Privacy policy

INFORMATION PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

Dear User, we inform you that pursuant to Article 13 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, the data provided will be processed in accordance with the principles of lawfulness, correctness and transparency and protection of your privacy and your rights. Therefore, we provide you with the following information:

The Data Controller is PALUMBO E GIGANTE S.r.l., Via della Libertà, 13/b – 90139 PALERMO. E-Mail: [email protected]

The Data Protection Officer (DPO) can be contacted at [email protected].

Your personal identification data will be processed for the following purposes:

1. To create and manage your personal account on our site, including to make purchases through our e-commerce. The legal basis is the existence of contractual relationships; the provision of data for these purposes is optional, but any refusal could make it impossible to create an account.
   The data collected will be processed to allow you to use our services or, for registration data, until you request cancellation. They will be retained for 10 years for administrative and accounting purposes.
2. To make purchases in guest mode and for the related contractual, administrative and accounting purposes and for the related deliveries. The legal basis is the existence of contractual relationships; the provision of data for these purposes is optional, but any refusal could result in the partial or total impossibility of following up on your purchases.
   The data collected will be processed to allow you to use our services and for the entire time necessary to pursue the purposes described above. They will be retained for 10 years for administrative and accounting purposes.
3. To manage the activities arising from your contact request, based on your consent. In this case, the provision of data is optional, but any refusal could result in the impossibility of following up on your contact request.
   The data collected for this purpose will be processed for the time necessary to follow up on your contact request.
4. To send our newsletter to the email address you indicated, based on your consent. In relation to this purpose, consent is optional, but in case of refusal you will not be able to receive our newsletter.
   The data collected for this purpose may be processed until the consent is revoked.
5. For commercial purposes and sending commercial communications to the email address you indicated, based on your consent. In relation to this purpose, consent is optional, but in case of refusal you will not be able to receive our commercial offers.
   The data collected for this purpose may be processed until the consent is revoked.

Your Data will be processed for the purposes indicated above by employees and/or collaborators of the Data Controller in their capacity as persons authorised to process data and/or internal data processing referents and/or system administrators; by third parties (for example, suppliers, professionals, etc.) where they carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data controllers.

Furthermore, your data may be communicated to third parties (for example, PayPal) who act as independent controllers for the management of payments.

These parties will prepare specific information that you can consult through the references provided by the controllers themselves.

Generally, the selected service providers operate through data centers located within the European Union. In the event that your data is transferred to non-EU countries, including for the purpose of technical management of the data collected, this will occur exclusively in full compliance with the European GDPR legislation to Third Countries for which there are adequate guarantees of protection of the transfer or specific contractual clauses for the protection of personal data have been signed.

Without your express consent (pursuant to art. 6 letter b), c) GDPR), the Data Controller may communicate your Data to public bodies to comply with the obligations established by laws, regulations or by community legislation or imposed by the Authorities, who will process them in their capacity as independent data controllers.

If you decide to click on a link that directs you to the site of another data controller, the latter will act as an independent controller and will apply its own policies and terms of use.

At any time, you may exercise your rights towards the data controller, pursuant to articles 15-22 of EU Regulation 2016/679, and in particular the rights of access, rectification, integration, as well as obtaining the cancellation, limitation or opposition to the processing of data for legitimate reasons, by sending a registered letter to the address of the Data Controller indicated above or by sending an e-mail to the address [email protected] or to the DPO at the e-mail address [email protected].