Last update: November 2022<\/span><\/p>\n<\/div> PRIVACY POLICY<\/b><\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> GENERAL INFORMATION<\/b><\/span><\/p>\n With this information notice Pagano S.p.A. with registered office in Piazza Sante Bargellini, 21 CAP 00157 Rome (RM), email info@paspa.it as the Data Controller – wishes to inform you about the processing of personal data that you provide through browsing this Website https:\/\/www.paspa.it\/it\/<\/a> (hereinafter simply “Website”).<\/span><\/p>\n For any clarification, information, exercise of the rights listed in this notice, please contact:<\/span><\/p>\n mail<\/b>: info@paspa.it<\/a><\/span><\/p>\n address for sending registered mail<\/b>: Pagano S.p.A. – Piazza Sante Bargellini, 21 CAP 00157 Rome (RM).<\/span><\/p>\n D.Lgs 196\/2003 as amended by D.Lgs 101\/2018 and EU REG. 2016\/679 establish the rules to protect and safeguard individuals with regard to the processing of their personal data, and this information notice is prepared in accordance with the new legislative dictate.<\/span><\/p>\n The policy may be subject to change as a result of the introduction of new legislation, so we encourage you to visit this section periodically for updates.<\/span><\/p>\n The Privacy Policy you are reading is exclusively referable to the Website and the Owner is not responsible for the way personal data processing is carried out by third party websites that can be linked through the Cookie section, or through any window-links on the Homepage.<\/span><\/p>\n According to the law, the processing of personal data is based on the principles of correctness, lawfulness, transparency, accuracy, purpose limitation and storage, minimization, integrity of data, protection of the user’s confidentiality as well as protection of the user’s rights.<\/span><\/p>\n The Data Controller undertakes to observe the aforementioned principles and, also for this purpose, informs You from the outset that – except for those processing operations to which the law provides for Your explicit consent – by browsing this Web Site, uploading or providing personal data, You accept and agree to be bound by the conditions and terms set out in this notice. Your consent to data processing – where given by you – may be revoked at any time by contacting the above addresses.<\/span><\/p>\n If you are under 16 years of age, Your consent is legitimate only if it is given or authorized by the person who holds parental responsibility for You, in accordance with the provisions of Art. 8 EU Reg. 2016\/679. For data subjects on the territory of Italy, consent is also legitimate, under the same conditions as above, if the person is 14 years of age or older.<\/span><\/p>\n In any case, we want to give you some information about the concept of processing personal data and the people who handle them.<\/span><\/p>\n 1. PERSONAL DATA PROCESSED AND TREATMENT<\/span><\/p>\n<\/div> “Personal data” means all information that could directly or indirectly enable the identification of users.<\/span><\/p>\n Such information, for example, may be: name, address, user name, e-mail address and phone number, or even the IP address of the device used, browsing preferences or information about the user’s lifestyle or hobbies and interests in addition to their online shopping preferences.<\/span><\/p>\n The personal data processed are those voluntarily provided by the user (e.g., common data such as identification data, one’s phone or email address) and those collected by tracking technologies (cookies).<\/span><\/p>\n “Processing of personal data” means any operation or set of operations carried out with or without the help of automated processes and applied to personal data or set of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 2. DATA CONTROLLER<\/span><\/p>\n<\/div> The “data controller” is the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.<\/span><\/p>\n With regard to this Website, the data controller is the company as better specified and identified above, and for any clarification or exercise of your rights you may contact it at the following email address: info@paspa.it<\/a><\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 3. DATA PROCESSOR<\/span><\/p>\n<\/div> The “data processor” is the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller.<\/span><\/p>\n More information is available at the following email address:\u00a0<\/span> info@paspa.it<\/span><\/a>.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 4. METHODS OF PROCESSING<\/span><\/p>\n<\/div> On this Website, data are collected electronically and processed by means of operations carried out mainly with the aid of electronic tools, ensuring the use of appropriate measures for the security of the processed data and guaranteeing their confidentiality. In particular, data processing is carried out by minimizing the use of sensitive personal data.<\/span><\/p>\n Your personal data will be processed by collaborators and\/or employees of the Data Controller as data processors or handlers, within the scope of their respective functions and in accordance with the instructions given by the Data Controller.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 5. LOCATION OF DATA PROCESSING AND SCOPE OF DATA CIRCULATION<\/span><\/p>\n<\/div> The processing of personal data relating to the services of the Web Site takes place at the above-mentioned Data Controller and is handled only by personnel authorized to do so.<\/span><\/p>\n Your personal data may be communicated to Judicial Authorities and Police Forces in the only cases in which this is required by law and used by the Owner for the purpose of possible defense of its rights in court, where strictly necessary.<\/span><\/p>\n The data collected will not be disseminated. However, for the effective execution of the requested service, some data will be shared with external subjects, appointed as data processors ex art. 28 Reg. UE 2016\/679, called to carry out specific tasks on behalf of the company (ex: Web agency, professionals, etc.). The Data Controller is committed to protecting the security of personal data by taking all necessary IT and physical measures to protect the personal data provided. No security system guarantees with absolute certainty such protection, therefore, except in cases of liability for negligence, the Owner is not liable for the act performed by third parties who abusively access the systems without due authorization.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 6. PURPOSE OF THE PROCESSING and TYPE OF DATA PROCESSED<\/span><\/p>\n<\/div> To provide the Services through the Website, to allow you to contact the Data Controller to get information related to the Data Controller’s business, to request information regarding the products described online on the Website, through the contact form, to send you the newsletter (if active this service) if you have requested it as a Service by subscribing to it, and which contains only informative and non-commercial material, and to provide you with any other Service or information you request and is available to the Data Controller. The completion of the various request forms that may be present online does not constitute for the Controller any assumption of legal obligations, nor any formal initiation of a pre-negotiation negotiation. For the processing of common data of third parties released through the completion of the form, the Owner will process these data in compliance with applicable regulations, assuming that they refer to You or to third parties who have expressly authorized You to confer them on the basis of a suitable legal basis legitimizing the processing of the data in question. With respect to such hypotheses, You place Yourself as autonomous data controller, assuming all legal obligations and responsibilities. In this sense, you confer on the point the widest indemnity with respect to any dispute, claim, request for compensation for damages from processing, etc. that may be received by the Controller from third parties whose personal data have been processed through the completion of the form (“Provision of the Service<\/b>” Purposes). The data processed are common data. The Owner invites the user not to enter special, so-called “sensitive” data (concerning one’s health condition whether physical or psychological, political, religious orientation, etc.) unless strictly necessary for the purpose of requesting information or purchasing products.<\/span><\/p>\n<\/li>\n send you marketing communications through newsletters, promotions and advertising, including through the email address entered in the fields of compilation (“Marketing<\/b>” Purposes). The data processed are common data;<\/span><\/p>\n<\/li>\n Send you marketing communications in line with your preferences (“Profiling<\/b>” Purposes).<\/span><\/p>\n<\/li>\n To monitor statistically in aggregate format the attendance to the site (“Analysis<\/b>” Purposes);<\/span><\/p>\n<\/li>\n To fulfill legal obligations that require the Controller to collect and\/or further process certain types of personal data (“Compliance<\/b>” Purposes). The data processed are ordinary personal data;<\/span><\/p>\n<\/li>\n to prevent or detect any abuse in the use of the Web Site, or any fraudulent activity and thus enable the Holders to protect themselves in court (“Prevention of Abuse and Fraud” <\/b>Purposes). The data processed are common personal data.<\/span><\/p>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div> 7. LEGAL BASIS FOR DATA PROCESSING<\/span><\/p>\n<\/div> The legal basis for the processing of personal data provided by You through browsing is:<\/span><\/p>\n We remind you that as of 07\/27\/2022 the Public Register of Oppositions is operational. Please note that pursuant to Presidential Decree No. 26 of January 27, 2022, you may object to or revoke your consent to marketing activities by registering with the Register of Oppositions.<\/span><\/p>\n If you have given your consent to marketing activities in the context of existing contractual relationships with the Holder, or the same have ceased no more than thirty days ago and therefore the Register of Oppositions does not apply, where you are no longer interested in receiving such promotional communications you may revoke your consent<\/b> at any time by writing to the e-mail address info@paspa.it<\/span><\/a>.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 8. DATA RETENTION PERIOD<\/span><\/p>\n<\/div> Data processed to fulfill legal obligations will be retained until the fulfillment itself, and in any case for the period of time necessary to prove the fulfillment; data processed to respond to your requests (Service Provision) will be deleted once the purpose has been fulfilled and then the request processed, unless there are other legitimate reasons to keep them in its systems\/archives. If necessary to retain them to fulfill contractual purposes until they are fulfilled and, if a contract is concluded or there have been pre-contractual negotiations, for ten years from the conclusion of the contract in order to allow any judicial or extrajudicial protection as well as the demonstration of the correct fulfillment of the obligations contractually undertaken. The data processed for marketing and profiling purposes until the data subject withdraws consent.<\/span><\/p>\n With regard to the activity of analytical cookie management and the purpose of Analysis, the data will be retained until any opposition by the data subject, to be exercised in the manner indicated below, or for processing based on consent, until the consent is revoked. The data processed for Compliance purposes for the period of time indicated by the specific legislation.<\/span><\/p>\n Data processed for the purposes of Abuse and Fraud Prevention for the time strictly necessary to enable the Data Controller to defend itself in court.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div> 9. RECIPIENTS OF PERSONAL DATA<\/span><\/p>\n<\/div> The personal data You provide may come to the attention of the Data Controller and\/or any data processors appointed.<\/span><\/p>\n Possible additional categories of recipients who may become aware of Your personal data during or after the execution of the contract are:<\/span><\/p>\n\n
\n
\n
\n