We promise never to share, trade, sell, deliver, reveal, publicize, or market your Email Address.
Notice pursuant to Section 13 of Legislative Decree 196/2003 (‘The Data Protection Code’) supplied by Arena Italia S.p.A. (‘ARENA ITALIA’) to users accessing the site www.arenawaterinstinct.com (‘the Site’).
At ARENA ITALIA we are well aware of how important it is to keep personal data confidential. Given the potential of the internet as a key means of exchanging and circulating information, in line with the provisions of Legislative Decree No. 196 of 30 June 2003 as subsequently amended and supplemented (the ‘Data Protection Code’), we intend to do all we can in order to comply with rules of conduct that operate to ensure that web-site navigation is done in an environment that is monitored and secure and which respects the user’s privacy.
You are therefore invited to take a few moments to read about the basic rules and principles that ARENA ITALIA has established in relation to the collection and processing of personal data relating to their customers and to users of the Site.
Basic principles followed by ARENA ITALIA when collecting and processing personal data:
Notice pursuant to Section 13 of Legislative Decree 196/2003
As data controllers pursuant to and for the purposes of Section 4, paragraph 1 (f) of Legislative Decree No. 196 of 30 June 2003, ARENA ITALIA hereby provides you with the following information.
The data supervisors is:
a) the manager of ARENA ITALIA’s Giuseppe Musciacchio, whose address for service for this purpose is the offices of Arena Italia S.p.A., registered office C.da Cisterna 84/85, 62069 Tolentino (MC), Italy;
The data processors is:
a) the manager of ARENA ITALIA’s Marketing Department, whose address for service for this purpose is the offices of Arena Italia S.p.A., registered office C.da Cisterna 84/85, 62069 Tolentino (MC), Italy;
The data requested when registering with the Site is used primarily to process purchase orders sent by the user. The section that deals in the main with the collection of data is the section used to register with the Site.
The form to be completed in order to register with the Site asks for data to be provided that is strictly necessary in order for the order to be processed; where such data is not supplied, this will mean that the request put in by the user cannot in fact be dealt with. The form also asks for data to be supplied on a voluntary basis; a refusal to supply this particular data will not prevent the order from being processed.
Any data processed in relation to the Site is processed mainly by electronic or data transfer means, and in accordance with the law in force. It is processed for the following reasons:
The data subject’s personal data may (a) be made available to parties expressly authorised by the data controller companies and which carry out work that is strictly necessary if the user’s request is to be properly dealt and which falls falling within the following business areas: sales, administration, IT services and customer care (b) be passed on to such authorities that are legally entitled to receive it and (c) passed on to companies in the same Group as the data controller companies, in order to handle the shipping of the goods purchased by the user.
The user’s credit card details will not be used for any reason other than verifying the credit card itself, debiting the said card and processing the payment, as well as dealing with any claims made and for the purposes of litigation. For this purpose, the aforementioned data will also be processed by the bank providing the online payment handling services as well as the issuer of the credit card used when the order is placed.
Consultation, amendment and cancellation of personal data – Section 7 of Legislative Decree 196/2003
The rights pursuant to Section 7 of Legislative Decree 196/2003, which is set out below in full, are recognised in full:
A data subject shall be entitled to receive confirmation of whether personal data concerning him exists, whether or not already recorded, and to the communication of such data in an intelligible form.
A data subject shall be entitled to be informed of: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied to the processing, where carried out by electronic means; d) the details identifying the data controller and data supervisors and the representative appointed pursuant to Section 5(2); e) the parties or categories of party to whom the personal data may be communicated or who may gain knowledge of the said data as designated representative within the State of Italy, data processor(s) or person(s) in charge of the processing.
A data subject shall be entitled to have the data a) updated, rectified or, where in the data subject’s interest, supplemented; b) erased, made anonymous or blocked where it has been processed unlawfully, including data that does not need to be retained given the purposes for which it has been collected or subsequently processed; c) confirmation that the steps referred to at (a) and (b) and details of what the said steps involved have been brought notified to the knowledge of the parties to whom the data was communicated or divulged, save where this is impossible or where the employment of means required to do so would be manifestly disproportionate to the rights afforded.
A data subject shall be entitled to object, in whole or in part, to: a) the processing of personal data concerning the data subject, despite such data being relevant to the purpose of collection, where such objection is on legitimate grounds; b) the processing of personal data concerning the data subject where the said processing is in order to send marketing material or for the purposes of direct selling or to carry out market research or provide business communications.
A data subject may exercise the rights granted by Section 7 at any time, by writing to Arena Italia S.p.A., based at C.da Cisterna 84/85, 62029 Tolentino (MC), Italy.
Scope of communication of data
ARENA ITALIA will communicate the user’s personal data within the time limits and in the manner set out and, in any event, in full compliance with the consent provided by the user when the data is collected, when required by the Data Protection Code. The data will only be accessible to data processors at ARENA ITALIA and externally who process the data for the purposes set out above and to the Data Supervisors referred to above. A full and up-to-date list of Data Supervisors and parties to whom the data is communicated may be seen on request: a request should be made to ARENA ITALIA or the Data Supervisors.
The user’s personal data may be communicated to third party professional advisors and freelance consultants, including those operating as partnerships, who provide ARENA ITALIA with technical or organizational services for the purposes of the processing set out above. It may also be communicated to external parties in the event of a merger, acquisitions, transfer of a business or branch of a business and other extraordinary transactions, as well as to any party lawfully entitled to receive communications contemplated by the law or specific regulations. In order to achieve the purposes of the processing referred to above, the user’s personal data may be communicated to other companies in the Group of which ARENA ITALIA form part and which are located in the EU and will process the data in on the basis of the applicable privacy law.
Parties referred to above that receive the user’s personal data will, depending on the particular case, process it as Data Controllers, Data Supervisors or Data Processors and for the same purposes as those set out above and in compliance with the applicable privacy law; such parties are only provided with the information required in order for them to carry out their specific work. It is agreed that the user’s personal data will not be communicated to third parties to be used by them for marketing purposes and will not be divulged in any way.
Security of a data subject’s personal data
ARENA ITALIA implement suitable security measures of a preventive nature that ensure that a data subject’s personal data is kept confidential and complete, is not corrupted and is accessible. As required by Legislative Decree 196/2003 and the related technical provisions, technical, logistic and organizational warning systems are put in place in order to prevent processed data from being damaged, accidentally lost, modified or put to improper or unauthorized use.
In particular, in order to protect the data subject’s personal data, the Site uses in particular a coding system that ensures that data is safeguarded by encrypting not only the information on the access page but also in other sections of the Site where personal data can be inserted, seen or changed.
The Data Controllers shall not be held liable in connection with information sent directly by the user that is inaccurate (e.g. e-mail address, credit card details or postal address), or in connection with information concerning the data subject and supplied by a third party, including where fraudulently.