Information on the processing of personal data ex art. 13 Regulation (EU) 679/2016

This policy describes the methods and purposes of the processing of personal data of users who access and use the official website of 8853 S.p.A.(www.8853.it) and the official websites of the 8853 S.p.A. divisions:

• 88Dent(https://www.88dent.com)
• 88Labware(https://www.88labware.com)
• 88Medical(https://www.88medical.it)
• 88Preciousnetwork(https://www.88preciousnetwork.com)
• 88Preciousproducts(https://www.88preciousproducts.com)
• OROvilla(https://www.orovilla.com)
• Bancovilla(http://www.bancovilla.it)
• 88Vet(http://www.88vet.com )

(hereinafter “Site”) owned by 8853 S.p.A..

This information is provided only for the Site and not also for third-party websites that may be accessible through hyperlinks contained on the Site.

1. Data controller

The data controller is the Company 8853 S.p.A. (hereinafter also just the ‘Company’), P. IVA 10684110157, with operational headquarters in Pero (MI), via Pitagora 11, tel. 0288531, e-mail privacy@8853.it.

2. Types of data processed and purposes of processing

Processing operations are carried out with reference only to personal data necessary for the use of the Site and its features. The types of data being processed include, in particular:

1. Navigation data: the computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is not, nor will it under any circumstances be used by the Owner to carry out profiling activities.
2. Identification data such as, for example, name, e-mail address and other personal data that may be contained in e-mail messages sent to the addresses indicated on the Site or conferred by filling in the “formats” specifically prepared, in order to carry out the processing activities necessary to provide feedback to user requests;
3. Identifying data such as, for example, name and e-mail address conferred by filling out the newsletter subscription format in order to send periodic informative communications;
4. Identification data to manage your registration as a user of the site and authorize you to access the various features, products, and services available to you as a registered user;
5. Economic and transaction information (e.g., your payment or credit card information, information about purchases you have made, orders, returns, etc.) for the purpose of fulfilling and executing the purchase agreement you entered into with us on the Site;
6. Information about your likes and dislikes, as a registered user: if you provide consent for profiling to send you personalized information about our products or services. Accordingly, please keep in mind that such data processing involves analyzing your user profile to determine your preferences and, therefore, which products and services best suit your interests for sending information. For example, based on your purchases we will provide you with suggestions on products that we think you might be interested in.

3. Legal basis for processing

• For the purpose (b) of (2) above, we believe that we have a legitimate interest in responding to requests or questions from you through the various existing contact channels. We understand that the processing of this data is also beneficial to you insofar as it allows us to adequately assist you and answer the questions posed.
• For the purpose letter c) of point 2, the legal basis for processing your data for marketing purposes is the consent (optional and revocable at any time) you provide to us.
• For the purpose letter d) of point 2, your data is processed as it is necessary for the purpose of carrying out the terms governing the use of the Reserved Area of the site. In other words, in order for you to register as a user, we have to process your personal information, otherwise we would not be able to handle your registration.
• For the purpose letter e) of point 2, the processing of your data is necessary for the purpose of fulfilling the sales contract concluded with you.
• For the purpose (f) of point 2, based on your consent (optional and revocable at any time) we may perform profiling with the information we have about you (such as your preferences or purchase history) to offer you personalized services and send you personalized promotional communications.

4. Method of processing

The processing will be carried out, using mainly computerized tools, by means of collaborators and employees authorized to do so, who work according to the instructions given by the Owner, with logic strictly related to the purposes indicated and, in any case, in such a way as to ensure the security and confidentiality of the data processed.

Specific security measures are taken in order to minimize the risks of destruction or loss, including accidental loss, of the data being processed, unauthorized access, unauthorized processing or processing that does not comply with the purposes set out in this notice.

5. Period of data retention

Processed data will be kept for a period of time not exceeding that necessary to achieve the purposes for which they were collected or subsequently processed and, in particular:

• Data provided by sending e-mail messages or filling out contact formats on the site will be kept for as long as necessary to provide feedback;
• Data provided for the purpose of subscribing to the newsletter service will be processed until consent is revoked. You may at any time opt out of receiving communications by clicking theunsubscribe button at the bottom of each e-mail you receive;
• The data you provide to manage your registration as a user on the Site, will be processed as long as you are a registered user (i.e., until you request cancellation of your registration);
• The data provided for the fulfillment and execution of the sales contract, will be processed for as long as necessary for the management of the purchase of the products you requested, including any returns, complaints or disputes related to the purchase of the product;
• Information on likes and dislikes will be processed until any permission given is revoked. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

The owner will, after the expiration of the retention periods according to the indicated criteria, take measures preordained for the deletion or anonymization of data that should not be retained for specific regulatory obligations.

6. Categories of recipients

The data subject’s personal data may be disclosed to:

• Specially authorized collaborators and employees of the Company, within the scope of their respective responsibilities;
• External parties designated as Data Processors pursuant to Art. 28 of the GDPR, to whom appropriate operational instructions are given. These subjects are essentially included in the following categories:
  1. Companies that provide website and information system maintenance services;
  2. Companies that offer e-mailing services;

e. Companies offering marketing automation platform management services.

Outside of the cases mentioned above, personal data will not be communicated, disseminated, transferred or otherwise transferred to third parties for purposes that are unlawful or unrelated to the purposes of collection and, in any case, without making appropriate information to the data subjects and acquiring their consent, where required by Law. This is without prejudice to any communication of data at the request of the Judicial or Public Security Authorities, in the manner and in the cases provided by law.

Personal data will not be transferred abroad, to countries or international organizations outside the European Union that do not guarantee an adequate level of protection, recognized under Art. 45 GDPR, based on an EU Commission adequacy decision. In the event that it becomes necessary for the provision of the Site’s services to transfer personal data to countries or International Organizations outside the EU, for which the Commission has not adopted any adequacy decision under Art. 45 GDPR, will only take place if adequate guarantees are provided by the recipient country or organization, pursuant to Art. 46 GDPR and provided that data subjects have enforceable rights and effective remedies.

In the absence of an adequacy decision by the Commission under Art. 45 GDPR, or adequate safeguards, pursuant to Art. 46 GDPR, including binding corporate rules, the cross-border transfer will take place only if one of the conditions specified in Art. 49 GDPR.

7. Rights of the data subject

The data subject is granted the right to access his or her personal data, to ask for their rectification, updating, and deletion or restriction if incomplete, erroneous, or collected in violation of the law, as well as to object to their processing for legitimate reasons or to obtain their portability (for a more in-depth discussion, see Articles 15-22 of the GDPR).

All of the rights listed above may be exercised by you by contacting the company’s designated officers by writing to privacy@8853.it.

If you believe that the processing of your data violates the provisions contained in the (EU) Regulation, you can contact the Data Protection Authority by visiting the site at http://www.garanteprivacy.it/.