RIMANI S.r.l., with registered office at Via Sant’Anselmo no. 29 – Turin, represented by the legal representative Dr. Carlo Albano (hereinafter the “Company“), Data Controller, for the website www.rimanisrl.it, and any related and/or connected mobile application (hereinafter collectively, the “Portal“) informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following ways and for the following purposes:
1 . Object of the processing
The Data Controller processes common, personal, and identifying data (in particular, name, surname, tax code, VAT number, email, phone number – hereinafter, “personal data” or also “data”) communicated by the user during registration on the Data Controller’s website and/or when subscribing to the newsletter service offered by the Data Controller.
The Data Controller does not process sensitive user data; if it should become aware of any, they will be processed only if necessary for the execution of the contract, otherwise they will be immediately deleted.
2. Data acquisition
The IT systems and technical and software procedures underlying the operation of this Portal acquire, during their normal operation, some personal data whose transmission is implicit in the mechanisms and protocols in use on the Internet. Every time the user accesses this Portal, and every time they retrieve or request content, access data is stored in the IT systems and, potentially, also by the data processor and the appointed data handlers, if appointed, in the form of tabular or linear data files (within specific log files), structured and/or unstructured. Each data storage line consists of information such as: the Internet site from which the page was retrieved (so-called “referral”); the visitor’s IP address; the date and time of the request or access; the request itself by the visitor’s browser or other client, in the form of addresses in URI notation (Uniform Resource Identifier); the technical code of the “http response” obtained from the server (error, success, etc.); the amount of data transmitted; the browser, its technical and functional characteristics, and the operating system used.
At various points on the Portal, the User has the opportunity to transmit personal data. The sending of these data is optional, explicit, and voluntary, and involves the subsequent acquisition of the sender’s email address, necessary to respond to requests, as well as any other personal data requested and necessarily entered for the purposes of the Service.
The personal data, if provided, are recorded and stored on protected electronic media and processed with adequate security measures, also associating and integrating them with other databases. The data provided are processed by the Company in compliance with the principles of correctness, lawfulness, and transparency and with the necessary methods and procedures to provide the requested Services. The data are not disseminated but may be communicated to third-party companies that perform technical or organizational tasks instrumental to the provision of the requested services on behalf of the Company.
The personal data necessary for the execution of selection procedures are stored in compliance with the principles of correctness, lawfulness, and transparency and with the necessary methods and procedures to provide the requested services.
Personal data may also be acquired through newsletter subscription banners with the explicit consent of the user; in this case, the email of the interested user will be transferred to the 4Dem system, whose privacy policy is available here: https://www.4dem.it/informativa-privacy-rev-2-21122021/
By subscribing to the newsletter, the user will receive a one-time informational email from the company. The user can withdraw their choice at any time by clicking on the preference settings link within the newsletters or by writing to info@rimanisrl.it
3. Purpose of processing
Personal, identifying, and sensitive data are processed:
A) without your express consent (art. 24 letters a, b, c Privacy Code and art. 6 letters b, e GDPR), for the following Service Purposes:
- fulfill pre-contractual, contractual, and fiscal obligations arising from relationships with you;
- comply with obligations provided by law, regulation, community legislation, or an Authority order;
- prevent or detect fraudulent activities or harmful abuses for the website;
- exercise the Data Controller’s rights arising from the contract.
B) Only with your specific and distinct consent (arts. 23 and 130 Privacy Code and art. 7 GDPR), for the following
- allow you to register on the website;
- allow you to subscribe to the newsletter service provided by the Data Controller and any additional Services you may request;
- obtain statistical information on the use of the site and/or identify users’ favorite pages and thus provide appropriate content;
- send you newsletters, commercial communications, and/or advertising material on products or services offered by the Data Controller via email;
- Communications for market surveys or commercial information on products and promotional initiatives may be carried out by postal mail, email, telemarketing, SMS, MMS, always with the consent of the User and the Provider.
4. Processing methods
The processing of your personal data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data are subjected to both paper and electronic and/or automated processing.
The Data Controller will process personal data for the time necessary to fulfill the purposes mentioned above and in any case for no longer than 10 years from the termination of the relationship for Service Purposes and for no longer than 2 years from the data collection for Marketing Purposes.
5. Data access
Your data may be made accessible for the purposes referred to in art. 3.A) and 3.B):
- to employees and collaborators of the Data Controller, in their capacity as appointees and/or internal data processors and/or system administrators;
- to third parties who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.
6. Data communication
Without your express consent (pursuant to art. 24 letters a), b), d) Privacy Code and art. 6 letters b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 3.A) to supervisory bodies, judicial authorities, as well as to all other subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes and for the fulfillment of the contract.
With explicit consent, personal data may be provided to other companies operating, by way of example and not limited to, in the publishing, advertising, financial, insurance, automotive, consumer goods, humanitarian and charitable organizations sectors, which may contact the User/Provider as owners of autonomous initiatives for statistical analysis, market surveys, and sending commercial information on products and promotional initiatives. In accordance with current legislation, you will therefore be asked to express your consent in the indicated ways.
7. Data transfer
The management and storage of personal data will take place on servers located within the European Union of the Data Controller and/or third-party companies appointed and duly nominated as Data Processors. Currently, the servers are located in Italy. The data will not be transferred outside the European Union. It is understood that the Data Controller, if necessary, will have the right to move the location of the servers in Italy and/or the European Union and/or non-EU countries. In such a case, the Data Controller ensures that the transfer of data outside the EU will take place in accordance with applicable legal provisions by stipulating, if necessary, agreements that ensure an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission.
8. Nature of data provision and consequences of refusal to respond
The provision of data for the purposes referred to in art. 3.A) is mandatory. In their absence, we cannot guarantee you registration on the site or the Services.
The provision of data for the purposes referred to in art. 3.B) is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing already provided data: in this case, you will not be able to receive newsletters, commercial communications, and advertising material related to the Services offered by the Data Controller. In any case, you will continue to have the right to the Services referred to in art. 3.A).
9. Rights of the data subject
As a data subject, you have the rights referred to in art. 7 Privacy Code and art. 15 GDPR, namely the rights to:
- obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
- obtain the indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the data controller, data processors, and the designated representative pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as designated representatives in the State territory, data processors, or appointees;
- obtain: a) the updating, rectification, or, when interested, integration of data; b) the deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including those for which storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) the certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of means with respect to the protected right;
- object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, using automated call systems without the intervention of an operator by email and/or traditional marketing methods by phone and/or postal mail. Please note that the data subject’s right to object, set out in the previous point b), for direct marketing purposes using automated methods extends to traditional ones and that in any case, the data subject retains the possibility of exercising the right to object even only in part. Therefore, the data subject may decide to receive only communications through traditional methods or only automated communications or neither of the two types of communication.
Where applicable, you also have the rights referred to in arts. 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
10. Methods of exercising rights
You may at any time exercise your rights by sending:
- a registered letter with return receipt to Rimani srl Via G. Verga 28, Settimo T.se (TO)
- an email to info@rimanisrl.it
11. Minors
This Site and the Data Controller’s Services are not intended for individuals under 18 years of age, and the Data Controller does not intentionally collect personal information relating to minors. In the event that information on minors is inadvertently recorded, the Data Controller will promptly delete it, upon request from users, or spontaneously.
12. Data Controller, data processor, and appointees
The Data Controller is the updated list of data processors and appointees is kept at the Data Controller’s headquarters.
13. Changes to this Privacy Policy
This Privacy Policy may undergo changes. It is therefore advisable to regularly check this Policy and refer to the most updated version.
Cookie policy
This cookie policy explains which cookies are used and how, the types of cookies, the information we store through cookies and how this information is used, and how to control your cookie preferences. You can change or withdraw your consent to the cookie declaration on our website at any time. Your consent applies to the following domain: nutriluce.it.
Your current status: Consent has been given. Manage your consent.
1. What are cookies?
Cookies are small text files used to store small pieces of information. They are stored on your device when the site is loaded on your browser. These cookies help the site function properly, make it more secure, ensure the best user experience, and help us understand how the site performs and analyze its performance.
2. How are cookies used?
Like most online services, our site uses first-party and third-party cookies for several purposes. First-party cookies are necessary for the proper functioning of the site and do not store any of your personal information. Third-party cookies on our site are used mainly to understand site performance, how users interact with it, to keep the service secure, to provide targeted advertisements, and to ensure a better browsing experience.
3. What categories of cookies are used?
Necessary: some cookies are necessary for the user to fully utilize our site’s capabilities. They allow us to maintain a user session and prevent security breaches. They do not collect or store any personal information. For example, these cookies allow you to log into your account, add products to the cart, and securely complete the checkout process.
Analytics: these cookies collect information such as the number of site visitors, the number of unique visitors, which pages are visited, traffic sources, etc. This data helps us understand and analyze how the site performs and what improvements it needs. This site uses Google Analytics by Google Ireland Limited with anonymized IP. For more information, visit the webpage: www.google.it/policies/privacy/partners/.
Advertising: These cookies are used to personalize the advertisements we show you and help us evaluate the effectiveness of such campaigns. The information collected by these cookies may also be used by third-party providers to show you targeted advertisements on other websites.
Functional: These cookies help various non-essential functionalities of our site. These functionalities include embedded content such as videos or sharing content on social network platforms.
Performance: These cookies help us store your browser settings and preferences such as language so that you have the best possible experience during your future visits.
The following list enumerates the cookies used by our website.
| Cookie | Duration | Description |
|---|---|---|
| __wpdm_client | session | Technical cookie that synchronizes the website and the CMS. This is used to update the website. |
| _ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session, and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat | 1 minute | This cookie is installed by Google Universal Analytics to restrain request rate and thus limit the collection of data on high traffic sites. |
| _gat_gtag_UA_107672619_1 | 1 minute | Set by Google to distinguish users. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website’s performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the “Advertisement” category. |
| cookielawinfo-checkbox-others | 1 year | No description |
| cookielawinfo-checkbox-analytical | 1 year | No description |
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Analytics”. |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category “Functional”. |
| cookielawinfo-checkbox-functional | 1 year | No description |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Necessary”. |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Performance”. |
| cookielawinfo-checkbox-performance | 1 year | No description |
| cookielawinfo-checkbox-advertising | 1 year | No description |
| CookieLawInfoConsent | 1 year | Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie. |
| io | session | OnWebChat sets this cookie to keep socket.io session. |
| loglevel | never | Retains settings and outputs when using the Developer Tools Console in the current session. |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
4. How can I manage cookie preferences?
If you decide to change your preferences during your session, you can click on the “Review cookie consent” button at the bottom right of your screen. This will show your preferences again, allowing you to change them or reject them entirely. Additionally, different browsers offer different methods to block and delete cookies used by websites. You can change your browser settings to block or delete cookies.
