Privacy Policy

The purpose of this document is to inform Users about the Personal Data collected by the website lasantissima.com (hereinafter referred to as the “Application”).

The Data Controller, as identified below, may modify or simply update this Privacy Policy, in whole or in part, by informing Users. Any changes or updates will be binding as soon as they are published on the Application. Users are therefore invited to review the Privacy Policy each time they access the Application.

If the User does not accept the changes to this Privacy Policy, they must cease using this Application and may request the Data Controller to remove their Personal Data.

1. Personal Data Collected by the Application

A. Content and Information Voluntarily Provided by the User

Contact details, credentials, content: for example, personal details, email or postal addresses and other contact information, passwords and security information used for authentication and account access, personal interests and preferences, and other personal content.

Sensitive data: Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data to uniquely identify a person, data concerning health, or data concerning a person’s sex life or sexual orientation.

Failure to provide certain Data may make it impossible for the Application to provide its services.

The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees they have the right to communicate or disclose them, releasing the Controller from any liability toward third parties.

If the processing of Personal Data is based on the User’s consent, they may revoke it at any time.

B. Data and Content Collected Automatically During Use of the Application

Technical Data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, certain Personal Data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects but could, by its nature, identify users through processing and association with third-party data.

Usage Data: data may also be collected on how the Application is used by the User, such as pages visited, actions taken, and services used.

Geolocation Data: the Application may collect location data, either precise or imprecise. Precise location data may include GNSS data (e.g., GPS), and data identifying the nearest repeater, Wi-Fi hotspots, and Bluetooth, shared when enabling location-based services or features.

C. Personal Data Collected Through Cookies or Similar Technologies

This Application uses cookies, web beacons, unique identifiers, and similar technologies to collect data on pages, links visited, and other actions taken during the use of our Services, in advertisements, or emails. They are stored and then retransmitted to the same sites during future visits by the same User.

Users can view the full Cookie Policy at the following address: Cookie Policy.

2. Purpose

The data collected may be used for the following purposes:
User support and contact, user registration and authentication, feedback and comments, by communicating Data to:
https://www.facebook.com/full_data_use_policy

Facebook

Ireland Ltd.

Access to third-party services accounts (Facebook, Twitter, Google)
Displaying content from external platforms (Google)
External payment processing (PayPal)
Anonymous statistics (Google)
Marketing and promotional communication (Mailchimp)

3. Processing Methods

The processing of Personal Data is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.

Besides the Controller, in some cases, other parties involved in the organization of the Application may have access to the Data to assist in Application management. These individuals, if necessary, will be appointed as Data Processors by the Controller and are contractually bound to confidentiality.

An updated list of Data Processors is available upon request via email at info@lasantissima.com.

4. Legal Basis for Processing

The Controller processes Personal Data when one of the following conditions is met:

The User has given consent for one or more specific purposes;
Processing is necessary for the performance of a contract or pre-contractual measures;
Processing is necessary for compliance with a legal obligation;
Processing is necessary for the legitimate interests of the Controller or third parties.
Users may request clarification on the legal basis for each processing activity.

5. Location

Data is processed at the Controller’s operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Controller at info@lasantissima.com.

6. Security Measures

Processing is carried out using suitable tools and methods to ensure the security and confidentiality of the Data. The Controller has adopted appropriate technical and organizational measures to ensure and demonstrate compliance with relevant regulations.

7. Data Retention Period

The Controller will process Personal Data for the time necessary to fulfill the purposes related to a contract between the Controller and the User, and in any case no longer than 5 years after the end of the relationship. Data may be kept longer if required by law or by order of an authority. All Personal Data will be deleted at the end of the retention period.

8. Automated Decision-Making

No Data collected will be subject to automated decision-making processes, including profiling, that may affect the person legally or significantly.

9. User Rights

Users may exercise certain rights regarding their Data. Specifically, Users have the right to:

Withdraw consent at any time;
Object to the processing of their Data;
Access their Data;
Verify and request rectification;
Request restriction of processing;
Request deletion of their Personal Data;
Receive their Data or have it transferred to another controller;
Lodge a complaint with the data protection authority and/or take legal action.

To exercise these rights, Users may contact the Controller at the contact details provided in this document. Requests are free of charge and handled as quickly as possible, within 30 days.

10. Data Controller

The Data Controller is URBAN VALUE SRL – Via F. Paulucci de Calboli 5 – VAT no.: 14939801008 – email: info@lasantissima.com