Privacy Policy
Welcome to our website www.impatia.it (hereinafter the Site).
For IMPATIA S.r.l., safeguarding your privacy and the security of your personal data is of paramount importance. We collect and handle your personal data with the utmost care, implementing specific measures to ensure their protection in compliance with the General Data Protection Regulation (EU 679/2016 – hereinafter GDPR).
Please also refer to the “Cookie Policy” on the Site, which provides detailed information concerning the terms related to our services. Some services may be subject to distinct legal terms, and we will furnish you with the necessary information as required.
**Who is the Data Controller?**
Below, you’ll find essential information regarding the processing of your personal data carried out by IMPATIA S.r.l., with its headquarters located at Via Mentana, 7 – 21052 Busto Arsizio (VA). For any queries, concerns, or requests related to your privacy and the handling of your personal data, you can reach out to us at any time by sending an email to info@impatia.it.
What data do we process and why?
IMPATIA S.r.l. processes personal data that you provide when placing an order and purchasing goods, as well as data collected during your website browsing or use of the services offered on the Site. This data may include personal information such as your name, surname, shipping address, billing address, browsing history, and purchasing behavior.
Your personal data is processed for the following purpose: to provide you with the services offered on the Site, such as newsletter subscriptions. In these cases, the processing of your personal data is considered lawful as it is necessary to fulfill the service you have specifically requested.
Additionally, we conduct statistical surveys and analyses using aggregated data to gain insights into how users interact with and utilize the Site, aiming to enhance our offerings and services. However, we only process your personal data for commercial and promotional communication activities with your explicit consent.
Who will process your data?
Your personal data is processed by trained personnel of IMPATIA S.r.l., acting as the Data Controller. Additionally, for organizational and functional requirements related to the provision of services on the Site, your data may be processed by our trusted suppliers. These suppliers have been carefully assessed and selected by IMPATIA S.r.l. based on their established reliability and competence.
It’s worth noting that some of these entities may be located in non-EU countries. In such instances, the transfer of your personal data to these countries is executed in accordance with the safeguards prescribed by the GDPR.
How long do we keep your data?
We retain your personal data for a specific duration, which varies according to the purpose for which they were gathered. At the end of this period, your personal data will either be deleted or rendered irreversibly anonymous. The retention period differs based on the processing purpose. For instance, data used to send you our newsletters is retained until you request to discontinue receiving them (and, in any case, for no longer than five years).
What are your rights?
At any time, depending on the specific processing, you can: revoke your consent to the processing, know which personal data we have in our possession, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by current provisions, the cancellation, limitation of processing or to oppose their processing. If you wish, you can request to receive the personal data held by IMPATIA S.r.l. that concern you in a format readable by electronic devices and, where technically possible, we may transfer your data directly to a third party indicated by you.
If you believe that your personal data has been processed unlawfully, you have the right to file a complaint with one of the relevant supervisory authorities responsible for ensuring compliance with personal data protection regulations. In Italy, you can submit a complaint to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
This information may undergo changes and additions over time, we therefore invite you to periodically check its contents. Where possible, we will try to inform you promptly about any changes we make.
Privacy Policy
1. General information
Who is the Data Controller?
IMPATIA S.r.l. with headquarters in Via Mentana, 7 – 21052 Busto Arsizio (VA), is the Data Controller, the person who decides how and why to process your personal data. You can always contact IMPATIA S.r.l. by writing to the above address or to info@impatia.it
2. What personal data do we collect?
The categories of personal data that IMPATIA S.r.l. collects and processes when you browse or purchase on the Site, are the following:
a) we collect your email address when you sign up for our newsletter service.
b) we collect information about your browsing on the Site, such as the pages you visit and how you interact with the individual page, and we save this information on our servers.
Please be aware that IMPATIA S.r.l. does not process personal data pertaining to minors. By accessing the Site and utilizing the services provided by IMPATIA S.r.l., you confirm that you have attained the legal age of majority.
3. How do we use the personal data collected?
IMPATIA S.r.l. collects and processes your personal data for the following purposes:
a) Statistical Analysis and Investigations: We utilize certain information regarding your usage of the Site to conduct statistical analyses and investigations, aiming to enhance our offerings and services.
b) Subject to your explicit consent, we may use the contact information you’ve provided for commercial communications regarding our products and services. These communications are intended to keep you informed about news, new arrivals, exclusive products, our offers, and promotions. Additionally, with your consent, we may use your contact details for conducting market research and satisfaction surveys to enhance our services and user relationships. These communications will be conducted through the channels you’ve selected (email, SMS, telephone, postal mail, WhatsApp).
If you wish to authorize the activities referred to in point b) and subsequently do not wish to receive further communications from IMPATIA S.r.l. or would like to limit the ways in which you can be contacted, you can stop these communications at any time by simply clicking on the “unsubscribe” link at the bottom of each communication, logging into your account, contacting IMPATIA S.r.l., by writing to the above address.
Please be aware that you may continue to receive additional communications from us even after you have submitted an unsubscribe request. This could occur if some mailings were already scheduled or if our systems require some time to process your request. However, such communications will cease, at the latest, within one month from the date of your request.
In connection with all the activities mentioned above, we will primarily process your personal data using IT and electronic tools. The tools we employ adhere to rigorous safety standards, ensuring full compliance with current legislation on the subject.
4. Legal basis of the processing
We process your personal data only in the presence of one of the conditions established by current legislation, and specifically we will carry out the following treatments exclusively if you have given us your express consent:
• carrying out marketing activities and opinion polls and market research;
• analysis of your browsing and consumption habits as part of the use of your profile, in order to personalize your experience on our Site.
Providing us with your personal data for these activities is absolutely optional. You are free to provide us with your data for these purposes or not, therefore, in the absence of the same, it will not be possible for IMPATIA S.r.l. carry out marketing activities, opinion polls and market research, and analysis of your habits.
5. Who will process your data?
Your personal data will be processed by IMPATIA S.r.l.’s internal staff, who are specifically trained and authorized for such processing.
Furthermore, your personal data will be shared with third parties that we engage to provide our services. These third parties have been carefully chosen and offer appropriate assurances of compliance with personal data processing regulations. They have been designated as data controllers and conduct their activities under the guidance and supervision of IMPATIA S.r.l.
The relevant third parties fall into the following categories: banking institutions, internet service providers, IT and telematics service providers, courier services, marketing companies, and firms specializing in market research and data processing.
Your data may be transmitted to the police forces and judicial and administrative authorities, in compliance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow IMPATIA S.r.l. to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
6. Data transfer extra-EU
Some of the third parties listed in the previous paragraph “Who will process your data?” they may be based in countries outside the European Union which nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).
The transfer of your personal data to countries that do not belong to the European Union and which do not ensure adequate levels of protection will be carried out only after a conclusion between IMPATIA S.r.l. and said subjects of specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data, so-called “standard contractual clauses”, also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of a contract between you and IMPATIA S.r.l. (for the purchase of goods offered on our Site, for registration on the Site or the use of services on the Site) or for the management of your requests.
7. How long do we keep the data?
We retain your personal data for a limited period of time, which varies depending on the type of activity that involves the processing of your personal data. After this period has expired, your data will be permanently deleted or otherwise made irreversibly anonymous.
Your personal data is stored in compliance with the terms and criteria specified below:
a) data provided for commercial communications activities, opinion polls and market research: until the user requests interruption of the activity and in any case within 2 years from the user’s last interaction of any kind with IMPATIA S.r.l.;
b) data used to carry out market research and satisfaction surveys: until the User requests the cessation of the activity.
In any case, for technical reasons, the cessation of processing and the consequent definitive cancellation or irreversible anonymization of the relevant personal data will be final within thirty days of the terms indicated above.
8. Your rights
At any time you can exercise your rights with reference to the specific processing of your personal data by IMPATIA S.r.l.. Below you will find their general description and the methods for exercising them.
a) Access and Modify Your Data: You have the right to access your personal data and request corrections, modifications, or additions to the information. Upon your request, we will provide you with a copy of the data we have on record for you.
b) Revoke Your Consent: You have the right to withdraw your consent, at any time, for the processing of your personal data related to any marketing activities. Please note that sending commercial and promotional communications, conducting market research and satisfaction surveys, and personalizing the website and commercial offers based on your interests are considered marketing activities. Upon receiving your request, we will promptly discontinue processing your personal data that relies on such consent, while other processing or processing based on alternative legal bases will continue to be conducted in accordance with prevailing regulations.
c) Object to the processing of your data: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, explaining the reasons justifying your request; before welcoming it, IMPATIA S.r.l. will have to evaluate the reasons for your request.
d) Delete your data: in the cases provided for by current legislation you can request the deletion of your personal data. Once your request has been received and examined, if legitimate, we will promptly cease processing and delete your personal data.
e) Request Temporary Restriction of Data Processing: In this situation, IMPATIA S.r.l. will continue to retain your personal data but will refrain from processing them, unless you request otherwise or unless exceptions apply according to the law. You can request a limitation of processing in cases where you contest the accuracy of your personal data, when the processing is deemed unlawful, but you object to the deletion of your data, when we no longer require your data, but you need it to exercise your rights in a legal context, or when you object to the processing.
f) Request your data or transfer it to a person other than IMPATIA S.r.l. (“right to data portability”). You can ask to receive your data that we process based on your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we can upon your request transfer your data directly to a third party indicated by you.
To exercise some of the rights described above, you can get in touch with us by sending a written request to the address of the Data Controller provided above. To safeguard the security and prevent the unlawful use of our users’ data by third parties, before approving your request to exercise any of the specified rights, we may request certain information to verify your identity.
9. Security measures
We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. Furthermore, IMPATIA S.r.l. is committed to testing, verifying, and regularly assessing the effectiveness of these technical and organizational measures to ensure ongoing enhancements in data processing security.
10 . Complaints
If you believe that the processing of your personal data has been carried out unlawfully, you can lodge a complaint with one of the competent supervisory authorities for compliance with the rules on personal data protection. In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data.
More information on the presentation methods is available on the Guarantor’s website at http://www.garanteprivacy.it.
11. Changes to this information
The continuous development of our services may result in alterations to the aspects of personal data processing outlined above. As a result, this privacy policy may undergo modifications and additions over time, which could be required due to new regulations pertaining to personal data protection.
We encourage you to periodically review the contents of this policy. When feasible, we will strive to promptly inform you of any modifications and their implications. The most recent version of the privacy policy will always be posted on this page, with the date of its last update indicated.
12. Legislative references and useful links
The processing of your personal data is carried out by IMPATIA S.r.l. in full compliance with the regulations on the matter provided for by Regulation (EU) 2016/679 General Data Protection Regulation, the rules on the processing of Italian personal data and the provisions of the Italian Supervisory Authority (http://www.garanteprivacy.it).