Privacy Policy

Pursuant to Article 13 of Legislative Decree no. 196/2003 and Articles 13 and 14 of GDPR 2016/679, we inform you that the personal data provided by the User interacting with the aforementioned website will be processed in compliance with the confidentiality guarantees and security measures provided for by current regulations, for the sole purposes of processing, through computerized, telematic, and manual tools.

This privacy notice concerns the processing of personal data, such as: personal information, tax code, residence or domicile, telephone numbers, email addresses, images, IP addresses, geolocation information, cookies, additional information that the User may freely decide to provide, and other data that, if cross-referenced with others, may profile the User.

This privacy notice is provided only for the aforementioned site and not for other sites that may be consulted by the User through links contained therein.

Purpose of processing

Personal data are processed for purposes strictly connected to the services offered by the business, purposes related to the fulfillment of obligations provided for by law, regulations, community legislation, and for the protection of public order, the detection and prevention of crimes. In particular, the User’s personal data may be used for the following purposes:

1. Responding to requests made through the completion of forms present on the aforementioned website.
2. Registration to the aforementioned website and related services offered.
3. Processing of purchases, payments, quotes, analyses, and/or invoicing.
4. Sending technical communications.
5. Providing targeted and personalized content based on the data provided.

The purposes listed above are subject to the explicit consent of the user.
It is possible to refuse to provide all or part of the data necessary for the intended purposes; in such circumstances, however, it may not be possible to provide the complete and correct service.
The consent of minors is valid from the age of 16; below this age, it must be provided by their legal guardian.

Subjects to whom the data may be communicated or who may become aware of it as data processors or persons in charge
Tessutiastockpratotexrico.com by Edoardo Rico does not transfer personal data to third parties; however, it may provide User data to third parties for certain processes, namely:

• Professionals, firms, companies, and/or other appointees in the context of assistance and consultancy relationships.
• Subjects who carry out control, revision, and certification activities, also in the interest of the users themselves.
• Subjects who provide services for credit risk management and fraud control (such as data processing centers, banks, credit risk centers, debt collection companies, and law firms).
• Banking institutions, credit card issuers, and/or digital payment and/or money transfer services.

The information and data that will be communicated to these subjects will be processed with equivalent levels of protection.

Unless otherwise specified by additional notices and/or specific regulations and contracts which must be signed by the User, the transfer of data outside the EU or to international organizations is not envisaged.

Data Controller and Data Protection Officer (DPO)
The Data Controller is Tessutiastockpratotexrico.com by Edoardo Rico, in the person of Edoardo Rico, headquartered at: 24/ 10-13, Via Bruges, 59100 Prato PO, email: (see email in the website contacts).

Data processing methods and storage
Data are stored for the time strictly necessary for managing the purposes for which the data themselves are collected, therefore in compliance with current regulations and legal obligations. Specific and appropriate security measures are observed to guarantee their security, for example, the protection of information with appropriate passwords that are never saved in clear text but encrypted with appropriate security measures, in addition to the use of protection and security technologies, all aimed at preventing, besides data loss, also illicit or incorrect uses and unauthorized access.
Personal data can be collected, archived, and stored not only physically at the Data Controller’s headquarters but also at third parties to whom they may be communicated as data processors or persons in charge, always and only for the purposes for which they were collected and in compliance with current regulations and legal obligations. Personal data can also be collected, archived, and stored on specific servers located in states belonging to the European Union.

Data Breach
The Data Controller will have the legal obligation to notify data breaches to the national authority and communicate them within 72 hours from when they became aware of it. Data breach reports are not subject to any “de minimis” standard and must be reported to the supervisory authority as soon as they are known and in any case within 72 hours. In some situations, the people whose data has been stolen must be notified.

Cookies
A specific and detailed information notice is available on all aspects related to cookies and related technology. Please review it by clicking the following link: Cookie policy.
The User will be informed with a clearly visible banner of any use of cookies, requesting explicit consent for their use.

User Rights
The User has the full right at any time to exercise the rights provided by current legislation, including:

• Receive confirmation of the existence of their personal data, then request access or a copy.
• Update, modify and/or correct their personal data.
• Request the deletion, transformation into anonymous form or blocking of their data processed in violation of the law.
• Object to processing for legitimate reasons.
• Request the deletion of their data even from subjects to whom they have been made public. (Right to be forgotten)
• Request the limitation of processing. (Right to restriction)
• Request that such data be transmitted to another Data Controller. (Right to data portability)

To exercise one or more of the rights listed above, it is necessary to send a specific request to Tessutiastockpratotexrico,com di Edoardo Rico, in the person of Edoardo Rico, headquartered at: 24/ 10-13, Via Bruges, 59100 Prato PO, email: (see email in the website contacts).

Last update
May 24, 2018