DATA CONTROLLER
The Data Controller is the acting legal representative of Vegea srl, VAT number 09396430960, with registered office at Via Giuseppe Verdi 12, 24121 Bergamo (BG), Italy.
Data Controller’s email address: info@vegeacompany.com
TYPES OF DATA COLLECTED
Among the Personal Data collected by this Website, either independently or through third parties, there are: Cookies, Usage Data, first name, last name, email address, phone number, various types of Data, and geographic location.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, this Website may be unable to provide the Service. Where this Website indicates certain Data as optional, Users are free to refrain from communicating such Data, without this affecting the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies or other tracking tools by this Website or by the owners of third-party services used by this Website, unless otherwise stated, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and guarantees that they have the right to communicate or disclose such Data, releasing the Data Controller from any liability towards third parties.
METHODS AND PLACE OF PROCESSING OF THE COLLECTED DATA
METHODS OF PROCESSING
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These parties may also be appointed as Data Processors by the Data Controller, if necessary.
An updated list of Data Processors may be requested at any time from the Data Controller.
LEGAL BASIS OF PROCESSING
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be allowed to process Personal Data without the User’s consent or another legal basis listed below, until the User objects (“opt-out”). This does not apply where the processing of Personal Data is governed by European data protection legislation;
- processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
- processing is necessary to comply with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
The User may at any time ask the Data Controller to clarify the specific legal basis of each processing operation, in particular whether the processing is based on law, a contract, or is necessary to enter into a contract.
PLACE
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section concerning details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis of Data transfers outside the European Union or to an international organization governed by public international law or formed by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to safeguard the Data.
Where such transfers occur, the User may refer to the relevant sections of this document or contact the Data Controller using the contact details provided above.
RETENTION PERIOD
Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the contract has been fully performed.
- Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller by referring to the relevant sections of this document or by contacting the Data Controller.
- When processing is based on the User’s consent, the Data Controller may retain the Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
Once the retention period has expired, Personal Data will be deleted. Therefore, after this period, the rights of access, erasure, rectification, and data portability can no longer be exercised.
PURPOSES OF PROCESSING THE COLLECTED DATA
User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Interaction with social networks and external platforms, Contacting the User, Payment processing, Social features, Location-based interactions, Spam protection, and Display of content from external platforms.
For more detailed information on the purposes of processing and the Personal Data relevant to each purpose, Users may refer to the relevant sections of this document.
DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:
CONTACTING THE USER
MAILING LIST OR NEWSLETTER (THIS WEBSITE)
By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional content related to this Website, may be sent. The User’s email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal Data collected: first name, last name, email address.
CONTACT BY PHONE (THIS WEBSITE)
Users who have provided their phone number may be contacted for commercial or promotional purposes related to this Website, as well as to fulfill support requests.
Personal Data collected: phone number.
CONTACT FORM (THIS WEBSITE)
By filling in the contact form with their Data, the User consents to its use to respond to requests for information, quotes, or any other requests indicated in the form header.
Personal Data collected: first name, last name, email address, phone number.
SOCIAL FEATURES
INVITE AND SUGGEST FRIENDS (THIS WEBSITE)
This Website may use the provided Personal Data to allow Users to invite their friends—e.g., through their address book, if access has been authorized—and to suggest friends or connections within the platform.
Personal Data collected: various types of Data.
INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
These services allow interactions with social networks or other external platforms directly from the pages of this Website. The interactions and information acquired by this Website are subject to the User’s privacy settings for each social network.
If a social network interaction service is installed, it may collect traffic data related to the pages where it is installed, even if Users do not use the service.
FACEBOOK LIKE BUTTON AND SOCIAL WIDGETS (Facebook, Inc.)
Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.
TWITTER TWEET BUTTON AND SOCIAL WIDGETS (Twitter, Inc.)
Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.
LOCATION-BASED INTERACTIONS
GEOLOCATION (THIS WEBSITE)
This Website may collect, use, and share User location data to provide location-based services. Most browsers and devices provide tools to disable geolocation tracking. If the User has explicitly authorized it, this Website may receive information about the User’s actual geographic location.
Personal Data collected: geographic location.
SPAM PROTECTION
GOOGLE reCAPTCHA (Google Inc.)
Google reCAPTCHA is a spam protection service provided by Google Inc. The use of reCAPTCHA is subject to Google’s privacy policy and terms of use.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS
YOUTUBE VIDEO WIDGET (Google Inc.)
YouTube is a video content visualization service provided by Google Inc. that allows this Website to embed such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
ADDITIONAL INFORMATION ON PERSONAL DATA
ONLINE SALE OF GOODS AND SERVICES
Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. Payment Data collected depends on the payment system used.
USER RIGHTS
Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, Users have the right to:
- withdraw consent at any time;
- object to the processing of their Data;
- access their Data;
- verify and request rectification;
- obtain restriction of processing;
- obtain erasure of their Personal Data;
- receive their Data or have it transferred to another controller;
- lodge a complaint with a supervisory authority or take legal action.
DETAILS ON THE RIGHT TO OBJECT
Where Personal Data is processed for public interest, official authority, or legitimate interests of the Data Controller, Users may object for reasons related to their particular situation.
If Personal Data is processed for direct marketing purposes, Users may object without providing any justification.
HOW TO EXERCISE USER RIGHTS
To exercise their rights, Users may submit a request using the contact details provided in this document. Requests are free of charge and will be processed as soon as possible, in any case within one month.
COOKIE POLICY
This Website uses Cookies. For more information, Users may consult the Cookie Policy.
ADDITIONAL INFORMATION ON PROCESSING
LEGAL DEFENSE
User Personal Data may be used by the Data Controller in legal proceedings or in preparation thereof to defend against abuse of this Website or related Services.
SYSTEM LOGS AND MAINTENANCE
For operational and maintenance purposes, this Website and any third-party services used may collect system logs containing Personal Data such as IP addresses.
CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, where feasible, through the Website or direct communication.
DEFINITIONS AND LEGAL REFERENCES
Personal Data: any information that identifies or makes identifiable a natural person.
Usage Data: information collected automatically through this Website.
User: the individual using this Website.
Data Subject: the individual to whom the Personal Data refers.
Data Processor: the entity processing Personal Data on behalf of the Controller.
Data Controller: the entity determining purposes and means of processing.
Website/Application: the hardware or software tool through which Data is processed.
Service: the service provided by this Website.
European Union (EU): includes EEA member states unless otherwise specified.
Cookie: small data stored on the User’s device.
LEGAL REFERENCES
This privacy policy is drafted on the basis of multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies exclusively to this Website.
