The owner of the processing of personal data is pursuant to art26 GDPR - European Privacy Regulation:

- Colella Group srl, with registered office in Naples, Italy, Via ARuiz n42.

Personal data is information that refers to an identified or identifiable natural person, such as name, surname, gender, e-mail address, telephone number, date of birth, postal address.

3.1 Data entered by the user
If you create your personal user account, fill in the registration fields on the Site or give us your consent, we process the personal data provided in this way, in particular the data as defined in section 2.

3.2 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow Users to be identified.This category of data includes the IP addresses or domain names of the computers used by the Users, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environmentThese data will be recorded in anonymous and aggregate form and will be used, always in aggregate form, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted, always in aggregate form, immediately after the processingThe data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

We process your personal data when you create your personal user account, when you order products through our website or when you subscribe to our newsletterUnless otherwise specified in the following provisions, the legal basis for this data processing is Article 6 paragraph 1 b) and a) GDPR (execution of a contract and consent).

5.1 Account
To make purchases on our site you need to create a personal account (hereinafter"user account")You can store your personal information in your user account, and facilitate shopping in our online storeTo create a personal user account we need your personal details, name and surname and, as appropriate, address and telephone numberAdditionally, users must provide their email address and a password of their choiceThe e-mail address provided by the users also serves as the login data for the user accountFurthermore, users can store their personal data within the user account and thus conveniently shop in the online shopThe information can be updated at any time in the personal area of the user account ("User Profile")Upon registration, the User will be asked to enter personal data, some of which - from time to time expressly identified as such - it will be mandatory and essential to provide for the purposes of registration (egthe e-mail address where to receive the Newsletters)The other data may or may not be provided, at the discretion of the User, and failure to provide them is in no way prejudicial to the purpose of registration, but may allow only partial use of the Services.Of course, the user can cancel his user account at any time and without giving reasonsThe easiest way to do this is to send an email to customerservice@spadaroma.comThe legal basis for this data processing is Article 6 paragraph 1 b) GDPR (performance of a contract).

5.2Order processing in our online shop
Regarding the order of products in our online shop, the processing of your personal data is aimed at enabling and optimizing the fulfillment of the order, including payment and delivery.When payment is made by credit card, we receive the payment ID and the last four digits of the credit card number from our payment service providerWe need this for the authentication and allocation of your order and therefore for your securityThe personal data required for payment are collected directly by the payment service providerThe legal basis for the aforementioned data processing is the article6 paragraph 1 b) GDPR (execution of a contract) and Art6 paragraph 1 f) GDPR (legitimate interest, based on our interest in offering you a secure payment option by credit card)Among other things, we also check all previous orders placed from your customer accountThe system also checks if the delivery address is different from the billing address, if it is a new delivery address or if the order has to be delivered to an intermediate center.After choosing the payment service provider, you will be asked for the data necessary to use this serviceThis payment information is forwarded directly to the respective payment service provider and is not stored by the Colella Group.We save billing and delivery address details in your user account so that you no longer need to enter them the next time you make a purchaseThis data can be changed at any time in the futureIf you do not agree to the payment method (s) offered, you can inform us in writing by letter or e-mail at c customerservice@spadaroma.com We will then review the decision in the light of your reportsThe personal data processed in the context of the orders are deleted at the latest after the expiry of the statutory warranty terms, unless this conflicts with the statutory retention obligations.

5.3 Newsletter
We offer all users of our community (www.spadaroma.com users) the opportunity to receive our newsletterTo activate it, the user can register with his e-mail address on the appropriate pageThe user can revoke his consent at any time and without indicating the reasonsThe easiest way to do this is to click on the"Unsubscribe"link, which can be found in every newsletterThe Newsletter may also contain advertising banners, advertisements and advertising offers from both the Company and third partiesThe legal basis of this process is Article 6, paragraph 1 a) GDPR (consent).

5.4 Contact via contact form
If you send us inquiries using the contact form, we will process the information you provide, including your contact details, in order to process your request.In the event of subsequent requests, this additional data will also be storedThe legal basis is Article 6.1 b) GDPR (fulfillment of the contract - the processing of user data is necessary for the fulfillment of the contract to answer questions or requests) as well as Article 6 paragraph 1 f) GDPR (balancing interests - based on our interest in processing requests from users of our website)As Data Controller, the Colella Group informs that Users' personal data, subject to their consent, may be processed by the Colella Group for the following purposes:a) sending information, promotional and advertising material relating to the Colella Group brands ( by way of example but not limited to:sending newsletters, promotions, etc.); b) elaborate studies and statistical research; c) collect data and information in general and in particular on the orientations and preferences of consumers and process them through electronic tools in order to identify the products that may be of greatest interest to them, in such a way as to send them promotional communications expressly addressed to them products (cdprofiling).

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collectedSpecific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized accessThe database is accessible only by authorized parties through methods that guarantee its protection and confidentiality, thanks to the adoption of security measures designed to prevent data loss, illicit or incorrect use and unauthorized access.Despite all the measures taken to safeguard your information, we cannot guarantee, in the current state of technology, that unauthorized access or abuse of services by third parties can be excluded.

PLACE OF DATA PROCESSING

The treatments connected to the Services of this Site take place at the headquarters of the Data Controller and are only handled by the Data Controller's technical staff appointed for this purpose in the capacity of person in charge, or by any persons in charge of occasional maintenance operations.No data deriving from the web service is communicated or disseminatedThe personal data provided by Users who submit requests to join the Services are used only to perform the service or provision requested and are disclosed to third parties only if this is necessary for this purpose.In its capacity as data controller, the Colella Group may proceed, directly or through any external data processors indicated on the Site, to save the Users' personal data on special servers and to carry out all other processing operations through the staff - of the owner and manager - appointed for this purpose in the capacity of appointee, or through any external appointees during maintenance operations.

For the operation of our website we engage external providers of data processing services (egsending the order, software newsletters, data centers)If necessary, these service providers also process personal dataService providers are carefully selected and monitored by usThe data is processed exclusively in accordance with our instructions and is also bound by this data protection declarationOnly in the presence of an express authorization from the User, Colella Group proceeds to use your data for the same activities referred to in the previous point with the aid of automated tools without the intervention of an operator and/or for other purposes authorized by the User from time to timeThe updated list of all data processors is available at each headquarters of the Data Controller and can be requested at the following e-mail address:customerservice@spadaroma.comThis list can be subsequently integrated and/or updated as needed.

Personal data will be kept only for the time necessary to achieve the purposes indicated here or as required by law (civil, fiscal and tax obligations in force)The data entered by you pursuant to section 3.1 will therefore be deleted at the latest 10 years after the expiry of any retention periods provided for by commercial and tax law.The automatically recorded data, as defined in section 3.2, will therefore be deleted or made anonymous after 24 months.

As an interested party, pursuant to articles 15-21 of the GDPR you have the right to:

a) obtain confirmation of the processing of your personal data;

b) access your personal data and know its origin (when the data are not obtained from you directly), the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the retention period of your data or useful criteria to determine it;

c) obtain the updating and correction of your personal data so that they are always exact and accurate;

d) obtain the cancellation, in the cases provided for by art17 of the GDPR, of your personal data or request the limitation of processing;

e) obtain a copy of your personal data.

You can therefore know what your personal data are in our possession, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by the provisions in force, cancellation, limitation of treatment or oppose to their treatmentIf you wish, you can request to receive the personal data we hold about you in a format that can be read by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you.

Any requests will be processed at the latest within one month of receipt, except for the possibility of extending this deadline for a further two months, if necessary, taking into account the complexity and number of requests received by the Data Controller.

We reserve the right to change this Privacy Policy at any timeWe will notify you of material changes to this Privacy Policy by sending an email to the address you have indicated to usSuch material changes will take effect seven (7) days after such notice is provided.

Cookies are small files recorded on your deviceCookies can be used to determine if a connection has already been made between your device and our pagesOnly the cookie stored on your device is identifiedNo personal data is stored in the"Cookies"folder.

This site uses technical cookies, direct or from third parties, aimed at guaranteeing the correct functioning of the site, without which the same navigation would not be possible; analytics cookies are also used, in order to collect information on the number of users and on how to navigate the same siteThe so-called technical cookies are stored on the user's device with the"Stay connected"function, which prevents the user from having to log in again during subsequent visits to our website.This function is not available if the user has disabled the storage of these cookies in the settings of his browserThe cookies described above are all collected and analyzed anonymously and in aggregate formThe use of profiling cookies is excluded in any formHowever, we invite you to carefully read our information on cookies for more information on cookies and similar devices we use, on their respective purposes and other relevant information.

If you have general questions about the information we collect and how we use it, please contact us by e-mail at customerservice@spadaroma.com or by sending a letter to Colella Group srl, operational headquarters in Nola, CIS, Isola 5, Lot 504, 80035, Nola (Na).