Privacy Policy

pursuant to and for the purposes of Articles 13 and 14 of EU Regulation no. 2016/679 (hereinafter, “GDPR”)

This Privacy Policy describes the management of personal data collected by Scalia Group Srl (the "Company") through this website, in accordance with applicable regulations. You can print or save this document using your internet browser's functionality (usually "file" > "save as").

Purpose of the processing

Scalia Group informs you that your data will be processed exclusively for the following purposes:

Registration for reserved areas : We will use your data to allow you to create a personal reserved area on our site. Please note that registration allows you to access many of the other services on the site more quickly, but it is not a requirement to use it.

Purchase of products: The personal and/or sensitive data provided will be used to process your purchase orders and related activities (shipping goods, invoicing, payment management and related activities, etc.).

Newsletter subscription: The newsletter is a communication with promotional and advertising content sent to all interested parties who request it. Subscribing to the newsletter on the website entails the sending of promotional communications that are not generalized but targeted based on the interested party's language, gender, and country of origin. This means that we process the data we receive to divide subscribers into distinct groups by language, gender, and country of origin so that the newsletter sent to you is as close as possible to what you requested and what may be of interest to you. We also specify that your data will be processed only with your consent for each newsletter purpose (e.g., wish list creation, email preferences, ongoing promotions, promotions on selected items, anonymous statistical analysis and market research, anonymous satisfaction surveys, etc.).

Sending targeted communications and generalized commercial offers: Scalia Group may ask you for consent to use your data to send you targeted communications, such as birthday greetings or generalized promotions and advertising messages, via traditional mail, email, fax, SMS, etc. Your consent to receive these communications will apply both to communications sent using automated systems without human intervention (e.g., email, SMS) and to traditional contact methods (e.g., postal mail). You may always withdraw your consent to the processing of your data for this purpose, even separately, for example by choosing to receive only advertising via traditional mail and rejecting those sent via automated systems.

Information or contact requests: e.g., requests for commercial and technical information, contact requests, order fulfillment status, product availability, etc., for which the data you provide will be used to send you exclusively what you requested.

Treatment methods

The personal data collected (“Data”) may be processed in the following ways:

• with the prior consent of the interested party, execute a specific request from the user ("E-commerce Service").
• with the interested party's prior consent, send newsletters with commercial and/or promotional information on the Company's products and services (“Marketing”).
• with the prior consent of the interested party, allow the Company to carry out pseudonymized user profiling, to improve the purchasing experience, making it personalized.
• The Data may be processed using paper and/or electronic and automated means, in particular, by regular mail or email, telephone (e.g., automated calls, SMS, MMS), fax, and any other IT channel (e.g., websites, mobile apps).
• The data will be processed exclusively by authorized internal personnel and data controllers (Article 28 GDPR), subject to the application of the necessary security measures pursuant to Article 32 GDPR.
• The data provided may be subject to review, verification, and control by the competent authorities for possible inspections. In these cases, responding is mandatory under penalty of administrative sanctions.

Personal and/or sensitive data subject to processing

The personal data that may be collected are the following:

• Personal data (name, surname, tax code, address, date of birth) for user registration on the website.
• data present on the customer account page relating to the completion of orders and the purchasing methods chosen by the user.
• Contact details (email, telephone) for receiving newsletters.
• Personal data provided to receive specific assistance; browsing data; cookies, for details of which, please refer to the Cookie Policy on the website.
• statistical data, not attributable to the individual, related to viewing the site.
• Pseudonymized profiling data associated with personalized advertising for the user.

Optional provision of data

Please note that the user is free to provide the personal data required by Scalia Group Srl to use the e-commerce services provided by the Company, subject to consent to this policy. Failure to provide such data may make it impossible to obtain the requested service.

Regarding cookies, for which please refer to the cookie policy for details, users can block them at any time, change their preferences, or exercise their rights under GDPR/679/2016.

Regarding the "stay connected" feature, designed by the Company to make browsing the site as pleasant as possible, the user is free to enable it. In any case, a password is required, with prior consent and exclusively for the purposes indicated, such as any changes to personal data and/or to place an order, or for any non-compliance and support activities.

Other entities that may process the data

The Data may be processed by parties acting on behalf of the Company and pursuant to specific contractual obligations. The Data may also be disclosed to third parties to fulfill legal obligations, to comply with orders from public authorities, or for prior consent, or to exercise a right of the Company in court.

Transfer of data outside the European Economic Area (EEA)

The Company does not currently transfer data outside the European Economic Area and does not provide it to international organizations, except for necessary and ongoing legal proceedings, where applicable and with the authorization and information of the interested parties.

The user's personal data transmitted through the Company's website is managed securely using SSL (Secure Socket Layer) encryption: this applies from login to order processing to data retention.

Link to third-party websites

Third-party websites accessible from this site are the sole responsibility of those third parties. The Company declines all responsibility for requests and/or provision of personal data to third-party websites.

Data retention

• The Data processed to provide the Service will be retained by the Company for the period deemed strictly necessary to achieve these purposes, except in the event it needs to handle any disputes related to the provision of the Service, which will be retained until this process is completed.
• Customer account data is retained for ten years from the user's last use of the service.
• Data processed for Marketing purposes will be retained by the Company from the moment the data subject provides consent until such consent is revoked. If consent is revoked, such data may be retained for a longer period, as in the previous case, in order to manage any complaints and/or disputes.
• The data processed to improve the user experience on the websites will be retained for the periods indicated in the Cookie Policy.
• Where necessary, for the initiation or conduct of legal proceedings, appeals, non-payment, etc., and for specific regulations, the data may be retained for a variable period of time established subsequently.

The rights of the interested party

The interested party is granted the following rights:

• right of access, i.e. the right to obtain confirmation from the Company as to whether or not personal data concerning you is being processed and, where that is the case, to obtain access to it;
• right to rectification and erasure, i.e. the right to obtain the rectification of inaccurate Data and/or the integration of incomplete Data or the erasure of Data for legitimate reasons;
• right to restriction of processing, i.e. the right to request suspension of processing where legitimate reasons exist;
• right to data portability, i.e. the right to receive the Data in a structured, commonly used and machine-readable format, as well as the right to transmit the Data to another data controller, if applicable;
• right to object, i.e. the right to object to the processing of Data where there are legitimate reasons, including the processing of Data for marketing and profiling purposes, if applicable;
• right to receive information regarding data breaches affecting him or her.

The Data Controller is required to inform users, in a specific Privacy Policy, of their privacy rights (Articles 15-17 of the GDPR) and how to exercise them.

To exercise the aforementioned rights, the interested party may submit a request via EMAIL/PEC by following the instructions below:

1. Please include in the subject line: NAME, SURNAME, TAX CODE, SUBJECT OF REQUEST, REFERENCE REGULATORY ARTICLE.
2. Please send your email/certified email to: dpo@scaliagroup.com

Dear Sir,	SCALIA GROUP SRL
Data Controller	SCALIA JOHN THE BAPTISTA
Registered office	VIA MARESCIALLO CAVIGLIA, 10 – 90100 PALERMO (PA)

1. In the text, please provide a detailed explanation of the reason for the request (date, time, description of the event, categories of relevant data, purpose of the request, other information), any supporting evidence, if applicable, and the signature of the interested party.
2. Attach a valid identification document.
3. Authorize Scalia Group SRL to process personal and/or sensitive data pursuant to GDPR/2016/679

As an alternative to the previous one, the "GDPR User Rights Request Form" is provided in the attachment, with instructions below:

1. Please fill in the area of ​​greatest interest.
2. Send by EMAIL/PEC to dpo@scaliagroup.com, inserting in the subject: NAME, SURNAME, CF, SUBJECT OF REQUEST, REFERENCE REGULATORY ARTICLE.
3. Please send your email/certified email to: dpo@scaliagroup.com

Dear Sir,	SCALIA GROUP SRL
Data Controller	SCALIA JOHN THE BAPTISTA
Registered office	VIA MARESCIALLO CAVIGLIA, 10 – 90100 PALERMO (PA)

1. The text should include the applicant's identification, the purpose of the request, the list of attachments included, and the interested party's signature.
2. Attach a valid identification document.
3. Authorize Scalia Group SRL to process personal and/or sensitive data pursuant to GDPR/2016/679.

As an alternative to electronic notification, it is possible to have the aforementioned form delivered by Registered mail with return receipt by entering the necessary data in the appropriate form.”

Data Controller and DPO/RDP

The data controller is Scalia Group Srl, with registered office at Via Maresciallo Caviglia, 10 - 90143 Palermo, Tel: +39 3496625672, email: info@scaliagroup.com. All updated Company contact information is provided at the bottom of each page of the Company's website.

Changes

This Privacy Policy was updated on June 17, 2022. The Company reserves the right to partially or fully modify the Privacy Policy or simply update its content (for example, following changes in applicable law). Any updates will be published on this website.