Privacy Policy

Privacy Notice Regarding the Processing of Personal Data Pursuant to Articles 13–14 of EU Regulation 2016/679

The Company NATURETICA SRL, in its capacity as the Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter the “GDPR,” hereby informs you that the aforementioned regulation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, proportionality, and the protection of your privacy and your rights.

Your personal data, subject to your consent, will be processed in accordance with the legal provisions set forth in the aforementioned legislation and the confidentiality obligations provided therein.

Purpose and legal basis for processing: to provide the requested service, in compliance with legal or contractual obligations.

Methods of data processing: Your data may be processed using electronic computers.

All processing is carried out in accordance with the procedures set forth in Articles 6 and 32 of the GDPR and through the implementation of the appropriate security measures provided for therein.

Disclosure: Your data will be disclosed exclusively to competent parties who have been duly appointed as Data Processors for the purpose of providing the services necessary for the proper management of the relationship, with a guarantee that the data subject’s rights will be protected.

Your data will be processed exclusively by individuals who have been authorized for this purpose and properly trained by the Data Controller.

Disclosure: Your personal data will not be disclosed in any way.

Retention Period: Please note that, in accordance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of the GDPR, the retention period for your data is:

retained for a period not exceeding the time required to achieve the purposes for which they are collected and processed, for the performance and fulfillment of contractual obligations;
retained for a period not exceeding the time required to complete the services provided;
retained for a period not exceeding the time required to achieve the purposes for which they are collected and processed, and in compliance with the mandatory time limits prescribed by law.

The data controller, in accordance with the law, is the company NATURETICA SRL (Via Ferruccio Parri 5 – 47039 Savignano sul Rubicon (FC)
Tel 0547.665404 commerciale@naturetica.it www.naturetica.it
VAT No. 04591690401 SDI: P62QHVQ)

You have the right to request from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification, and portability of your personal data, as well as the right to object to the processing of such data; furthermore, you may generally exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

Rights of the Data Subject:

The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, even if not yet recorded, and to have such data communicated in an intelligible form.
The data subject has the right to obtain the following information:

purposes of the processing;
categories of personal data involved;
recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients are in third countries or international organizations;
where possible, the envisaged retention period for the personal data or, if this is not possible, the criteria used to determine that period;
the existence of the data subject’s right to request from the data controller the rectification or erasure of personal data concerning him or her, or the restriction of the processing of such data, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
where personal data are transferred to a third country or to an international organization, the data subject has the right to be informed of the existence of appropriate safeguards pursuant to Article 46 relating to the transfer. 3. The controller shall provide a copy of the personal data undergoing processing. In the event that the data subject requests further copies, the controller may charge a reasonable fee based on administrative costs. If the data subject submits the request by electronic means, and unless the data subject specifies otherwise, the information shall be provided in a commonly used electronic format. 4. The right to obtain a copy referred to in paragraph 3 shall not infringe upon the rights and freedoms of others.

The data subject has the right to obtain:

the right to have the data updated, corrected, or, where applicable, supplemented;
the right to have data erased, anonymized, or blocked if processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected or subsequently processed;
confirmation that the actions referred to in subparagraphs (a) and (b) have been brought to the attention—including with regard to their content—of those to whom the data have been disclosed or disseminated, except where this proves impossible or involves an effort that is manifestly disproportionate to the right being protected;
data portability.

The data subject has the right to object, in whole or in part:

to object, on legitimate grounds, to the processing of personal data concerning him or her, even if such data is relevant to the purpose for which it was collected;
to object to the processing of personal data concerning him or her for the purposes of sending advertising or direct sales materials, or for conducting market research or commercial communications.

For a comprehensive list of the data subject’s rights, please refer to Articles 15–22 of the GDPR.