PRIVACY NOTICE "YOUR ACCOUNT " IL BISONTE WEBSITE

We will use the data you submit in this registration form (such as your name, surname, email address) and in the forms for the purchase of the products (such as, payment information, your address and phone number).

The data collected will be processed for the purposes listed below. Each purpose is pursued by virtue of a legal basis for the processing. Below you will find an indication of each purpose and the related legal bases, indicated by the underline. 

1. CREATION USER ACCOUNT AND RELATED SERVICES
   
   We will use the data you provide in the registration form to create the user account and implement other related features, such as the shopping cart management and the wishlist. We carry out this activity for the performance of a service requested by the user (art. 6(1)(b) of the GDPR).
   
   
   
2. PURCHASE MANAGEMENT
   
   When you decide to purchase one of our products, we will ask you some information, necessary to manage your request, ship the products and process with the payment. We carry out this activity for the performance of a service requested by the user (art. 6(1)(b) del GDPR).
   
   
3. PROMOTIONAL NEWSLETTER
   
   Through specific form, you can subscribe to our promotional newsletter about our products. In this case, you will receive the newsletter only with your consent (art. 6(1)(a) of the GDPR). This consent is optional and freely given. At any time, you may withdraw your consent by clicking on the link in the footer of the emails received or following the procedure described in the “Consent management” section. More information is available in the privacy notice of the “newsletter”.
   
   If you refuse to provide your consent, you will not receive the promotional newsletter.
   
   
4. FULFILMENT OF LEGAL OBLIGATIONS AND DEFENCE IN COURT
   
   We may use your information to comply with legal obligations or exercise legal rights. For example, the law enforcement authorities may request information concerning our users in the event of computer fraud. In this case, the information will be processed to comply with a legal obligation (art. 6(1)(c) GDPR).
   
   In the event that a legal dispute arises, we may use the information to act or defend ourselves in court according to the legitimate interest of the data controller (Art. 6(1)(f) GDPR) assessed for the need to prosecute or resist a legal action.

At any time, you can withdraw your consent through:

• the “unsubscribe” link at the bottom of the emails received
• the page ”Newsletter” in “Your account”
• sending an email to privacy@ilbisonte.net.

All these modalities are alternative and equally effective. The withdrawal of consent will stop the sending of communications, without however affecting the lawfulness of the processing carried out before the withdrawal.

The providing of your personal information to access some specific services is optional and depends on your own decision. Without this information we cannot perform the services proposed.

The data will be processed directly by the data controller’s organization, through employees or other appropriately appointed and instructed subjects, who will act as authorized people as well as by external companies that perform services on the data controller behalf, also as data processors pursuant to art. 28 of the GDPR (for example, IT providers and editorial services company) only for the purposes stated in this policy.

The data will not be transferred to third parties for commercial purposes and will not be disclosed. Some information may be communicated to autonomous data controllers, such as public bodies or law firms, only in the case provided by the law.

The list of data processors is available upon request to privacy@ilbisonte.net.

Some personal data will be kept for the time necessary to pursue the above-mentioned purposes, and in any case according to the following terms applicable:

• information for the management of the user account: until the cancellation date of the account
• information for the purchase management: 10 years from the moment you placed the order, in line with the prescription period provided for by the Italian Civil Code (art. 2946)
• information for the newsletter: until your consent withdrawal or 24 months from the subscription date to the newsletter
• information for legal obligations: until the legal obligation ceases or the legal action is concluded.

Your data may be transferred to countries located outside of the European Economic Area that does not offer adequate level of protection according to the European Commission. In this case, the transfer will take place on the basis of adequate and additional guarantees necessary to ensure a level of security equivalent to that provided for in the European Union. The transfer to countries without adequate protection is subject to further additional measures that are constantly updated on the basis of the law in force. The list of countries and appropriate guarantees is available upon request to privacy@ilbisonte.net.

Data processing will be carried out through electronically and manually according to logic strictly connected to the purposes referred to in this policy. No profiling operations will be carried out on your personal data.

We ensure the security of personal data by implementing specific security measures, proportioned to the risks for the rights and freedoms of the people. The security measures include, among others, the encryption of communication.

At any moment, you may obtain from the data controller, if the conditions are met, the access to your personal data, their rectification, cancellation or restriction of processing (articles 15 and following of the GDPR). You can also withdraw your consent at any time. If the conditions are met, you can object to the processing based on the legitimate interest of the data controller.

You can exercise your rights mentioned above, by sending a request via e-mail at privacy@ilbisonte.net or a letter with return receipt to the registered office of the company.

You also have the right to lodge a complaint with the Supervisory Authority for the protection of personal data pursuant art. 77 of GDPR or appeal to the judicial authority (art. 79 of GDPR) if you believe that the processing of your personal data is not compliant with the data protection regulations.

This privacy notice may be subject to revisions and amendments also to reflect legal and regolatory changes. You can view the last updated notice on this website.

Privacy notice updated on 15/03/2023