Agricultural Society Opera Roses s.s. with registered office in 25080 Padenghe, via Caravigla 35, Italy, VAT number 03859540985 (hereinafter, “Owner”), owner of the website www.operaroses.com (hereinafter, the “Site”), as data controller of the personal data of users who browse and who are registered on the Site (hereinafter, the “Users”) provides below the privacy policy pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, “Regulation” or “Applicable Law”).

Opera Roses has appointed a Data Protection Officer (DPO), who can be contacted at the company headquarters and at news@operaroses.com

The Data Controller takes the utmost account of the right to privacy and protection of the personal data of its Users. For any information in relation to this privacy statement, Users can contact the Data Controller at any time, using the methods described in paragraph 8 below.

1. PURPOSE OF THE PROCESSING

Users’ personal data will be processed lawfully by the Data Controller pursuant to art. 6 of the Regulation for the following processing purposes:

a) navigation of the site, in relation to the possibility of detecting User data necessary at a technical level, such as eg. the IP address, while browsing the site.
b) legal obligations, or to fulfill obligations established by law, by a competent public administration, by an authority, by a regulation or by European legislation.
c) response to requests for
information, received by us through the appropriate contact form.
d) loyalty: release of the digital loyalty code and management of activities that cannot be exercised anonymously and necessary to allow subscribers to use and recognize promotions, offer and send rewards, participation in point collections and events promotions reserved for loyal customers. The fields indicated as mandatory (with an asterisk) if not filled in will make it impossible to issue the digital loyalty code. The optional data, if not provided, will not have consequences on the release of the digital loyalty code and on the participation in the promotions associated with it. The evaluation of the mandatory data was made taking into account the principles of necessity and proportionality in the processing prescribed by current legislation.
e) sending applications, through the appropriate portal. A specific information will be conveyed on the specific collection page.

The provision of personal data for the processing purposes indicated above is optional, but is a condition for the user to be able to browse the site, register on the Site and use the services offered by the Data Controller on the Site.

2. MARKETING

With the free and optional consent of the User, some of the User’s personal data (i.e. name, surname, email address, complete shipping address, etc.) may also be processed by Opera Roses for marketing purposes ( sending information and / or promotional material on the products or services provided by the undersigned company, including gifts and free samples; for carrying out market research aimed, for example, at analyzing consumer habits and choices and commercial communication, as well as the evaluation of the degree of satisfaction of the products and services offered).
The consent may be revoked at any time by the user, by making a request to the Data Controller in the manner indicated in paragraph 8 below. The User can also easily oppose further sending of promotional communications and email newsletters by clicking on the appropriate link to the withdrawal of consent, which is present in each promotional and newsletter email. Once the consent has been revoked, the Data Controller will send the User an e-mail message to confirm that the consent has been revoked. If the User intends to withdraw his consent to the sending of promotional communications by telephone, while continuing to receive promotional communications via email, or vice versa, please send a request to the Data Controller in the manner indicated in paragraph 8 below.
The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications and newsletters via email, it is possible that, for technical and operational reasons (e.g. formation of contact lists already completed shortly before receipt by part of the owner of the opposition request) the User continues to receive some additional promotional and newsletter messages. Should the User continue to receive promotional messages and newsletters after 7 days have elapsed from the exercise of the right of opposition, please report the problem to the Data Controller, using the contacts indicated in paragraph 8 below.

3. PROFILING

With the free and optional consent of the User, the User’s personal data (i.e. personal and contact data, and information relating to the services towards which the same has expressed an interest) may be processed by Pratello also for the purpose of profiling, or to reconstruct the User’s tastes and consumption habits, based on the purchase choices and information optionally provided during registration for the Loyalty program (loyalty) or subsequent registration on the website.
In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in paragraph 8 below.

4. COMMUNICATION OF DATA TO THE PRATELLO PARTNERS

With the free and optional consent of the User, the User’s personal data (i.e. name, surname, address, e-mail address, telephone, etc.) will be communicated to partner companies of Pratello, belonging to the following product categories: large distribution organized, clothing, publishing, electronics and IT, finance and insurance, tourism and accommodation facilities, grocery, couponing, cosmetics and pharmaceuticals, gifts, ONLUS companies and foundations, event organization, training agencies.
The Partners of the Data Controller, as independent data controllers, will process the User’s personal data for their own marketing purposes (direct sales, sending advertising material and commercial communication), and will be able to contact the User by post, e-mail, telephone (landline and / or mobile, with automated call or call communication systems with and / or without the intervention of an operator) and / or SMS and / or MMS to propose to the User the purchase of products and / o services offered by the same categories of third-party companies and / or by other companies and to present offers, promotions and commercial opportunities to the User. Once the transfer has taken place, it will be the responsibility of the Partner of the Owner to provide Users pursuant to art. 14 c. 3 of the Regulation, all the information required by the same art. 14 of the Regulation. In case of lack of consent, the possibility of registering on the Site will not be affected in any way.
In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in paragraph 8 below.
The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent data controllers, on the basis of the specific information that will be issued by the Data Controller’s Partners to Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them.

5. PROCESSING METHODS, OBLIGATORY PROVISION AND DATA STORAGE TIMES

The Data Controller will process the Users’ personal data using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data. The personal data of the Users of the Site will be kept for the time strictly necessary to carry out the primary purposes illustrated in paragraph 1 above, or in any case as necessary for the civil protection of the interests of both Users and the Data Controller.
For the purposes referred to in letter a), the provision of data is optional, but it is a necessary and indispensable condition for the release of the digital loyalty code: failure to provide it makes it impossible for the applicant to obtain the code. For the purposes referred to in letters “b”, “c” and “d”, the provision of data is optional and any refusal to provide them and to give the relative consent makes it impossible for the undersigned company to follow up on the direct marketing and profiling activities indicated therein, but does not affect the possibility for the applicant to obtain the release of the digital loyalty code and to access the related benefits.
In case of lack of explicit consent, customers will be able to use purchases at all points of sale of the issuing company for the purposes of loyalty (accumulation of points, offers reserved for digital loyalty code holders) but will not be able to receive promotional offers.
In the cases referred to in paragraph 3 above, the personal data of Users will be kept for the time strictly necessary to carry out the purposes described therein and, in any case, within the limits set out in the Applicable Regulations.

6. LEGAL BASIS OF THE PROCESSING

With reference to the purposes referred to in points 1 / a, 1 / c and 1 / d, the legal basis of the processing is the execution of the services provided through the Site and requested by you (pursuant to Article 6, paragraph 1, lett . b of the Privacy Regulation 2016/679); with reference to the purpose referred to in point 1 / b of the previous paragraph, the legal basis of the processing is to fulfill a legal obligation to which the Data Controller is subject (pursuant to article 6, paragraph 1, lett. Privacy Regulation 2016/679). With regard to purposes 2, 3 and 4, the legal basis is any optional consent of the User (pursuant to Article 6, paragraph 1, letter a of the 2016/679 Privacy Regulation).

7. SCOPE OF COMMUNICATION AND DISCLOSURE OF DATA

The employees and / or collaborators of the Data Controller in charge of managing the Site may become aware of the personal data of the Users. These subjects, who are formally authorized by the Data Controller, will process the User’s data exclusively for the purposes indicated in this information and in compliance of the provisions of the Applicable Regulations.
Third parties who may process personal data on behalf of the Data Controller as “External Data Processors” may also become aware of the Users’ personal data, such as, by way of example, suppliers of IT and logistical services functional to the operation of the Site. , outsourced or cloud computing service providers, professionals and consultants. Users have the right to obtain a list of any data processors appointed by the Data Controller, by making a request to the Data Controller in the manner indicated in paragraph 8 below.

8. RIGHTS OF THE INTERESTED PARTIES

Users can exercise the rights guaranteed to them by the Applicable Law, by contacting the Owner in the following ways:

By sending a registered letter with return receipt to the registered office of the owner, Opera Roses.
By sending an e-mail to news@operaroses.com;
Pursuant to the Applicable Law, users will be able to exercise the rights referred to in art. 15 and following of the Regulations, in the manner provided for by art. 12 of the same. If the user considers that the processing that concerns him violates the Regulation, he has the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the one in which they work or in the one in which the alleged violation). The Italian Supervisory Authority is the Guarantor for the protection of personal data – http://www.garanteprivacy.it/ – garante@gpdp.it