Privacy disclaimer
- Details
- Hits: 46438
Information about the company and the site
Introduction
This is the privacy policy for https://sicilianfoodshop.com
The data controller on this site is
Mariano Macaluso's Bloweb agency
via primo Carnera, 2 - Capable
This email address is being protected from spambots. You need JavaScript enabled to view it.
3408247952
Data Protection Officer
You can contact our Data Protection Officer at: blowebagency @gmail.com
The protection of your personal data is of particular interest to us. We treat the personal data provided by you in the context of the use of our website and our services confidentially and in accordance with applicable data protection laws and this privacy policy.
Below, we inform you in detail what personal data we collect, what purposes it is used for, with whom we share the data and what privacy rights you may be entitled to.
Definitions
Controllers means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Legal basis indicates a legal ground for processing data under applicable privacy laws.
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or imposed, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more identity-specific factors physical, physiological, genetic, mental, economic, cultural or social nature of that natural person. The terms personal data and personal information have been used interchangeably in this Privacy Policy.
The Privacy Policy refers to the current policy designed to inform you about how our website collects, stores, protects, processes, discloses and retains your personal data.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise made available, aligned or combined, restricted, deleted or destroyed.
Processor natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
recipient means a natural or legal person, public authority, agency or other body to which personal data are disclosed, including controllers and controllers responsible for processing.
Sensitive personal data means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data relating to health or data relating to the sexual life or sexual orientation of a natural person.
Service providers are entities to which the data is disclosed and the data processing is carried out by the service provider on our behalf in accordance with the provisions of the data processing contract/agreement signed with them.
Scope
Under most privacy laws, a data controller is the entity that determines the purposes and means of the processing of personal data. A processor, on the other hand, processes personal data on behalf of the data controller. This Privacy Policy applies where we are the controller of your personal data, i.e. we determine the purposes and means of the processing of your personal data for our own purposes (unless a privacy policy is displayed different when we collect your personal data).
We act as a data controller for the purposes of personal information you provide when using our website. For example, when you visit our website, interact with our representative, register for a webinar or sign up to receive marketing communications. We are the data controller for the activities mentioned in the data processing activities mentioned in this Privacy Policy. It is important to note that this Privacy Policy does not cover how we process personal information on behalf of our customers.
If you are a data subject who uses or has used our product or service in another domain controlled by another organization or your personal data has been collected and processed by an organization that uses our services and you have questions or concerns about personal data held about you, please send your request to the relevant organisation. This is because we cannot respond to your request directly as your personal data is owned by the relevant organization and in that case we do not control the processing of your personal data. As data processors, we process this personal data pursuant to our contract with our client and under relevant privacy laws, we are not free to independently take any action regarding the personal data we collect, process or store on their behalf without their permission and instructions. This Privacy Policy does not apply to third-party websites, services or applications, even if accessible through our Services.
Data processing activities
We collect some personal information to provide specific services and features on our website.
The following sections describe the different data processing activities we carry out on our website. The information reflects in particular the purposes of the processing, which personal data we process for this purpose and the legal basis for the processing.
Informational use of our site
a) If you visit our website for information purposes only, i.e. browse our website without specifically providing personal data, we will process the following information about you. The information may include a limited amount of personal data:
This information is processed to enable you to use our website (for example by adapting our website to the needs of your device or browser).
The legal basis for this data processing is the execution of the contract, art. 6 para. 1 sentence 1 letter b GDPR, because we need the information for the effective provision of our website and to provide you with the services of our website at your request. Without the processing of the personal data mentioned above, we will not be able to carry out communication over the network and provide you with the functionality required by our website.
We store this personal data for 2 years
Users can create a user account at
a) You have the option to register for a user account on our website. During registration we will process the following personal data about you:
b) The lawfulness of this data processing is «execution of the contract» derives from the art. 6 para. 1 sentence 1 letter b GDPR. The processing is necessary for the effective provision and administration of your user account. Without providing the data required for registration, it is not possible to create a user account on our website.
We retain your personal data until you have a user account with us.
c) Users can contact you to request deletion.
Users can contact you via the contact form
You can contact us using the contact details provided on the website. If you contact us, we will process the content of your request, your name, your email address or telephone number, if applicable, our responses and any information you voluntarily provide to us in the context of the request to be able to handle your request adequately.
You can also contact us via the contact form on our website. In this case, we collect the following personal data:
We will process this data as well as the content of your request, our responses and any information you voluntarily provide to us as part of the request, in order to be able to properly handle your request.
The lawfulness of this data processing is «legitimate interests» (resulting from Art. 6 para. 1 sentence 1 letter b, f GDPR), as this data processing is necessary to ensure correct contact and provision of the service clients. This provision of adequate customer service is our legitimate interest which requires us to process your personal data.
We will retain your data for as long as necessary to properly process your request. Subsequently, it will be deleted, unless longer retention is required or justified by law.
The retention period of the personal data processed for the processing of your request is:
2 years
Thereafter, it will be deleted, unless longer retention is required or justified by law.
You have the right to object to processing based on our legitimate interests. As a consequence of any valid objection, we will no longer process your data unless we have sufficiently compelling and legitimate grounds for the processing.
Users can sign up for a newsletter
a) You can register for our newsletter on our website. During the registration process we collect the following personal data:
We process this data to provide you with the newsletter. The data processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Consent is voluntary. You can revoke your consent at any time without giving reasons with effect for the future. To do so, simply click on the "unsubscribe" link included in each newsletter or send us an email.
b) We will keep your data for as long as necessary for you to be subscribed to the newsletter. Subsequently, they will be deleted, unless longer retention is required or justified by law. Once you unsubscribe from the newsletter, we will retain the information strictly necessary to ensure that we respect your newsletter subscription preferences in the future.
c) The retention period of personal data is: for as long as necessary for the purpose
Thereafter, it will be deleted, unless longer retention is required or justified by law.
Your website provides a blog
Our website includes a blog where we regularly publish posts. You can comment on the effect on our blog. In this case, we will process the following personal data about you:
We process this data to enable you to participate in the blog. Therefore, processing is necessary to provide this service. The legal basis for this data processing is the performance of the contract (Art. 6 para. 1 sentence 1 letter b GDPR). Without processing your data, we cannot allow you to participate in the blog.
When a comment is posted, the following information will be visible to other users of our website:
You must create a user account to post on our website.
You can post comments on the blog without a user account.
Please note that once you publish a post on your website, you cannot delete it.
The retention period of personal data is: 2 years.
Thereafter, it will be deleted, unless longer retention is required or justified by law.
Users can apply for jobs via an application form on your site
a) If you apply for a job in our company, we will process your name, contact details, qualifications and other data that you provide to us with your application.
b) You can also use the application form that we provide in this regard on our website. In this case we will process the following categories of data:
c) We process your data exclusively for the purpose of evaluating your application and conducting the application process. If you do not provide the requested personal data, unfortunately, we cannot consider your application. You do not need to enter data marked as voluntary for your application to be considered. The processing is justified under the legal basis «execution of the contract» Art. 6 para. 1 sentence 1 letter b GDPR as it is necessary to take measures upon request before entering into an employment contract.
d) If the application procedure ends without an employment relationship being established, the period of retention of your data is: for as long as necessary for the purpose
Thereafter, it will be deleted, unless longer retention is required or justified by law. If you are also interested in other positions, we will retain your data with your consent, until you request the deletion of the data. You may choose to receive future job notifications from us, and you may opt out of receiving future job notifications from us at any time.
No processing of personal data of minors
We do not knowingly collect or solicit personal information from anyone under the age of 16. The website is not directed at children under the age of 16. If we learn that we have collected personal information from a child under 16 without parental consent, we will delete that information as quickly as possible. If you believe that we may have any personal information from or about a child under 16, please contact us using the contact details set out in this policy.
No processing of sensitive personal data
We do not knowingly collect or process sensitive personal data.
No processing of personal data relating to criminal convictions and crimes
We do not knowingly collect or process personal data relating to criminal convictions and offences.
No processing for automated individual decision making including profiling
We do not knowingly collect or process personal data for automated individual decision-making, including profiling.
Data sharing
Sharing Personal Information with Service Providers
We do not interact with service providers for the processing of personal data in connection with the site and/or the functions/services of the website.
Third party recipients of your personal data
There are no data recipients located in countries outside the European Union and do not have access to personal data from a country outside the European Union.
International data transfer
No data recipients (service providers or third party recipients) are located in countries outside the European Union and/or the data recipients access the personal data from a country outside the European Union.
We do not transfer or provide access to your personal data to data recipients located in countries outside of the Federated Republic of Brazil.
Data Privacy Framework
This DPF Statement supplements and should be read in conjunction with our general privacy policy, which outlines the categories of personal data collected and processed by us, the purposes of such collection and processing and the third parties with which personal data is shared together with purpose.
Our organization complies with the EU-US Data Privacy Framework (EU-US) DPF), the UK extension to the EU-US DPF and the Swiss-US Data Protection Framework (Switzerland-US) DPF ) as determined by the U.S. Department of Commerce. Our organization has certified to the United States Department of Commerce that it adheres to the EU-US Data Privacy Framework (EU-US) DPF Principles) with respect to the processing of personal data received from the European Union in reliance on the EU-US DPF and by the UK (and Gibraltar) relying on the UK's extension to the EU-US DPF. Our organization has certified to the United States Department of Commerce that it adheres to the Swiss-US Principles of the Data Protection Framework (Swiss-US DPF Principles) with respect to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF . In the event of a conflict between the terms of this privacy policy and those of the EU-US DPF Principles and/or Swiss-US DPF Principles, the Principles will control. To learn more about the Data Privacy Framework (DPF) program and to view our certification, visit https://www.dataprivacyframework.gov/.
Our organization lists the following U.S. entities or subsidiaries in its self-certification that also adhere to the DPF Principles:
In accordance with EU-US DPF, the UK extension to the EU-US DPF and Swiss-US DPF, our organization is committed to resolving complaints relating to the DPF Principles about our collection and use of your personal information. Persons from the affected regions who have questions or complaints regarding our handling of personal data received in reliance on EU-US DPF, the UK extension to the EU-US DPF and Switzerland-US DPF you must first contact us at the following numbers:
Postal address: Via Primo Carnera, 2 / Capaci - Palermo
Contact number: +393408247952
Email address: This email address is being protected from spambots. You need JavaScript enabled to view it.
Link to the complaints portal: https://sicilianfoodshop.com
Such individuals may also contact us in relation to their inquiries or complaints.
Furthermore, in accordance with the EU Data Protection Authorities (DPA) and the UK Information Commissioner's Office (ICO), the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Commissioner for data protection and information protection authority (FDPIC), our organization is committed to cooperating with and respecting the advice of the European data protection authorities will act as a relevant independent redress mechanism for human resources data, but not for non-HR data covered by our organisation's self-certification regarding unresolved complaints regarding our handling of HR data received in reliance on EU Data Protection Authorities (DPAs) and the Office of the UK Information Commissioner (ICO), the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) in the context of the employment relationship.
If the complaint cannot be resolved through the channels specified above, in certain circumstances, the DPF provides the right to invoke binding arbitration to resolve complaints not resolved by other means. For more information, see this DPF web page: https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2 .
Persons whose personal data is covered by the scope of this DPF Statement have the right to access their personal data processed by us and to have that information corrected, amended or further deleted where it is inaccurate or has been processed in breach of the Principles, except Where the burden or expense of providing access would be disproportionate to the risks to the privacy of the individual in the case at hand, or where the rights of persons other than the individual would be infringed.
Additionally, our organization offers individuals the following specified means to limit the use and disclosure of their personal information.
Buttons for accepting or denying consent.The Federal Trade Commission and the US Department of Transportation each have jurisdiction over our organization's compliance with the EU-US DPF, the UK's extension to the EU-US DPF, and the Swiss-US DPF
Please also note that you may be required to disclose personal data in response to lawful requests by authorities, including to meet national public security or law enforcement requirements.
Furthermore, to the extent specified in the DPF, our organization may be liable if a third party engaged by us to process personal data on our behalf carries out the processing in a manner inconsistent with our obligations under the DPF, unless our organization does not demonstrate that it is not responsible for the matter that caused the damage.
UK DPA
Operating globally, we may transfer personal data from the UK to the US and other countries, including personal data we receive from people who are resident in the UK or who are protected by the UK Data Protection Act 2018 and visit our website and/or who may use our services or otherwise interact with us. When we make such transfers of personal data, we rely on the following transfer mechanisms:
- Adequacy decision for transfers of personal data to countries of the European Economic Area, EFTA States and any country covered by an adequacy decision of the European Commission as of 31 December 2020.
- Standard data protection clauses for data transfers to non-adequate jurisdictions such as the United States are supplemented by additional security measures to protect personal data.
- In the absence of adequacy decisions and standard data protection clauses, we implement appropriate safeguards depending on the circumstances that ensure the protection of individuals' rights and freedoms with respect to their personal data.
We also conduct transfer risk assessments to determine the level of protection afforded to data subjects protected by the UK Data Protection Act 2018 by the receiving entity and continually monitor the circumstances surrounding such transfers to ensure that they maintain, in practice, a level of protection essentially equivalent to that guaranteed by the UK Data Protection Act 2018.
Data retention
How long we keep your personal data
Unless otherwise specified in this privacy policy, we only store your personal data for as long as is necessary for the respective purpose. We will subsequently delete your data, unless we are legally permitted or obliged to retain it further.
We ensure that the period for which your personal data is retained by us is limited to a strict minimum that is reasonably necessary and proportionate to achieve the purposes for which the personal information was collected. The following criteria help us determine the data retention periods for the respective data processing purposes:
- The category of personal data,
- The relevant purpose of data processing,
- Regardless of whether the data is needed for longer than the purposes for which it was collected or otherwise processed,
- If personal data is typically deleted according to specific schedules,
- The terms of the contract with you, if any,
- Withdrawal of consent in case of data processing activity based on consent,
- If you have objected to the processing of data,
- Personal data may continue to be processed if there is a current or legal interest in retaining the information, for example to establish, assert or defend a legal right and not a hypothetical future interest,
- Personal data may be retained for longer periods if processed exclusively for archival purposes in the public interest, scientific or historical research purposes or statistical purposes. In such cases, appropriate technical and organizational measures will be implemented to protect your personal data and your rights and freedoms,
- Any legal requirement for retention of personal data and whether or not there is a law enforcement order not to delete personal data and data retention is necessary to submit to law enforcement in response to a subpoena, order or mandate issued by the court or the personal data is necessary for us to comply with our legal obligations, and
- Regardless of whether the personal data is in anonymous or aggregate form.
Please refer to the Data Processing Activities section to find out the exact retention period for different categories of personal data and/or different processing purposes.
Data security
How we protect your personal data
We have implemented adequate technical and organizational measures to guarantee a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risk of varying probability and gravity for the rights and freedoms of natural persons.
Your rights
Depending on the circumstances, you may have the right to exercise some or all of the following rights:
1. Obtain confirmation as to whether or not personal data is being processed and access to a copy of the personal data being processed.
1. request (i) access to and/or duplicates of your stored personal data, (ii) receive the personal data you have provided to us, in a structured, commonly used and machine-readable format and (iii) to transmit such personal data to another data controller without impediment from us; technically feasible you will have the right to have the personal data transmitted directly by us to another data controller;
2. request the rectification, removal or limitation of your personal data;
3. If the data processing is based on your consent, refuse to provide and — without impact on data processing activities that have taken place before such revocation — withdraw your consent to the processing of your personal data at any time;
4. take legal action in relation to any potential violation of your rights regarding the processing of your personal data, as well as lodge complaints with the competent data protection authorities;
5. not be subject to any automated decision-making process, including profiling (automatic decisions based on data processing by automatic means, for the purpose of evaluating various personal aspects) that produce legal effects on you or that influence you with a similarity meaning.
Furthermore, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including objecting to direct marketing and automated individual decision-making, including profiling. In this case, please provide us with information about your particular situation. After evaluating the facts presented by you, we will stop processing your personal data or present to you our legitimate and compelling reasons for continued processing.
To enable the efficient processing of requests relating to the above rights or any questions or complaints regarding our data processing, please use the data subject rights portal.
You also have the right to lodge a complaint with the supervisory authority in your country.
Updates to this Policy
Request this Privacy Policy from time to time. If we change our Privacy Policy, we will post the revised version here, with an updated revision date. You agree to periodically visit these pages to learn about and review such revisions. If we make material changes to our Privacy Policy, we may also notify you by other means before the changes take effect, such as by posting a notice on our websites or by sending you a notification. By continuing to use our website after those revisions become effective, you accept and agree to the revisions and will abide by them.
This privacy policy was last updated on May 20, 2024
And then Add to Home Screen.