Dr. Vranjes Firenze ® Privacy Policy

DATA PROCESSING BY ALIAS S.R.L. FOR ONLINE PURCHASE

Dear User, in this page we describe the ways in which Alias S.r.l. processes your data that are collected through the website www.drvranjes.com.

The processing of your data will be based on principles of correctness, lawfulness and transparency and protecting your privacy and your rights in line with both the Privacy Code (Legislative Decree 196/2003) and the European Regulation n. 2016/679 (RGDPR)

1. The Data Controller

The data controller is ALIAS S.r.l. Via Cennano 31, 52025 Montevarchi (AR) VAT number / Fiscal Code 01648260519 Inscription Reg. Companies AR-01648260519 info@alias2k.com.

2. Responsible for data protection or RPD

Pursuant to and for the purposes of Article 37 of EU Reg. 2016/679 GDPR, Alias has appointed the Data Protection Officer you can contact using the following contact information: Tel +39 055900249 email: privacy@alias2k.com

3. Type of data collected:

With regards to the data collected, we inform you that the collection and processing concern the following types of data:

•Personal data

In order to process our relationship and / or services connected to it we collect personal data such as: user identification data such as name, surname, tax code, place of residence, email address, bank details and in any case all those data essential for proceeding to correctly process the orders received, manage payments, deliveries, any return / refund requests, etc.

• Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error ..) and other parameters related to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

•Cookies

Cookies are a textual element that is inserted into the hard disk of a computer only after authorization. Cookies have the function to streamline the analysis of web traffic or to indicate when a specific site is visited and allow web applications to send information to individual users. No user data is acquired by the site in this regard. We do not use cookies to transmit information of personal nature, nor c.d. persistent cookies are used of any kind, or systems for tracking users.

4. Purposes of processing and data retention time

The processing of data is aimed exclusively at providing services related to the web services of the Website drvranjes.it and in any case for purposes strictly connected to the performance of the service. The personal data provided by users who request service are used only to perform the service or provision requested and are not disclosed to third parties unless the communication is required by law or is strictly necessary for the fulfillment of the requests.

The personal information we collect is used to:
• Purchase and deliver products and services. We use your personal data to receive and manage orders, provide products and services, process payments and communicate with you regarding your orders and regarding our products, services and promotional offers.
• Provide and improve the Services offered and solve any problems related to the same. We use your personal data to provide functionality, analyse performance, evaluate the quality of products and/or Services, correct errors and improve the use and efficiency of the Services on the Website.
• Comply with legal obligations. In some cases, we have a legal obligation to collect and process your personal data.
• Communicate with you. We use your personal data to notify you of services offered through different channels (e.g., by phone, email and chat).
Purposes for which we ask your consent. We may also ask for your consent to process your personal data for specific purposes that we will notify you of. When you give your consent to us processing your personal data for a specific purpose, you may revoke said consent at any time and, in that case, we will stop processing your data for that purpose.

The increase in information over time allows us to improve the quality of the service.

The data will be kept for the time necessary to perform the required service and after the termination of the commercial relationship in order to issue certificates or documentation that may be required, for the fulfillment of any related obligations or deriving from the conclusion of the relationship itself, and in any case for a period not exceeding 5 years from the aforementioned termination. For example, after termination of the relationship, it may be necessary to retain your data to comply with legal obligations and / or fulfill tax obligations. The processing takes place at the headquarters of ALIAS and contents are taken care of by employees and / or collaborators of the same who act under the supervision and control of Alias.

Visiting our site periodically and receiving our emails is a free and automatic way to help you shop better.

5. Security measures

The system is protected against access by possible malicious persons; our Company has continuously prepared and perfected the security system for accessing and storing data. Alias uses industry standards for the protection of personal information. The data will be processed by employees and / or professionals appointed by the latter, who will carry out the above activities under the direct supervision and responsibility of the legal representative.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

6. Mandatory treatment

We point out that the provision of data is not mandatory, however failure to provide it could result in failure or partial execution of the requested service.

7. Data provided voluntarily by users

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Synthetic information will be progressively reported or displayed on the pages of the site designed to offer particular services.

8. Communication and sharing of information with third parties

Alias may have to make the data concerning you available to the Judicial Authorities as well as to qualified third parties only on the basis of precise legal duties and for the performance of the requested service, in particular Alias will be able to communicate the data you provide to third parties such as 1) Companies and / or subjects belonging to Alias for the improvement of the quality of services offered and for marketing purposes of our services and / or updated information on products and services; 2) natural and / or legal persons who, by virtue of contracts signed with Alias, provide specific processing services or perform related, instrumental or support activities to those performed by Alias.
For example, the data, for the purposes related to the execution of contractual obligations, may be communicated by us and / or transmitted to the following categories of subjects: - Group companies as controlling companies, subsidiaries or associates; - to our consultants, within the limits necessary for carrying out their duties at our company; - to our suppliers of goods and services (such as couriers) within the limits necessary for carrying out the activities subject to the contractual and contractual relations established with you; banking institutions for the management of receipts and payments; - financial administrations and other companies or public bodies in fulfilment of regulatory obligations; companies and law firms for the protection of contractual rights; competent judicial and investigative authorities in case of express request by the Authorities themselves.

Third-party service providers: Alias uses other companies and individuals to perform certain activities on its behalf. For example, to handle orders for products or services, deliver packages, review services, send post and/or emails, remove recurring information from customer lists, analyse data, provide marketing support, process payments, transmit content and provide customer support services.
These third-party service providers have access only to personal data that is necessary for the performance of their activities, they may not process the data of which they become aware for any further purposes. In addition, such third parties are required to process the personal data of which they become aware in accordance with this Privacy Policy and the applicable data protection laws.

In all other cases, any communication may be made only after explicit request and, in any case, exclusively for the purposes referred to in paragraph 4. of this statement.

No data collected through the web service is disclosed to third parties

9. Methods of data processing

The processing of data may be carried out using manual, computerized or telematic tools designed to store, manage and transmit the data organized according to the logic related to the same purposes stated and, in any case, to ensure the security and confidentiality of the data processed. The storage and storage of personal data is done through the use of electronic and IT tools. Data retention takes place at the headquarters of the company Alias S.r.l .

10. Rights of the interested parties.

Pursuant to Article 13 GDPR, Users have the right to obtain information on:
a) the origins of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing carried out with the help of electronic instruments;
d) the identification details of the data controller, DPOs and designated representatives;
e) the subjects or categories of subjects to whom the personal data may be communicated or who may come to know it as DPOs or agents.

Users also have the right to obtain:
• confirmation of the existence or not of personal data concerning them, also when not yet recorded, and communication of such data in intelligible form;
•updating, rectification or, where interested therein, integration of the data;
• cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data the storage of which is unnecessary for the purposes for which the data was collected or subsequently processed;
• limitation of processing or opposition to processing;
• access to data;
• data portability;
•the right to file a complaint with the Data Protection Supervisor (www.granteprivacy.it). Data subjects who believe that the processing of personal data relating to them through this site is in violation of the provisions of the Regulation have the right to file a complaint with the Supervisory Authority, as provided for in Article 77 of the Regulation itself, or to appeal before the appropriate courts (Article 79 of the Regulation)..
• the right to cancellation (right to be forgotten).

11. Right to oppose

The User has the right to oppose, according to the provisions of art. 21 Reg Ue 2016 / 679RGDP, in whole or in part: 1. at any time, for reasons connected with your particular situation, to the processing of personal data concerning you, pursuant to art. 6 Par. 1 letters e) or f) of EU Reg. 2016/679 including profiling on the basis of these provisions; 2. to the processing of personal data concerning you for the purpose of sending advertising or direct sales material; 3. processing for direct marketing purposes including profiling in so far as it is related to direct marketing. 4. To treatment for scientific or historical research purposes or for statistical purposes unless the processing is necessary for the performance of a task in the public interest.

12. How to exercise rights

At any time you can exercise your rights towards Alias as the Data Controller by sending a request to the following email address privacy@alias2k.com and / or by writing to us at the addresses indicated in point 13.

13. Contacts

for any information, request, clarification please contact us at: Alias S.r.l. Via Cennano, Montevarchi (AR) Tel +39 055900249 or send an email to: privacy@alias2k.com

Last updated 12/11/2019

DATA PROCESSING BY DR. VRANJES FIRENZE S.P.A. FOR MARKETING AND PROFILING PURPOSES

This statement regulates the handling of personal data when using the website at https://drvranjes.com/eu/privacy-policy, Dr. Vranjes Firenze S.p.A., with head offices in Via S. Pertini, 5 - Località Antella 50012 Bagno a Ripoli (Florence), Italy, VAT no. 06511260488, email privacy@drvranjes.it, (herein “Holder”), in compliance with current rules governing data protection, including, in particular, the EU Regulation 2016/679 (herein “GDPR”).

1. Identity and contact details of the data holder

Data Holder is Dr. Vranjes Firenze S.p.A. No representative has been appointed as the Holder is based in Italy.

2. Contact details of the person in charge of the data protection

The Holder has placed Simone Bonavita in charge of data protection and can be contacted at the holder’s head offices or via e-mail at dpo@drvranjes.it

3. Data handling methods

3.1 Cookie and environmental data

TECHNICAL COOKIES

Navigation, functional and session cookies: allow the site to work properly. Use of so called session cookies (that are not stored permanently on the device in question and are automatically deleted when the browser is shut down) is strictly limited to the transmission of identification codes for the individual sessions and is employed for the safe and efficient use of the site. They can be divided into:

- activities strictly required for operational purposes: cookies used to save the User session and carry out other activities solely required to operate the application, for example in relation to the distribution of traffic;

- saving preferences, optimisation and statistics activities: cookies used to save the browsing preferences and optimise the User’s browsing experience. These Cookies include, for example, those for language setting and the assessment or management of statistics by the site's Holder.

Statistical cookies: the site uses statistical cookies created directly by the data holder, as first party, or supplied by third parties. In the latter case, suitable measures have been adopted to reduce identification power, via the masking of significant parts of the IP addresses handled. Furthermore, the use of these third party statistical cookies is dependent on contractual limitations that commit the third party to use them exclusively for providing the service, storing them separately and not “enriching them” or “intersecting them” with other information that they are in possession of. As far as the Google Analytics cookies are specifically concerned, the information that can be retrieved from the cookies on the use of the site by users will be transmitted by the browser of the person in question to Google Inc. based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States and stored in the company’s servers.

The Google privacy regulations that we would ask you to read can be found at the following address:

http://www.google.com/intl/it/privacy/privacy-policy.html

The privacy statement relative to Google Analytics services can be found at the following address:

http://www.google.com/intl/en/analytics/privacyoverview.html

Browsing data and environmental variables: The computing systems and procedures designated to operating the site, automatically acquire certain personal data about the browsing of the person in question, during regular operations, including environmental variables. Some examples of the data in this category include:

IP addresses of the computers employed by the user availing themselves of the service;

number of accesses;

pages viewed;

date and time when access was made;

URL where the browser was before displaying this page;

browser type;

operational system used.

NON-TECHNICAL COOKIES

Profiling cookies: the site uses profiling cookies supplied by third parties. In detail, the following are used:

- interaction with social networks and external platforms: this kind of service allows you to interact with social networks, or with other external platforms, directly from this application’s pages. The interaction and information acquired by this application is, in any case, subject to the User's privacy settings specific to each social network.

If an interaction service with the social networks is installed, it is possible that, even if Users do not use the service, traffic data will still be collected regarding the pages where it is installed.

AddThis (Addthis Inc.): is a service provided by Clearspring Technologies Inc. that displays a widget that allows for interaction with social networks and external platforms and sharing the contents of this application. Depending on the configuration, this service can show widgets belonging to third parties, for example, handlers of social networks on which to share the interactions. In this case, even third parties that distribute widgets will be informed of the interaction made and the data used relative to the pages on which this service is installed.

Personal Data collected: Cookies and Data used.

Data handling location: USA – Privacy Policy.

Re-marketing and behavioural targeting: allows this application and its partners to communicate, optimise and provide adverts based on past use made of this Application by the User. This activity is performed by tracing the data used and the use of cookies, information that is transferred to partners with whom the activity of re-marketing and behavioural targeting is linked. In addition to the possibilities of carrying out opt-outs offered by the services given below, the User can opt to exclude receipt of cookies linked to a third party service, by visiting the Network Advertising Initiative opt-out page.

Facebook Re-marketing (Facebook, Inc.): is a Re-marketing and Behavioural Targeting service provided by Facebook, Inc. that links the activity of this Application to the Facebook advertising network.

Personal Data collected: Cookies and Data used.

Data handling location: USA – Privacy Policy – Opt Out.

AdWords Re-marketing (Google, Inc.): is a Re-marketing and Behavioural Targeting service provided by Google Inc. that links the activity of this Application to the AdWords advertising network and Doubleclick Cookie.

Personal Data collected: Cookies and Data used.

Data handling location: USA – Privacy Policy – Opt Out.

- Statistics: the services contained in this section allow the Data Holder to monitor and analyse the traffic data and are used to keep track of the User’s behaviour.

Google Analytics with anonymised IP (Google Inc.): is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application as well as fill in reports and share them with other services developed by Google. Google could use the Personal Data to contextualise and personalise the adverts on its own advertising network. This Google Analytics integration makes your IP address anonymous. Anonymisation works by abbreviating the User’s IP address within the confines of EU member states or other countries adhering to the European Economic Space agreement. Only in exceptional cases will the IP address be sent to Google servers and abbreviated in the United States. Personal Data collected: Cookies and Data used.

Data handling location: USA – Privacy Policy – Opt Out

Monitoring of Facebook Ads conversions (Facebook, Inc.): is a service of statistics provided by Facebook, Inc. that links the data from the network of Facebook adverts with the actions carried out within this Application.

Personal Data collected: Cookies and Data used.

Data handling location: USA – Privacy Policy

Delete or deactivate cookies

As cookies are normal text files, they can be accessed using word processor programs.

In any case, you can set your browser to prevent it handling cookies.

Delete/deactivate cookies with Firefox:

http://support.mozilla.com/it/kb/Eliminare%20i%20cookie

Delete/deactivate cookies with Edge:

https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies

Delete/deactivate cookies with Chrome:

http://support.google.com/chrome/bin/answer.py?hl=it&answer=95647

3.2 Data provided voluntarily by the person in question

The optional data freely provided by the person in question by sending an e-mail to the addresses on the site can be acquired for the ends indicated in point 4.

In particular, as well as the e-mail address needed to reply to the sender, other personal data contained in the relative communication will be handled.

4. Handling purposes and juridical basis for handling

In order to send direct marketing communications, newsletters, advertising, via traditional contact systems and automated IT systems, including sales or advertising communications via e-mail or SMS, or for market research and analysis. In this case, it is the consensus, expressed in compliance with this statement, that represents a juridical foundation.

For profiling activity and to establish habits and preferences. In this case, it is the consensus, expressed in compliance with this statement, that represents a juridical foundation.

5. Means for expressing consensus

Consensus to handle personal data via non-technical cookies can be expressed:

By clicking a specific box in a banner.

6. Source from where personal data originates

Only data provided by the person in question will be handled, in compliance with this regulation, collected from the website.

7. Recipients and possible categories of personal data recipients

Recipients of the person in question’s personal data could be:

communication firms that carry out commercial communication and profiling work on behalf of the Holder and appointed to handle the data;

firms that offer IT company services, in particular, those that offer hosting services.

8. Data categories

The personal data of the person in question will be handled.

9. Data transfer

The Holder's intention is to transfer personal data to a third party Country or international organisation. These subjects could be represented, for example, by

communication firms that perform communication work for the Holder;

firms that offer IT company services, including, in particular, those that offer hosting services;

communication firm service suppliers.

Transfer of personal data to these subjects, if settled in a third party Country or international organisation, is done in the presence of an adequacy decision from the European Commission that has assessed how the third party Country, territory or one or more specific sectors within the third party Country, or international organisation in question, guarantee a suitable level of protection of its rights. In any case, the Holder – should they see fit – reserves the right to finalise specific separate agreements that oblige these subjects to adopt adequate safety measures, including organisational safety measures, aimed at providing appropriated guarantees of their rights. In particular, Google Inc. is contractually bound to guarantee suitable protection of the rights of the person in question. The data could, therefore, be transferred to the following countries: UK and United States of America. In order to receive a copy of this data or the place where it has been made available, just send a request to the following e-mail privacy@drvranjes.it.

10. Storage period of personal data

The personal data handled for marketing purposes is handled and stored until the person in question revokes consensus or requests its deletion.

Personal data handled for the purpose of establishing preferences is handled and stored for a period no longer than 12 months from when it was collected.

The Holder reserves the right, in any case, to request that the party in question renew their consensus for data handling and/or checks the consensus already expressed.

11. Option to provide consensus and consequences of denied consensus

With regard to handling personal data for marketing purposes, the communication of personal data is not a contractual requirement. Providing personal data is optional; however, if this data is not communicated, no marketing activities will be possible;

With regard to handling personal data for profiling purposes, the communication of personal data is not a contractual requirement. Providing personal data is optional; however, if this data is not communicated, no profiling activities will be possible.

12. Rights of the person in question

12.1 Right to oppose

With regard to the personal data handled via technical cookies in order to allow for the website to work properly, communication of personal data is not a contractual obligation, but one founded on the Holder's legitimate interest, in as much as, without consensus to handle the data, it will not be possible to provide a perfectly functioning website.

Consensus should be considered optional in relation to non-technical cookies. In the latter case, failed communication of this data will only result in the impossibility to provide a personalised service. In relation to data provide voluntarily via e-mail, consensus should be considered optional. However, failure to communicate this data will make it impossible to reply to the person in question;

In relation to the data communicated for contractual and pre-contractual purposes, the communication of personal data is a contractual obligation and a requirement for carrying out the pre-contractual negotiations and to finalise the contract. The person in question has the option to provide personal data; however, in the absence of this data being communicated, it will not be possible to finalise any contract or carry out any contractual negotiations;

With regard to data provided voluntarily via e-mail, failure to communicate this will make it impossible to reply to the person in question.

12.2 Other rights

The Holder also intends to inform the person in question of the existence of the following rights in his/her favour:

Right of access by the person in question: the person in question has the right to obtain confirmation from the Holder that personal data regarding him/her is being handled and, if this is the case, to obtain access to the personal data and specific information, in compliance with art. 15 of the GDPR.

Amendment right: the person in question has the right to obtain an amendment of inaccurate personal data that regards him/her without undue delay. Having taken into account the purposes of handling the data, the person in question has the right to obtain the integration of incomplete personal data, by even providing a supplementary declaration, in compliance with art. 16 of the GDPR.

Right to data deletion, including the right to withdraw consensus: the person in question has the right to have his/her personal data deleted by the Holder without undue delay and the Holder is obliged to delete this personal data without undue delay, or to withdraw consensus, if the reasons defined in art. 17 of the GDPR are present. As far as the right to withdrawal is concerned, the person in question also has the right to withdraw consensus at any time without compromising the legitimacy of the handling based on the consensus presented prior to withdrawal.

Right of data handling limitation: the person in question has the right to obtain a limitation from the Holder on the handling of the data when the circumstances set out in art. 18 of the GDPR are resorted to.

Right to data portability: the person in question has the right to receive the data regarding them in a structured format, for common use and legible from automatic devices, provided by the Holder and has the right to transmit this data to another holder without impediments from the Holder in the cases, and under the conditions, specified in art. 20 of the GDPR.

13. Exercising one’s rights

Requests to exercise one’s rights indicated in this statement, including, in particular, the right to deletion and withdrawal of consensus given, should be addressed to the Holder at the following e-mail privacy@drvranjes.it. Alternatively, it is possible to exercise one’s rights by sending relative communication by registered return post letter to Via S. Pertini, 5 - Località Antella 50012 Bagno a Ripoli (Florence).

14. Statement accessibility

The statement can be accessed at https://drvranjes.com/eu/privacy-policy, as well as from the Holder. If expressly requested by the person in question, the information can also be verbally communicated over the phone to the Holder, as long as the identity of the person in question has been established.