service provided by Google Inc. (“Google”).

Google uses the Personal Data collected to track and examine the use of this Website, prepare reports and share them with other services developed by Google.

Google may use the Personal Data collected to contextualise and personalise advertisements within its advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy — Opt Out.

Facebook Analytics for Apps — Facebook, Inc.

Facebook Analytics for Apps is an analytics service provided by Facebook, Inc.

Personal Data collected: Usage Data and various types of Data as specified in the service’s Privacy Policy.

Place of processing: United States — Privacy Policy.

Facebook Ads Conversion Tracking — Facebook, Inc.

Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that links Data from the Facebook advertising network with actions performed on this Website.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States — Privacy Policy.

Online Sale of Goods and Services

The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery.

The Personal Data collected to complete payment may include Data relating to credit cards, bank accounts used for bank transfers or other supported payment methods.

The payment Data collected by this Website depends on the payment system used.

Further Information about Personal Data

Personal Data Collected from Sources Other than the User

The Data Controller of this Website may have lawfully collected Personal Data relating to the User without the User’s direct involvement, using sources provided by third parties and in accordance with the legal bases described in the section concerning the legal basis of processing.

Where the Data Controller has collected Personal Data in this manner, the User may find specific information regarding the relevant sources in the respective sections of this document or may contact the Data Controller.

The Service Is Not Intended for Children Under 13

Users declare that they are adults under the legislation applicable to them.

Minors may use this Website only with the assistance of a parent or legal guardian.

Under no circumstances may children under the age of 13 use this Website.

User Rights

Users may exercise certain rights in relation to the Data processed by the Data Controller.

Where a higher level of protection applies, the User may exercise all the rights listed below. In all other cases, the User may contact the Data Controller to determine which rights apply to their circumstances and how they may exercise them.

In particular, the User has the right to:

• withdraw consent at any time: the User may withdraw consent previously given to the processing of their Personal Data;
• object to the processing of their Data: the User may object to the processing of their Data where processing is carried out on a legal basis other than consent. Further details concerning the right to object are provided in the section below;
• access their Data: the User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing and a copy of the Data undergoing processing;
• verify and request rectification: the User may verify the accuracy of their Data and request that it be updated or corrected;
• obtain restriction of processing: where certain conditions apply, the User may request that the processing of their Data be restricted. In such cases, the Data Controller will not process the Data for any purpose other than its storage;
• obtain the erasure or removal of their Personal Data: where certain conditions apply, the User may request that the Data Controller delete their Data;
• receive their Data or have it transferred to another controller: the User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance. This provision applies where the Data is processed by automated means and processing is based on the User’s consent, on a contract to which the User is a party or on pre-contractual measures related to such a contract;
• lodge a complaint: the User may lodge a complaint with the competent personal data protection supervisory authority or bring legal proceedings.

Details Concerning the Right to Object

Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller or for the purposes of the legitimate interests pursued by the Data Controller, Users have the right to object to such processing on grounds relating to their particular situation.

Users are informed that, where their Data is processed for direct marketing purposes, they may object to the processing at any time without providing any reason.

To determine whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise User Rights

To exercise their rights, Users may send a request using the Data Controller’s contact details provided in this document.

Requests are submitted free of charge and will be dealt with by the Data Controller as soon as possible and, in any event, within one month.

Cookie Policy

This Website uses Cookies.

For further information and to read the detailed notice, the User may consult the dedicated Cookie Policy.

Further Information about Processing

Legal Defence

The User’s Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages leading to possible legal proceedings in order to defend against misuse of this Website or the related Services by the User.

The User declares that they are aware that the Data Controller may be required to disclose the Data following an order issued by public authorities.

Specific Information Notices

At the User’s request, in addition to the information contained in this Privacy Policy, this Website may provide the User with additional and contextual information concerning specific Services or the collection and processing of Personal Data.

System Logs and Maintenance

For operational and maintenance purposes, this Website and any third-party services used by it may collect system logs, namely files recording interactions that may also contain Personal Data, such as the User’s IP address.

Information Not Contained in This Policy

Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users on this page and, where possible, on this Website.

Where technically and legally feasible, the Data Controller may also notify Users through one of the contact details held by the Data Controller.

Users are therefore asked to check this page regularly and refer to the date of the latest revision indicated at the bottom.

Where changes affect processing activities whose legal basis is consent, the Data Controller will obtain the User’s consent again where necessary.

Definitions and Legal References

Personal Data or Data

Personal Data means any information that, directly or indirectly, including in connection with any other information such as a personal identification number, makes a natural person identified or identifiable.

Usage Data

Usage Data is information collected automatically through this Website, including through third-party applications integrated into this Website.

Such information may include:

• the IP addresses or domain names of the computers used by the User connecting to this Website;
• URI — Uniform Resource Identifier — addresses;
• the time of the request;
• the method used to submit the request to the server;
• the size of the file received in response;
• the numerical code indicating the status of the server’s response, such as successful outcome or error;
• the country of origin;
• the characteristics of the browser and operating system used by the visitor;
• the various time-related details of the visit, such as the amount of time spent on each page;
• details concerning the path followed within the Application, with particular reference to the sequence of pages visited;
• parameters relating to the User’s operating system and IT environment.

User

The individual using this Website who, unless otherwise specified, is the same person as the Data Subject.

Data Subject

The natural person to whom the Personal Data relates.

Data Processor or Processor

The natural person, legal entity, public administration or any other organisation that processes Personal Data on behalf of the Data Controller, as described in this Privacy Policy.

Data Controller or Controller

The natural person, legal entity, public authority, service or other organisation that, alone or jointly with others, determines the purposes and means of processing Personal Data and the tools adopted, including the security measures concerning the operation and use of this Website.

Unless otherwise specified, the Data Controller is the owner of this Website.

This Website or This Application

The hardware or software tool through which Users’ Personal Data is collected and processed.

Service

The Service provided by this Website, as defined in the relevant terms, where available, on this website or application.

European Union or EU

Unless otherwise specified, any reference to the European Union contained in this document is understood to include all current Member States of the European Union and the European Economic Area.

Cookie

A small portion of Data stored on the User’s device.

Legal References

This Privacy Policy has been prepared on the basis of multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this Privacy Policy applies exclusively to this Website.

Last updated: 25 May 2018