Privacy Information Notice

Pursuant to and for the purposes of Articles 13 and 14 (where data are not obtained from the data subject) of Regulation EU 2016/679 in force since 25/05/2018 as well as in compliance with Law Decree 101/2018 in force since 19/09/2018, we inform the subjects (hereinafter referred to as Data Subjects) interacting with the geminichokes.com website, reachable at the address corresponding to the home page https://store.geminichokes.com on the processing of personal data. The information notice is provided exclusively for geminichokes.com.com and not for other websites which may be consulted by the user via links contained therein.

1. CONTACTS

The Data Controller is Winshoot s.r.l. unipersonale with registered office in via Bergamo 20 in Rezzato (BS) Italy and operational headquarters in via Garibaldi 56 in Botticino (BS) Italy. VAT number and fiscal code 03246370989, Economic Administrative Repertoire no. BS 517767, fully paid-up share capital equal to € 10,000.00. The Data Subject, in order to exercise his own rights, or simply for any information on the processing of personal data, may contact the Data Controller by e-mail at info@winshoot.it or by certified e-mail at winshoot@legalmail.it, as well as by registered mail at the address of the operational headquarters.

2. DATA PROCESSED

Analogously to all websites, this site also uses log files in which information collected automatically during user visits is retained:

1. internet protocol address (IP);
2. browser type and parameters of the device used to connect to the site;
3. internet service provider name (ISP);
4. date and time of the visit;
5. visitor’s referring (referral) and exit webpage;
6. possibly the number of clicks.

If the site allows adding comments, or in the case of specific services requested by the user, including the possibility of sending your Curriculum Vitae for a possible working relationship, the site automatically detects and records some identification data of the user, including his email address. These data are deemed voluntarily provided by the user upon service delivery request. By entering a comment or any other information, the user expressly accepts the Privacy Information Notice, and in particular agrees that the contents inserted are freely disseminated also to third parties. The data received shall be exclusively used for the provision of the requested service and only for the time necessary for the fulfilment thereof.

As stated above, the optional, explicit and voluntary transmission of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as of any further personal data included in the message.
Specific summary information notices shall be progressively reported or displayed on the site pages set up for particular services upon request.

The information with whom the users of the site will deem appropriate to go public through the services and tools made available to them, are provided by the user knowingly and voluntarily, releasing this site from liability for any law breach. It is up to the user to verify that they have the permission to enter personal data of third parties or contents protected by national and international standards.

3. PURPOSE OF PROCESSING

The data collected by the site during its operation are used for:

1. aims referred to in point 2);
2. security purposes (spam and firewall filters, virus detection);
3. internal statistical analysis;
4. marketing activities (sending of informative, promotional and advertising material) - subject to explicit consent.

4. LEGAL BASIS

The processing of data for the purposes referred to in point 3) has its legal basis in article 6 paragraph 1 letter a) (consent) - limited to the purpose laid down in letter d) of point 3) of this information notice - and letter f) (legitimate interest) of Regulation EU 2016/679.

5. PROCESSING METHODS

Personal data shall be processed automatically and entered into the relevant databases, accessible only by the persons in charge of the processing. All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.

6. DATA RETENTION PERIOD

The data provided, whether for institutional or for marketing purposes – subject to explicit consent, shall be retained for a period not exceeding the purposes for which they were collected and subsequently processed. As for the retention time of the data collected through the use of profiling tools (eg cookies), see the Cookie Information Notice.

7. DATA RECIPIENTS

In relation to the purposes provided under point 2), besides the data controller, in some cases, a few categories of persons in charge of the organization of the site (administrative, sales, marketing personnel, lawyers, system administrators) as well as external subjects (by way of example including but not limited to: third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) could have access to the data.

8. PROFILING AND DISSEMINATION

The data may be profiled electronically and through automated procedures for the purposes of internal and organizational statistical analysis. The Site uses both technical (i.e. to facilitate the navigation and the use of the Site), and profiling Cookies (i.e. to analyze users and their behaviors and preferences, as well as to provide them with personalized advertisements). For a detailed explanation of the cookies used and how to disable them, see the Cookie Information Notice.
The data shall not be disseminated in any way.

9. DATA TRANSFER TO NON-EU COUNTRIES

This site may share some of the data collected with services located outside the European Union area. The transfer is authorized according to specific resolutions of the European Union and the Data Protection Authority (see http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi – italian language only), therefore no further consent is required.

10. RIGHTS OF THE DATA SUBJECT

The Data Subject, besides the right to lodge a complaint with the Supervisory Authority, holds the rights listed below, as set forth in the articles from 15 to 22 of Regulation EU 2016/679 and which can be enforced by forwarding a request to the Data Controller at the contacts referred to in point 1):

1. to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information on the relevant processing;
2. to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement;
3. to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies;
4. the right to obtain from the controller restriction of processing where one of the following applies:
   1. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
   2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
   3. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
   4. the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject;
5. to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided; in exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible;
6. the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions;
7. not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Latest revision - information notice version 26/10/2018