This application collects certain Personal Data belonging to its Users.
Print this document using the print command in your browser settings.
Data Controller
Madama Oliva srl
Via Di S. Costanza 00198 Rome (RM)
Operational Headquarters: Zona Industriale Loc. Recocce 67061 Carsoli (AQ)
Tax ID/VAT number: 10702821009
Economic and Administrative Index No. 1250999
Email address: info@madamaolivashop.it
Types of Data Collected
The Personal Data collected by this Application, either independently or through third parties, include: address; first name; surname; country; email; zip code; business name; VAT number; Cookies; Usage data; city; telephone number; username.
Full details on each type of data are provided in the relevant sections of this privacy policy, or in pop-ups displayed before the data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Application.
Unless otherwise specified, all the Data requested by this Application are mandatory. If the User refuses to provide them, it may be impossible for this Application to provide the Service. In cases where this Application indicates that certain Data are optional, Users are free to refrain from disclosing such Data, without this having any consequence on the availability of the Service or its operation.
Users with queries about which types of Data are mandatory are asked to contact the Data Controller.
The purpose of the possible use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is to provide the Service requested by the User and to fulfil any other purposes described in this document and in the Cookie Policy, where available.
The User accepts responsibility for the Personal Data of third parties which may be obtained, published or shared through this Application and warrants that he or she has the right to disclose or disseminate such data, releasing the Data Controller from any liability towards third parties.
Method and place of the data processing
Data processing methods
The Data Controller adopts appropriate security measures to prevent the unauthorised access, disclosure, modification or destruction of the Personal Data.
The processing is carried out using computerised and/or digital tools, with organisational methods and logics that are strictly related to the stated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organisation of this Application (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller, may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller.
Legal basis for the data processing
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be allowed to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects (“opts out”) of such processing. However, this does not apply where the processing of Personal Data is governed by European legislation on the protection of Personal Data;
data processing is necessary to execute a contract with the user and/or to execute pre-contractual disclosures;
the processing is necessary for the performance of a legal obligation to which the Data Controller is subject;
the processing is necessary to execute a duty in the public interest or to exercise an official authority vested in the Controller;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.
However, the Data Controller may be asked to clarify the specific lawful basis for any processing and to specify in particular whether the processing is for legal purposes, in execution of a contract or necessary for its conclusion.
Place
The Data are processed at the operational headquarters of the Data Controller and at any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one where the User is located. For further information on the location of the processing, please refer to the section on details of the processing of Personal Data.
The User is entitled to obtain information on the legal basis for the transfer of Data outside the European Union or to an international organisation under public international law or formed by two or more countries, such as the UN, as well as on the security measures adopted by the Data Controller to protect the Data.
The User can check if one of the transfers described above takes place by examining the section of this document concerning the details on the Personal Data processing, or request information from the Data Controller by contacting the same at the addresses indicated herein.
Period of retention
The Data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of that contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User may obtain further information on the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the storage period, Personal Data will be erased. Therefore, at the end of this period, the right of access, deletion, rectification and the right to data portability can no longer be exercised.
Purposes of Data Collection and Processing
The User Data are collected to allow the Owner to provide the Service, comply with legal obligations, respond to requests or executive actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Contacting the User, Registration and authentication, Access to accounts on third party services, Interaction with external social networks and platforms, Statistics, Displaying content from external platforms, Payment management, Hosting and backend infrastructure, RSS Feed Management and Social Features.
To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, Users may refer to the section “Details regarding the processing of Personal Data”.
Facebook permissions requested by this application
This Application may ask for some Facebook permissions allowing it to perform actions with the User's Facebook account and to retrieve information from it, including Personal Data. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook, Inc.
For more information about the following permissions, refer to the Facebook permissions documentation and to the Facebook privacy policy.
The permissions requested are the following:
Basic information
The basic information of the User registered on Facebook which normally includes the following Data: ID, name, image, gender and localization language and, in some cases, their Facebook "Friends". If the User has made further Data publicly available, they will be available.
About me
Provides access to the 'About me' section of the profile.
Details on the processing of Personal Data
Personal Data are collected for the following purposes and using the following services:
Access to third party services' accounts
This type of services allow this Application to access Data from your account on a third party service and perform actions with it.
These services are not activated automatically, but require explicit authorization by the User.
Access to Twitter account (Twitter, Inc.)
This service allows this Application to connect with the User's account on the Twitter social network, provided by Twitter, Inc.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Processing location: USA - Privacy Policy.
Access to Facebook account (This Application)
This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook, Inc.
Permissions requested: About me.
Processing location: USA - Privacy Policy.
Contacting the User
Contact form (this Application)
By completing the contact form with their Data, Users consent to their use in order to respond to requests for information, quotes or of any other nature indicated in the form header.
Personal Data processed: zip code; surname; email; address; country; first name.
Mailing List or Newsletter (This Application)
By registering to the mailing list or newsletter, the email address is automatically added to a list of contacts who may be sent emails containing information related to this Application, including commercial and promotional informatio. The User's email address may also be added to this list as a result of registering for this Application or after making a purchase.
Personal Data processed: city.
Contact by telephone (This Application)
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Application, as well as to meet requests for support.
Personal Data processed: telephone number.
Social media features
Public profile (This Application)
Users can have a public profile viewable by other Users. In addition to the Personal Data provided, this profile may contain the User's interactions with this Application.
Personal Data processed: username.
Management of RSS feeds
This type of service allows for the management of RSS feeds and the distribution of their content. Depending on the characteristics of the service used, these services can also be used to insert advertisements within the content and to collect statistical data on the same.
Feedburner (Google Inc.)
Feedburner is an RSS feed management service provided by Google Inc. that allows for the collection of statistical data on the consultation of content and for the integration of advertisements within it.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Handling of payments
The payment processing services allow this Application to process payments by credit card, wire transfer or other means. The data used for payment are acquired directly by the provider of the payment service requested without being in any way processed by this Application.
Some of these services may also allow the programmed sending of messages to the User, such as emails containing invoices or payment notifications.
PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows the User to make payments online.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Hosting and back-end infrastructure
This type of service has the function of hosting data and files that allow this Website to function, allowing their distribution and providing a ready-to-use infrastructure that provides the specific features of this Application.
Some of these services operate through servers geographically located in different places, making it difficult to determine the exact place where Personal Data is stored.
Google App Engine (Google Inc.)
Google App Engine is a hosting service provided by Google LLC or by Google Ireland Limited, depending on the location this Application is accessed from.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Processing location: USA - Privacy Policy.
Google Cloud Storage (Google Inc.)
Google Cloud Storage is a hosting service provided by Google Inc.
Personal Data processed: various types of Data as specified by the service's privacy policy.
Processing location: USA - Privacy Policy.
Interaction with social media and external platforms
This type of service allows you to interact with social networks, or other external platforms, directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User's privacy settings for each social network.
This type of service may still collect traffic data for pages where the service is installed, even when Users do not use it.
It is recommended to log out of the respective services to make sure that the data processed on this Application is not connected back to the User's profile.
Facebook 'Like' button and Facebook social widgets (Facebook, Inc.)
Facebook’s ‘Like’ button and Facebook social widgets are services that enable interaction with the Facebook social network, provided by Facebook, Inc.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Google+ social widgets and +1 button (Google Inc.)
The Google+ '+1' button and social media widgets are services for interacting with the Google+ social network, provided by Google Inc.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Tweet button and Twitter social widgets (Twitter, Inc.)
The Tweet button and Twitter social widgets are social networking services provided by Twitter, Inc.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Registration and authentication
By registering or authenticating themselves, Users allow this Application to identify them and give them access to dedicated services.
Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this occurs, this application may access some Data stored by the third party service that was used for registration or identification.
Direct registration (This Application)
Users register by filling in the registration form and directly providing this Application with their Personal Data.
Personal Data processed: zip code; surname; email; address; country; first name; VAT number; business name.
Statistics
The services contained in this section allow the data controller to monitor and analyse traffic data and are used to keep track of user behaviour.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualise and personalise the advertisements of its advertising network.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy - Opt Out.
WordPress Stat (Automattic Inc.)
Wordpress Stats is a statistical service provided by Automattic Inc.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Displaying content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Application and to interact with them.
If a service of this type is installed, it is possible that it will collect traffic data related to the pages on which it is installed, even if Users make no use of that service.
Google Fonts (Google Inc.)
Google Fonts is a font style visualization service managed by Google LLC or by Google Ireland Limited, depending on the location in which this Application is used, which allows this Application to integrate such contents within its pages.
Personal Data processed: Usage Data and various types of Data as specified by the privacy policy of the service.
Processing location: USA - Privacy Policy.
Google Maps Widget (Google Inc.)
Google Maps is a map displaying service provided by Google Inc. that allows this Application to incorporate content of this kind in its pages.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Instagram Widget (Instagram, Inc.)
Instagram is an image viewing service operated by Instagram, Inc. that allows this Application to integrate such content into its pages.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
YouTube Video Widget (Google Inc.)
YouTube is a video content viewing service operated by Google Inc. that allows this Application to integrate such content into its pages.
Personal Data processed: Cookies; Usage Data.
Processing location: USA - Privacy Policy.
Further information about Personal Data
Sale of goods and services online
The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and any deliveries. The Personal Data collected to submit the payment may be those relating to a credit card, a bank account used for the transfer or other permitted payment instruments. The payment details collected by this application depend on the payment system used.
User Rights
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, Users have the right to:
revoke consent at any time. Users may revoke their consent to the processing of their Personal Data as described above.
object to the processing of their data. Users may object to the processing of their Data when it is done on a lawful basis other than consent. More details on the right of objection are given in the section below.
access their data. Users have the right to obtain information on what data is processed by the Data Controller and on particular aspects of the processing, as well as to obtain a copy of any data processed.
verify and request rectification. Users may check that their data is correct and ask for it to be updated or corrected.
obtain limitation to processing. In certain circumstances, Users may ask for restrictions to be set on the processing of their data. In such a case, the Data Controller may not process the data for any purpose other than for its storage.
have their personal data removed or erased. When certain conditions are met, Users may request the Data Controller to erase their Data.
receive the personal data concerning them or transfer it to another Data Controller. Users have the right to receive their data in a structured, commonly used and machine-readable format, where technically feasible, and to have it transferred without hindrance to another Data Controller. This provision is applicable when the data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures related thereto.
lodge a complaint. Users may lodge a complaint with the competent supervisory authority responsible for personal data protection, or take legal action.
Details on the right of objection
When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or in pursuit of a legitimate interest of the Data Controller, Users have the right to object to the processing on grounds relating to their particular situation.
Users are reminded that where their Data is processed for direct marketing purposes, they may object to the processing without giving any reason. To find out whether the Data Controller processes data for direct marketing purposes, Users may refer to the respective sections of this document.
How to exercise rights
In order to exercise their rights, Users may send a request to the Data Controller using the contact details indicated in this document. Requests shall be filed free of charge and processed by the Data Controller as soon as possible and in any event within one month.
Cookie Policy
This Application uses Tracking Tools. For more information, Users may consult the Cookie Policy.
Further information on data processing
Legal defence
User Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages for its possible establishment to defend against misuse of this Application or related Services by the User.
Users declare that they are aware that the Data Controller may be obliged to disclose the data by order of public authorities.
Specific information
At the User's request, in addition to the information contained in this privacy policy, this Application may provide a User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
This Application and any third-party services used by it may collect system logs; these are files that record interactions and may also contain Personal Data, such as the User IP address, for operational and maintenance purposes.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the above contact details.
Response to “Do Not Track” requests
This Application does not support “Do Not Track” requests.
To find out if they are supported by any related third-party services, the User is invited to refer to the relevant privacy policies.
Amendments to this privacy policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users on this page and, if possible, on this Application and, where technically and legally feasible, by sending a notification to Users through one of the contact details held by the Data Controller. Please consult this page regularly, referring to the date of the last modification as indicated at the bottom.
Where changes involve processing on the legal grounds of consent, the Data Controller will seek to obtain the User’s consent again, if necessary.
Definitions and legal references
Personal Data (or Data)
Personal data is any information which, directly or indirectly, also in conjunction with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This is personal data collected automatically through the Application (or by third-party applications that it uses), including: IP addresses or domain names of the computers used by Users to connect to the Application, Uniform Resource Identifiers (URIs), time of request, method used to submit the request to the server, size of the file obtained in reply, numerical code indicating status response from the server (successful, error, etc.), country of origin, characteristics of the User’s browser and operating system, various temporal aspects of the visit (for example, time spent on each page) and details of the path followed within the Application, with particular reference to the sequence of pages visited, parameters related to the User’s operating system and IT environment.
User
The individual using this Application who, unless otherwise specified, is the same as the Interested Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural person, legal person, public administration and any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Controller)
The physical or legal person, public authority, agency or other body, which alone or jointly with others, determines the purposes and means of personal data processing and the instruments to be used, including any security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.
This Application
The hardware or software tool through which Personal Data of Users are collected and processed.
Service
The Service provided by this Application as defined in the relevant terms (if any) on this website/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document extends to all current member states of the European Union and the European Economic Area.
Cookies
Cookies are Tracking Tools that consist of small pieces of data stored in the User’s browser.
Tracking Tool
By Tracking Tool, we mean any technology – e.g. Cookies, unique identifiers, web beacons, integrated scripts, e-tags and fingerprinting – which enable Users to be tracked, for example, by collecting or saving information on the User’s device.
Legal references
This privacy policy is drawn up on the basis of multiple laws, including Articles 13 and 14 of EU Regulation 2016/679.
Unless otherwise specified, this privacy statement only concerns this Application.