INFORMATION FOR THE PROCESSING OF PERSONAL DATA COLLECTED FROM THE INTERESTED PARTY

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we provide you with the necessary information regarding the processing of the personal data provided. The information is not to be considered valid for other websites that may be consulted through links on the websites of the owner, who is not to be considered in any way responsible for the websites of third parties.
The information is provided pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on the subject of Cookies as well as provided for by the Provision of the Guarantor Authority for the protection of personal data of 08.05.2014 regarding cookies.

THE HOLDER OF THE TREATMENT
Pursuant to art. 4 and 24 GDPR, is Ribola Retificio Srl with registered office in Corte Franca (BS) Italy, Via del Campasso n. 19, in the person of the pro-tempore legal representative. The contact email of the Data Controller is: service@retificioribola.it
TYPES OF DATA THAT ARE PROCESSED
Processable personal data : "personal data": any information relating to an identified or identifiable natural person ("data subject"); the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social; (C26, C27, C30)

By way of example and not exhaustive, the data that could be collected are the following:

The categories of information we collect include:
• Identification and contact information (for example: name and surname, date of birth, postal address, email address, mobile number, contact methods) necessary to identify the user
• Information on the transactions necessary for the fulfillment of the order (for example: geographic location, selected items, delivery and billing address, telephone number and physical address and e-mail alternative to the main payment method with payment card and date expiry date, as well as the holder of the payment card account when making an online payment, data relating to company identification including for tax purposes)
• Information about your preferences or needs (preferences in products and services, problems relating to a product, needs for use or personal problems whose knowledge is necessary to enable the purchase of a product or technical assistance).
• Socio-demographic information (for example, age, profession, gender)
• Historical data on your online orders (we keep a history of transactions and previous purchase data; information on favorite or already purchased products, information on the transaction such as product information and the date and place of purchase or return).
• The historical data of your previous contacts
• Logos and graphics also relating to registered trademarks
• The reviews you write about the products and the photographs you post on the Beauty Board.
• La recensione che scrivi sui prodotti e le fotografie che pubblichi sul Beauty Board.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 f) EU Reg. 2016/679 for the following purposes:

- browsing on this website;
- possible compilation of forms for registration on the website to request information on products
- compilation of data collection form , login and / or contact request with sending of the requested information, data collection form for order execution
- execution of the sales contract or pre - contractual measures
- sending data for receiving newsletters or promotional communications in general via e-mail and / or text message
- online account management and any reserved promotions or discounts
- any administrative and accounting purposes for payments and tax data processing to comply with the regular issue of the sales or return or refund documents required by law.
- Allow returns and refunds
- allow the shipment, redelivery, release of goods in storage, including the communication of the same data to the courier or to the persons in charge of delivery, also for customs purposes
- profiling and direct and indirect marketing purposes
- subscription to the mailing list and receipt of promotional information and information relating to new products or services offered
- carrying out graphic drafts relating to logos or writings
- photo publications shared or granted on the company's social channels
- use of photos shared or granted in communications with other customers or in catalogs, promotional brochures , exhibition stands and general advertising material
- deduce preferences for certain products and analyze how the user interacts with certain content or navigates the site or concludes the purchase
HOW INFORMATION AND DATA ARE COLLECTED
The data can be acquired in different ways as better specified below.
In any case, it should be noted that the acquisition of data in the manner described above does not take place through a fully automated decision-making process as, through the intervention of the operator, Ribola Retificio srl also carries out profiling activities, in particular it processes the profiles of the consumer and analyzes their habits and consumption choices in order to improve the commercial offer and the services offered.

a) INFORMATION PROVIDED DIRECTLY BY THE USER.
The information that the user provides directly when using our site and our services is collected in cases where the natural person:

• You also create an online account for a legal person or company related to you
• Sign up for newsletters
• Make purchases or book services on the company websites www.retificioribola.com, www.ribolanetting.fr, www.ribolanetting.de, www.ribolanetting.com or by sending information or logos directly to the site
• Call on the phone or communicate with company phone numbers even via sms or whatsapp
• Register to receive our e-mails or reply to a received e-mail
• Request a catalog, a technical data sheet, a user manual
• Enter a sweepstakes, contest, promotion or survey
• Communicate with us through a third party social network
• Request technical, commercial or tax assistance, request refunds or contact us for returns or problems relating to orders placed, shipments, transport charges, customs or for the payment of orders in progress
• Communicate with us in any other way

Sharing of personal data is voluntary. However, if you do not provide all or some of the information requested, the data controller may not be able to provide you with certain products, services or information.
The data you requested may be essential to respond to requests.

b) INFORMATION COLLECTED AUTOMATICALLY.
It is possible that some of the information of which is automatically acquired, in particular:

• Connection data: information on the device used by the user to navigate and use the Site (such as the operating system, the type of browser, the use or not of a proxy, the inferred position of one's IP address to identify the computer, the duration of the visit, the pages visited and the link that led to our Site).
• Information on navigation even regardless of registration, with particular regard to cookies and other tracking technologies to collect information about the user when interacting with our site or the e-mails we send you or with posts or other information on social networks or in others sites. The information is collected both when the user is connected and when he is not connected and can be crossed with each other, regardless of the device used. For more information on cookies and how to delete them, consult the information technology relating to cookies on the site.
• Location data and geolocation.
• Data acquired through AI or artificial intelligence for profiling and marketing purposes

Also, depending on the data we have, some forms may be pre -filled.

c) INFORMATION COLLECTED FROM OTHER SOURCES
It is possible that the collection of information also takes place from other sources and that the same are linked to those already acquired or to be acquired directly or automatically. By way of example and not limited to:

• Information from the databases of local postal services, from the couriers to whom the goods are entrusted, from websites where personal or business addresses are collected;
• Data shared by third party partners i.e. information shared by partners for direct marketing purposes or targeted advertising.
• Data shared by social networks: information shared by social networks or by membership or membership groups whose sharing has been authorized.
• Data from third parties in cases where they have been authorized to disseminate the data for the purpose of satisfying the user's requests

d) INFORMATION NEEDED FOR OUR LEGITIMATE INTEREST
The collection of data on the basis of a legitimate interest is possible, whenever this collection is not detrimental to the fundamental rights and freedoms of the user.
This collection may take place for the purpose of managing relations with the customer in general, updating company databases, in order to improve the use of the site, customize sites, applications and advertising based on user preferences, customize newsletters or communications.
This data can also be acquired by linking the data provided online and offline, by accessing the pre -sales customer service, chat, company reference numbers, after-sales service, while participating in statistics, studies or in interactions on company social channels, whenever the user provides information to prevent or manage payment errors.

e) INFORMATION COLLECTED TO FULFILL OBLIGATIONS OF LAW
Some data may also be collected and stored to fulfill legal obligations and to defend corporate interests in the event of disputes or legal actions. In this case, the data are kept for the entire duration of the relationship and to fulfill legal obligations or for the time necessary to manage the dispute.
METHODS OF PROTECTION OF PERSONAL DATA
Personal data are protected by technical and organizational measures in compliance with the Italian and European legal and regulatory requirements that guarantee their security and confidentiality, including protection technologies, such as encryption, authentication and fraud detection systems, for the protection of payment transactions.
DATA STORAGE AND TRANSFER
The data is stored in the European Union.
It is possible that the data collected are transferred outside the European Union to countries whose legislation on the protection of personal data differs from that applicable within the European Union or the country of residence, in particular that the data is shared with suppliers located outside the European Union. In this case, the company ensures that the transfer of data is supported by decisions of adequacy, minimization and that it is governed by the standard contractual clauses of the European Commission which guarantee a sufficient level of protection of privacy and fundamental rights of individuals.

The data may be disclosed to companies contractually linked to the data controller or to third parties belonging to the following categories:
- subjects that provide services for the management of the information system used by Ribola Retificio Srl and of the telecommunications networks (including e-mail);
- subjects, including external parties, for the management of archiving of paper and / or computerized documentation;
- subjects who carry out customer assistance activities;
- public bodies and administrations for checks and controls in compliance with fiscal and civil obligations;
- in the case of administrative accounting purposes, the data may possibly be transmitted to commercial information companies for the assessment of solvency and payment habits and / or to subjects for credit recovery purposes, or third parties legally authorized to collect credits, to manage of disputes and complaints;
- financial companies in the event of a loan.

The subjects belonging to the aforementioned categories perform the function of data processing manager, or operate in total autonomy as separate data controllers.
The photographs and information granted by email can be shared on the company social channels or used on the website or on the company commercial channels, also by sending to other users or potential customers.
The data is also shared with third parties when using the social network buttons.
The data may also be shared in cases not described above with the user's consent or according to the instructions or when required by law. In case of sale of all or part of the business, yours will be shared with the buyer to ensure the continuity of the Services and / or, for direct marketing purposes.
STORAGE TIMES
The processing will be carried out in an automated and manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed to do so.
In compliance with the provisions of art. 5 paragraph 1 letter. e) of EU Reg. 2016/679 the personal data collected will be stored in a form that allows identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed, with particular regard to conservation data for fiscal regulatory compliance and in all other cases in which the retention of data is established by law.
The retention of the personal data provided may also depend on the purpose of the processing. In any case, the data will not be stored beyond the maximum time necessary to allow the carrying out of the purposes for which they were communicated or acquired.
RIGHTS OF THE INTERESTED PARTIES
Each user can assert their rights as expressed by EU Regulation 2016/679, by contacting the Data Controller, by sending an e-mail to service@retificioribola.it or by writing to the Data Controller's office indicated above.
In particular, the user will have the right, at any time, to ask the Data Controller for access to your personal data (Article 15), the rectification (Article 16) or cancellation (Article 17) of the same, or the limitation of processing (Article 18) or to oppose their processing based on legitimate interest (Article 21). Finally, you have the right to the portability of your personal data (Article 20).
The user will also have the right to revoke the consent given for promotional communications activities (by exercising the opt -out through our automated systems or by writing to service@retificioribola.it), to lodge a complaint with a supervisory authority;
CHANGES TO THE PRIVACY POLICY.
The owner reserves the right to modify, update, add or remove parts of this privacy p