Informative art. 13 Decree Law 196/2003 –the integration of information on this site www.Valstarino.it
Owner of data processing
The owner of the data collected through this site is Valstar S.p.A., with registered office in Piazza della Repubblica, 32 –20124 Milano, ITALY –P.IVA 00822110151, (hereinafter: “VALSTAR”): it independently decides on the purposes and methods of treatment, as well as security procedures to be applied in order to ensure data confidentiality, integrity and availability.
Optional or mandatory provision of data
The provision to VALSTAR of your personal information, which is requested in several collections, may be either necessary or optional in order to achieve the purposes set in the information notice.
The obligatory or voluntary nature of the contribution is specified each time a single piece of information is being collected. As a matter of fact an asterisk character(*) is placed just next to the information required,and thus compulsary. Any refusal to disclose to VALSTAR information marked as mandatory may result in not achieving the main purpose of the collection itself:
for example a similar refusal may result in the inability of VALSTAR to perform the contract of purchase on Valstarino.it, in other words provide the other services available on Valstarino.it (support services, customer service, sending newsletters).
The provision of additional data to VALSTAR, other than the one marked as essential, is optional and will not have any consequences in regards to achieving the scope of the data collection.
Data processing supervisors
The following are presently responsible for handling your data:
1. DGTMedia Srl, which handles the processing of data needed for management and maintenance of the site’s database Valstarino.it and the development of direct marketing activities;
2. Bartolini and UPS, which both deal with the processing of data necessary to perform the activities of shipping, delivering and returning products purchased on our site;
3. BT Italia S.p.A. which is in charge of processing data with regard to management and upkeep of the VALSTAR server;
Please read this section regularly to verify any changes in the supervisors listed above.
You always have the right to obtain from Valstar the confirmation of the processing/non processing of your personal data, even if not yet recorded, and their communication in intelligibile form.
You also have the right to obtain from VALSTAR:
a) an update,a correction and an integration of your personal data;
b) the cancellation, the transformation into an anonymous form or the hang of your personal information in violation of the law, including the one that doesn’t need to be kept for the purposes for which it was collected or subsequently processed;
c) the confirmation that the operations in letters a) and b) have been notified, even in regards to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a use of means clearly disproportionate to the protected right.
However you have the right to totally or partially object:
a) to the processing of personal data about you –even for the purpose of collection- for legitimate reasons;
b) to the processing of personal data about you for purposes of sending advertising materials or direct marketing or carrying out market research or commercial communication.
You may freely at any time exercise your rights with a written request to Valstar –the postal address or email address privacy@Valstarino.it, to which we will reply promptly.
Please let us know of any change made at privacy@Valstarino.it to ensure that your personal information is always accurate, updated, relevant and complete.
Article 130, paragraph 4, d. Decree 196/2003
We point out that the legislation on the protection of personal data allows Valstar –without the need to obtain your prior consent- to make use of your details for direct marketing activities of products similar to those already purchased, unless you refuse to allow such use of the e-mail released.
Authority Provision of June 19, 2008 on simplification of requirements for processing for administrative and accounting purposes.
We also point out that the Authority with its provision has allowed VALSTAR to use your mailing address to send you - along with administrative and accounting documents - advertising for products similar to those already purchased, unless you refuse such use of the released postal address.
The above is just the minimum information that Valstar is obliged to provide:
1) treat all information solely for the purposes and in accordance to the manners illustrated upon collection;
2) use the data for other purposes than those for which they were specifically released, only where there is express consent;
3) make data available to third parties only for providing the requested service under the control of a nominated supervisor; do not report data, yield them or transfer them to third parties for their very own treatment, unless the users have been previously informed and have granted their consent;
4) repond to requests for cancellation, change, integration of data and objections to data processing for the purpose of sending commercial information and advertising;
5) ensure a proper and lawful data management, protecting the user’s privacy, thus implementing appropriate security measures to protect confidentiality, integrity and availability of data provided.
How and why we process personal data
The processing of personal data is conducted by Valstar and other people primarily by means of electronic and computer systems. These stakeholders are selected with care for reliability and competence and thus perform operations that are essential to achieve purposes strictly related to the use of the website, its services and purchase of products on the website (see below under “Who can treat your personal data”).
The specific purposes for which the data are processed are summarized from time to time, in the information pursuant to Art.13, d Decree 196/2003, which is presented when the user releases personal information.
In general the data are processed to provide the following services available to our site:
1.registration to the website to use its services;
2.adherence to specific services and more, such as our newsletter and other similar information about our business;
3.fulfillment of orders and related activities;
4.management of the following queries: technical, commercial, on the progress of your orders and requests for information in a broad sense;
5.contacting our Customer Service.
In processing data that can either directly or indirectly identify you, we try to follow the principle of strict necessity. This is the reason why we set up the site so that the use of your personal information is kept to a minimum: therefore the processing of your data is excluded in cases in which the scopes can be reached through the use of anonymous data (i.e. in market researches aimed to improve services) or by other means that allow us to identify the person only when necessary or at the request of the authorities and the police forces (i.e. data on traffic, on time spent on the website or on your IP address).
As explicitly stated in the notice, there are cases in which your data –subject to your consent- will be undergoing processings intended to create profiles based on your preferences and purchases. This has the purpose to send you information pertinent to your needs and interests. Only with your prior consent VALSTAR will use your information to send you advertising about its products and services -exception being made by art. 130, paragraph 4, d. Decree 196/2003 (in which the owner may use your information to send advertising e-mails about products and services similar to those already purchased, unless you refuse to allow such use)
Your data will be disclosed to third parties only with your consent, except for where disclosure is required by law or necessary for purposes prescribed by law that do not require consent; in such cases the data will become available to third parties who will make use of them independently and solely for these purposes (i.e.in the case of a request made by the police or the courts or other competent authorities, or to perform obligations under the contract with you, as in the case of Unicredit Banca SpA communication or PayPal (Europe) S.à.r.l &Cie, S.C.A for payments of purchased goods).
Any purpose of processing your data other than the specific one for which you provided your personal information will be highlighted in this form and will be prosecuted by VALSTAR, only after obtaining your explicit consent (i.e. this happens when a customer profile is based on preferences and buying habits).
The legislation, however, provides the exclusion of consent in certain data processings: for example, we inform you that VALSTAR can treat your personal information without your consent when required to fulfill a legal obligation or when it is made necessary in order to carry out its contractual obligations towards you (as in the case in which you may have purchased products, or in other words may have requested specific services through our website).
Finally note that your personal information will not be transferred abroad to countries, other than those belonging to the European Union, which do not provide a sufficient level of privacy protection. If this were to result necessary in order to provide the services or to carry out a contract with VALSTAR for the purchase of products, please be assured that the transfer of your personal data to countries outside the European Union and to countries which do not provide an adequate level of protection will occur only after Valstar will have carried out specific contracts with these in accordance to law and applicable regulations.
It may occur that you find Valstar processing personal data of third parties directly disclosed to Valstar by their very own users. For example if the user has purchased a product that needs to be sent to a friend, that is to say that the person that purchases the product is different to the person to whom the product is delivered, or else when the user wishes to inform a friend about a service of Valstarino.it or about an offer for sale of a particular product.
Please note that there is no need to have the consent of these when the data are communicated to VALSTAR for the finalization of the contract with Valstar, in favor of the third party.
Who can handle your personal data
VALSTAR decided to rely on third parties for the processing of your personal information, for certain tasks. The companies that conduct these operations have been carefully selected and are experienced, capable and reliable, and offer sufficient guarantee of full compliance with current provisions on data processings, including aspects of data security.
These companies have been appointed “data processing supervisors”, and they conduct their activities according to the instructions given by Valstar and under its control. We periodically verify that they have fulfilled their tasks and continue to offer sufficient guarantees of compliance with the provisions on the protection of personal data.
Your data are then processed by our employees assigned to specific services; the categories of employees assigned in these activities depend on the purposes for which the data were conferred and are always specified in the information notice we hand out upon issue of your personal data.
Our website uses automatic data collection systems not directly provided by the user, such as cookies. A cookie is a device that is transmitted to the hard disk by the user; it contains no understandable information, but it allows us to associate the user with his/her personal information registered on the site. Cookies are stored on our server, and only VALSTAR and DGTMEDIA Srl (previously referred to as data processing supervisor) can access the information on it. Information gathered through cookies is handled only in an aggregate and anonymous form to improve both our services and the site, in relation to the specific needs and preferences of its users.
However VALSTAR cannot guarantee its users that the measures taken to secure the site and the transmission of data and information on the site limit or exclude any risk of unauthorized access or data loss due to user devices: please make sure your computer is equipped with software for the protection of network data transmission, both incoming and outgoing (as updated antivirus systems) and that your internet service provider has taken appropriate measures for a safe data network transmission (such as firewalls and spam filters).
If you wish to receive more information about how Valstar handles your personal information, please write an email to the email address privacy@Valstarino.it.
To find out your rights and always be informed on the legislation on the protection of individuals regarding data processing, please visit the website of the Guarantor for the protection of personal data at http://www.garanteprivacy.it/.
The Code ensures that the processing of personal data is done in respect of the fundamental rights and freedoms together with the personal dignity -particular reference is given to confidentiality, personal identity and the right to personal data protection.