Privacy Policy

Privacy Policy

The purpose of this privacy policy is to provide all the information about the processing of personal data carried out by the Owner when the user browses and makes purchases on the website “Academy of Tarot” (as better indicated below).

1. INTRODUCTION – WHO ARE WE?

Carlo Bozzelli, with registered office in Via Pereta 23 – Casale Marittimo, Pisa, P. IVA 04122670161 (hereinafter, also the “Owner”), As the owner of the processing of users’ personal data (hereinafter, the “Users”) who browse and use the services available on the website https://tarocchi.com/ (hereinafter, the “Site”) provides below the privacy policy in accordance with art. 13 of EU Regulation 2016/679 of April 27, 2016 (hereafter, “Regulations”, or even the “Applicable Legislation”).

This Site and its contents are restricted to individuals who are eighteen years of age or older. Therefore, the Holder does not collect personal data related to individuals under the age of 18. Upon the request of Users, the Owner will promptly delete all personal data involuntarily collected relating to individuals under the age of 18.

The Owner holds in the highest regard the right to privacy and protection of personal data of its Users. For any information in relation to this privacy policy, Users may contact the Owner at any time using the following methods:

• By sending a registered letter with return receipt to the registered office of the Holder: Via Pereta 23 -56040 Casale Marittimo, Pisa
• By sending an e-mail message to: info@tarocchi.com

The Owner has not identified a Data Protection Officer (DPO or DPO), as it is not subject to the designation requirement under art. 37 of the Regulation.

3. WHAT DO WE DO? – PURPOSE OF PROCESSING

Through browsing the Site, the User can take advantage of the content posted and purchase the products and services available on the Site (hereinafter,”Service/s”).

In connection with activities that may be carried out through the Site, the Owner collects personal data about Users.

Users’ personal data will be lawfully processed by the Controller for the following processing purposes:

1. Contractual obligations and provision of the Service: to enable navigation of the Site or to give effect to the Terms and Conditions of Use, which are accepted by the User when registering on the Site or to fulfill specific requests of the User.

• User data collected by the Owner for the registration and purchase of products and services through the Site include: name, surname, e-mail, shipping address, telephone number, VAT number and/or tax identification number as well as any personal information of the User that may be voluntarily and voluntarily posted. Unless the User gives the Owner a specific and optional consent to the processing of his/her data for the additional purposes provided for in the following paragraphs, the User’s personal data will be used by the Owner for the sole purpose of ascertaining the User’s identity (including through validation of the e-mail address), thus avoiding possible fraud or abuse, and contacting the User for Service purposes only (e.g., sending communications regarding the status of his/her order).
• The user data collected by the Owner to enable navigation of the Site are all those personal data whose transmission is implicit in the use of Internet communication protocols, such as: IP addresses used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, log files and other parameters relating to the User’s operating system and computer environment.

Notwithstanding the provisions elsewhere in this privacy policy, under no circumstances will the Owner make Users’ personal data accessible to other Users and/or third parties;

1. administrative-accounting purposes, that is, to carry out activities of an organizational, administrative, financial and accounting nature, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;

1. legal obligations, i.e., to fulfill obligations required by law, authority, regulation or European legislation.

The provision of personal data for the above processing purposes is optional but necessary, as failure to provide it will result in the User being unable to register for the Service offered through the Site.

The personal data that are necessary for the pursuit of the processing purposes described in this paragraph 3 are indicated with an asterisk within the request form and are, specifically, first name, last name and e-mail address.

4. FURTHER PURPOSES OF TREATMENT.
   • newsletter

With the User’s free and optional consent, some of the User’s personal data (i.e. email address) may also be processed by the Owner for the purpose of sending the newsletter. Therefore, the User will receive from the Owner a periodic newsletter that will contain information in relation to news and updates present within the Site and/or initiatives of the Owner.

If consent is not given, the ability to subscribe to the Site will not be affected in any way.

In case of consent, the User may revoke it at any time by making a request to the Controller in the manner indicated in paragraph 8 below.

The User may also easily object to further sending of promotional communications by also clicking on the appropriate link to withdraw consent, which is present in each e-mail containing the newsletter. Once consent has been revoked, the Owner will send the User an e-mail message confirming that consent has been revoked.

5. LEGAL BASIS

Contractual Obligations and Provision of the Service (as described in par. 3, lett. a): the legal basis consists of art. 6, para. 1, lett. b) of the Regulations, i.e. the processing is necessary for the performance of a contract to which the User is a party or for the performance of pre-contractual measures taken at the User’s request.

Administrative-accounting purposes (as described by Sec. 3 (b) above): the legal basis consists of art. 6 paragraph 1, letter b) of the Regulations, insofar as the processing is necessary for the performance of a contract and/or the execution of pre-contractual measures taken at the User’s request.

Legal obligations (as described by previous paragraph. 3, letter c): the legal basis consists of art. 6(1)(c) of the Regulations, as the processing is necessary to fulfill a legal obligation to which the Data Controller is subject.

Additional processing purposes: for processing related to the activities of sending the newsletter (as described by Section 4.1 above), the legal basis consists of art. 6(1)(a) of the Regulations, that is, the provision by the data subject of consent to the processing of his or her personal data for one or more specific purposes. For this reason, the Owner asks the User for specific free and optional consent to pursue this processing purpose.

6. DATA PROCESSING METHODS AND DATA RETENTION TIMES

The Data Owner will process Users’ personal data using manual and computerized tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data.

Personal data of Users of the Site will be retained for the time strictly necessary to fulfill the primary purposes outlined in paragraph 3 above, or otherwise as necessary for the protection in civil law of the interests of both Users and the Data Owner.

In the case referred to in paragraph 4.1 above, Users’ personal data will be kept for the time strictly necessary to fulfill the purposes illustrated in the same and, in any case, until the User revokes his or her consent.

In any case, any retention periods stipulated by law or regulation are subject.

7. SCOPE OF DATA COMMUNICATION AND DISSEMINATION

The personal data of Users may come to the attention of the employees and/or collaborators of the Owner in charge of managing the Site and Users’ requests. Such individuals, who have been instructed to do so by the Owner pursuant to art. 29 of the Regulations, will process the User’s data exclusively for the purposes indicated in this notice and in compliance with the provisions of the Applicable Regulations.

Users’ personal data may also come to the attention of third parties who may process personal data on behalf of the Data Owner in the capacity of Data Processors, such as, but not limited to, IT and logistics service providers functional to the operation of the Site, service providers in outsourcing or cloud computing, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Controller by making a request in the manner indicated in paragraph 8 below.

8. RIGHTS OF INTERESTED PARTIES

Users may exercise the rights guaranteed to them by the Applicable Regulations by contacting the Owner in the following ways:

• By sending a registered letter with return receipt to the registered office of the Owner: Via Pereta 23 – 56040 Casale Marittimo, Pisa
• By sending an e-mail message to: info@tarocchi.com

The Owner has not identified a Data Protection Officer (DPO or DPO), as it is not subject to the designation requirement under art. 37 of the Regulation.

Pursuant to the Applicable Legislation, the Owner informs that Users have the right to obtain the indication (i) Of the origin of personal data; (ii) Of the purposes and methods of processing; (iii) of the logic applied in case of processing carried out with the aid of electronic tools; (iv) of the identification details of the Owner and responsible parties; (v) of the individuals or categories of individuals to whom the personal data may be communicated or who may become aware of them in their capacity as managers or appointees.

In addition, Users have the right to obtain:

1. a) theaccess, theupdating, the rectification or, when interested, the integration of data;
2. b) the cancellation, the transformation into anonymous form or the limitation of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
3. (c) certification that the transactions referred to in subparagraphs. a) e (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected.

In addition, Users have:

1. a) the right to withdraw consent at any time if the processing is based on their consent;
2. (b) the right (where applicable) todata portability (the right to receive all personal data concerning them in a structured, commonly used, machine-readable format);
3. c) the right to object:
4. (i) in whole or in part, for legitimate reasons to the processing of personal data concerning them, even if relevant to the purpose of collection.
5. ii) in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;

(iii) where personal data are processed for direct marketing purposes, at any time to the processing of their data carried out for that purpose, including profiling insofar as it is related to such direct marketing.

1. (d) if they believe that the processing concerning them is in violation of the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the Member State in which they work, or in the Member State in which the alleged violation occurred). The Italian supervisory authority is the Garante per la protezione dei dati personali, based at Piazza Venezia no. 11, 00187 – Rome (http://www.garanteprivacy.it/).

____________

The Owner is not responsible for updating all links viewable in this Policy, so whenever a link is not working and/or updated, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by that link.