Privacy Policy

Information on the processing of personal data pursuant to art. 13 Regulation (EU) 679/2016

This policy describes the methods and purposes of the processing of personal data of users who access and use the official website of 8853 S.p.A. (www.8853.it) and the official websites of the 8853 S.p.A. divisions:

• 88Dent (https://www.88dent.com)
• 88Labware (https://www.88labware.com)
• 88Medical (https://www.88medical.it)
• 88Preciousnetwork (https://www.88preciousnetwork.com)
• 88Preciousproducts (https://www.88preciousproducts.com)
• OROvilla (https://www.orovilla.com)
• Bancovilla (http://www.bancovilla.com)
• 88Vet (http://www.88vet.com )

(hereinafter "Website") of which 8853 S.p.A. is the owner.

The information is provided only for the Website and not for third-party websites that may be accessible through hyperlinks (links) contained in the Website.

1. Data Controller

The Data Controller is the Company 8853 S.p.A. (hereinafter also only the 'Company'), VAT number 10684110157, with operational headquarters in Pero (MI), in via Pitagora 11, tel. 0288531, e-mail [email protected].

2. Types of data processed and purposes of processing

The processing operations are performed with reference only to the personal data necessary for use of the Website and of its functions. The types of data processed include, in particular:

1. Browsing data: the computer systems and software procedures designated to operate the Website acquire, during normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This consists of information which is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. These data are used for the sole purpose of obtaining anonymous statistical information on use of the Website and to check its correct functioning and are not, and will in no case be used by the Data Controller to perform profiling activities.
2. Identification data such as, for example, name, e-mail address and other personal data possibly contained in e-mail messages sent to the addresses indicated on the Website or provided by filling in the "format" specifically prepared, in order to perform the processing activities necessary to respond to the user's requests#PV#
3. Identification data such as, for example, name and e-mail address provided by filling in the newsletter service subscription format, in order to send periodic information communications#PV#
4. Identification data to manage your registration as a user of the website and to authorise you to access the different features, products and services available as a registered user#PV#
5. Economic and transaction information (for example, your payment or credit card details, information relating to purchases made by you, orders, returns, etc.) for fulfilment and execution of the purchase contract entered into with us on the Website#PV#
6. Information relating to your tastes and preferences, as a registered user: if you provide consent to profiling to send you personalised information about our products or services. Accordingly, please keep in mind that such data processing involves the analysis of your user profile to determine your preferences and, therefore, which products and services best suit your interests for the purposes of sending information. For example, based on your purchases we will provide you with suggestions for products that we think you may be interested in.

3. Legal basis for processing

• For the purpose of letter b) of point 2, we believe that we have a legitimate interest in responding to your requests or questions through the various existing contact channels. We understand that the processing of this data is also beneficial to you insofar as it allows us to adequately assist you and answer your questions.
• For the purpose of letter c) of point 2, the legal basis for the processing of your data for marketing purposes is the consent (optional and revocable at any time) that you provide us.
• For the purpose of letter d) of point 2, your data is processed as it is necessary for execution of the terms governing use of the Reserved Area of the website. In other words, in order for you to register as a user, we must process your personal data, otherwise we would not be able to manage your registration.
• For the purposes of letter e) of point 2, the processing of your data is necessary for fulfilment of the sales contract entered into with you.
• For the purpose of letter f) of point 2, based on your consent (optional and revocable at any time) we may perform profiling with the information we have about you (such as your preferences or purchase history) to offer you personalised services and to send you personalised promotional communications.

4. Processing methods

The processingwill mainly be performed by means of IT tools, by collaborators and employees authorised to do so, who operate according to the instructions given by the Data Controller, with logics strictly related to the purposes indicated and, in any case, in order to guarantee the security and confidentiality of the data processed.

Specific security measures are adopted in order to minimise the risks of destruction or loss, even accidental, of the data being processed, of unauthorised access, of processing not permitted or not compliant with the purposes indicated in this policy.

5. Data retention period

The data being processed will be kept for a period of time not exceeding that necessary to achieve the purposes for which they were collected or subsequently processed and, in particular:

• The data provided by sending e-mails or filling in the contact forms on the website will be kept for the time necessary to provide a response#PV#
• The data provided for the purpose of subscribing to the newsletter service will be processed until the consent is revoked. You can at any time decide not to receive communications by clicking on the unsubscribe buttonat the bottom of each e-mail received#PV#
The data provided to manage your registration as a user on the Website will be processed as long as you are a registered user (that is, until you request the cancellation of your registration)#PV#
The data provided for the fulfilment and execution of the sales contract will be processed for as long as necessary to manage the purchase of the products requested by you, including any returns, complaints or disputes relating to the purchase of the product#PV#
Information on tastes and preferences will be processed until the authorisation given is revoked.
• Withdrawal of consent does not affect the lawfulness of the processing based on the consent before its withdrawal.

After expiry of the retention periods according to the indicated criteria, the Data Controller will take pre-ordered measures for the cancellation or anonymisation of data that should not be kept due to specific regulatory obligations.

6. Categories of recipients

The data subject's personal data may be disclosed to:

• Specially authorized Company collaborators and employees, within their respective areas of responsibility#PV#
• External parties designated as Data Processors pursuant to art. 28 of the GDPR, who have been provided with appropriate operating instructions. These subjects are essentially included in the following categories:
  1. Companies that offer website and information system maintenance services#PV#
  2. Companies that offer e-mail sending services#PV#

e. Companies that offer marketing automation platform management services.

With the exception of the cases mentioned above, personal data will not be communicated, disclosed, given or in any case transferred to third parties for purposes which are illicit or not connected to the purposes of the collection and, in any case, without providing proper information to the data subjects and obtaining their consent, where required by law. This is without prejudice to any communication of data if requested by the Judicial or Public Security Authority, in the ways and cases provided for by the law.

Personal data will not be transferred abroad, to countries or international organisations which do not belong to the European Union and which do not guarantee an adequate, recognised level of protection, in compliance with art. 45 GDPR, based on an adequacy decision of the EU Commission. In the event that it is necessary for the provision of the Site services, the transfer of personal data to non-EU countries or international organisations, for which the Commission has not taken any decision on their adequacy, in compliance with art. 45 GDPR, will take place only in the presence of adequate guarantees provided by the recipient country or organisation, in compliance with art. 46 GDPR and on condition that the interested parties have effective rights as well as effective remedies.

In the absence of a decision on adequacy by the Commission, in compliance with art. 45 GDPR, or adequate guarantees, in compliance with art. 46 GDPR, including binding corporate rules, cross-border transfer will take place only if one of the conditions indicated in art. 49 GDPR subsists.

7. Data Subject Rights

The data subject has the right to access their personal data, to request correction, updating, erasure or restriction of processing if incomplete, inaccurate or collected unlawfully. They also have the right to object to processing for legitimate reasons, or to obtain data portability (for a more detailed discussion, please refer to arts. 15-22 of the GDPR).

You may exercise any of the rights listed above by emailing the Company's duly appointed representatives at [email protected].

If you believe that the processing of your data breaches the provisions contained in the Regulation (EU), you can contact a competent Data Protection Authority. The Italian Data Protection Authority's website is http://www.garanteprivacy.it/.