fbpx Skip to main content

Privacy information pursuant to articles. 13 and 14 of Regulation (EU) 2016/679

Pursuant to the articles. 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), ALFI SRL (hereinafter “Casa Brivio”), hereinafter provides its customers, including potential ones, as well as third parties in general (e.g. delegates, legal representatives, etc.) who come into contact with the same on behalf of or on behalf of customers, including potential ones (the “Interested Parties”), the information required by the legislation relating to the processing of their personal data (“Personal Data”).

1.- Data Controller and Personal Data Protection Officer

ALFI SRL (tax code-vat number 10283200961), with registered office in Milan, Via Olmetto, 17, in the person of the legal representative pro tempore, is the entity that processes the data of the interested parties and, for the purposes of the law, is considered the Data Controller of the Personal data. In this capacity it is responsible for ensuring the application of adequate organizational and technical measures for data protection in compliance with the provisions of current legislation.
Casa Brivio has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with the rules for the protection of Privacy, who can be contacted for questions relating to the processing of Personal Data at the following address: info@casabrivio.com

2.- Methods of collecting Personal Data

The Personal Data subject to processing activities by the Data Controller could be acquired from the Interested Party, also through the remote communication techniques of which the Data Controller uses (e.g. websites, apps for smartphones and tablets, call centers, etc. .);

3.- Categories of Personal Data processed

The Personal Data processed by the Owner includes, by way of example:
navigation data (e.g. IP addresses or domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, log);
personal data (e.g. name, surname, tax code, address, date and place of birth, nationality);
contact data (e.g. telephone numbers, landline and/or mobile, email address);
profiling and marketing data (e.g. interests and passions);
other data attributable to the categories indicated above.

4.- Purpose and legal basis of the processing

Personal Data, if the specified conditions are met, will be processed for the purposes indicated below:
registration on the website and management of contact requests and/or information material
The processing of the personal data of the interested party takes place to carry out the preliminary and consequent activities to the registration request on the website, if applicable, as well as for the management of requests for information and contact and/or sending of informative material, as well as for the fulfillment of any other obligation arising.
The legal basis of this processing is the fulfillment of the services inherent to the request for registration, information and contact and/or sending of informative material and compliance with legal obligations.
The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to carry out the requested service.
execution of the contract
The Personal Data will be processed for the management of the contractual relationship (for example, for the invoicing of fees, for the management of payments or complaints that you may forward to us) and for the provision of the requested services accessible via the website.
The legal basis of this processing is the fulfillment of the services inherent to the contractual relationship and compliance with legal obligations.
The provision of data is optional, however any refusal by the interested party to provide the data will make it impossible for the Data Controller to carry out the requested service.
fulfillment of legal obligations, defending a right in court or out of court and preventing fraud
The Personal Data will be processed for the fulfillment of legal obligations, as well as to ascertain, exercise or defend a right of the Owner and/or defend against claims of others, in judicial or extrajudicial proceedings. In particular, the Data Controller may process Personal Data for the fulfillment of accounting and tax obligations and for the fulfillment of provisions of the Judicial Authority aimed at the prevention and repression of crimes.
The legal basis of this processing is the pursuit of the legitimate interest of the Data Controller taking into account the balance of the rights of the latter and the interested party.
promotional activities on Services/Products similar to those purchased.
The processing of the personal data of the interested party takes place for the sending of communications relating to promotions and offers of services/products of the owner identical and/or similar to those which are the subject of the current contract with the interested party, unless the same is opposed to such processing initially or on subsequent communications.
The legal basis of this processing is the legitimate interest of the Data Controller to promote products or services in which the customer may reasonably be interested, taking into account the balance of the rights of the latter and the Data Controller.
The interested party has the right to object at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in question.
Promotional activities on Services/Products offered by Casa Brivio
The processing of the interested party’s personal data takes place for the sending, with specific consent, of communications of promotions and offers of the Data Controller’s Services/Products through traditional methods (e.g. ordinary mail, telephone calls with an operator) and/or automated methods (e.g. e-mail, SMS, MMS, fax, pre-recorded phone calls).
The legal basis of this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.
Any refusal by the interested party to give consent will make it impossible to use the relevant services, without this having prejudicial consequences for the contractual relationship with the owner.
marketing purposes relating to products or services of Casa Brivio partners
The processing of the personal data of the interested party takes place for the sending, with specific consent, of communications of promotions and offers of Services/Products of commercial partners of Casa Brivio through traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated (e.g. e-mail, SMS, MMS, pre-recorded phone calls).
The legal basis of this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.
Any refusal by the interested party to give consent will make it impossible to use the relevant services, without this having prejudicial consequences for the contractual relationship with the owner.
profiling
The processing of Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the interested party takes place, subject to specific consent, for profiling purposes such as analysis of the data transmitted and of the Services/ Products purchased in order to propose advertising messages and/or commercial proposals in line with the choices expressed by the users themselves. This activity will be carried out in an aggregate and anonymized form through the implementation of models for the analysis of customer data using statistical algorithms, predictive models and aggregations only for the time strictly necessary for the purposes pursued, the type of goods marketed or services rendered. .
In any case, Personal Data will not be subjected to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect the interested party.
The legal basis of this processing is the consent given by the interested party prior to the processing itself, which can be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.
Any refusal by the interested party to give consent will make it impossible to use the relevant services, without this having prejudicial consequences for the contractual relationship with the owner.

5.- Recipients of personal data

The personal data collected may be communicated to subjects who will act, depending on the case, as independent Data Controllers or Data Processors, for the aforementioned purposes, in fulfillment of legal, regulatory and/or obligations deriving from community legislation or because they are holders of a legitimate interest.
In particular, Personal Data may be made available to:
– subjects in charge of carrying out activities connected and instrumental to the processing (archiving service companies, IT services companies, social media management service companies, marketing companies, insurance companies, banking institutions);
– commercial partners of Casa Brivio;
– Public administrations, authorities and other subjects in fulfillment of legal obligations;
The Personal Data will not be disclosed (made available to indeterminate subjects).

6.- Transfer of data to third countries

The Personal Data of the interested party are stored in archives located in countries of the European Union. Where necessary for the pursuit of the declared purposes, the data of the interested party may be transferred abroad, to countries/organisations outside the European Union that guarantee a level of protection of personal data deemed adequate by the European Commission with its own decision, or in any case on the basis of other appropriate guarantees, such as for example the Standard Contractual Clauses adopted by the European Commission or the consent of the interested party. The interested party has the right to obtain a copy of any data transferred abroad, as well as the list of countries/organizations to which the data have been transferred by writing to info@casabrivio.com

7.- Period of retention of personal data

The Data will be stored in a form that allows the identification of the interested party for a period of time not exceeding that necessary to achieve the purposes for which they were collected, taking into consideration the laws applicable to the activities and sectors in which the Data Controller Opera. Once the terms thus established have elapsed, the Data will be deleted or transformed into anonymous form, unless their further conservation is necessary to fulfill obligations (e.g. tax and accounting) which remain even after the termination of the contract (art. 2220 c.c.) or to fulfill orders given by Public Authorities and/or Supervisory Bodies.
The duration of the cookies used on the site can be consulted in the specific Cookie Policy: https://casabrivio.com/privacy-e-cookie-policy/
In the event of a dispute, the retention time indicated above may be extended up to 10 years from the settlement of the dispute.

8.- Treatment methods

The processing will be carried out by authorized personnel who need to have knowledge of it in carrying out their activities, with the aid of electronic tools, according to principles of lawfulness and correctness, in order to protect the confidentiality and rights of the interested party at all times in the compliance with the provisions of current legislation.
Marketing-related profiling (analysis of consumption habits and choices) occurs through an automated process with the aim of studying and analyzing behavioral profiles and aspects characterizing the customer base to optimize promotional activities for products and services.

9.- Rights of the interested party

The interested party has the right to ask the data controller:
confirmation of whether or not your Personal Data is being processed and, if so, to obtain access (right of access);
the rectification of inaccurate Personal Data or the integration of incomplete personal data (right of rectification);
the deletion of the Personal Data itself if one of the reasons provided for by the Privacy Regulation exists (right to be forgotten);
the limitation of the processing of Personal Data when one of the hypotheses provided for by the Privacy Regulation applies (right of limitation);
to receive the Personal Data provided to the Data Controller in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller (right to portability);
to object at any time in whole or in part to the processing carried out for the pursuit of a legitimate interest of the Owner and for marketing and profiling purposes (right of opposition);
to revoke any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation.
The consent given for carrying out marketing activities with automated contact methods (by way of example sms, mms, fax, telephone, e-mail, web applications) also extends to traditional contact methods (paper mail or telephone call with an operator ). Similarly, the opposition to carrying out marketing activities with automated contact methods also extends to traditional contact methods. Your right to provide consent or exercise the right to object in relation to only one of the two methods of carrying out marketing activities remains unaffected.
To exercise their rights, the interested party may send a message to the email address info@casabrivio.com or a written communication to the Data Controller at the registered office of Casa Brivio.
The interested party also has the right to lodge a complaint with the competent supervisory authority on Italian territory (Personal Data Protection Authority) or with the one that carries out its tasks and exercises its powers in the member state where it is located. the violation occurred, as provided for by the art. 77 of the Regulation, as well as to appeal to the appropriate judicial offices pursuant to articles. 78 and 79 of the Regulation.

10.- Cookie Policy