DATA CONTROLLER

JESOL DOLCE S.R.L.

Email amministrazione@jesodolce.com

JESOL DOLCE S.R.L. C.F./P. VAT 01601610270, with registered office in 30020 TORRE DI MOSTO (VE), Via CONFIN 49/A – tel. +39 0421 325385 – email amministrazione@jesoldolce.com

The Data Controller reserves the right to appoint a web agency as the Data Processor of the personal data managed for the purposes of technical assistance, maintenance, technical management and the like of this Site, whose references may be communicated upon request to the addresses indicated above.

The Data Controller and the Data Processor shall process the User's data by also using their own internal Employees, specifically designated and equipped with instructions for the correct processing of personal data, including by oral means.

TYPE OF DATA PROCESSED AND SOURCES OF COLLECTION

• Browsing data

• Cookies – we invite you to read our specific policy here

• Data voluntarily provided by the user, including:

• Common data (identification, personal data, billing data and the like)

• Sources: browsing, other sites, cookies and the like; user; public sources

We will primarily process browsing data, as well as cookies, so please read our specific policy here.

We may also process data voluntarily provided by the user, for example through the contact form or the sending of a communication by email, including common personal data (identification, personal data, billing and the like) to the extent that this is made necessary by the request received.

Data may come from automatic or voluntary sources, as well as from public sources. For example, they may come from the User's browsing history, and may include information about previous consultations of other sites, including in particular cookies and other similar technologies. The data may also be provided voluntarily by the User or related parties. Other data may come from public sources, such as those processed in the context of research and from company searches, public database searches and the like.

PURPOSE OF DATA PROCESSING

• Providing web users with services offered by the Site

• Cookie management

• The personal data of the Users of the Website, as described above, will be processed in the manner and forms defined by the GDPR, for the performance of the functions of the Website, with particular - but not exclusive - reference to the procedures described therein for data collection, contact forms, any registration process / access to restricted areas, newsletter subscription (for which, however, please refer to the specific privacy policy) and the like.

• In particular, the personal data provided to the Data Controller will be processed for the following purposes:

- to respond to specific requests addressed to the Data Controller by the User through the Website and its communication tools (contact forms, information request forms and the like);

- for any subscription to the newsletter and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with specific consent given by the user by ticking the relevant box; for the forms used to simply subscribe to the newsletter, please refer to the specific privacy policy published there;

- for information communications relating to the services of the Data Controller, following a request for information by email or by filling in the contact form and other communication tools;

- for other purposes accessory to or connected to those indicated above and in any case falling within the scope of the activities of the Website;

- for the processing of the email address provided by the Data Subject in the context of the sale of a product or service, also aimed at sending, without further consent, communications for the subsequent direct sale of products or services similar to those covered by the sale itself, the Data Subject may in any case express his or her refusal and oppose such processing, both initially and subsequently, easily and free of charge, following the instructions in each subsequent communication.

• The processing of personal data provided in general contexts will be carried out, even after automatic collection during browsing, for the sole purpose of ascertaining and controlling access to the Website. This also applies to technical cookies, which are session, functional, or analytics cookies that meet the requirements specified by the Data Protection Authority. In particular, with regard to the latter, it is clarified that they can be considered equivalent to technical cookies if they are created and used directly by the Website. In any case, for said analytics cookies, the Website, also in compliance with the clarifications of the Data Protection Authority, has provided for the anonymisation of IP addresses, and the collection and use of said browsing data (without prejudice to the anonymisation of IP addresses) shall allow the Website's performance to be monitored and the service offered to be improved, offering the User a better browsing experience. Please refer to the relevant Cookie Policy for further information.

LEGAL BASIS OF THE PROCESSING

• Consent

• Fulfilment of a contractual or social contact obligation

• Information

• Legitimate interest

The processing of personal data is based on the right to information, on the fulfilment of contractual obligations or social contact, or where necessary by consent through the free and informed compilation of the appropriate information fields in the relevant form.

LEGITIMATE INTEREST OF THE DATA CONTROLLER

• Exercise of information society rights

• Performance of the service by the Controller

• Direct marketing

• Soft spam

The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of their rights in the context of the information society, the execution of contractual services and the implementation of direct marketing operations as well as soft spam.

OBLIGATORY PROVISION OF DATA

• Some data are mandatory, others are optional, depending on the purpose of the processing that will be specifically indicated from time to time.

The provision of data relating to browsing by Users, for the purposes mentioned above, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases, disabling may affect your browsing of this Website. For certain forms of this Website, the provision of browsing data and/or the use of technical cookies is mandatory for the proper functioning of the Site itself.

The provision of certain personal data is in any case necessary for the structure of the Website and its proper functioning. In particular, by way of example:

- for sending messages via contact forms or for subscribing to the newsletter, the minimum data requested therein, such as the USERNAME and/or the name/surname and/or email address and/or other identifying data of the sender, are in any case mandatory;

- for possible registration and access to the special reserved area of the Website, the USERNAME and the PASSWORD are in any case mandatory.

Any request for other optional data will be preceded by a special tick box for approval.

The provision of all other data is optional, in accordance with the type of information that the User wishes to provide to the Website.

CONSEQUENCES OF FAILING TO PROVIDE INFORMATION

• Failure to carry out the operations requested by the Data Subject

• Non-receipt of commercial information

Failure to provide personal data prevents the Data Controller from carrying out the operations requested by the Data Subject, as well as sending updates on its commercial and promotional initiatives.

ANY RECIPIENTS OF PERSONAL DATA

• Communication: YES

• Recipients: partner companies and consultants of the Data Controller

• Intra-EU transfer: YES

• Transfer outside the EU: YES (under the Privacy Shield protocol)

The data may be divulged to companies related to, connected to, or controlled by the Data Controller, as well as to consultants, or even to third parties who operate, even in the name and on behalf of the Data Controller, for the processing of services related to the purposes indicated in this statement, both within the EU and outside the EU (in the latter case, it will be exclusively subjects adhering to the Privacy Shield protocol).

Browsing and similar data (for which reference is made to the above), as well as profiling cookies, including those of third parties (for which reference is made to the Cookie Policy of this Website), which will be communicated to the respective interested third parties, where these do not manage them directly in their capacity as Data Controllers.

STORAGE PERIOD

• Until revoked

The data provided by the Data Subject will be kept until the express revocation by the Data Subject, including through actions taken on their browser, clearing cookies, an express request, or any other way that expresses their wish to do so.

Browsing data will be kept for the technical time necessary to carry out the functions for which they were collected.

THE RIGHTS OF THE DATA SUBJECT

Rights (Art. 15 - 22 GDPR):

• access

• rectification

• erasure

• limitation

• portability

Forms and terms of operation: Art. 12 GDPR

By email: amministrazione@jesoldolce.com

Each Data Subject has the right of access, rectification, erasure (the right to be forgotten), restriction of processing, receipt of notification in case of rectification, cancellation or limitation, portability, opposition and not to be the subject of an automated individual decision, including profiling, pursuant to Articles 15 to 22 of the GDPR.

These rights may be exercised in the manner and within the time limits set out in Art. 12 GDPR, by written notice sent to the Data Controller by email to amministrazione@jesoldolce.com

The Data Controller shall provide an adequate response as soon as possible and in any case within one month of receipt of the request.

RIGHT TO REVOKE CONSENT

• By email amministrazione@jesoldolce.com

• At a point of sale

You may revoke this consent at any time by

• sending an email to the address of the Data Controller amministrazione@jesoldolce.com

• express communication at a point of sale of the Data Controller.

COMPLAINTS

Complaint (Art. 77 GDPR):

• To the Italian Data Protection Authority

Each Data Subject has the right to lodge a complaint pursuant to Articles 77 et seq. of the GDPR with a supervisory authority, which for Italy is the Data Protection Authority.

The forms, methods, and terms of filing complaints are provided for and governed by current national legislation.

The complaint is without prejudice to administrative and judicial actions, which for Italy may be brought alternatively to this Data Protection Authority or to the competent Court.