Privacy Policy

This notice is provided, pursuant to Article 13 of the European Regulation 679/2016 (GDPR), to those who connect to the website www.donnaoro.com and its pages. This notice applies only to the aforementioned site and not to other external sites that may be consulted by the user via links. Through navigation on the above site, personal data of users who visit it and interact with its web services may be processed.

1)Data Controller.

The data controller for processing carried out on the site www.donnaoro.com is JDO S.R.L., represented by its legal representative, with registered office at Via Archimede 10, 00197 Rome (RM), VAT and Tax Code 06102471007, email donnaoro@donnaoro.com.

2) Nature of the Data Processed and Purposes of Processing.

a) Navigation Data

Following consultation of this site, data relating to identified or identifiable persons may be processed.

The computer systems and software procedures used to operate this domain acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response from the server (success, error, etc.), and other parameters relating to the user’s operating system and IT environment.

These data are used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

b) Data Provided by the User

Personal data spontaneously provided by the user, possibly using forms on the site, to request information or responses to their inquiries, are also subject to processing.

Such data will be processed for the purpose of providing a response to the user, for commercial communication purposes, and for marketing purposes via SMS, email, and similar tools; as well as to fulfill obligations under laws, regulations, and European rules, and in cases of necessity to exercise rights in court.

c) Cookies

Refer to the specific Cookies Policy published on the site for all necessary information on the types and methods of operation of cookies and other active services and features on the website.

3) Legal Bases.

Apart from what is specified for navigation data, which are necessary to make the services on this website available, the user is free to provide their personal data if they wish to request information or submit inquiries to JDO S.R.L., and to receive commercial communications and marketing via SMS, email, and similar tools. The legal basis for processing consists of responding to a user request or the user’s consent for commercial communication and marketing purposes.

4) Data Recipients.

Access to users’ personal data is granted to authorized personnel under the direct authority of JDO S.R.L., and to external data processors and sub-processors who provide specific services to the company, with which JDO S.R.L. has entered into specific contracts pursuant to Article 28 GDPR. The complete list of data processors and sub-processors is available upon request at JDO S.R.L.’s address: email donnaoro@donnaoro.com.

Data processing collected through this site is carried out only by company personnel specifically appointed for this purpose, who have been given operational instructions to carry out processing activities in a lawful and correct manner.

Personal data collected on the company’s site may be communicated to companies acting as independent data controllers, which JDO S.R.L. uses to provide commercial, professional, and technical services for site management and pursuit of its purposes.

All the aforementioned parties undertake to use the received information only for the processing purposes indicated above, to keep them confidential, intact, and unavailable to unauthorized third parties. Furthermore, personal data may be disclosed by law, regulation, or order of an administrative or judicial authority.

5) Processing Methods and Retention Periods.

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected and to provide the services of this website.

Specific security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorized access. All information collected on the sites is stored and maintained in secure structures that limit access exclusively to authorized personnel. The website is regularly monitored to verify any security breaches and ensure that all collected information is inaccessible, accurate, and unavailable to unauthorized parties.

Data provided by the user will be deleted when no longer necessary to manage their requests, unless retained for administrative-accounting and tax purposes and for evidentiary purposes in court for the prescription period of the related rights. Data collected for commercial communication and marketing purposes will be deleted 24 months after collection.

6) Data Transfer.

The data subject to processing reside on servers located in the State’s territory. In any case, in the event of transfer outside the European Union, JDO S.R.L. will adopt all adequate safeguards prescribed by the GDPR to protect users’ personal data.

7) Access Rights.

Articles 15 to 22 of the GDPR grant the data subject specific rights.

Article 15 recognizes data subjects the right to access their personal data and obtain a copy thereof. The right to obtain a copy of the data must not adversely affect the rights and freedoms of others.

With the access request, the user has the right to obtain from JDO S.R.L. confirmation of whether or not processing of their personal data is underway, and to know the purposes and categories of data processed, the third parties to whom the data are communicated, and whether the data are transferred to a non-European country with adequate safeguards. The user also has the right to know the retention period of their personal data with respect to the aforementioned purposes.

8) Other Rights.

With respect to their personal data, the user has the right to request rectification of inaccurate data and integration of incomplete data, erasure (right to be forgotten) under the conditions indicated in Article 17 GDPR, restriction of processing, and data portability.

The user also has the right to object, at any time, to the processing of data concerning them carried out for commercial communication purposes.

In emails sent to the user, instructions on how to object to receiving further communications will be specified, and they may object at any time. To exercise their rights, the user may contact JDO S.R.L. by emailing donnaoro@donnaoro.com or writing to the company’s registered office address.

Before providing a response, JDO S.R.L. may need to identify the user by requesting a copy of their identity document.

A written response will be provided to the user without undue delay and, in any case, no later than one month from receipt of the request.