Articles

Privacy & Cookie Policy

GENERAL" PRIVACY POLICY AIMED AT SITE SURFERS

Mrs. Paola Bona, owner of the site paintingsbona.com (hereinafter, "Owner"), as owner of the treatment, informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the manner and for the following purposes:

1. Object of processing
The Data Controller processes the personal, identifying data (for example, name, surname, company name, address, telephone number, e-mail address, bank and payment details) - hereinafter, "personal data" or even "data" - communicated by you.
During the processing we may become aware of particular data, defined as "sensitive", as suitable to detect: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person.

2. Purpose of processing
Your personal data are processed for the following purposes:
- Fulfilment and management of orders and contracts;
- Fulfilment of the pre-contractual, contractual and fiscal obligations deriving from the relationship with you;
- Fulfilment of the obligations provided for by law, regulation, Community legislation or an order of the Authority (such as in the field of money laundering);
- exercise the rights of the Holder, such as the right of defence in court;
- send you by e-mail, post and/or text message and/or telephone contact, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and survey of the degree of satisfaction with the quality of services;
- send you by e-mail, post and/or text message and/or telephone contact commercial and/or promotional communications of third parties.

3. Methods of treatment
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data is subject to both paper and electronic and/or automated processing.
The Owner will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes and for no more than 2 years from the collection of data for the Marketing Purposes.

4. Access to data
Your data may be made accessible for the purposes referred to in art. 2:
- to employees and collaborators of the Data Controller, in their capacity as authorised and/or internal data processors and/or system administrators;
- to third party companies or other subjects (by way of indication, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

5. Communication of data
Without the need for an express consent (ex art. 6 letter b) and c) GDPR), the Owner may communicate your data for the purposes referred to in art. 2 to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those persons to whom communication is required by law for the performance of these purposes. These subjects will process the data in their capacity as independent data controllers. Your data will not be disclosed.

6. Data transfer
Personal data is stored on servers or devices located within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the servers even outside the EU. In this case, the Owner hereby guarantees that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

7. Nature of data provision and consequences of refusal to reply
The provision of data for the purposes referred to in art. 2 is mandatory. In their absence, we will not be able to guarantee the services referred to in art. 2.
The provision of data for marketing purposes is optional. You may therefore decide not to provide any data or subsequently deny the possibility of processing data already provided: in this case, you may not receive newsletters, commercial communications and advertising material relating to the services offered by the Owner.

8. Rights of the data subject
As an interested party, you have the rights under Art. 15 GDPR and specifically the rights to:
i. to obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in intelligible form;
ii. obtain the indication:
(a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of electronic instruments;
d) the identification details of the data controller, data processors and the representative designated pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of the GDPR;
e) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State's territory, data processor(s) or person(s) in charge of the processing;
iii. obtain:
a) updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
iv. oppose, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection;
b) the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and / or traditional marketing methods by telephone and / or mail. It should be noted that the right of opposition of the person concerned, as set out in point b) above, for direct marketing purposes by means of automated methods extends to the traditional ones and that, in any case, the possibility for the person concerned to exercise the right of opposition even in part remains unaffected. Therefore, the interested party may decide to receive only communications by traditional means or only automated communications or neither of the two types of communication.
Where applicable, he also has the rights under Articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.

9. Modalities of exercise of rights
You may at any time exercise your rights by sending:
- a registered letter with advice of receipt;
- an e-mail to the address: This email address is being protected from spambots. You need JavaScript enabled to view it.

10. Owner, manager and persons in charge
The holder of the treatment is Mrs. Paolao Bona e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
The updated list of persons responsible for and in charge of data processing and those authorised to do so is kept at the registered office of the Data Controller.

COOKIES SECTION

Notice to European Users: This information notice has been prepared in compliance with the obligations set out in Article 10 of Directive 95/46/EC, as well as with the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies.

What are cookies?
Cookies are small strings of text exchanged between a website and the user's browser each time a website is accessed.
They are used to perform automatic authentication, keep track of sessions, store information to improve the navigability of the site or the user's browsing experience.
Each domain visited through a browser can set one or more cookies.
An Internet page may contain objects from many different domains and each of them may set cookies (in this case called "third party"). The use of cookies allows you to improve your experience on the website and can keep your settings during your next visit.
There are two types of cookies:
- Proprietary cookies: subject to and readable only by the domain that created them;
- third party cookies: subjects and created by domains external to the one we are visiting.

Cookies used in this website

Navigation
These cookies are necessary for the proper functioning of the site (for example to remember the status of the buttons, the fact that the panels are open or closed). Most of these cookies have a session duration, i.e. they will be immediately deleted once you have finished visiting the site.
Functional
These cookies allow the operation of certain parts of the site.
In this site, their purpose is to track the successful reading of the text of the banner on the homepage relating to the privacy policy and cookies.
These cookies are stored in your browser; you can delete them or disable their reception, however, compromising the functionality of some services of the website.
The user can change the setting for receiving the cookie by changing the settings for storing it as described in the section "How to disable cookies" of this statement.
Analytics
Google Analytics is a free web analysis tool from Google that primarily collects information (such as data about the pages you visited, the time you spent on the site, how the site was reached and everything you clicked on while browsing our pages) anonymously and reports on website trends without identifying individual visitors.
You can view Google's privacy policy at the following link
www.google.it/intl/it/policies/privacy.
The user can change the setting for receiving the cookie by changing the settings for storing it as described in the section "How to disable cookies" of this statement.
YouTube
The site can be embedded videos from YouTube. These videos, when viewed, set third-party cookies on your computer or mobile device, belonging to the domain of YouTube, to improve the functionality of video playback and collect information in anonymous format on videos viewed by the user.
The purpose of these cookies is described in Google's privacy policy:
www.google.it/intl/it/policies/privacy.
Google+
Third-party widgets, such as Google+, may be incorporated into the site. These widgets may set third-party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the owner's privacy policy:
www.google.it/intl/it/policies/privacy
Facebook
Third party widgets, such as Facebook, may be incorporated into the site. These widgets may set third-party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the privacy policy of the
owners: www.facebook.com/policy.php.
Twitter
We inform you that third party widgets, such as Twitter, may be incorporated into the site. These widgets may set third-party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the owners' privacy policy: twitter.com/privacy?lang=en.
LinkedIn
Third party widgets, such as LinkedIn, may be incorporated into the site.
These widgets may set third-party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the owners' privacy policy:
linkedin.com/legal/privacy-policy.
Instagram
Third party widgets, such as Instagram, may be incorporated into the site. These widgets may set third party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the owner's privacy policy: instagram.com/about/legal/privacy.
Pinterest
Third party widgets, such as Pinterest, may be incorporated into the site. These widgets may set third party cookies on your computer or mobile device to improve functionality.
The purpose of these cookies is described in the owners' privacy policy:
about.pinterest.com/en/privacy-policy.

How to disable cookies

Most browsers (Internet Explorer, Firefox) are configured to accept cookies.
However, all browsers allow you to control and disable cookies through your browser settings. Disabling navigation cookies may cause the site to malfunction and/or limit the service offered.
For information on how to manage and delete cookies on your tablet and/or mobile phone, please refer to the "Help" section of your browser.
To manage third-party cookies that use your information to generate specific actions, you can manage your use by Google by visiting the Ad preferences page (if you have a Google account).
Alternatively, you can deactivate the use of cookies by a third party provider, for example, by visiting the deactivation page through www.youronlinechoices.eu, or alternatively, as described above, by disabling cookies through your browser settings.