Privacy disclaimer

Oleificio R. M. Spa is constantly committed to protecting the online privacy of users who use the application and the site.
This document (“Information”) has been prepared in order to allow you to understand how your Personal Data will be processed in the context of the use of the application and to provide you with all the information necessary for you to express explicit and informed consent. to the treatments carried out.
In general, the processing of any information or Personal Data that you will provide to the Data Controllers through the application, or that will be collected in any other way through the site, will take place according to the internationally recognized principles of lawfulness, correctness, transparency, limitation of purpose and storage, data minimization, accuracy, integrity and confidentiality and will be aimed at providing the services offered on the site itself, the sale of the Products and the activation of an information service with newsletter service.

1. Owners of the treatment

Oleificio R. M. Spa as identified at the beginning of the Information, are the Data Controllers in relation to all Personal Data that are processed through this application.

2. The personal data being processed

Following the navigation of the Site, we inform you that the Data Controllers will process your Personal Data, which may be constituted – also depending on your decisions on how to use the Services – by an identifier such as the name and surname, an identification number, a online identification or one or more characteristic elements of your physical, physiological, cultural or social identity suitable to make you identified or identifiable (hereinafter only “Personal Data”).
Among the Personal Data collected by this Application, either independently or through third parties, there are also: Cookies, Usage data, Email, Password. Other Personal Data collected may be indicated in other sections of this privacy policy or by means of information texts displayed together with the collection of the Data. Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application. Any use of Cookies – or of other tracking tools – by this Application or by the owners of third party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording their preferences for purposes. strictly related to the provision of the service requested by the User.
Failure by the User to provide certain Personal Data may prevent this Application from providing its services. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

The Personal Data processed through the platform are the following:

a. Name, contact details and other personal data

In various sections of the Site, in particular that relating to the creation of a personal account and to that for subscribing to the news letter, you will be asked to enter information such as Email, Password, name, surname, date of birth, gender.

b. Special categories of personal data

Some sections of the Site Platform include free fields in which you can provide the Owners with some information, which may contain Personal Data.
Since these fields are free, you may use them to communicate (voluntarily or not) some sensitive categories of Personal Data, such as data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person.
The Data Controllers invite you not to send such Personal Data unless strictly necessary.
Indeed, these special categories of Personal Data can be processed only with your explicit consent (manifested by the flag present in the specific format) and in compliance with the pro tempore legislation in force.
The Data Controllers therefore underline the importance of giving your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.

c. Data provided voluntarily by the interested party

As already mentioned above, in some parts of the Site you are allowed to insert text messages or information, visible to the Owners, which may contain Personal Data of other people.
With respect to these hypotheses, you place yourself as an independent data controller, assuming all the obligations and responsibilities of the law. In this sense, you grant the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from treatment, etc. that should reach the Owners from third parties whose Personal Data have been processed through your use of the Site’s functions in violation of the applicable personal data protection rules.
In any case, if you provide or otherwise process Personal Data of third parties in the use of the Site, you guarantee from now – assuming all related responsibility – that this particular hypothesis of treatment is based on the consent of that third party concerned or on another suitable legal basis that legitimizes the processing of the information in question.

d. Navigation data

The computer systems and software procedures used to operate the platform acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the platform or third parties.

e. Payment management and data

The payment management services allow this Application to process payments by credit card, bank transfer or other tools. The data used for the payment are acquired directly by the requested payment service provider.
Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.
The payment services are Stripe and PayPal which collect data as specified in their privacy policy.

f. Address management and sending of email messages

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on links inserted in messages.

g. Interaction with social networks and external platforms

These services allow interaction with social networks or other external platforms directly from the pages of the Application. The interactions and information acquired by this Application are in any case subject to the User’s privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed..

h. The buttons
Tweet button and Twitter social widgets (Twitter)

The Tweet button and Twitter social widgets are services for interacting with the Twitter social network, provided by Twitter Inc. and the data processed are Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Like button and Facebook social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc. The personal data collected are cookies and usage data.
Place of processing: USA – Privacy Policy.
+1 button and Google+ social widgets (Google)

The +1 button and Google+ social widgets are interaction services with the Google+ social network, provided by Google Inc.
Personal data collected are Cookies and Usage Data.
Place of processing: USA – Privacy Policy

i. Google Analytics (Google)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network.
Personal data collected are Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.

l. Google AdWords Conversion Tracking (Google)

Google AdWords conversion tracking is a statistics service provided by Google, Inc. that connects data from the Google AdWords ad network with actions performed within this Application.
Personal data collected are Cookies and Usage Data.
Place of processing: USA – Privacy Policy.

m. Viewing content from external platforms

These services allow you to view content hosted on external platforms directly from the pages of this Application and interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

n. Widget Video Youtube (Google)

Youtube is a video content viewing service managed by Google Inc. that allows this application to integrate such content within its pages. Personal data collected: Cookies and Usage data.
Place of processing: USA – Privacy Policy.

o. Vimeo, LLC

Viewing content from external platforms. Vimeo is a video content viewing service managed by Vimeo, LLC that allows this Application to integrate such content within its pages.
Personal data collected: Cookies and Usage data.
Place of processing: USA – Privacy Policy – Cookie Policy.

3. The purposes of the processing

The Data Controllers will use your Personal Data, collected through the Platform, for the following purposes:

purchase and delivery of products and services: we use your personal data to receive and manage orders, provide products and services; to verify your identity and help you, in case you lose or forget the login / password details of your personal account on the platform; buy a fidelity card; send you the newsletters you have requested as a Service by subscribing; allow you to save your favorite items and provide you with any services you request;
marketing and remarketing: we use your personal data to show you advertising defined according to interests in relation to features, products and services that may interest you, to be able to send you e-mail promotions, SMS, push notifications, by phone, via banners, instant messaging , through the Holders’ official social media pages, relating to products and / or services also referable to third parties;
soft spam: the processing for this purpose is based on the Owners’ interest in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequence for you. (besides the fact that you will no longer receive further communications of this kind from the Owners).
compliance: to comply with legal obligations that require Data Controllers to collect and / or further process certain types of Personal Data;
abuse / fraud: to prevent or identify any abuse in the use of the platform, or any fraudulent activity and therefore allow the Owners to protect themselves in court.

4. Legal basis and mandatory or optional nature of the processing

The legal bases used by the Data Controllers to process your Data, according to the purposes indicated in the previous Paragraph 3, are the following:

purchase, delivery and supply of services and products: processing for this purpose is necessary in order to be able to provide you with the Services and products and, therefore, to execute the contract stipulated with you. It is not mandatory to provide the Owners with your Personal Data for this purpose, but otherwise it will not be possible to provide you with any Service. The same applies to the newsletter service that arises from your specific request by entering an e-mail address and which you can revoke at any time by following the instructions in Paragraph 7 of this Notice.
marketing and remarketing: processing for this purpose is based on your consent. It is not mandatory to give your consent to the Owners for this purpose and you are free to revoke it at any time without any consequence (except for the fact that you will no longer receive marketing communications from the Owners). You can revoke your consent previously given by following the instructions in Paragraph 7 of this Notice.
soft spam: the processing for this purpose is based on the Owners’ interest in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequence for you. (besides the fact that you will no longer receive further communications of this kind from the Owners).
Compliance: processing for this purpose is necessary for the Controllers in order to fulfill any legal obligations. When you provide Personal Data to the Owners, they must be treated according to the applicable legislation, which could involve their conservation and communication to the Authorities for accounting, tax or other obligations.
abuse / fraud: the information collected for this purpose will be used exclusively to prevent and / or identify any fraudulent activity or abuse in the use of the Site and therefore allows the Owners to protect themselves in court.

5. Recipients of personal data

Your Personal Data may be shared with the subjects indicated below (the “Recipients”):

subjects who typically act as managers (internal and external) of the processing, that is: i) persons, companies or professional firms that provide assistance and advice to the Controllers in accounting, administrative, legal, tax, financial matters;
owners of the websites within the platform;
subjects with whom it is necessary to interact for the provision of the Services;
subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);
persons authorized by the Owners to process Personal Data necessary to carry out activities strictly related to the provision of the Services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees of the Owners);
subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data for Compliance, Abuse or Fraud purposes, or by order of the authorities.

6. Retention of Personal Data

The Personal Data processed for the purpose of purchasing, delivering and supplying services and products will be kept by the Data Controllers for the time strictly necessary for the aforementioned purpose (eg for sending the purchased product).
In any case, since such Personal Data are processed to provide you with the Services, the Owners may keep them for a longer period, in particular as may be necessary in order to protect the interests of the Owners from possible complaints relating to the Services.
The Personal Data processed for Marketing and remarketing purposes will be kept by the Owners until you withdraw your consent.
In any case, we will remind you of the consents you have given us every 24 months. Once the consent has been revoked, the Data Controllers will no longer use your Personal Data for these purposes, but may still keep them, in particular as may be necessary in order to protect the interests of the Data Controllers from possible complaints based on such treatments.
The personal data processed for the purpose of Soft Spam will be kept by the Data Controllers until you object to such processing through the link at the bottom of each of the Soft Spam e-mails.
The Personal Data processed for the purposes of Compliance will be kept by the Data Controllers for the period provided for by specific legal obligations or by the applicable legislation.
The Personal Data processed in order to prevent Abuse / Fraud will be kept by the Owners for the time strictly necessary for the aforementioned purpose and therefore until the moment in which the Owners will be required to keep them to protect themselves in court to communicate said data to the competent Authorities.

7. Rights of the interested party

You have the right to ask the Owners, at any time:

access to your Personal Data, (or a copy of such Personal Data), as well as further information on the treatments in progress on them
the correction or updating of your Personal Data processed by the Data Controllers, where they are incomplete or out of date;
the deletion of your Personal Data from the Owners’ databases;
the limitation of the processing of your Personal Data by the Controllers;
to obtain the Personal Data concerning you in a structured, commonly used and machine-readable format;

As well as you can:

oppose the processing of your Personal Data by the Holders (eg Soft Spam);
withdraw your consent for Marketing and Remarketing purposes.
We point out that most of the Personal Data you have provided to the Owners can be modified at any time, by accessing, where possible, your personal account created on the Site.

Upon requesting the Services, you may have selected which communication channels through which you want to be contacted for marketing purposes (i.e., telephone, text message, email, mail, push notifications, social media).
You can withdraw your consent for Marketing relating to each of these communication channels through your personal account on the Site, by deselecting the relevant options.
You can also revoke the marketing consent sent by e-mail and stop receiving Soft Spam using the appropriate link at the bottom of each e-mail received. The same method can be used to stop receiving the newsletter, if you have requested it as a Service.
In addition to the above, you can also exercise your rights by writing to the Owners at the following address: privacy@oleificiorm.com
In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data) if you believe that the processing of your Personal Data is contrary to the legislation in force.

8. Changes

This privacy policy is effective from 25/05/2018. The Owners reserve the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The Owners will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. The Owners therefore invite you to regularly visit this section to become aware of the most recent and updated version of the privacy policy in order to always be updated. on the data collected and on the use made of it by the Owners.