Introduction
The interested party (customer, user and/or visitor of the site) is informed that Legislative Decree no. 196/2003 (so-called “Legislative Decree no. “Personal Data Protection Code” – hereinafter, for the sake of brevity, the “Code”), as supplemented by Legislative Decree 101/2018 and EU Regulation no. 2016/679 (hereinafter, for the sake of brevity, “GDPR”) provide for the protection of the Processing of Personal Data. In accordance with the provisions of the Code, the GDPR and the legislation in force on the subject, the Processing will be based on the principles of correctness, lawfulness and transparency in compliance with fundamental rights and freedoms, the dignity of the Data Subject, with particular reference to confidentiality, personal identity and the right to protection of Personal Data.
This information is provided in accordance with Article 13 of the GDPR and is subject to updates, which are advertised on the website https://barbieri.shop/
It is therefore advisable to check the policy regularly and refer to the most up-to-date version.
Definitions
For the purposes of this policy, the following definitions shall apply:
- Database, any organized set of Personal Data, divided into one or more units located in one or more sites of the data controller;
- Client, the natural person, the legal person, the public administration and any other body, association or body that has concluded a contract with the undersigned company;
- Communication, to make Personal Data known to one or more specific subjects other than the Data Subject, the Data Controller’s representative in the territory of the State, the Data Processor and the Persons in Charge, in any form, including by making them available or consulting them;
- Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she gives his or her assent by statement or unequivocal affirmative action to the processing of Personal Data concerning him or her;
- Personal Data, any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number or alias;
- Person in Charge/Authorised, the natural person authorised to carry out Processing operations by the Data Controller or Data Processor;
- Data Subject, the natural person, to whom the Personal Data refer;
- Pseudonymization, the Processing of Personal Data in such a way that it cannot be attributed to a specific Data Subject without the use of additional information, provided that such additional information is stored separately and subject to technical and organizational measures aimed at ensuring that the Personal Data is not attributed to an identified or identifiable natural person;
- Data Processor means the natural person, the legal person, the public administration and any other body, association or body appointed by the Data Controller to Process Personal Data;
- Data Controller, the natural person, the legal person, the public administration and any other body, association or body which is responsible, also jointly with another Data Controller (joint controller), for decisions regarding the purposes, methods of processing Personal Data and the tools used, including the security profile;
- Processing, any operation or set of operations, carried out even without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a Database;
Data Controller
The company LARIOSETA spa (VAT IT00223490137), with registered office in Via Asiago 31, Como 22100 Italy, is the Data Controller pursuant to and for the purposes of art. 26 of the GDPR.
Without prejudice to the provisions of the specific information provided to the Data Subject with reference to the services provided by the Data Controller, the Data Controller reserves the right to appoint one or more Data Processors, pursuant to art. 28 of the GDPR.
WHY WE PROCESS YOUR DATA
Depending on the purpose for which your data is processed from time to time, as explained below, we will need to process certain data rather than others.
Generally speaking, depending on the case, they will be as follows:
- your identification data (e.g. first name, last name, image, language and country from which you interact with us, contact details, etc.);
- economic and transactional information (e.g., your payment or credit card information, information related to purchases made by you, orders, returns, etc.);
- connection, geolocation and/or browsing data (e.g., location data, device identification number or advertising ID, etc.);
- commercial information (for example, if you have subscribed to our newsletter);
- information related to your tastes and preferences.
- Please note that, when we ask you to provide us with your personal data to enable you to have access to any features or services of the Platform, certain fields will be marked as mandatory, as this is data that we need to be able to provide the service or product that you have requested or to allow you access to the features in question, so the data is necessary to comply with existing contractual obligations or to comply with applicable laws and regulations. Please note that if you choose not to provide us with such information, you may not be able to complete your registration as a user or use the services or products or features you have requested. In specific cases, your data may have been provided to us by a third party through the use of a function or service on the Platform, for example, by sending a gift card or by sending an order to your address. In that case, we will deal with the your data solely in connection with that feature or service, as set forth in this Privacy Policy. In other cases, we may collect information passively, using tracking tools such as browser cookies and other similar technologies on our Platform and in communications we send to you. Depending on how you interact with our Platform, i.e., depending on the services, products or features you wish to enjoy, we will process your personal data for the following purposes:
PURPOSE
To manage your registration as a user of the Platform.
If you decide to become a registered user of our Platform, we need to process your data in order to be able to identify you as a user of the Platform and authorize you to access the different features, products and services available as a registered user. You can cancel your account by contacting our Customer Support team.
We inform you that the data regarding your activity, which has been collected through the different channels of the Platform and which includes your purchases, will remain linked to your account, so that you can access all the information together.
For the fulfilment and performance of the purchase or service contract entered into with Us on the Platform.
This purpose involves the processing of your data mainly for:
- Contact you about updates or informational communications regarding features, products or services contracted, including quality surveys and to be able to determine the degree of customer satisfaction with the service provided;
- Manage the payment of the products you purchase, regardless of the payment process used.
- Management of any exchanges of goods or returns after the purchase and management of requests for information on the availability of items, reservations of products through the Platform.
- For invoicing purposes and to make available to you receipts and invoices for purchases made through the Platform.
- Use of other available features or services, such as purchasing, receiving, managing, and using the Gift Card or Gift Voucher when available.
To fulfill requests or respond to questions posed by email or telephone contact.
We only process personal data that is strictly necessary for the management or processing of your request or application.
For marketing purposes.
This purpose includes the processing of your data mainly for the following purposes:
- Personalize the services we offer you and allow us to make recommendations based on your interactions with us on the Platform and an analysis of your user profile (for example, based on your purchase and browsing history).
- If and when you subscribe to our Newsletter (in case of activation) and if you provide consent to profiling and marketing activities, we will process your personal data to manage your subscription and to send you personalized information about our products or services through different means (such as email or SMS). You can unsubscribe from the Newsletter at any time and free of charge.
Usability and quality analysis to improve our services.
If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes, for example, to understand how users interact with our Platform and with what we implement on other websites and apps, so that we can improve our services. In addition, we occasionally perform quality actions and surveys to learn about the degree of satisfaction of our customers and users and to identify areas where improvements can be made.
WHAT ARE THE LEGAL BASES FOR PROCESSING YOUR DATA?
The legal bases that allow us to process your personal data also depend on the purpose for which it is processed, as explained below.
Management of your registration as a user of the Platform.
Your data is processed as it is necessary for the purpose of executing the terms governing the use of the Platform. In other words, in order for you to register as a user on the Platform, we need to process your personal data, otherwise we would not be able to manage your registration. We believe that it is in our legitimate interest to link your account, your purchases, and the data collected through the different channels of the Platform regarding your activity.
Fulfilment and conclusion of the purchase or service contract.
The processing of your data is necessary for the fulfilment of the contract of sale or provision of services concluded with you. Certain data processing associated with the purchase may only be activated at your request or with your permission to us, such as the storage of payment data for future purchases, or the processing of data necessary to scan purchase receipts or to keep you updated on the availability of our products, if such features are available. In the latter cases, the legal basis for the processing of your data is your consent.
Customer service
We believe that we have a legitimate interest in responding to requests or questions you ask through the various existing contact channels. We understand that the processing of this data is also beneficial to you insofar as it enables us to assist you appropriately and answer your questions. When you get in touch with us, in particular for matters relating to your order or the product/service acquired through the Platform, the processing of your data is also necessary to conclude and/or conclude the purchase contract. When your request is related to the exercise of your rights set out below or complaints about our products or services, we are legally entitled to process your data to comply with our legal obligations.
Marketing
The legal basis for the processing of your data for marketing purposes is the consent you give us, for example, when you agree to receive marketing information.
When you configure it in your device’s privacy settings, when you provide consent through your cookie settings. Based on your consent, we may carry out profiling activities (creation of individual and group profiles) with the information available to us (browsing patterns, preferences or purchase history) and the personal data you provide, such as age range and language, as we believe that the processing of this data is beneficial for you, as it allows us to improve your user experience and to access information based on to your preferences. If you have given your consent to carry out marketing activities, we may send you personalised promotional communications.
Place of Data Processing and Data Transfer
The processing of Personal Data related to the services provided takes place at the Data Controller’s headquarters and is handled only by authorized personnel.
The processing and storage of Data takes place on servers or other media located within the European Union, also at third-party companies appointed and duly appointed as Data Processors. Currently, the servers are located in Italy. Data is not transferred outside the European Union. The Data Controller reserves the right to change the location of the servers even outside the European Union, ensuring, in this case, that the transfer will take place in accordance with the applicable legal provisions, with the appropriate guarantees provided for by art. 46 of the GDPR.
Processing Methods
The Data collected by the Data Controller are:
- processed using electronic, computer and telematic tools, or through manual processing with logics related to the purposes for which the Data were collected;
- processed in a lawful, fair and transparent manner in the interests of the data subject;
- collected for specified, explicit and legitimate purposes, and subsequently processed in a way that is not incompatible with these purposes (typical activities of the Data Controller);
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and, if necessary, up-to-date;
- stored in such a way as to allow the identification of the Data Subject for a period of time not exceeding the achievement of the purposes for which they are processed;
- processed in such a way as to ensure adequate security of personal data, including protection, by means of appropriate technical and organisational measures, against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Recipients of the Data
Within the limits pertaining to the purposes of processing indicated, your Data collected may be communicated to employees, collaborators, partners, consultants or consulting firms, private companies that provide the Data Controller with services and activities of assistance and advice on tax and legal matters, appointed as Authorized or Data Processors.
The data will not be disseminated in any way.
Information Security
Pursuant to art. 26 of the GDPR, taking into account the state of the art and the costs of implementation, as well as the nature, scope, context and purposes of the Processing, as well as the risks of varying probability and severity to the rights and freedoms of natural persons constituted by the Processing, both at the time of determining the means of the Processing and at the time of the Processing itself, the Data Controller implements, where necessary, appropriate technical and organizational measures in order to meet the requirements of the GDPR and protect the rights of data subjects.
All information collected on the site is stored and maintained in secure facilities that restrict access to authorized personnel only. The website is regularly checked for security breaches and to ensure that the information collected is safe from anyone who wishes to view it without permission.
Rights of the Data Subject
The Data Subject has the rights set out in Chapter III of the GDPR. In particular, the Data Subject has the right to:
- obtain confirmation of the existence or otherwise of Personal Data concerning him/her, even if not yet recorded, and their communication in intelligible form;
- Get the indication
- the origin of the Personal Data;
- the purposes and methods of the Processing;
- the logic applied in the case of Processing carried out with the aid of electronic tools;
- the identification details of the Data Controller, the Data Processors and the designated representative;
- the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, Data Processors or Persons in Charge of the Processing;
- the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
- if the Data are not collected from the Data Subject, all available information on their origin;
- obtain the rectification, integration or erasure (right to be forgotten) of Personal Data or the restriction of the Processing of Personal Data concerning him/her;
- obtain the portability of the Data;
- object, in whole or in part:
- for legitimate reasons to the Processing of Personal Data concerning him/her, even if pertinent to the purpose of the collection;
- to the Processing of Personal Data concerning him/her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
- lodge a complaint with a Supervisory Authority.
Information
Information and requests regarding privacy, including in relation to the rights of the Data Subject, may be addressed to the Data Controller by e-mail at barbieri@larioseta.com
For more details on the rights and practical applications of the GDPR, as well as to activate any complaint procedures, you can consult the website www.garanteprivacy.it.
COOKIE INFORMATION
We use cookies and similar devices to facilitate your navigation on the Platform, to analyze how you interact with us and, in certain cases, to send you advertisements based on your browsing habits. Please read our Cookie Policy for more information about the cookies and similar devices we use, their purposes, managing your preferences and other relevant information.
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page.

