INFORMATION ON THE TREATMENT AND PROTECTION OF PERSONAL DATA

This information describes the processing of personal data entered or collected on the site https://www.housefactory.it/ and is made pursuant to article 13 of EU Regulation 679/2016 (hereinafter "GDPR") and the applicable national legislation on privacy and protection of personal data.

1. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

HOUSE FACTORY S.n.c. with registered office in 10131 – Turin, Corso Fiume n. 11, VAT number 104445800121, in the person of the pro tempore legal representative, e-mail: info@housefactory.it (hereinafter "House Factory" or the "Company" or "Owner").

In the event that the Data Controller makes use of managers or sub-managers of the treatment pursuant to art. 28 GDPR, the updated list of data processors and data processors is kept at the registered office of the Data Controller.

2. WHAT TYPES OF PERSONAL DATA WE PROCESS

The types of personal data we collect depend on the purpose for which it is collected.

In general, we may collect the following types of personal data directly from you (hereinafter "Personal Data"):

1. personal contact data, such as name, surname, e-mail address, address, city, telephone number;
2. personal data provided directly by you through communications or attachments to communications (e.g. bank details, company details);
3. usage, navigation, functional, session, statistical, profiling data, including the device identifier or the user's IP address, the moment in which the user visits the site, the addresses in URI notation (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment;

The treatment also concerns the operations, or the set of operations concerning data collected also through the use of cookies, whose policy is referred to in full, which can be viewed at this link.

3. WHY WE TREAT YOUR PERSONAL DATA AND ON WHICH LEGAL BASIS

The processing of your Personal Data by the Data Controller takes place:

A) without your express consent (art. 6 letter b) - f) GDPR), for the following purposes:

• conclude contracts with the Owner;
• fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships;
• fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
• pursue a legitimate interest of the Data Controller or of third parties, provided that your interests or your fundamental rights and freedoms that require the protection of personal data do not prevail (e.g. the right of defense in court of the Data Controller);

B) Only with your specific and distinct consent (art. 6 letter a) and art. 7 GDPR), for the following marketing purposes:

• send via e-mail, mail and/or sms and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and detection of the degree of satisfaction with the quality of services;

C) Only with your specific and distinct consent (art. 6 letter a) and art. 7 GDPR), for the following profiling purposes:

• send advertising communications, offers and promotions, via e-mail, mail and/or sms and/or telephone contacts, which are consistent with your interests and your consumer profile. Profiling will allow the Owner to customize the offer of products and services addressed to you in the best way. To this end, the Data Controller will evaluate the type and number of requests for information presented, including through the website, the purchases of goods or services made by you from the Data Controller, your personal and contact information (for example the place of place of residence), as well as any additional information we hold about you (such as your age and profession).

If you have denied your consent it will not be possible to carry out the aforementioned activities under B) and/or C) and if you have given your consent to the processing activities under B) and/or C), you will in any case have the right to revoke , at all times, the consent given.

4. HOW LONG WE KEEP AND PROCESS YOUR PERSONAL DATA

Your Personal Data will be processed by the Data Controller only for the period of time necessary to achieve the purposes of the processing referred to in the previous article 3, after which they will be kept only in execution of the legal obligations in force on the matter, for administrative and/or to assert or defend one's right and, in any case, no later than the terms established by law for the limitation of rights.

In particular, for marketing purposes, the User's Personal Data will be kept by the Data Controller for a maximum of two years, while for profiling purposes a maximum of one year.

5. HOW WE PROCESS YOUR PERSONAL DATA

The Personal Data are subjected to both paper and electronic and/or automated processing for the time necessary to achieve the purposes for which they were collected by the Data Controller or by subjects duly authorized and/or appointed to carry out these tasks, constantly identified and/or appointed, suitably instructed and made aware of the constraints imposed by law, as well as through the use of security measures designed to guarantee the protection of confidentiality and to avoid the risk of loss or destruction, unauthorized access, processing not permitted or not compliant with the above purposes.

6. TO WHOM WE MAY COMMUNICATE YOUR PERSONAL DATA

For the purposes indicated above, your collected data may be made accessible or communicated:

• employees and collaborators of the Data Controller, in their capacity as authorized data processors, within the scope of their respective duties and in accordance with the instructions received. However, these individuals are subject to confidentiality and confidentiality obligations;
• to third parties who carry out outsourcing activities on behalf of the Data Controller who are entrusted with certain activities, or part of them, functional to the provision and distribution of the services offered through the site (e.g. hosting, programmers, systems analysts and database administrators, technical assistance centres, Internet and telecommunications operators) or whose activity is connected, instrumental or in support of that of the Data Controller (e.g. management and/or marketing software in the cloud, etc.);
• to all those public and/or private subjects, natural and/or legal persons (legal, administrative and tax consultancy firms, credit recovery companies, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional to the correct fulfillment of the contractual obligations assumed, as well as the obligations deriving from the law;
• to all those subjects (including the Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions;

In any case, your personal data collected will not be resold or transferred to third parties for marketing purposes and will not be disseminated.

7. TRANSFER OF PERSONAL DATA OUTSIDE THE EU AREA

The management and storage of your Personal Data will take place in Europe. In any case, it is understood that the Data Controller, if necessary, will have the right to have your Personal Data processed outside the EU Area (EEA). In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the Commission European.

8. MINORS

This site and the Owner do not intentionally collect Personal Data referring to children under the age of 18. In accordance with applicable laws, the parental responsibility holder must provide consent to the collection of Personal Data of the minor. In the event that Personal Data on minors are involuntarily recorded, the Data Controller will promptly delete them, at the request of the parental responsibility provider.

9. YOUR RIGHTS

Pursuant to articles 15 et seq. of the GDPR and the applicable national legislation on privacy and protection of personal data, you have the right to:

• obtain confirmation from the Data Controller as to whether or not personal data concerning you is being processed and, if so, to obtain theaccess to personal data and the following information:
  • the purposes of the processing;
  • the categories of personal data in question;
  • the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
  • when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period;
  • the existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment;
  • the right to lodge a complaint with a supervisory authority;
  • if the data are not collected from the interested party, all the information available on their origin;
  • the existence of an automated decision-making process, including profiling.
• Obtain from the Data Controller the correction of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.
• Obtain from the Data Controller the cancellation of personal data concerning him without unjustified delay and the Data Controller has the obligation to cancel personal data without unjustified delay within the limits and in the cases provided for by current legislation.
• Obtain the limitation of the treatment from the Data Controller.
• Receive the personal data concerning you provided to the Data Controller in a structured, commonly used and automatically readable format and you have the right to data portability and therefore to transmit such data to another data controller unimpeded by the data controller to whom it has provided them if the treatment is based on consent or on a contract and the treatment is carried out by automated means.
• Oppose at any time, for reasons connected with your particular situation, to the processing of personal data concerning you if the processing is necessary for the performance of a task in the public interest or connected to the exercise of public powers vested in the Data Controller or the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.
• If you believe that your rights have been violated by the Data Controller, propose a complaint to the Guarantor Authority for the protection of personal data (Piazza Venezia 11, 00187 Rome (RM) – garanteprivacy.it) and/or to another competent supervisory authority pursuant to the GDPR

Following the exercise of the rights referred to in points 2), 3) and 4), the Data Controller informs each of the recipients to whom the personal data have been transmitted of any corrections or cancellations or limitations of processing within the limits and in the forms provided for by current legislation. legislation.

To exercise the rights listed above towards the owner, you must submit a written request by sending a registered letter with return receipt to the address HOUSE FACTORY S.n.c. with registered office in 10131 – Turin, Corso Fiume n. 11, or by sending a pec to housefactorysnc@legal.email.it

10. WHAT HAPPENS IN THE EVENT OF CHANGE TO THE PRIVACY POLICY

This information may be modified and/or updated at any time. If the Data Controller intends to process your Personal Data for purposes other than those provided for in the previous art. 3, undertakes to provide you, before this further processing, with adequate information regarding these different purposes and to carry out this further processing in compliance with current legislation, collecting your specific consent where necessary.

This Privacy policy was published on June 18, 2021. Any updates will be published on this page.