Information pursuant to and for the purposes of art. 13 of the European regulation on the protection of personal data (GDPR) n. 2016/679.
Pursuant to art. 13 of EU Regulation no. 2016/679 we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which the Optics Comm. Giuseppe Ranieri srl is bound.
Current legislation provides that whoever carries out personal data processing is required to inform the interested party on which data are processed and on certain elements qualifying the processing, which must take place with correctness, lawfulness and transparency, protecting your privacy and your rights.
The aforementioned data must be provided for the establishment and execution of the obligations deriving from the contractual relationship with the Optics Comm. Ranieri srl, connected by way of example and not limited to the sale of frames, glasses, lenses, optical devices, ocular prostheses , contact lenses, custom-made medical devices, predisposed medical devices, as well as the provision of related services.
Who we are and what data we process (art. 13 co. 1 lett. A and lett. B - art. 15 lett. B GDPR).
The data controller is “Ottica Comm. Giuseppe Ranieri Srl”, based in Bari at Corso Italia n. 25/a (contacts: tel. +39 080 521 13 83; e-mail [email protected]).
We process your personal and fiscal data (name, surname, physical address, nationality, municipality of residence, e-mail address, certified email address, tax code/VAT number), as well as data of an economic nature (IBAN and bank/postal data, with the exception of the credit card number), as well as your particular data (biometric and health) necessarily and limitedly for the provision of the services and products referred to above, requested by you, and therefore for the establishment and execution of the obligations deriving from the contractual relationship.
We will not take possession of and will not process any of your data that can be qualified as judicial. Upon your request, the data controller will be able to provide an updated list of all data processors.
We process your personal and fiscal data (name, surname, physical address, nationality, municipality of residence, e-mail address, certified email address, tax code/VAT number), as well as data of an economic nature (IBAN and bank/postal data, with the exception of the credit card number), as well as your particular data (biometric and health) necessarily and limitedly for the provision of the services and products referred to above, requested by you, and therefore for the establishment and execution of the obligations deriving from the contractual relationship.
We will not take possession of and will not process any of your data that can be qualified as judicial. Upon your request, the data controller will be able to provide an updated list of all data processors.
Purposes and methods of processing (Article 13, paragraph 1, letter C of the GDPR).
Basic purpose (a) - compulsory provision of data
Pursuant to art. 9 of the GDPR, you could provide data that can be classified as "special categories of personal data", with particular reference to biometric data or data relating to a person's health.
These categories of data may be processed by us only with your free and explicit consent, expressed by selecting the appropriate checkboxes present in the contact and order forms of this website.
The data, including those mentioned above, are used by the owner to:
"Promotional" purposes (b) - optional provision of data and consent
The data is used by the owner for:
Send, using automated and non-automated tools (i.e. traditional methods such as, for example, paper mail, email and/or calls with an operator), communications for the needs of monitoring the progress of customer relations as well as planning and carrying out analytical, strategic and operational, inform about commercial and promotional activities on goods/services linked to those for which the relationship has been established, send advertising material and/or relating to any initiatives, and/or free services, as well as the participation in competitions and prize events .
Profiling (c) – optional provision of data and consent
Profiling means the automated processing of personal data which evaluates personal aspects concerning a natural person, in particular for the purpose of analyzing or predicting aspects relating to professional performance, economic situation, health, personal preferences or interests, reliability or the behavior, location or movements of the interested party, where this produces legal effects concerning him or similarly significantly affects his person.
The data controller could perform profiling activities to provide you with personalized information of your interest (e.g. direct marketing).
Other purposes (d) – no authorization due – anonymous data
Statistical processing that will take place in an absolutely aggregated and anonymous form.
The legal basis of the processing is the fulfillment of the services relating to the contract and compliance with the legal obligations.
The processing of data concerning you takes place using manual and automated tools, with methods strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data also through appropriate protection measures.
Pursuant to art. 9 of the GDPR, you could provide data that can be classified as "special categories of personal data", with particular reference to biometric data or data relating to a person's health.
These categories of data may be processed by us only with your free and explicit consent, expressed by selecting the appropriate checkboxes present in the contact and order forms of this website.
The data, including those mentioned above, are used by the owner to:
- Fulfill the obligations deriving from the supply of goods and services both in the contractual phase and in the pre-contractual phase (including pre- and post-sales assistance), with particular reference to their execution as well as the collection of the agreed fees.
- Fulfill the obligations established by applicable national and community legislation.
- To enforce the rights even by third parties in court, arbitration, administrative in compliance with the regulatory limitations.
- In general, to follow up on the fulfillment of legal obligations to which the owner is required according to the activity carried out.
"Promotional" purposes (b) - optional provision of data and consent
The data is used by the owner for:
Send, using automated and non-automated tools (i.e. traditional methods such as, for example, paper mail, email and/or calls with an operator), communications for the needs of monitoring the progress of customer relations as well as planning and carrying out analytical, strategic and operational, inform about commercial and promotional activities on goods/services linked to those for which the relationship has been established, send advertising material and/or relating to any initiatives, and/or free services, as well as the participation in competitions and prize events .
Profiling (c) – optional provision of data and consent
Profiling means the automated processing of personal data which evaluates personal aspects concerning a natural person, in particular for the purpose of analyzing or predicting aspects relating to professional performance, economic situation, health, personal preferences or interests, reliability or the behavior, location or movements of the interested party, where this produces legal effects concerning him or similarly significantly affects his person.
The data controller could perform profiling activities to provide you with personalized information of your interest (e.g. direct marketing).
Other purposes (d) – no authorization due – anonymous data
Statistical processing that will take place in an absolutely aggregated and anonymous form.
The legal basis of the processing is the fulfillment of the services relating to the contract and compliance with the legal obligations.
The processing of data concerning you takes place using manual and automated tools, with methods strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data also through appropriate protection measures.
The provision of personal data (art. 13 co.2 letter E GDPR).
Failure by you to provide the data that we are obliged to know, including the particular categories of personal data referred to in art. 9 GDPR - in order to fulfill the contractual obligations and the obligations established by laws, regulations and community legislation, or by impositions imparted by authorities legitimated by the law and by supervisory and control bodies - makes it impossible to establish or continue the relationship to the extent that such data are necessary for the execution of the same.
Failure to provide data that we are not obliged to know will in no way compromise compliance with contractual obligations as well as the provision of services and the response to your requests.
Failure to provide data that we are not obliged to know will in no way compromise compliance with contractual obligations as well as the provision of services and the response to your requests.
Communication to third parties and categories of recipients (art. 13 co.1 letter E GDPR).
Your data will not be disclosed by us - by this term meaning giving it knowledge to indeterminate subjects - in any way, including by making them available or consulting them.
Your data may be communicated by us - with this term meaning giving knowledge to specific subjects - in the following terms:
The owner does not transfer personal data to non-EU countries.
Otherwise, the interested party will receive specific information in advance, and his consent will be requested.
Your data may be communicated by us - with this term meaning giving knowledge to specific subjects - in the following terms:
- to employees and collaborators, operating under the direct authority of the owner and duly trained by the same;
- to subjects who can access the data by virtue of the law, regulation or community legislation, within the limits set by these rules;
- to subjects who need to access your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the auxiliary tasks themselves;
- to our consultants, including external ones, within the limits necessary to carry out their duties, subject to mutual supervision in order to guarantee compliance with the legislation on the protection of personal data as well as the duty of confidentiality and information security;
- to the Italian Optical Consortium (C.O.I.) based in Padua - Via San Marco n. 13 - CAP 35129 and to consultants or external suppliers identified by it, within the limits strictly necessary to carry out the management activities of the services commissioned and/or requested by the undersigned owner in the context of the consortium relationship.
The owner does not transfer personal data to non-EU countries.
Otherwise, the interested party will receive specific information in advance, and his consent will be requested.
Processing security (art. 32 GDPR). - Place of processing and storage of personal data
Your personal data (even particular ones) will be processed in an automated and/or manual form at the owner's operational headquarters and will be recorded and kept in full compliance with the security measures provided for by the privacy legislation at our point of sale (or our points of sale ), in paper, computerized and telematic archives located in countries where the GDPR is applied, in order to offer an efficient service for monitoring the products purchased by you and/or the services requested by you.
Storage period of personal data
Your personal data will be kept for the time imposed on the basis of regulatory provisions concerning the product and/or service provided, as well as the administrative, civil and fiscal discipline, which as a rule do not exceed 10 years, except in any case of conservation foreseen by the specific regulations of the sector.
The data processed by us for the basic purposes referred to in point (a) will be kept for the time necessary to carry out a monitoring activity of the device provided and the evolution of the visual defect over time.
In the event of a dispute, your data will be kept until the limitation period established by the legislation for the protection of rights connected to the contractual relationship.
Your personal data may be stored by us for longer periods to be processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1 GDPR, with the implementation of measures adequate techniques and organizational techniques to protect your rights and freedoms, and in any case with methods and techniques such as to make you unidentifiable.
Your postal address, e-mail address and telephone number will be kept for a period of 24 months starting from the termination of relations with the Optics Comm. Giuseppe Ranieri Srl, for information purposes and for sending updates and related news to commercial initiatives, competitions, other advertising and promotional material, as well as to communicate initiatives and other events, or even for profiling activities, without prejudice to the hypothesis of further sales and/or your requests that may take place in this period of time and/ or the need to keep data for the other purposes detailed here.
The data processed by us for the basic purposes referred to in point (a) will be kept for the time necessary to carry out a monitoring activity of the device provided and the evolution of the visual defect over time.
In the event of a dispute, your data will be kept until the limitation period established by the legislation for the protection of rights connected to the contractual relationship.
Your personal data may be stored by us for longer periods to be processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1 GDPR, with the implementation of measures adequate techniques and organizational techniques to protect your rights and freedoms, and in any case with methods and techniques such as to make you unidentifiable.
Your postal address, e-mail address and telephone number will be kept for a period of 24 months starting from the termination of relations with the Optics Comm. Giuseppe Ranieri Srl, for information purposes and for sending updates and related news to commercial initiatives, competitions, other advertising and promotional material, as well as to communicate initiatives and other events, or even for profiling activities, without prejudice to the hypothesis of further sales and/or your requests that may take place in this period of time and/ or the need to keep data for the other purposes detailed here.
Protection of minors
Given that minors must be guaranteed enhanced protection in terms of confidentiality, the consent for the processing of minors' data must in any case be formalized by the parents or by those who exercise parental authority. In any case, if it is ascertained to be in possession of personal information relating to a minor, the information present in its archives will be immediately deleted.
Your rights
Pursuant to the provisions of articles 15 to 21 of the GDPR, and under the conditions set forth therein - by written request sent by post to "Ottica Comm. Giuseppe Ranieri Srl", Corso Italia n. 25/a, Bari, or to the email address [email protected] - You may at any time exercise your right to:
- ask for confirmation of the existence or otherwise of your personal data;
- obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and when possible, the retention period;
- request access to your personal data and the rectification, cancellation of the same, limitation of treatment, or oppose it, including profiling, as well as request data portability;
- oppose the processing of personal data for direct marketing purposes;
- revoke the consent, without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
- Propose a complaint to the Personal Data Protection Authority competent for the area, or to the one that performs its duties and exercises its powers in the Member State where it considers the violation of your rights in the matter to have occurred.