Lavatelli

LAVATELLI S.r.l., in the person of its legal representative pro tempore, based in Turin, Strada del Francese n. 85, tax code and VAT number IT10187460018 (hereinafter "LAVATELLI"), as Data Controller of personal data pursuant to the applicable Italian legislation on the protection of personal data (the "National Legislation") and EU Regulation 679/2016– General Data Protection Regulation (“GDPR”) (hereinafter National Law and the GDPR are collectively referred to as “Applicable Law”), recognizes the importance of personal data protection and considers its protection one of the objectives core of its business. Before communicating any personal data, LAVATELLI invites you to carefully read this privacy policy ("Privacy Policy"), as it contains important information on the protection of personal data and on the security measures adopted to ensure confidentiality in full compliance with the Applicable Law .

Furthermore, this Privacy Policy is intended only for the site www.lavatelli.com while it does not apply to other websites that may be consulted via external links; is to be understood as information provided pursuant to art. 13 of the Law Applicable to those who interact with the Site. LAVATELLI informs you that the processing of your personal data will be based on the principles of lawfulness, correctness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality. Your personal data will therefore be processed in accordance with the legislative provisions of the Applicable Regulations and the confidentiality obligations set forth therein.

1. OWNER

With reference to the Applicable Regulations, we inform you that the Data Controller is LAVATELLI S.r.l., in the person of the legal representative pro tempore, based in Turin, Strada del Francese n. 85, tax code and VAT number IT10187460018.

2. PERSONAL DATA SUBJECT TO PROCESSING

Categories of Personal Data

The Personal Data collected by the Site are as follows:

to. Navigation data: the Website's computer systems collect some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with you, but which by its very nature could, through processing and association with data held by third parties, allow you to be identified. These include the IP addresses or domain names of the devices used to connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and IT environment. These data are used to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow - given the architecture of the systems used - the correct provision of the various functions requested by you, for security reasons and to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties and are canceled after 7 days, in any case, these data are kept by the owner of the site for the strictly necessary period and in any case in compliance with the current regulatory provisions on the matter.

b. Data provided voluntarily: through the Site you have the option of voluntarily providing Personal Data such as personal data such as name and email address for subscription to the newsletter service, for contacting LAVATELLI using the "Contact Us'' form, for management of orders on the e-commerce platform, shipments, data acquired from the answers provided to the questionnaires for participation in the survey, marketing, etc. or other similar services. Users are free to provide their personal data but failure to provide it may make it impossible to obtain the requested service. LAVATELLI will process this data in compliance with the Applicable Regulations, assuming that they refer to you or to third parties who have expressly authorized you to provide them on the basis of an appropriate legal basis which legitimizes the processing of the data in question. With respect to the latter hypothesis, you act as an independent data controller, assuming all the legal obligations and responsibilities. In this sense, you grant the broadest indemnity on this point with respect to any objection, claim, request for compensation for damage from treatment, etc. that should reach LAVATELLI from third parties whose Personal Data have been processed through your use of the Site in violation of the Applicable Law.

c. Cookies and similar technologies LAVATELLI collects Personal Data through cookies. More information on the use of cookies and similar technologies are available here.

3. PURPOSE, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE TREATMENT

The Personal Data you provide through the Site will be processed by LAVATELLI for the following purposes:

a) purposes related to the execution of a contract of which you are a part or to the execution of pre-contractual measures adopted at your request / (e.g.: management of orders on the e-commerce platform, shipments, request for contact via the Contact form or e- email, etc.);

b) purposes related to the fulfillment of legal obligations (eg in accounting, fiscal and tax matters) by the Company;

c) subject to the customer's consent: allow the Company to send commercial and/or promotional communications about its products and services, as well as carry out market research ("Marketing"), analyze the customer's behavior, habits and propensity to consume, in order to improve products and services provided by the Company, as well as to meet the specific needs of customers ("Profiling");

d) purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their judicial functions.

e) purposes of statistical research/analysis on aggregated or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the Site, measuring traffic and evaluating usability and interest.

The processing of Data for each of the above purposes will take place using paper, automated or electronic methods and, in particular, by ordinary mail or email, telephone (e.g. automated calls, SMS, MMS), fax and any other information channel ( e.g. websites, mobile apps).

The provision of data is optional. However, any refusal to provide data for the purposes sub (a) and sub (b) of the previous article 1), the treatment of which does not require the customer's consent, will result in the impossibility of fulfilling the services and to the obligations under the contract. The refusal to process the Data for the purpose sub (c), will in no way prejudice the contractual relationship with the Company and the consequent activities connected to it or employees. The purpose referred to under d) represents a legitimate processing of Personal Data pursuant to the Applicable Law since, once the Personal Data has been provided, the processing is indeed necessary to fulfill a legal obligation to which LAVATELLI is subject. The purpose sub e) does not involve the processing of Personal Data.

4. RECIPIENTS

Your Personal Data may be shared, for the purposes specified in point 3, with:

to. subjects necessary for the provision of the services offered by the Site, including, by way of example, the company in charge of managing payment of orders, sending e-mails and analyzing the functioning of the Site who typically act as managers of the treatment of LAVATELLI;

b. persons authorized by LAVATELLI to process Personal Data who are committed to confidentiality or have an adequate legal obligation of confidentiality; (e.g. employees and collaborators of LAVATELLI);

c. Third parties (companies, freelancers, etc ....) who act as: 1) Data Controllers, i.e. subjects who determine the purposes and means of processing Personal Data; 2) Data processors, i.e. subjects who process Personal Data on behalf of the Data Controller. The updated list of subjects identified as Owners or Managers is available upon request addressed to the registered office of the Company;

d. Judicial authorities in the exercise of their functions when required by the Applicable Law.

5. TRANSFERS

Some of your Personal Data is transferred to Recipients who may be located outside the European Economic Area. LAVATELLI ensures that the electronic and paper processing of your Personal Data by the Recipients takes place in compliance with the Applicable Regulations. Indeed, the transfers are based either on an adequacy decision or on the Standard Model Clauses approved by the European Commission.

6. DATA RETENTION

LAVATELLI will process your Personal Data for the time strictly necessary to achieve the purposes indicated in point 3. By way of example, LAVATELLI will process Personal Data for the newsletter service until you decide to unsubscribe from the service. Without prejudice to the above, LAVATELLI will process your Personal Data up to the time permitted by Italian law to protect its interests (Articles 2946 and 2947(1)(3) of the Italian Civil Code). Further information regarding the retention period of Personal Data and the criteria used to determine this period can be requested by writing to privacy@lavatelli.com

7. YOUR RIGHTS

As an interested party, you can exercise, at any time, the rights provided for by the Regulations listed below with respect to the Data Controller, by sending a specific request in writing to the email address privacy@lavatelli.com

In the same way, you can revoke the consent expressed with this information at any time, or by using the appropriate section of the site in the user area.

Any communications and actions taken by the Company, in response to the exercise of the rights listed below, will be made free of charge. However, if your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may charge you a fee, taking into account the administrative costs incurred, or refuse to satisfy your requests.

The customer has the following rights:

right of access, i.e. the right to obtain confirmation from the Data Controllers as to whether or not the Data is being processed and, in this case, to obtain access to it;
right of rectification and cancellation, i.e. the right to obtain the rectification of inaccurate Data and/or the integration of incomplete Data or the cancellation of Data for legitimate reasons;
right to limitation of treatment, i.e. the right to request the suspension of treatment if there are legitimate reasons;
right to data portability, i.e. the right to receive the Data in a structured, commonly used and readable format, as well as the right to transmit the Data to another data controller;
right of opposition, i.e. the right to object to the processing of data if there are legitimate reasons, including the processing of data for marketing and profiling purposes, if provided;
right to complain to the relevant data protection authority in case of unlawful processing of your Data.

8. CHANGES

This Privacy Policy has been in force since 01/01/2023 LAVATELLI reserves the right to modify or simply update its content, in part or completely, also due to changes in the Applicable Regulations. LAVATELLI will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. LAVATELLI therefore invites you to visit this section regularly to familiarize yourself with the most recent and updated version of the Privacy Policy so that you are always updated on the data collected and on the use that LAVATELLI makes of them