ROSES ITALIA SRL undertakes to respect the confidentiality of personal data allowing the identification of the customer and recipient.
For the provision of online ordering services, the ordering customer provides ROSES ITALIA SRL with the contact details of the recipient of his purchase, including telephone numbers, for the purpose of guaranteeing the delivery of his order and to provide advice and information about it and about services and offers. In this case, the ordering customer acts as owner and controller of the recipient's data.
The ordering customer is solely responsible for communicating the recipient's personal data provided to ROSES ITALIA SRL for the execution of the order. The ordering customer undertakes to have obtained the explicit and informed consent of the owner of the contact data he provides to ROSES ITALIA SRL and acts as guarantor for ROSES ITALIA SRL against any resulting claim.
Therefore ROSES ITALIA SRL acts only by will and in the name of the client as a service provider who processes the orders placed by the client.
Therefore the client exonerates ROSES ITALIA SRL from any liability in case of violation of the obligations deriving from the general regulation on the protection of personal data (RGPD) and from the Privacy Code, regarding collection and communication to ROSES ITALIA SRL of the recipient's data for sending messages to the latter.
Data categories
ROSES ITALIA SRL collects and processes in particular surname, first name, email address, password, IP address, connection data and browsing data, order history, preferences and areas of interest, products consulted, delivery incidents, complaints from site users.
ROSES ITALIA SRL also collects the contact data of the recipients of the orders (surname, name, address, telephone number). The ordering customer guarantees ROSES ITALIA SRL that the collection and transmission of this data takes place with the consent of the interested parties for the purpose of carrying out the service.
If necessary, the mandatory nature of the data is indicated during the collection phase (for example with an asterisk “Mandatory fields”).
Some data is collected automatically following the actions of the users on the Site at the time of placing the order; other information may possibly be transmitted by the partners.
Purpose of data processing activities
ROSES ITALIA SRL uses the data for the following purposes:
- Order management: customer information and data and of the recipient are necessary for the management of orders and commercial relationships.
- Customization of services: customer information and data may allow ROSES ITALIA SRL to improve and personalize the products and services offered on the website.
- Knowledge of customers, statistics and performance of the ofpa.info Site, in order to better understand users or, as the case may be, analyze Site activity and improve the Web services offered. ROSES ITALIA SRL also reserves the right to analyze the customer journey, carry out audience measurements (number of pages viewed, number of visits to the site, activity of Internet users on the site, for example), without prejudice to the fact that the data will have been previously made anonymous.
- Quality control, excluding any other use on behalf of third parties.
Duration of data retention
ROSES ITALIA SRL undertakes to retain personal data for a period not exceeding that necessary for the purpose for which they are processed or, as appropriate, in accordance with the retention periods imposed by the applicable regulations and laws in force.
As part of the obligations of the European Regulation on the Management of Personal Data GDPR:
- Personal data of persons who have been inactive for 3 years will be automatically deleted from our database.
- Every 13 months we ask the consent of visitors to our website for the processing of cookies.
- If a contact wishes to rectify or delete their personal data, we will take this action within 1 month.
Recipients of the data
ROSES ITALIA SRL communicates the personal data of its customers and the personal data provided by them at the time of the order only to authorized and specific third parties. The recipients of this personal data include:
- the ROSES ITALIA SRL departments concerned
- any subcontractors of ROSES ITALIA SRL which ROSES ITALIA SRL uses to provide its services for the purposes above described.
With respect to its subcontractors, ROSES ITALIA SRL requires that they present sufficient guarantees regarding the implementation of adequate technical and organizational so that data processing meets the requirements of the GDPR and data protection law and ensures the protection of the rights of data subjects.
Cookies
A cookie is a small text file that is stored on your device's hard drive when you visit a site web. It records some information about your browsing or online behavior that helps improve and facilitate your experience as an Internet user. By browsing the site, you accept that ROSES ITALIA SRL installs so-called "technical" cookies which access, record and consult the information stored in your terminal with the exclusive purpose of allowing or facilitating electronic communication.
By registering on the site, you were also informed of the presence of tracking cookies intended in particular to offer you offers adapted to your centers of interest and to produce statistics on visits. Likewise, the possibility of opposing it has been made clear to you.
Your rights
In accordance with data protection law and the GDPR, you have the following rights:
- right of access (art. 15 GDPR), rectification (art. 16 GDPR), updating, completeness of your data
- right to block or delete your personal data (article 17 GDPR), when they are inaccurate, incomplete, ambiguous, obsolete or whose collection, use, communication or storage is prohibited
- right to withdraw consent at any time (Article 13-2c GDPR).
- right to limit the processing of your data (art. 18 GDPR).
- right to object to the processing of your data (art. 21 GDPR).
- right to portability of the data you have provided to us, when your data is subject to automated processing based on your consent or a contract (Article 20 GDPR).
- right to define the fate of your data after your death and to choose whether or not to communicate your data to a third party you have previously designated. In the event of your death and in the absence of instructions from you, we undertake to destroy your data, unless their retention is necessary for evidentiary purposes or to comply with a legal obligation.
Privacy and conditions of use
Dear Interested Party, we wish to inform you that “European Regulation 2016/679 relating to the protection of natural persons with regard to the Processing of Personal Data, as well as free movement of such data” (hereinafter “GDPR”) provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, therefore, we inform you that:
A. CATEGORIES OF DATA: ROSES ITALIA SRL will process your personal data such as:
Data collected automatically. The computer systems and applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses and domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system, the browser and the IT environment used by the user. These data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular functioning. The provision of such data is mandatory as it is directly linked to the web browsing experience.
Data provided voluntarily by the user. The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not imply a request for consent and the possible compilation of specifically prepared forms entails the subsequent acquisition of the address and data of the sender/user, necessary to respond to the requests produced and/or provide the requested service. The voluntary sending, on your part, of emails to our email addresses does not require further information or requests for consent. On the contrary, specific summary information will be reported or displayed on the site pages prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.
Cookies. The site uses cookies. The data collected thanks to cookies can be used to access parts of the site or for statistical purposes or to make the browsing experience more pleasant and more efficient in the future, trying to evaluate user behavior and modify the offer proposition of the users. content based on their behavior. For further information, a specific cookie policy is available.
B. SOURCE OF PERSONAL DATA:
The personal data of which ROSES ITALIA SRL is in possession are collected directly from the interested party.
C. DATA CONTROLLER:
The data controller ROSES ITALIA SRL Via Tiziano, 32 20145 Milan, CF and VAT number 05510740961, contactable at contact@ofpa.info.com
D . PURPOSE OF DATA PROCESSING AND LEGAL BASIS:
The processing of your data has your consent as its legal basis and is carried out for the following purposes:
- Improve the web browsing experience ;
- Use of the data reported in the contact emails received and in the forms to be able to send responses to specific requests;
- Evaluate user behavior and to modify the content offer proposition based on their behavior;
- Subscription to the newsletter
E. RECIPIENTS OF THE DATA:
Within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consultancy firms, private companies, appointed as Managers by the Data Controller or for legal obligations or to fulfill to your specific requests. Your data will not be disclosed in any way except. The Data Processors and Persons in charge of processing are promptly identified in the Privacy Document, updated periodically.
F. TRANSFER OF DATA ABROAD:
The data collected are not communicated to foreign partners of the Data Controller
G. STORAGE PERIOD:
The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of limitation of storage", art.5, GDPR) or based within the deadlines established by law. The check on the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
H. RIGHTS OF THE INTERESTED PARTY:
The interested party always has the right to request from the Data Controller access to his/her data, the rectification or cancellation of the same, the limitation of the processing or the possibility to oppose the processing, to request data portability, to revoke consent to processing by asserting these and other rights provided by the GDPR by simple communication to the Data Controller. The interested party can also lodge a complaint with a supervisory authority.
I. MANDATORY OR NOT OF CONSENT:
The provision of your data is mandatory while browsing our website with regards to points E.1 and E.2 of the aforementioned purposes, to allow the correct provision of the service . Providing consent for your data for points E.3 is optional and will not compromise the provision of the service in any way.
J. DATA PROCESSING METHODS:
The personal data provided by you will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the Data Controller's activity. The data will be processed both with IT tools and on paper supports and on any other type of suitable support, in compliance with the appropriate security measures pursuant to art. 5 par. 1 letter F of the GDPR.