PRIVACY STATEMENT PURSUANT TO ART. 13 of EU Reg. 2016/679 (GDPR)

.

PERLAGE SUITEfor the performance of contractual relations, comes into possession of data, acquired even verbally, directly or through third parties, qualified as 'personal data' and 'special or sensitive data' by the EU Regulation No. 2016/679 (so-called GDPR). This legislation provides first and foremost that whoever processes personal and particular/sensitive data is obliged to inform the data subject of what data is being processed and of all the elements qualifying the processing, which, in any case, must be carried out fairly, lawfully and transparently, protecting the confidentiality and rights of the data subjects. To this end and in compliance with the provisions of Article 13 of the GDPR, we provide the following information:

Data controller PerlageSuite.com - Registered office in Via Guareschi, 60 - 00143 Rome. The user's data, stored on electronic media, are kept and archived on a server owned by us and located in Italy. In particular, the Data Controller declares that the data recorded on the server are protected against the risk of intrusion and unauthorised access and that it has also adopted suitable security measures to guarantee the integrity and availability of the data as well as the protection of the areas and premises relevant to their storage and accessibility.

Type of data processed - PERLAGE SUITE processes personal data (name and surname, address, telephone number - landline and/or mobile phone - data of an economic nature for the purpose of invoicing the object of the contract).

Purpose of processing - The above data are processed for contractual purposes and are collected when the order is paid for. They are processed, managed and stored for administrative, tax and legal purposes.
Moreover, after the conclusion of the contract:

• personal data may be processed for commercial purposes if and only if such processing has been explicitly authorised (e.g.: sending e-mails, newsletters, commercial communications and/or advertising on products and services offered by the Controller as well as telephone contacts for commercial purposes and/or surveying the degree of satisfaction with the quality of the services offered).

Legal basis for processing, obligation or option to provide data and consequences of refusal - Without prejudice to the user's right to consent to the processing of his or her data, with regard to data that PERLAGE SUITE is obliged to know, in order to fulfil the obligations provided for by laws, regulations and Community legislation, or by provisions issued by Authorities empowered to do so by law and by supervisory and control bodies, the User's failure to provide such data will make it impossible to establish or continue the relationship, within the limits in which such data are necessary for the execution thereof. The User has and maintains full right, at any time, to revoke his or her consent to the processing (consent acquired by signing the order contract ex art 6 c. 1 lett. b of the GDPR), without prejudice to the lawfulness of the processing given before such revocation.

Processing methods and technologies used - Data is processed using instruments and procedures that guarantee security and confidentiality and may be carried out either on paper or with the aid of electronic instruments. Access to the website perlagesuite.com activates automatic information-gathering methods (technical cookies) necessary for proper navigation on the aforementioned site, which are automatically deleted when they expire or when the session is closed. For third-party cookies (e.g. Google, Facebook, chat support etc.), the site has no direct control over individual cookies and cannot control them (it can neither install them directly nor delete them). I Cookies do not in any way allow access to any data on the visitor's computer. You can however manage these cookies through your browser settings. The personal data processed are managed on a computer medium in a system with remote hosts protected by suitable protection systems (backups, firewalls, security certificates, etc.). Social Network Plug-ins. Our website uses plugins from popular social networks such as facebook.com. More details about the Facebook plug-ins and their features can be found at http://developers.facebook.com/. In order to prevent the transmission and storage of your Internet surfing data via Facebook, you must log out of Facebook before visiting our website.

Navigation data - The computer systems and programmes used to operate the site collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of the computers used by users who connect to the site, the addresses and times of requests, the method of connection to the server, the numerical outcome code as well as parameters relating to the user's operating system). This is generic information that does not identify a user, but serves to process statistics, improve the services offered to users and increase security. For example, the language of the browser can be used to determine which language to use for viewing pages, and the IP address to block attempts at intrusion, spamming, resource saturation (DoS) and generally prevent misuse of our systems by unknown persons who might put the stored data at risk. Although this information is not collected in order to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified. Such data are however used by PERLAGE SUITE for the sole purpose of obtaining statistical information (not associated with any user identification data) on the use of the Site and to check its correct operation. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site. PERLAGE SUITE does not use automated decision-making processes, does not carry out any profiling activities, and therefore does not record, store or process data relating to its customers' purchasing choices, habits and preferences, nor does it create profiles (individual and/or aggregated) for the purpose of proposing targeted offers.

Source of Data in the Case of Gifts - The source of the data is the sender of the order. This person is the one who is indicated in autograph form in the card/message that may be enclosed with the gift. PERLAGE SUITE is not obliged to verify either the presence of the signature or the identity of the sender of the gift. In the event of an anonymous message, no liability can be attributed to PERLAGE SUITE which only delivers in accordance with a contractual commitment entered into.

Communication and dissemination - The data collected in this way will not be 'disseminated', i.e. they will not be made known to unspecified persons in any way, including by making them available or consulting them. The aforementioned data, may instead be 'communicated', to one or more determined and identified subjects as follows:

• to persons in charge within PERLAGE SUITE as data controllers and processors and/or system administrators;
• to persons who can access the data by virtue of a provision of law, regulation or EU legislation, within the limits provided for by these rules;
• to persons who need access to such data for purposes ancillary to the relationship between the User and  PERLAGE SUITEto the extent strictly necessary to perform the auxiliary tasks entrusted to them (e.g. credit institutions, tax and labour consultants, etc.);
• to consultants of PERLAGE SUITElimited to the task undertaken, subject to signing obligations and bonds of confidentiality and security in the processing of data;
• to parties who need access to this data for the performance of the contract between the user and PERLAGE SUITE (forwarder...).

Communication and dissemination abroad - Personal and special data collected by virtue of the performance of the contract will only be transferred abroad if this situation is or may become an integral part of the performance of the contract (delivery outside the national territory). The transfer abroad for the performance of a specific contract involves passing through an internal information system to the PERLAGE SUITE not accessible by third parties.

Storage period - The Controller shall process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the execution of the contract for the Service Purposes and for no longer than 10 years from the collection of consent for the Marketing Purposes.

Users' rights - According to the GDPR, it is possible to exercise against PERLAGE SUITE the following rights:

• access to personal data (Art. 15 of the GDPR);
• to obtain the rectification or erasure (oblivion) of their data or the restriction of their processing (Articles 16, 17 and 18 of the GDPR);
• to object to the processing (Art. 21 of the GDPR);
• data portability (Art. 20 of the GDPR);
• to revoke consent;
• to lodge a complaint with the supervisory authority (Garante Privacy - www.garanteprivacy.it)

Minors - The services of PERLAGE SUITE are not explicitly intended for minors under the age of 18. PERLAGE SUITE does not intentionally collect personal information about minors. In the event that information on minors is unintentionally recorded, the Data Controller will delete it in a timely manner at the request of users.

Methods of exercising rights - The interested party may exercise its rights at any time by sending a request by e-mail to info@perlagesuite.com. The interested party will be notified of the execution of his request/exercise of his right within 15 days of the request.