Privacy Policy

Dear User, this information is provided pursuant to Article 13 of European Regulation 2016/679 on the protection of personal data, taking into account Recommendation No. 2/2001 adopted on May 17, 2001, to users who access the website www.uppyhouse.com, and relates to all personal data that the Data Controller collects and holds about its users. This policy is provided for this website and not for other websites and/or applications that may be consulted by the user via links to external third-party pages.

DATA CONTROLLER:

The data controller is the company SCIUGA S.R.L., with its registered office at Via Galilei 2, Faenza 48018 (RA), VAT number: 04764960409, email: info@uppyhouse.com. To receive further information, you can contact the Data Controller at any time using the contact details provided.

DATA COLLECTED:

Personal data may be provided directly by the data subject or, in the case of usage data, collected automatically during access and browsing of the website. The user assumes all responsibility regarding the correctness and truthfulness of the data provided and guarantees that they have the right, where applicable, to communicate third-party personal data, releasing the Data Controller from any liability.

DETAILS ON THE PROCESSING OF PERSONAL DATA

  1. Management of requests for information, assistance, or contact The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller entails the acquisition of the sender's contact details necessary to respond, as well as any personal data included in the communications. The purpose of processing for these categories of data is the management of requests for information, assistance, or any other request received by the Data Controller through the contact details made available via the website or through the contact form. The legal basis for the processing is the performance of a contract to which the data subject is party or the implementation of pre-contractual measures adopted at the request of the same. The provision of personal data for the aforementioned purpose is optional, but failure to do so will make it impossible to proceed with the management of the information or support request.
  2. Purchase of goods and products If the user intends to proceed with the purchase of products made available via the website, they shall fill out the form by entering the requested data, some of which are mandatory and as such marked with an asterisk symbol. The purpose of the processing is the management, including administrative management, of incoming orders and the activities necessary to ensure the proper fulfillment of the contract. The legal basis for the processing is the performance of a contract to which the data subject is party or the implementation of pre-contractual measures adopted at the request of the same. The provision of personal data for the aforementioned purpose is mandatory to the extent that such data are necessary for the fulfillment of the contractual obligations assumed by the Data Controller.
  3. Promotional and commercial communications and direct marketing The user may give their consent to receive promotional, commercial, and informative communications at the indicated contact details, for products or services similar to those made available via the website. The purpose of processing the aforesaid categories of data is the sending of promotional and commercial communications using automated tools such as email, SMS, instant messaging such as Messenger and WhatsApp, and traditional tools such as paper mail and operator calls. The legal basis for the processing is the user's consent, to allow adherence to specific and additional services such as the sending of future informative and promotional communications. For this reason, the right is recognized to revoke such consent at any time, without prejudice to the lawfulness of the processing based on consent before revocation and without such revocation causing any prejudicial consequence for the data subject.
  4. Statistical information and control over the functioning of services Through browsing the website, the Data Controller automatically collects certain data, the so-called browsing data. The computer systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties or by the data controller, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters relating to the user's operating system and computer environment. The purposes of processing for these categories of data are the collection of statistical information, including aggregated information, on the use of the services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.) and the control of the proper functioning of the website and the available services. Certain data collected automatically through browsing are necessary for the use of web services, and their provision is mandatory in order to access the site and the services made available.
  5. Communication of data to third parties operating in the beekeeping sector Only if the data subject gives their consent, their personal data may be communicated to third-party companies operating in the beekeeping sector, which may process the data in order to send the data subject commercial and/or promotional communications regarding their products and services in turn. The legal basis for the processing is the user's consent, to allow adherence to specific and additional services such as the sending of future informative and promotional communications. For this reason, the right is recognized to revoke such consent at any time, without prejudice to the lawfulness of the processing based on consent before revocation and without such revocation causing any prejudicial consequence for the data subject.

RECIPIENTS

The personal data provided may be communicated to appropriately appointed recipients who will process the data as data processors or as authorized persons. In particular, the personal data of the data subject may be communicated to recipients belonging to the following categories: competent authorities for compliance with legal obligations; companies for the repair and maintenance of IT equipment; companies that manage the website and, in general, to allow suppliers to perform technical, logistical, and other activities on behalf of the Data Controller. Our suppliers only have access to personal data that is necessary to perform their tasks, undertake not to use the data for other purposes, and are required to process personal data in compliance with current regulations. The dissemination of the processed personal data is in any case excluded. The complete list of data processors, joint controllers, and persons in charge of processing personal data can be requested by sending a specific request to the email address info@uppyhouse.com.

PROCESSING METHODS AND RETENTION PERIODS

Processing is carried out using computer and telematic tools, with organizational methods related to the purposes of the processing as illustrated. In particular, the personal data collected are stored for a period of time determined taking into account the purposes for which they are collected. Personal data collected for purposes connected to the execution of a contract or pre-contractual measures are stored until the complete execution of the contract, barring legal obligations that provide for archiving for longer periods of time. Personal data collected and processed based on the user's expressed consent are stored until the revocation of the same. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15–22 of EU Regulation 2016/679, a series of rights are recognized for each data subject.

  • Right of Access: The data subject, pursuant to Article 15, has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, where applicable, to obtain a copy thereof. They also have the right to obtain access to personal data concerning them and additional information such as the purpose of the processing, the categories of recipients, the data retention period, and the exercisable rights.
  • Right to Rectification: The data subject, pursuant to Article 16, has the right to obtain the rectification of inaccurate personal data concerning them or the integration thereof.
  • Right to Erasure: The data subject has the right to obtain the erasure of personal data concerning them without undue delay if one of the grounds provided for in Article 17 exists.
  • Right to Restriction of Processing: The data subject has the right, in the cases provided for by Article 18 of Regulation 2016/679, to obtain the restriction of processing.
  • Right to Data Portability: The data subject has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance, in accordance with Article 20 of Regulation 2016/679.
  • Right to Object to Processing: The data subject has the right to object to the processing of personal data concerning them in accordance with Article 21 of Regulation 2016/679.

The data subject also has the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali). Requests referred to in the preceding points must be addressed in writing to the Data Controller. The Data Controller will provide a prompt response to requests for the exercise of data subjects' rights within the time limits established by current legislation. Any clarification or request for information can be addressed in writing to the Data Controller, including by using the specific form available at the link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924.

UPDATES AND MODIFICATIONS

The Data Controller reserves the right to modify, supplement, or periodically update this Policy in compliance with applicable legislation or measures adopted by the Data Protection Authority (Garante per la Protezione dei Dati Personali). The aforementioned modifications or additions will be brought to the attention of data subjects via email and through a link to the Privacy Policy page on the website. Each data subject is in any case invited to review the Privacy Policy regularly to check the updated Policy.