Privacy policy

Information on the processing of personal data

[ articolo 13 del reg. (U.E.) n. 679/2016 ]

Dear Customer,

in accordance with Article 13 of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data - hereinafter, Regulation (EU) - we provide you with the following information on the processing of your personal data:

Contact details of the data controller of your personal data

The data controller of your personal data is Editrice Shalom, with registered office at Via Galvani 1, 60020 Camerata Picena, AN, and reachable by telephone at 0717450440 or at the email address info@editriceshalom.it.

Decision to appoint a data protection officer

The data controller has decided not to appoint a data protection officer, since, in addition to not being required to do so under Article 37, paragraphs 1 and 4, of the Regulation (EU), it has assessed such appointment as currently unnecessary.

Types of data processed

• Browsing data whose transmission is implicit in the use of Internet communication protocols: these are information that are not collected to be associated with identified data subjects, but that by their very nature could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user's operating system and computing environment.

  These data are used solely to obtain anonymous statistical information on the use of the website and to verify its correct functioning. The data may be used to establish liability in the event of hypothetical cybercrimes against the website: except in this eventuality.

• Data provided voluntarily by the user: when consulting the website, users may optionally, explicitly, and voluntarily send emails to the addresses indicated, complete contact and information request forms, and subscribe to the data controller's newsletter. These voluntary actions result in the subsequent collection of the personal data voluntarily entered by the user.

Purposes and related legal bases for processing Your personal data

Your personal data, which are adequate, relevant and limited to what is necessary, will be processed lawfully, fairly and transparently in relation to You and in a manner that ensures adequate security thereof for the following purposes:

• registration on the website in order to purchase a product and/or obtain information: the legal basis is the necessity to take pre-contractual or contractual measures at the request of the Data Subject by completing the relevant form and/or sending a message, pursuant to Art. 6(1)(b) of the Regulation (EU);
• management of the purchase order and/or the restricted area, following Your completion of specific forms: the legal basis is the consent given by the Data Subject for one or more specific purposes, pursuant to Art. 6(1)(a) of the Regulation (EU);
• responding to specific requests concerning the activities carried out by Editrice Shalom, following Your completion of specific forms: the legal basis is the consent given by the Data Subject for one or more specific purposes, pursuant to Art. 6(1)(a) of the Regulation (EU);
• performance by Editrice Shalom of preliminary activities relating to the conclusion of a contract between You and Editrice Shalom: the legal basis is the necessity to take pre-contractual measures at the request of the Data Subject, pursuant to Art. 6(1)(b) of the Regulation (EU);
• performance by Editrice Shalom of the contract entered into between You and Editrice Shalom: the legal basis is the necessity to perform a contract to which the Data Subject is party, pursuant to Art. 6(1)(b) of the Regulation (EU);
• compliance by the data controller with a civil and tax obligation: the legal basis is the necessity to comply with a legal obligation to which the data controller is subject, pursuant to Art. 6(1)(c) of the Regulation (EU);
• compliance with an obligation concerning the protection of personal data and any other obligation established by a legal provision to which the data controller is subject: the legal basis is the necessity to comply with a legal obligation to which the data controller is subject, pursuant to Art. 6(1)(c) of the Regulation (EU);
• the possible exercise of the data controller's right of defense against You: the legal basis is the necessity to pursue the data controller's legitimate interest (legal protection), pursuant to Art. 6(1)(f) of the Regulation (EU);
• protection of the company's assets by the data controller, including hardware maintenance, software maintenance, and email maintenance: the legal basis is the need to pursue the data controller's legitimate interest (protection of the company's assets), pursuant to Article 6(1)(f) of the EU Regulation;
• management of newsletter subscriptions and performance of promotional and/or advertising activities relating to the economic activity carried out by the data controller, following your completion of specific forms: the legal basis is the data subject's consent to the processing of their personal data for this specific purpose, pursuant to Article 6(1)(a) of the EU Regulation.

Possible categories of recipients of your personal data

With regard to the processing of your personal data carried out by Editrice Shalom for the purposes listed above, the possible categories of recipients of your personal data may be:

• employees, collaborators, trainees, and directors of the data controller, acting as persons authorized to process your personal data, in order to carry out activities preliminary to entering into a contract and, where applicable, perform the contract entered into between you and the same party, comply with a civil and tax obligation, comply with an obligation concerning the protection of personal data and any other obligation established by a legal provision to which the data controller is subject, potentially protect themselves legally in relation to you, and carry out promotional and/or advertising activities: it is specified that all such persons are duly trained in the appropriate measures to be adopted to protect your personal data, pursuant to Article 29 of the EU Regulation;
• external parties outside our organizational structure, acting as data processors for your personal data, in order to carry out activities preliminary to entering into a contract (e.g., agents and commercial agencies) and, where applicable, perform the contract entered into between you and the same parties (e.g., banking intermediaries, technical consultants);
• external parties outside our organizational structure, acting as data processors for your personal data, in order to comply with a civil and tax obligation (e.g., accountants, accounting experts, data processing centers);
• external parties outside our organizational structure, acting as data processors for your personal data, in order to comply with an obligation concerning the protection of personal data and any other obligation established by a legal provision to which the data controller is subject (e.g., sector-specific companies and consultants);
• external parties outside our organizational structure, in order to potentially protect themselves legally against you (lawyers and law firms).
• external parties outside our organizational structure, acting as data processors for your personal data, in order to protect the company's assets (e.g., hardware, software, network, and email technicians);
• external parties outside our organizational structure, acting as data processors for your personal data, in order to carry out promotional and/or advertising activities relating to the business activity conducted by the data controller.

It should be noted that all the above-mentioned parties are bound to the data controller by a specific contract providing for appropriate measures to ensure the protection of your personal data, pursuant to Article 28 of the EU Regulation.

Decision to transfer your personal data to a third country or an international organization

The data controller has decided not to transfer your personal data to a third country or an international organization, as it has been assessed as currently unnecessary.

Retention period for your personal data

Editrice Shalom will retain your personal data processed by it for the purpose of carrying out preliminary activities before entering into a contract between you and it in an identifiable form for a period equal to the performance of the preliminary activities and for an additional period of 5 years for the pursuit of the data controller's legitimate interest, after which it will destroy or delete it.

Editrice Shalom will retain your personal data processed by it for the purpose of performing the contract concluded between you and it, the purchase, protecting the company's assets, fulfilling a civil and tax obligation, fulfilling an obligation relating to the protection of personal data, and any other obligation established by a legal provision to which the data controller is subject, in an identifiable form for a period equal to the performance of the contract between you and it and for an additional period of 10 years for any further processing within the ordinary limitation period, after which it will destroy or delete it.

Editrice Shalom will retain your personal data processed by it for the purpose of potentially exercising the right of defense against you in an identifiable form only for a period equal to the possible duration of legal protection against you, after which it will destroy or delete it.

Editrice Shalom will retain Your personal data processed by it for the purposes of carrying out promotional and/or advertising activities relating to the business conducted by the data controller in a form that allows You to be identified only for a period corresponding to the duration of the consent You have given to the processing of Your personal data for that specific purpose, after which they will be destroyed or deleted.

Your rights

You, as the Data Subject, may exercise the following rights by sending an email to info@editriceshalom.it:

• access Your personal data, pursuant to Art. 15 of the (EU) Regulation, in order to verify whether Your personal data are being processed and, if so:
  • obtain information about the purposes of such processing;
  • obtain information about the categories of Your personal data being processed;
  • obtain information about any categories of recipients of Your personal data;
  • obtain information about the retention period of Your personal data;
  • obtain information about whether You have the right to rectify or delete Your personal data or the right to restrict their processing;
  • obtain information about whether You have the right to lodge a complaint with the Data Protection Authority;
  • obtain information about any use of automated decision-making in the processing of Your personal data, including the logic used and the consequences for You envisaged as a result of such processing;
• rectify Your personal data, pursuant to Art. 16 of the (EU) Regulation, in the event of a subsequent dispute concerning their accuracy;
• supplement Your personal data, pursuant to Art. 16 of the (EU) Regulation, in the event of a subsequent dispute concerning their completeness;
• delete Your personal data, pursuant to Art. 17 of the (EU) Regulation, unless it is necessary to comply with a conflicting legal obligation or to establish, exercise, or defend a right in judicial proceedings, in the event of:
  • the subsequent lack of necessity to process such personal data for the stated purposes;
  • the subsequent exercise of Your right to object to the processing, excluding the precedence of the data controller’s legitimate interest over Your interests or fundamental rights and freedoms;
  • the subsequent establishment of the unlawfulness of the processing of Your personal data;
  • the subsequent existence of a legal obligation requiring the deletion of such personal data;
• restrict the processing of Your personal data, pursuant to Art. 18 of the (EU) Regulation, in the event of:
  • the subsequent dispute concerning the accuracy of such personal data, even if only for the period necessary for the resulting verification by the data controller;
  • the subsequent establishment of the unlawfulness of the processing of Your personal data, together with the subsequent objection to their deletion;
  • the subsequent absence of a need to process such personal data for the stated purposes, together with the simultaneous need to process the same data to establish, exercise or defend a right in legal proceedings;
  • subsequent exercise of your right to object to the processing, even if only for the period necessary for the data controller to carry out the resulting verification;
• receive your personal data processed by the data controller by automated means in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another data controller, pursuant to Article 20 of the (EU) Regulation;
• object to the processing of your personal data, pursuant to Article 21 of the (EU) Regulation, if you subsequently dispute the data controller's legitimate interest prevailing over your interests or fundamental rights and freedoms.

Editrice Shalom is required to accommodate any exercise of your rights listed above without unjustified delay.

Your right to lodge a complaint

As the data subject, you may exercise your right to lodge a complaint with the Data Protection Authority if you subsequently dispute the compliance with the (EU) Regulation of the processing of your personal data carried out by the data controller, pursuant to Article 77 of the same (EU) Regulation, by submitting the appropriate form to the email address protocollo@pec.gpdp.it.

Nature of the provision of your personal data

Providing your personal data to the data controller is contractually mandatory with regard to carrying out the preliminary activities for entering into a contract and, where applicable, performing the contract concluded between you and the data controller, complying with a civil and tax obligation, complying with an obligation concerning the protection of personal data, and any other obligation established by a legal provision to which the data controller is subject.

Indeed, please note that your possible refusal to provide such personal data would make it impossible for the data controller to fulfill the aforementioned purposes.

Providing your personal data to the data controller constitutes neither a contractual nor a legal obligation with regard to the performance of promotional and/or advertising activities.

However, please note that your possible refusal to provide such personal data would make it impossible for the data controller to fulfill the aforementioned purpose.

Decision to use an automated decision-making system in processing your personal data

The data controller has decided not to use an automated decision-making system in processing your personal data, as it is currently unnecessary.