PRIVACY POLICY
PRIVACY POLICY Pursuant to Article 13 of Regulation (EU) 2016/679
This notice is provided to users of the website and aims to describe how the Site is managed with regard to the processing of personal data, as well as to inform users about the purposes and methods of processing personal data by the Data Controller (Article 13 of Regulation (EU) 2016/679 – GDPR).
DATA CONTROLLER
The Data Controller is RN PUBLISHING SAS, with registered office at Via Torelli 31, Novara, Italy. Email: info@rnpublishing.com.
TYPES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS OF PROCESSING
Processing
CONTACT FORM – REQUEST FOR INFORMATION
Purpose: The personal data (Full Name, Email, Telephone Number, Message Content) voluntarily provided by the user via the website’s contact form are necessary in order to respond to requests for information and/or assistance, as well as to improve the services provided.
Legal Basis: The legal basis for this processing is the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject (Art. 6, letter b) GDPR and Art. 122 of the Italian Privacy Code).
Processing
DATA FOR MANAGING ONLINE PURCHASES (E-COMMERCE)
Purpose: The collection of personal data such as full name, contact details, telephone number, email, and order notes is aimed at managing the entire order and payment process for products the user intends to purchase. The terms and conditions of sale are published at the following link.
Legal Basis: The legal basis for this processing is the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject, as well as the fulfilment of a legal obligation incumbent upon the Data Controller.
Processing
COOKIES AND TRACKING TOOLS
Purpose: For further details on this data, please refer to the specific cookie and tracking tools policy (Cookie Policy).
Legal Basis: The installation of technical cookies and browsing data is necessary to enable the provision of a service explicitly requested by the user, namely the operation of the website (Art. 122 of the Italian Privacy Code and Art. 6, letter b) GDPR). The installation of profiling cookies is subject to the prior consent of the data subject pursuant to Art. 6, letter a) GDPR and Art. 122, paragraph 1 of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 and subsequent amendments.
RECIPIENTS OF DATA PROCESSING
The personal data processed by the Data Controller are not disclosed. However, they may be communicated to employees working under the authority of the Data Controller, as authorized data processors, and to external parties collaborating with the Controller, who are designated as Data Processors or otherwise act under the authority of the Controller.
Specifically, in addition to the Data Controller, other individuals involved in the operation of the website (administrative, commercial, marketing, legal, and IT staff, as well as system administrators) may have access to the data, as well as external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, and communication agencies). The Data Controller is also required to disclose data to Public Authorities where necessary to comply with legal obligations and/or to protect the rights, property, or safety of the Data Controller, its users, or the public.
TRANSFER OF PERSONAL DATA
This website does not share personal data outside the European Economic Area (EEA). In any case, it makes use exclusively of service providers whose servers are located in countries for which the European Commission has issued an adequacy decision pursuant to Articles 45 et seq. of the GDPR.
DATA SUBJECT RIGHTS
In accordance with the limits and conditions set out in the applicable data protection legislation, with regard to the data processing described in this notice, each user, as a data subject, has the right to request from the Data Controller:
- Access to their personal data;
- The verification and rectification of their personal data;
- The withdrawal of consent at any time;
- Objection to the processing of their personal data;
- Restriction of processing;
- Erasure or deletion of their personal data;
- The right to data portability.
Furthermore, the data subject has the right to lodge a complaint with the competent Data Protection Authority or take legal action if they believe that the processing of their personal data infringes the provisions of the GDPR, pursuant to Article 77 of the GDPR.
To exercise their rights, users may submit a request to the Data Controller at the email address indicated above.