Salcas S.r.l., with registered offices in Milan in via Tonale 20 and place of business in Settimo Milanese (MI) in via Keplero 29, part of the "Nuncas Group", together with Nuncas Italia S.p.A., with registered office in Milan in via Tonale 20 and place of business in Settimo Milanese (MI) in via Keplero 29, on whose behalf it operates, recognises the importance of maintaining the confidentiality, integrity and security of Personal Data.
It therefore informs you that the Personal Data you provide to the Nuncas Group through the Website will be processed in compliance with current European legislation on privacy (Regulation (EU) 2016/679 - hereinafter "GPDR", Legislative Decree 101/2018).
Any further requests for information and/or clarifications regarding the processing of data should be made by email to the following address: firstname.lastname@example.org.
The contact details of the Data Protection Officer are as follows: email@example.com
1) Data type and source
Browsing data and storage times – data acquired from the system and security logs
This website, during visits by users, automatically acquires information through system LOGS and security logs.
The collected information may include the following:
- time and date of visit;
- IP address and name of the provider of origin;
- records of errors and problems.
All this data, collected in aggregate form, is used only to support diagnostics for security purposes. Example: In the event of an attack, logs are monitored to block unauthorised access and to prevent malicious activity.
Access to this data is only at the level of server administration and is never used to identify or profile the user/visitor but is only acquired for the protection and security of this website. Such data may only be used in the event of a crime, and only at the request of the judicial authorities in the cases provided for by law. The LOG data collected by the website are processed at the headquarters of the Data Controller, and at the web hosting datacentre.
The web hosting is responsible for data processing (DHH Switzerland SA, Via degli Agustoni 3, CH-6830 Chiasso - Switzerland) and processes the data only at the express request of the controller and acts in accordance with European regulations.
Data used for security purposes are stored for 90 days.
Personal data provided voluntarily by the data subject
Nuncas Group will collect and process Personal Data, such as for example your first and last name, your postal address and your email address, that you directly and knowingly provide through the website when you place an order and/or register on the website and/or subscribe to the Group’s newsletter service and/or make a request through the Contact Us section.
Finally, we would like to point out that the optional, explicit and voluntary sending of emails through the website and/or to the addresses indicated on the website will result in the subsequent acquisition of your email address, which is necessary to answer requests, as well as any other personal data included in the message sent.
2) Purposes of data processing
Your Personal Data will be used for the following purposes:
a) to answer your requests for information and to manage the related relationship;
b) to process your online purchase order and perform all the administrative and accounting management activities related thereto, as well as the shipment of products, the processing of payments, of possible disputes and the prevention of frauds, and to fulfil all the obligations imposed by applicable laws.
Moreover, with your prior consent, your Personal Data may be included in our customer database and processed, together with the details of your purchases, for the following purposes:
c) profiling purposes: for the elaboration of studies, surveys, analysis and statistical and/or market research, in relation to your preferences on our products, in order to offer a service tailored to your needs and promote initiatives that might interest you;
d) marketing purposes: to contact you and/or send you (by email and/or other forms of communication) information and promotional messages, including of a commercial nature, newsletters, advertising material, catalogues and invitations to events, relating to the products and services of the Nuncas Group.
3) Processing methods
The Personal Data will be processed using electronic or automated and computerized instruments and/or by manual and paper-based processing with logics strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to ensure the security and confidentiality of the data.
4) Legal basis of processing and nature of the contribution
The processing of your data for the purposes referred to in letters c) and d) of paragraph 2 will be subject to your express consent. Any refusal to grant consent will have no effect other than that of not being able to offer you a personalised service and to inform you about initiatives that might be of interest to you and/or to send you any other information of a commercial nature about our products or initiatives.
5) Communication, dissemination of data and transfer to Third Countries
Your Personal Data will be processed only by subjects expressly authorised by the Nuncas Group or who act as Data Processors, on behalf of the Group itself, and who have signed a specific contract that punctually regulates the processing entrusted to them and the obligations regarding data protection (by way of example, service providers, shippers, technicians who maintain IT services, companies that the Nuncas Group may use for the creation and/or management of promotional campaigns for its products or services, etc.).
Your Personal Data may be transferred to third countries such as Switzerland, whose protection levels have been deemed adequate by the European Commission, as well as the USA (in relation to the Google services used), to whose Standard Contractual Clauses the Data Controller must adapt. Your data will never be disclosed by the Data Controller.
6) Duration of processing
Your Personal Data will be processed and stored for the time necessary to achieve the purposes for which they were collected and in accordance with the retention periods provided for by applicable regulations or until you revoke your consent to processing where applicable.
7) Rights of the data subject
You may exercise the rights provided for in articles 15 to 21 GDPR and, in particular, request information on the existence and characteristics of the processing of your personal data, rectification and erasure of such data, or restriction of processing, object to processing and/or request transmission of your personal data to another data controller; moreover, you may revoke your consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.
Finally, in the event of your requests for information not being satisfactorily answered, you have the right to lodge a complaint with the Supervisory Authority.
The relevant authority is the Data Protection Authority:http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.