Data protection information
Processing of personal data
Navigation on the Website/APP and/or access to certain sections of the Website/APP http://www.gamberorosso.it or mobile application Restaurants, Wine and magazines (hereinafter "APP") and/or any requests of information or services contracted by users of the Website/APP may result in the processing of personal data by Gambero Rosso Spa (hereafter "Data Controller"), as Data Controller, in compliance with GDPR "regulation".
This discolure informative is intended to allow users browsing our website to know, even before accessing the various sections of the Website/APP, how Gambero Rosso Spa processes personal user data; users will however still need to take notice of it before providing personal data upon registering on the Website/APP.
Purpose of processing
According to the needs manifested by the user accessing the various sections of the Website/APP (and except for special rules and information regarding individual transactions involving the provision of specific personal data, published regularly on the Website/APP), the following are the purposes of the processing of personal data, i.e. those directly conferred by users through the completion of online forms, or through the use of social networks (see the following section "Nature and methods of providing Personal Data of users") or those acquired automatically through navigation (see the following section "Categories of processed Personal Data") (hereinafter, "Personal Data"):
- a) provide and manage the various services offered; as well as allowing registration on the website/APP, which is necessary for access to particular sections of the Website/APP itself and to provide and manage the various services offered;
b) allow users to publish contributions directly on the Website/APP, or on sites managed independently by third parties with which Gambero Rosso Spa may have reached agreements to this effect, such as, but not limited to, social networks such as Facebook, Twitter, etc. (hereinafter "Social Networks"); the publication of user Contributions may also take place together with a pseudonym ("nickname") chosen by the user during registration on the Website/APP, and possibly to the avatar image associated with the user by their nickname for which: i) the user will be solely responsible for any choice that would prejudice third-party interests; ii) the user is not required to use personal data that allows third parties other than Gambero Rosso Spa to identify him/her but the user, through Gambero Rosso Spa, may also disclose his personal data if he/she has entered them as his/her nickname, as well as photo associated with their profile.
c) prior consent of the user and until revocation of the same, carry out marketing activities such as sending promotional and advertising material of Gambero Rosso Spa, also by e-mail, mms and sms;
e) respond to users' requests in relation to Gambero Rosso Spa products, to advertising, or to the Website/APP ("Privacy" section of the Website/APP);
f) prior consent of the user, and until revocation of the same, perform comparison and combination, for profiling purposes, of personal data of the user present in various databases of, or in use in Gambero Rosso Spa.
Registration of users on the Website/APP is not required for the provision of certain services offered by Gambero Rosso Spa (eg, those referred to in paragraph e). However, in order to avoid any requests from users regarding such services, users will be invited to provide personal data, which will be processed only for the relative purposes and for the time strictly necessary to do so.
Method of processing
Personal Data will be processed by means of collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
Personal Data will be processed mostly in automated manner, with logic strictly related to the aforementioned purposes, through the Data Base, the electronic platforms managed or by third parties appointed for this purpose; for an updated list contact the Owner at the e-mail address indicated below) and/or integrated systems of an IT nature and/or websites or the APP owned or used by Gambero Rosso Spa
The Owner has taken a variety of security measures to protect you against the risk of loss, misuse or alteration of your data. In particular: has adopted the measures referred to in Articles. 30 and 35 GDPR
Place of processing
The Personal Data are processed mainly at the headquarters of the Data Controller and in the places where the Manager and the persons in charge are located in Rome, Via Ottavio Gasparri 13/17. For further information, please contact the Owner of firstname.lastname@example.org
Duration of data processing and storage
The Data Controller will process the Personal Data for a period of time no longer than necessary to achieve the purposes for which the personal data are processed, or for a longer period, for purposes permitted by law, and in any case deleted without unjustified delay.
The user may at any time cancel his/her account or website registration or request the interruption of data processing or withdraw his/her consent, according to the methods indicated in the personal profile section on the Website.
Nature and methods of providing Personal Data of users
The provision of personal data is optional, but for some personal data the conferment is mandatory (i.e. necessary for those fields marked with an asterisk or otherwise marked as mandatory) so that Gambero Rosso Spa can meet the needs of the user in the scope of the Website/APP features. Failure, partial or incorrect provision of Personal Data marked with an asterisk, as necessary for the execution of the requested service, does not make such execution possible; while failure, partial or incorrect provision of the optional Personal Data does not result in any consequence.
Delivery of Personal Data can take place: a) by filling in the appropriate fields in the various sections of the Website/APP; or b) by browsing the Website/APP or using cookies; or c) with the automatic compilation, thanks to the request of the interested party to a Social Network to which he is registered to communicate to Gambero Rosso Spa some of the data that the person has already provided to the Social Network; in the latter case, Gambero Rosso Spa recommends paying attention to the following:
i) selecting the link that allows registration through a Social Network, present on the Website/APP or on one of the pages of Gambero Rosso Spa on the Social Network, a window will appear containing a box, tick to accept the communication of Personal Data from the Social Network to Gambero Rosso Spa and three links, to be selected:
a) for reading this informative; b) for the list of personal data occasionally required or optional, according to the specific purpose of processing; c) for the list of data that the Social Network is about to communicate to the Gambero Rosso Spa;
ii) once the user has read the informative, checked the box with which he/she declares to be of age and learned which data is mandatory, he/she can select the link referred to in c) above to deselect what data he/she does not want confer to Gambero Rosso Spa through the communication of the same by the Social Network.
Both in the case of providing Personal Data with the completion of the appropriate fields, and in that of automatic compilation thanks to Social Networks, if the user has failed to provide one or more mandatory data, an error message will appear by Gambero Rosso Spa with the list of missing mandatory Personal Data.
Categories of processed Personal Data
In addition to Personal Data conferred directly by users (such as name, surname, postal address, e-mail address, password, age, date of birth, gender, etc.), during the connection to the Website, the computer systems and software procedures for the operation of the Website itself provide and/or acquire automatically and indirectly some information that may constitute personal data, the transmission of which is implicit in the use of Internet communication protocols (such as, but not limited to, so-called "cookies" (as better specified below),"IP" addresses, domain names of the computers used by the users connecting to the Website, the addresses in "Url" notation of the requested resources, the time of the request to the server, navigation on the Website/APP).
Subject categories who may become aware of the Users' Personal Data
Personal Data may be brought to the attention of employees or collaborators of the Data Controller who, operating under the direct authority of the latter, process data and are appointed internal managers or persons in charge of processing in accordance with Articles 28 and 29 system administrators, and in this regard, will receive adequate operating instructions from the Data Controller; the same will happen - by the Managers appointed by the Owner - towards the employees or collaborators of the Managers.
Personal Data may also be brought to the attention of External Data Controllers, if authorized with specific consent, such as third-party companies or other subjects (for example, subjects entrusted with assistance, communication, marketing, advertising, promotions and sales of products and/or services, advertisers, advertising agencies, IT service providers, site managers, electronic platform managers) - who perform outsourcing activities on behalf of Gambero Rosso Spa.
Scope of communication or sharing of user personal data
Personal Data will not be disclosed to third parties or shared, except in case the hypothesis in which the user has entered personal data using a nickname.
Data Controller and Data Processors
The Data Controller is Gambero Rosso Spa.
For any further request concerning the processing of personal data please send an e-mail to the Data Controller, at the following e-mail address: email@example.com
As interested parties, users have the rights set forth in art. 7 and art. 6 of the GDPR link regulation http://eur-lex.europa.eu/legal-ontent/IT/TXT/PDF/?uri=CELEX:32016R0679&from=IT: in particular, they have the right to obtain confirmation from the Owner of any existence of personal data concerning them and their communication in an intelligible form; they can also ask to know the origin of the Personal Data; the purposes and methods of processing; they can also obtain the updating, correction or integration of Personal Data. Users may also, at any time, revoke their consent, cancel their APP account and/or cease to be registered on the Website, requesting the interruption of processing, cancellation, transformation into anonymous form or blocking of the Personal Data processed. They can oppose, in whole or in part to the processing: a) for legitimate reasons to the processing of personal data concerning them; b) for the purpose of sending advertising material or for carrying out market research or commercial communication. In this regard, users may decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.
Users also have rights referred to in Articles 16-21 GDPR (Right of correction, right to be forgotten, right to limitation of processing, right to data portability, right of opposition).
Finally, users can file complaints to the Guarantor Authority if necessary, or contact the same to request information regarding the exercise of their rights deriving from the European regulation 2016/679 through the DPO whose contact details are firstname.lastname@example.org
How to exercise rights and to acquire a list of data processors
Users may, at any time, exercise their rights by sending an email to email@example.com or a letter sent by ordinary mail to the Data Controller of personal data processing.
Users, moreover, if giving consent, can oppose data processing for the purposes referred to in letter c) expressed via e-mail address of the user, by clicking on the unsubscribe link present in each e-mail message