Privacy policy for interested parties in accordance
with EU Regulation 2016/679 (the GDPR)
In this Privacy Policy, Skira Editore S.p.a. (also referred to as Skira or theData Controller), with registered office in Milan (20123), 18 via Agnello, Italian tax code/VAT no. 11282450151, in its capacity as the Data Controller, provides information about its policies for processing your personal data.
TheData Controller structure consists of a Data Protection Officer or “DPO”, who will be happy to provide any information you require regarding the processing of your personal data, including a complete list of the data processing staff.
Catherine Castillon has been appointed as our Data Protection Officers.
Your personal data will be processed, subject to receiving your prior explicit consent where necessary, in order to:
a)supply the services required from Skira;
b)comply with specific legal requirements, regulations or EU regulations, or to meet requests from the authorities;
c)send you information and promotional material concerning Skira products and services; commercial communications may be carried out by email, post, telephone, text message and through the use of Skira’s official pages on social media;
d)analyse your usage habits and preferences, so as to be able to send you personalised information and promotional material (“profiling”).
The lawful basis for processing your personal data under a) above is described in art. 6 (b) of the GDPR and for the processing under b) above in art. 6 (c) of the GDPR, while the processing under c) and d) above is described in art. 6 (a)of the GDPR.
The supply of your personal data for processing for the purposes stated in lettera) above is necessary in order for Skira to be able to provide the services you require.
Your consent to the processing of your data for the purposes stated in c) and d) is optional and will not affect your use of the services. If you do not give your consent to the processing of your personal data under letter c), Skira will not send you information on its initiatives and offers. If you do not give your consent to the processing of your personal data under letter d), Skira will not be able to send you personalised communications and information but only general communications. We therefore recommend that you give your consent if you wish to receive communications that are suited to your interests.In any event, please note that if you wish to object to the processing of your personal data for the purposes of marketing carried out using one or more of the means described above in letter c), you may do so at any moment by writing a letter to the physical address of the Data Controller (the so-called“selective opt-out”) in accordance with the current legislation. You have the right to withdraw consent that you have given to the processing as described in letters c) and d) at any time, without affecting your use of the services or the lawful processing of your data prior to the withdrawal of consent.
The data that we process are the personal data the you have provided (for example your name, surname, tax code, VAT number, email address and telephone number) at the time of registering on our website, www.skira-arte.com (the Website) or of your request for an order to be processed involving the provision of a service and/or the dispatch of products or sending of material. The Data Controller may process your personal data using manual, IT and electronic communications tools, and in any event using the appropriate tools to guarantee the security and confidentiality of the data.
In addition to these personal data, the Data Controller will also more specifically process the data described in the following paragraphs:
2.1 Browsing data applicable in the event of collecting online data
The information systems and software processes that enable this website to function acquire some personal data during their normal operation; the transmission of such data is implicit in the use of the Internet communication protocols. This information could, through processing and association with data kept by third parties, enable users to be identified. The following data come into this category: the IP addresses or domain names of the computers used by users connecting to the website, the type of browser used, the operating system used, the date and time of the visit, the URL of the pages visited and other browsing data such as the downloads carried out. These data are only used to obtain anonymous statistical data on the use of the site in order to monitor its correct functioning and to identify anomalies and/or abuse; these data are erased immediately after processing. The data could be used to identify responsibility in the event that computer-related crimes are committed against the website or against third parties.
2.2 Personal data of third parties that may be supplied by the user of the website
The DataController may occasionally receive information from other sources, such as commercial contacts, and may cross-reference this information with the information already available. If you pass on information to the Data Controller about another user (or if a third party passes on the information to us in your name) you place yourself in the position of autonomous data controller for those data and assume all the legal obligations and liabilities.In this case you confer on the Data Controller the broadest indemnity regarding any disputes, claims or requests for compensation for damages due to the data processing that the Data Controller may receive from third parties whose personal data have been processed through your use of our website services. In any event, if, in using our website, you supply or process in another way the personal data of third parties, you hereby guarantee, assuming all related liabilities, that this particular data processing situation shall be based on your obtaining the prior consent of the third party to the processing of their personal data. Some of the website content may also be offered to you as shared content with third parties (co-branding). In such cases, when you pass on your personal information, it is advisable to remember that the data will be available both to the Data Controller and to the third parties offering the same services in a co-branding partnership with Skira.
3.COMMUNICATION OF PERSONAL DATA.
The parties with whom we may share your personal data include: individuals, organisations or authorities with whom there is a requirement to share data by law or statutory regulation or by order of the authorities; parties authorised by Skira to carry out activities strictly connected to providing their services, who are duly appointed as data processors under art. 28 of the GDPR where applicable, or who in any case receive precise instructions in writing from theData Controller aimed at ensuring the confidentiality of your personal data. An up-to-date list of the data processors may be obtained by writing a letter to the Data Controller at their physical address. Your personal data will not be circulated.
4.PERIOD OF PROCESSING OF PERSONAL DATA.
The data will be retained for the time necessary to achieve the purposes for which they were collected or until you exercise your right to object to the processing, except for the powers and obligations to retain data provided for under current legislation.
5.TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES.
The data may be transferred for the purposes stated in point 1 within the countries of the European Union. It is agreed that if your data should be transferred to countries outside the European Union, the Data Controller hereby guarantees that the transfer will take place in compliance with the provisions of the applicable legislation and adopting all the appropriate guarantees in accordance with art. 46 par. 1 of the GDPR.
6.RIGHTS OF INTERESTED PARTIES.
In your capacity as an interested party, articles 15 and following of the GDPR give you the right to obtain confirmation from the Data Controller whether or not your personal data are being processed and in the event that they are, to obtain access to your personal data and to the following information: a) the purposes of the processing; b) the categories of personal data involved; c) the persons or categories of person with whom the personal data has been or will be shared, particularly if the data is transferred to third countries or international organisations; d) where possible, the period envisaged for retaining the personal data or, if this is not possible, the criteria used to determine this period; e) the right of the interested party to ask the data controller to rectify or erase their personal data or to restrict the processing of their personal data or to object to the processing; f) the right to make a complaint to a supervisory authority; g) all available information about the source of the data if the data are not collected from the individual concerned; h) the existence of a process of automated individual decision making, including profiling as described in article 22, paragraphs 1 and 4 of the GDPR, and, at least in these cases, meaningful information about the logic used, as well as the significance and envisaged consequences of this processing for the party concerned.
In accordance with art. 16 and 17 of the GDPR, in your capacity as an interested party you can at any time ask the Data Controller to rectify or erase your personal data or object to the processing of your data, as well as asking for the restriction of the processing in situations covered by art. 18of the GDPR. You have the right to obtain a copy of your personal data in a structured, commonly used and machine readable format in the situations covered by art. 20of the GDPR. The entire text of the GDPR is available on the website of the “Garante della Privacy” (the Italian Data Protection Authority): Regolamento UE 2016/679(EU GDPR 2016/679). To exercise your rights under art. 15 of the GDPR, you may make a request in writing to: Skira Editore S.p.A., tax code/VAT no11282450151, with registered office in 20121 Milan, 18 via Agnello. Tel. 0272444200, email service@skira-arte.com.
The Data Controller is Skira Editore S.p.A., tax code/VAT no. 11282450151, with registered office in 201231Milan, 18 via Agnello.