Privacy policy

Pursuant to European Regulation no. 679 of 2016 (the “Privacy Regulation“), Elite Stone S.r.l. intends to inform you and all the users of and/or visitors to the website shop.elitestone.it (respectively the “Users” and the “Website“), about the use of personal data, log files and cookies collected through the Website.

1. Data Controller, Data Processors and Data Protection Officer

The Data Controller is Elite Stone S.r.l., with registered office in 00196 Rome, Via Flaminia, 135, VAT number 10104411003, e-mail info@elitestone.it, (hereinafter the “Data Controller“).

The updated list of the designated Data Processors can be provided upon request by data subjects and/or Users.

2. Information automatically collected by the Website

Like all websites, our website also makes use of log files, in which information collected automatically during your visits is stored. As a matter of fact, the IT systems and software procedures used to run this Website acquire certain pieces of information as part of standard operation, whose transmission is required to use Internet communication protocols.

The information collected is as follows:

• Internet Protocol (IP) address or domain name of the device you are using;
• type of browser and parameters of the device used to connect to the Website;
• the addresses in URI (Uniform Resource Identifier) notation of the requested resources or the method used to submit the request to the server;
• name of the internet service provider (ISP);
• date and time of visit;
• the User’s referral and exit web pages;
• possibly the number of clicks;
• the size of the file obtained in response;
• the numeric status code of the response given by the server (successful, error, etc.);
• other parameters related to the operating system and the IT environment of your device.

This information is processed automatically and collected exclusively in aggregate form for the purpose of verifying the proper functioning of the Website.

3. The personal data you provide us with by using the Website: what we process it for

We need your data to enable you to:

– access and browse the Website;

– access the services offered therein (e.g. contacts, request for specific product information, etc.) as requested by you;

– make purchases on the e-commerce website.

Your data is processed for the following purposes:

(i) to comply with legal obligations;

(ii) to perform technical management of the Website;

(iii) to use the e-commerce website and related services, as per the specific privacy policy at the following link 

link.

The data you provide will be processed mainly by IT tools under the authority of the Data Controller, by persons specifically instructed, designated and trained to process it, pursuant to Articles 28 and 29 of the Privacy Regulations. We inform you that appropriate security measures are observed, also in accordance with Articles 5 and 32 of the Privacy Regulations, to prevent loss of data, illegal or incorrect use and unauthorised access.

1. Nature of data provision and legal basis for processing

With reference to the purposes referred to in art. 4, points (iii) and (iv), please refer to what is expressly indicated in the specific policy referred to in this Privacy Policy.

For the purposes referred to in points (i) and (ii) of art. 4 above, the provision of your personal data is necessary because without it you will not be able to take advantage of the services offered by the Website. Consequently, for the purposes referred to in point (i) the legal basis for processing is the fulfilment of legal obligations, pursuant to art. 6, paragraph 1, letter c) of the Privacy Regulations, while for the purposes referred to in point (ii) the legal basis of the processing is the performance of services provided through the Website and requested by you, pursuant to article 6, paragraph 1, letter b) of the Privacy Regulations.

Further details on the indications above can be found in the specific policies on or displayed in the Website and prepared for the relevant on-demand services.

2. To whom and where we may pass on your data

Your data may be communicated, within the EU, to the structures, subjects and external companies (including consultants and service providers) which the Data Controller uses to manage the Website and to carry out activities connected with, instrumental to or consequent upon the performance of the services offered by the Website.

Further details on the indications above can be found in the specific policies on or displayed in the Website and prepared for the relevant on-demand services.

1. Your rights

At any time, you may exercise your rights under Articles 15 et seq. of the Privacy Regulations, for access, rectification, transformation, blocking, cancellation and restriction of processing, in the manner and within the limits established by art. 12 of the Privacy Regulations.

The complete form for exercising rights can be found at the link

with instructions on how to complete it and send it to the Data Controller.

In the event of failure to receive a timely reply or of inadequate response from the undersigned company, or if you believe there has been a violation of the Privacy Code and/or the Privacy Regulations, you may lodge a complaint with the Garante per la protezione dei dati personali (Data Protection Authority), as follows: www.gpdp.it – www.garanteprivacy.it,Email: protocollo@gpdp.it,Telephone switchboard: (+39) 06.69677.1.

1. Duration of the Processing

Notwithstanding legal obligations, personal data will be stored for a fixed period of time, according to criteria based on the nature of the services provided.

In particular, browsing data does not remain for more than 7 (seven) days (without prejudice to any need for criminal investigations by the judicial authorities). More details on data retention for further processing purposes can be found in the specific policies on or displayed in the Website and prepared for the relevant on-demand services.

2. Security Measures

Through the Website, your data is processed in compliance with the applicable law and using appropriate security measures in accordance with the regulations in force, also pursuant to Articles 5 and 32 of the Privacy Regulations.

In this regard, we confirm, inter alia, the adoption of appropriate security measures to prevent unauthorised access, theft, disclosure, modification or destruction of your data.

3. Changes to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy. In this case, you will be promptly informed when using the Website again.