Information notice and consent for the processing of personal data
(Art. 13 EU Reg. no. 679/2016)

Dear Customer, the company Burato Gioielli S.p.a., with registered office in Jesolo (VE), Piazza Milano no. 12, tax code and VAT no. 02543700278, e-mail: [email protected], certified e-mail address: [email protected], telephone: +39 0438415950, in its capacity as “Data controller”, hereby informs you that your data shall be processed in accordance with the following indications.

  1. Data subject to processing

    The personal data (hereinafter also simply “the data”) that may be processed refer to the contact details that you shall provide by filling in this form (name, surname, date of birth, address, postcode, city, province, e-mail, landline telephone number, mobile telephone number, profession and any other details), as well as any additional information that you may provide regarding your interests, also with reference to the products you have purchased.


  2. Purposes and legal basis for processing 

    Your data may be processed:

    A) to fulfil obligations deriving from the contractual relationship in place with you (e.g.: to transport and deliver products, after-sales services, to manage complaints and disputes, to issue the warranty). The legal basis for processing is the need to perform the contracts to which you are party (art. 6, paragraph 1, point b) of EU Reg. no. 679/2016). It is necessary to provide your data in order for said contracts to be managed. Failure to provide your data shall mean that the Data Controller will not be able to perform the contracts;

    B) to fulfil legal or tax obligations deriving from the contractual relationships in place with you, including bookkeeping activities and invoicing. The legal basis for processing is the need to fulfil a legal obligation to which the Data Controller is subject (art. 6, paragraph 1, point c) of EU Reg. no. 679/2016). Providing your data is mandatory. Failure to provide your data shall mean that the Data Controller will not be able to perform the contracts to which you are party;

    C) to guarantee that the Data Controller can exercise its rights and legitimate interests, i.e. the right of defence before the courts, credit management and insurance management. The legal basis for processing is the fact that the Data Controller is pursuing their legitimate interest (art. 6, paragraph 1, point f) of EU Reg. no. 679/2016). Providing your data is necessary in order for said interests to be pursued. Failure to provide your data shall mean that the Data Controller will not be able to perform the contracts to which you are party;

    D) subject to your express consent, for commercial and marketing purposes, such as maintaining the Company's Customer Database, which includes the historical log of your purchases, sending newsletters, sending advertising material and commercial and promotional messages in line with your purchasing preferences. The legal basis for processing is your consent (art. 6, paragraph 1, point a) of EU Reg. no. 679/2016), which you may withdraw at any time. Providing your personal data is optional and failing to provide your consent will not affect the contracts in place being performed.


  3. Period for which personal data will be stored

    The Data Controller shall only store your data for the amount of time that is necessary for the purposes for which said data has been collected and, in any case, for no longer than the legal deadlines after the relationship comes to an end.

    More specifically, data may be stored: for the purposes referred to by point 2.A) and 2.C), for the entire duration of the contractual relationship and, in any case, for the next 10 years, also in order to verify any disputes; for the purposes referred to by point 2.B), for all the time necessary to comply with the obligations to which the Data Controller is subject; in relation to sending the newsletter, until you withdraw your consent; for the remaining purposes referred to by point 2.D), until you withdraw your consent and, in any case, for no longer than five years from the date when you last provided your consent.

    Should disputes arise with yourself or with third parties, data may be stored for the amount of time that the dispute lasts and, in any case, for as long as the claims referred to by the dispute may be pursued.

  4. Access to and disclosure of data

    Your data shall not be subject to dissemination. For the purposes referred to by point 2, your data may only be made available to the Data Controller’s shareholders, employees and collaborators.

    For the purposes referred to by points 2.A), 2.B) and 2.C), your data may also be disclosed: to third-party suppliers for the provision of services linked to the contractual obligation to be fulfilled; to credit/payment institutions or similar organisations to manage collections and reimbursements; to insurance companies for insurance services to be performed; to external professionals in order to comply with legal obligations and exercise the Data Controller's rights, including contractual rights; to the Tax Authorities and other Public Authorities, Judicial Authorities, Supervisory and Control Authorities to fulfil legal obligations and to defend the rights of the Data Controller.

  5. Rights of the Data Subject

    As data subject, you have the right: a) to gain access to your personal data, to have said data rectified or erased and to restrict the processing of said data; b) to object to the processing of data; c) to data portability, i.e. to receive the data from a Data Controller, in a structured, commonly used and machine-readable format, and to send the data to another Data Controller without hindrance; d) to withdraw your consent to data processing at any time, without affecting the lawfulness of any processing based on consent carried out before said withdrawal.

    You may exercise your rights at any time by sending a registered letter with acknowledgement of receipt, an e-mail or a certified e-mail to the addresses stated above.

    You also have the right to lodge a complaint with a Supervisory Authority, identified as the “Garante per la Protezione dei Dati Personali” (the Italian Data Protection Authority).

    I hereby declare that I have received the above information notice.

    [Place] [Date] [Signature]

     

    In light of the information notice received,

    I give my consent
    √ I do NOT give my consent for my personal data to be processed in order to maintain the company's Customer Database

    [Place] [Date] [Signature]
     

    I give my consent
    √ I do NOT give my consent for my personal data to be processed in order to send the newsletter

    [Place] [Date] [Signature]
     

    I give my consent
    √ I do NOT give my consent for my personal data to be processed in order to send advertising material or commercial and promotional messages in line with my purchasing preferences. 

    [Place] [Date] [Signature]