This privacy policy (hereinafter, "Privacy Policy") refers to the https://https://veganandorganic.com/ website (hereinafter, the "Site") and governs how S.I.R.P.E.A. S.p.A. (hereinafter, "S.I.R.P.E.A.") collects, uses, discloses and safeguards personal data with the user’s consent for the purpose of the sale and marketing of their products (hereinafter, the "Products") through the Site.
Moreover, the Privacy Policy supplies background information for the users, in compliance with Art. 13 of the Italian Legislative Decree no. 196 dated June 30 2003, n. 196 (hereinafter, the "Privacy Code"). The Privacy Policy specifies the identity of the data holder, the details of the data collected, purpose and use of the safeguard and disclosure of data, the mandatory or optional nature of data entering, the scope of communication of the user’s personal data to third parties, the safety measures undertaken to protect the data, as well as the user’s rights and the modalities to exercise such rights.

Data holder

The data holder is S.I.R.P.E.A. S.p.A., Via della Liberazione 56 , 20098 San Giuliano Milanese (MI) Italia, info@veganandorganic.com.

Type of data processed and purpose of treatment

Personal data collected and processed by S.I.R.P.E.A. include first name, second name, address, telephone number, e-mail address, fiscal code or TVA number and further optional information.
S.I.R.P.E.A. collects and processes the personal data submitted by the user voluntarily to carry out all the selling activities of the Products through the Site, as well as the strictly related activities (e.g., fraud prevention, Product return policy, Product guarantee, customer service, participation to promotions offered on the Site, inquiries concerning product information or purchase of the Products, or communications sent to S.I.R.P.E.A. concerning such activities).
In particular:
(a) to be able to register and navigate the Site and use the services reserved for registered users only, as well as to make an online purchase and therefore, to allow the conclusion of the purchase agreement and the correct execution of transactions connected thereto;
(b) for administrative and accounting purposes related to the registration on the Site and online purchases as well as to fulfill legal obligations;
(c) subject to the express consent of the user, for communications sent by SIRPEA regarding informative and promotional communications relating to the products offered for sale on the site - including communications regarding the beginning of promotional sales and/or limited sale offers, discount vouchers and/or special offers in relation to products and services of SIRPEA or third parties, as well as for the implementation of market research also aimed at assessing the degree of user satisfaction (customer satisfaction), by email and/or postal service (so-called "marketing" purposes).
(d) limited to the e-mail details provided by the user in the context of the purchase of a product or service offered on the Site, for the direct sale of similar products or services without the express and prior consent of the user ( as required by Article 130, paragraph 4 of the Privacy Code) and subject to the user’s withdrawal to exercise the right to object.
(e) subject to the express consent of the user, for the processing by SIRPEA of the user’s profile for commercial objectives, through (i) the analysis of information about the user, his interests and/or family composition, optionally conferred by the user to SIRPEA at the time of registration to the Site and/or through the "Profile" section of other sites or initiatives of the same kind and (ii) through statistic surveys analyzing the frequency and type of purchases made online, on the Site, in order to offer the user personalized SIRPEA or third parties offers, as well as, in case the user has given consent to the processing of personal data for marketing purposes, the e-mailing and/or postal mailing by S.I.R.P.E.A. of informative and/or advertising material specifically targeting the user’s interest’s, (so-called "profiling" purposes).
S.I.R.P.E.A. will hold the user’s personal data in order to assert or safeguard a right in a judicial proceeding and to fulfill obligations required by European regulative legislations.
In compliance with art. no. 3 of the Privacy Code, collecting the users’ personal data by S.I.R.P.E.A. will be limited strictly to data needed in order to carry out the sale of Products and related activities.
Moreover, only with the spontaneous and voluntary user’s consent, will S.I.R.P.E.A. be able to process the user’s personal data for marketing purposes, i.e. to send the user newsletters, Product and company information and advertise events promoted by S.I.R.P.E.A. or in which S.I.R.P.E.A. takes part of, including possible invitation to such events. The user will always hold the right to withdraw his consent to receiving any kind of marketing or direct marketing communications, in the “Opt-Out” section provided.

Consensus of Personal data processing

The user’s consent to process personal data is mandatory in order to carry out the purchasing and selling activities of the Products through the Site and any related activities and to fulfil legislative obligations. Failure to provide this data will make it impossible for the users to receive any service, Products or answers and/or information requested from S.I.R.P.E.A.
In the cases where the purchasing agreement specifically states that some data is not mandatory, users are free not to communicate this data without any consequences on the availability or the functioning of the service.

Refer a Friend Consensus

Registered users, in order to benefit also from special privileges tied to the “Refer a Friend” consensus, such as certain discounts, can invite friends/contacts to register on the Site, by disclosing the address and email of a friend/contact. After sending the e-mail to the user’s friend/contact, S.I.R.P.E.A. will detain the information strictly for the time necessary to document that the user’s request has been fulfilled.
S.I.R.P.E.A. is legitimized to send to friends/contacts information and promotional communications relating to products offered for sale on the site only after registration of the new contacts and the consent expressed under the previous art.3 letter c).

Storage of collected personal data

Personal data collected will be processed by S.I.R.P.E.A. The user is invited to consult the section of the Privacy Policy relating to the scope of communication of personal data for further information.

Cookies and tags

Cookies are data files used following the user's registration on the Site and stored on the hard drive of the user's computer. The Site employs cookies and other interactive technologies, e.g. tags, for specific purposes – in order to facilitate Site navigation and access to information – and for internal security purposes, statistical analytics (e.g. Site traffic) and system administration. The so-called session cookies are stored in a temporary memory and are deleted after the user closes the browser.
Cookies and tags employed do not allow S.I.R.P.E.A. in any way to control the user’s computer. S.I.R.P.E.A. does not employ cookies or tags to access information files on the user’s computer or to monitor the user’s operations.
The Site may contain links to other sites. S.I.R.P.E.A. has no control and cannot be considered responsible –regarding cookies and other technologies employed to trace the users that are present on websites accessible from the Site – for any content and material published on such sites. This Privacy Policy is applied only to the Site as defined above.

Managing Cookies: disabling or deleting

You can visit the site, www.aboutcookies.org for information on how to manage / delete cookies based on the type of browser used.
Each browser has different procedures for managing settings. You can find the instructions under the help menu of your browser. If you use multiple computers in different locations, make sure each browser is set up to match your preferences.
Through your browser you can also view cookies that are on your computer, delete some or eliminate them all.
Cookies are simply text files, therefore you can open them and read the contents. The data contained in them is often encrypted or has a numerical key corresponding to a web session, so often they make no sense except for the website that has created them.

Microsoft Internet Explorer

Click the icon 'Tools' in the top right corner and select 'Internet Options'. In the pop up window select 'Privacy'. Here you can adjust the settings of your cookies or using the link http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies

Google Chrome

Click the key in the upper right corner and select 'Settings'. Then select 'Show Advanced Settings' (“Under the hood '') and change the settings of the 'Privacy'. Here you can adjust the settings of your cookies or using the link https://support.google.com/chrome/bin/answer.py?hl=en&answer=95647&p=cpn_cookies

Mozilla Firefox

From the drop-down menu in the upper left corner, select 'Options'. In the pop up select 'Privacy'. Here you can adjust the settings of your cookies, or through the link http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies

Apple Safari

From the drop-down setup menu in the upper right corner, select 'Preferences'. Select 'Security'. Here you can adjust the settings of your cookies or through the link https://support.apple.com/kb/PH19214?viewlocale=en_US&locale=en_US

Characteristics and modalities of personal data processing

The Data processing is carried out by S.I.R.P.E.A. using mostly computers and/or IT enabled tools. Sometimes however, Personal data can also be processed manually. The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document and in compliance with the Privacy Code.
In compliance with Attachment B of the Privacy Code (Technical Disciplinary concerning minimum security measures) S.I.R.P.E.A. will process personal data in compliance with the current security regulations in order to minimize the risk of destruction and loss, even accidental, of data, unauthorized access, processing not allowed or not in accordance with the purposes of data collection and of illicit or incorrect use of data.

Method of personal data processing

The user’s personal data will be accessible to our staff in charge of processing in relation to the purposes specified above and to the Data Controller. The full updated list of the Data Controller and of subjects to whom data is accessible can be requested from S.I.R.P.E.A.
The user’s personal data may be accessible to subjects in charge, involved with the operation of the Site such as employees and/or consultants or third parties such as technical service providers, mail carriers, hosting providers, IT companies, communication agencies appointed, if necessary, to accomplish the above said processing purposes. These subjects will process the data as owners, managers or processors, depending on the case, for the purposes specified above and in full compliance with the Privacy Code; they are provided only with the information necessary to fulfill their functions. Your personal data will not be dissiminated in any way.

User’s rights

In compliance with art. no. 7 of the Privacy Code, the user has the right to:
a) request confirmation of the existence or not of personal data and communication of such data in an intelligible form;
b) request information on:
- the origin of personal data, on the purposes and methods of processing, of the logic applied in case of treatment carried out with the aid of electronic instruments;
- the identification data of the Data Controller;
- the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
c) request:
- updates, corrections or integrations of existing data;
- cancellation, transformation into anonymous format or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed;
- the attestation that the operations referred to in the preceding points have been brought to the attention also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
d) to object, in whole or in part:
- for legitimate reasons, to the processing of one’s personal data, even though they are relevant to the purpose of the collection; b) to the processing of one’s personal data for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
The above rights may be exercised with a request to the Data Controller, at the addresses indicated in art. 1. For any answers or information with regards to the personal data processed by S.I.R.P.E.A. the user can write to the following address: Via Della Liberazione 56 - 20098 San Giuliano Milanese (MI) – Italy or to the following email address: info@veganandorganic.com.
The right of opposition of the user to the processing of personal data for the purposes referred to in art. 2, lett. (c) (so-called "marketing" purposes) carried out through automated methods of contact (email) also extends to traditional ones (mail), without prejudice to the possibility for the user to exercise the right in part, in compliance to art. 7, paragraph 4, lett. b) of the Privacy Code, ie opposing, for example, to the sending of promotional communications only via automated tools.