Privacy Policy

The Company Aria di Sicilia s.r.l. as data controller, in this privacy policy, informs about the ways of processing the personal data provided, in particular on the collection, use, sharing and storage of personal data in accordance with EU Regulation 2016/679 of 27 April 2016. Personal data means any information (name, tax code, voice, fingerprint, etc.) relating to an identified or identifiable natural person, i.e. a person who can be identified directly or indirectly, also by reference to further elements. The Regulation provides that, before proceeding with the processing of Personal Data, it is necessary that the person to whom such Personal Data belongs is informed about the reasons for which such data are requested and how they will be used. If the processing of personal data concerns a minor under the age of 16, consent must be given or authorized by the holder of parental responsibility.

1) DATA CONTROLLER

Aria di Sicilia srl

Corso Umberto, 123

98039 Taormina (ME) – Italia

Tel.: +39 (0)942 55 89 87

Mob.: +39 393 97 97 870

E-mail: info@ariadisicilia.com

2) PURPOSE OF THE PROCESSING

Your personal data are processed, without your express consent, pursuant to art. 6 letters b) and e) of the Regulation, for the following purposes:

– supply of the requested good and/or service;

– execution of contracts for the owner’s services;

– fulfillment of pre-contractual, contractual and tax obligations;

– fulfillment of obligations provided for by law, by a regulation, by community legislation;
– protection of the owner’s rights.

Failure to provide the data necessary for the performance of the service will make it impossible to provide the service itself.

Additional processing purposes
The data controller, subject to your express, free and unequivocal consent, may request additional Personal Data such as, for example, data relating to tastes, preferences, habits, needs and consumer choices, for the following purposes:

– direct marketing purposes: the data controller may carry out promotional and/or marketing activities towards you, i.e. all activities carried out to promote products, services, sold and/or provided by the data controller on the basis of its legitimate interest in pursuing its corporate purpose.

– indirect marketing purposes: the data controller may carry out promotional and/or marketing activities towards you on behalf of third parties and, more precisely, all activities carried out to promote products, services, sold and/or provided by third parties with whom the data controller has legal relationships without, in this case, any communication of data.
– profiling purposes: the data controller may carry out profiling activities towards you, i.e. he may evaluate your tastes, preferences and consumer habits.

3) SPECIAL CATEGORIES OF PERSONAL DATA (art. 9 of the Regulation)

The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or sexual life or sexual orientation of the person will take place only if you have given your consent and in the cases indicated in paragraph 2 of art. 9 of the Regulation in letters b), c), d), e), f), g), h), i) and j).

4) RECIPIENTS OF THE DATA Your Personal Data may be communicated to specific subjects considered recipients of such Personal Data:

or third parties who carry out part of the processing activities and/or activities connected and instrumental to the same on behalf of the data controller or the joint data controllers;
or individuals, employees and/or collaborators of the data controller or the joint data controllers, who have been entrusted with specific and/or multiple processing activities on your Personal Data. These individuals have been given specific instructions on the security and correct use of Personal Data;

or, if required by law or to prevent or suppress the commission of a crime, your Personal Data may be communicated to public bodies or the judicial authority.

5) METHODS OF TREATMENT

Your data will be processed manually and electronically. The collected data will be correctly stored and protected using appropriate security measures in order to minimize the risks of loss, destruction, unauthorized access.

6) DATA STORAGE PERIOD

Your Personal Data will be processed by the data controller only to the extent necessary to achieve the purpose set out in this Policy. In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, i.e. until the termination of the contractual relationships in place between you and the data controller, unless the provisions of law provide for longer periods.

7) RIGHTS OF THE INTERESTED PARTY

The rights that you may exercise, at any time, against the data controller and/or joint data controllers are listed below:

– right of access: you will have the right to obtain from the data controller confirmation as to whether or not your Personal Data is being processed and, where that is the case, to obtain access to such Personal Data.

– right of rectification: you may obtain the rectification of your Personal Data that is inaccurate or incomplete.

– right to erasure: you may obtain the erasure of your Personal Data without undue delay.

– right to restriction of processing: you may obtain the restriction of the processing of your Personal Data in the cases provided for by art. 18 of the Regulation.

– right to data portability: you may, at any time, request and receive all your Personal Data processed by the data controller and/or joint data controllers in a structured, commonly used and machine-readable format or request their transmission to another data controller without hindrance after having provided the exact and complete details of the new data controller to whom you intend to transfer your Personal Data and upon written authorization.

– right to object: you may object, at any time, to the processing of your Personal Data if these are processed for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.

– right to lodge a complaint with the supervisory authority: if you believe that the processing of your Personal Data carried out by the data controller and/or joint data controllers is in violation of the Regulation and/or applicable legislation, you may lodge a complaint with the competent Data Protection Authority, without prejudice to your right to appeal to any other administrative or judicial body.

You may exercise these rights by sending a request to the contact details indicated in the data controller’s data section.

8) DATA TRANSFER

Your Personal Data will be processed by the Data Controller and/or Joint Data Controllers within the territory of the European Union.

If, for technical and/or operational reasons, it becomes necessary to transfer your Personal Data to entities located outside the European Union, such transfer will take place in accordance with the provisions of the law.