Data Privacy

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) as well as the applicable Italian data protection provisions is:

Rodolfo Perosillo / TusciaPollai.it
Via Lucio Elio Seiano 24
01023 Bolsena (VT)
Italy

E-Mail: legalnotice@solltenichtangezeigtsein.ittusciapollai.it

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) as well as the applicable Italian data protection provisions.

Personal data means all information relating to an identified or identifiable natural person. This includes, in particular, name, address, e-mail address, payment data, order data as well as usage data such as the IP address.

Personal data is processed only to the extent necessary for the provision of our website, the handling of inquiries, the performance of contracts, compliance with legal obligations, or on the basis of consent given by you.

3. Purposes and legal bases of processing

We process personal data in particular for the following purposes:

to provide and technically secure our website,
to handle contact inquiries,
to execute and process orders,
to create and manage a customer account,
to comply with statutory retention and documentation obligations,
to prevent misuse and ensure IT security.

Processing is carried out on the basis of Art. 6 para. 1 GDPR, in particular:

Art. 6 para. 1 lit. b GDPR, insofar as processing is necessary for the performance of a contract or for the implementation of pre-contractual measures,
Art. 6 para. 1 lit. c GDPR, insofar as processing is necessary for compliance with a legal obligation,
Art. 6 para. 1 lit. f GDPR, insofar as processing is necessary for the purposes of our legitimate interests, in particular for the technical provision, security and optimization of our website.

4. Access to the website and server log files

When our website is accessed, the web server automatically records information that your browser transmits to us or to our hosting provider. This may include, in particular:

IP address,
date and time of access,
browser type and browser version,
operating system used,
referrer URL,
pages or files accessed,
access status / HTTP status code,
amount of data transferred.

This data is processed in order to technically provide the website, ensure system security, analyze errors and prevent misuse.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and stable provision of the website.

5. Hosting

Our website is hosted by an external hosting service provider. In this context, the personal data collected in connection with the use of this website is processed on the servers of the hosting provider.

This may include, in particular, IP addresses, communication data, website access data, meta and log data, as well as other data generated in the context of website use.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR as well as, insofar as a corresponding contractual relationship exists or is initiated, on the basis of Art. 6 para. 1 lit. b GDPR.

Hosting provider:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
D-02742 Friedersdorf
Germany

If required, a data processing agreement has been concluded with the hosting provider.

6. Cookies

Our website uses exclusively technically necessary cookies. These cookies are required in order to provide the website, navigation, the shopping cart, the login area, or security-related functions.

Technically necessary cookies cannot be deselected, as they are required for the operation of the website.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically proper and secure provision of our website and its essential functions.

7. Contact

If you contact us by e-mail, via a contact form, or in any other way, we process the data communicated by you in order to handle your inquiry and any follow-up questions.

This may include, in particular:

name,
e-mail address,
content of your message,
where applicable, further information voluntarily provided by you.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR insofar as your inquiry is related to the initiation or performance of a contract; otherwise on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper handling of inquiries.

8. Orders and contract processing

If you place an order with us, we process the data required for the performance of the contract. This includes, in particular:

name,
billing and delivery address,
e-mail address,
ordered products,
order and contract data,
payment information,
where applicable, communication content related to the order.

Processing is carried out for the performance of the contract and on the basis of Art. 6 para. 1 lit. b GDPR.

Insofar as necessary for contract processing, we transmit data to service providers, for example shipping companies, IT or hosting service providers, as well as, where applicable, tax advisors or accounting service providers.

9. Customer account and registration

If you create a customer account on our website, we process the data entered by you during registration in order to enable access to the login area and the management of your orders.

This may include, in particular:

name,
e-mail address,
password,
address,
order history.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

10. Payment processing

Payment processing is currently carried out exclusively by bank transfer.

Within the framework of payment processing, we process in particular the data required for the allocation and verification of incoming payments, in particular name, billing data, order amount, payment references as well as, where applicable, further transaction-related information.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

11. Shipping service providers

For the delivery of ordered goods, we transmit the data required for delivery to the commissioned shipping or transport service provider.

This generally includes:

name,
delivery address,
where applicable, e-mail address insofar as required for delivery,
order-related shipping information.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Shipping and transport service providers used:
Palletways
Cargoboard

12. External links to Instagram and YouTube

Our website may contain links to our profiles on Instagram and YouTube.

These are purely external links. As a matter of principle, no data is automatically transmitted to Instagram or YouTube when you visit our website by means of these links.

Only if you actively click on such a link will you leave our website and be redirected to the page of the respective provider. From that point onward, any processing of personal data takes place under the sole responsibility of the respective provider.

Further information on data processing can be found in the privacy notices of the respective providers:

Instagram: https://privacycenter.instagram.com/policy
YouTube / Google: https://policies.google.com/privacy

13. Recipients of data

Personal data is disclosed to third parties only insofar as this is legally permitted or necessary.

Recipients may include, in particular:

hosting service providers,
IT service providers,
shipping and transport service providers,
tax advisors / accounting,
authorities or courts, insofar as a legal obligation exists.

14. Transfer of data to third countries

If we transfer personal data to recipients in states outside the European Union or the European Economic Area, or use services for which such a transfer cannot be ruled out, this is done only in compliance with the legal requirements.

Where necessary, such transfer is carried out in particular on the basis of an adequacy decision of the European Commission or appropriate safeguards, such as standard contractual clauses.

15. Storage period

We store personal data only for as long as necessary for the respective processing purposes or insofar as statutory retention obligations exist.

Thereafter, the data is deleted unless its further storage is required by law or is necessary for the establishment, exercise or defense of legal claims.

Statutory retention periods may apply to documents relevant under commercial and tax law.

16. Your rights

Within the framework of the statutory provisions, you have in particular the following rights:

right of access to the personal data processed by us,
right to rectification of inaccurate data,
right to erasure,
right to restriction of processing,
right to data portability,
right to object to processing,
right to withdraw consent given at any time with effect for the future, insofar as the processing is based on such consent.

You may contact us at any time in order to exercise your rights.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data, in particular with the authority competent for Italy.

18. Obligation to provide data

The provision of personal data is partly required by law or contract or is necessary for the conclusion of a contract. Without the necessary data, we may not be able to provide certain services or conclude a contract.

19. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place unless this is expressly described otherwise in this privacy policy.