Privacy Policy

Disclosure and consent in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016

Below Antheia S.r.l. (Company) provides pursuant to Article 13 of European Regulation No. 2016/679, some information regarding the processing of personal data when visiting the website antheianatural.it (Website). antheianatural.it (Website)

Data controller and data protection officer (dpo)

The Data Controller is Antheia S.r.l. The Data Controller is Antheia S.r.l. with registered office in Via XXIV Maggio, 86 - 86170 ISERNIA, VAT No. 00986120947 e-mail info@antheianatural.it (Company or Owner).
The Data Protection Officer (DPO) can be reached at the e-mail address antheianatural@gmail.com.

Purposes of processing, legal bases and retention periods

Navigation Data

The computer systems and software procedures used to operate this Web Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

This data is used for the following purposes:

• to obtain anonymous statistical information on the use of the Web Site and to monitor its proper functioning;
• for the technical administration of the Web Site;
• for the investigation of possible liability in case of hypothetical computer crimes against the Web Site.

Such data are deleted immediately after processing.

Data on purchases made through the e-commerce platform

Within the Web Site it is possible to make on-line purchases of Antheia S.r.l. products. Purchases can also be made without necessarily having to register in the reserved area of the Web Site.

Personal data provided during the process of purchasing the Company's products will be processed by the Company for the following purposes:

• To carry out the purchase of products, including all further related activities (shipping of goods). The legal basis for such processing is the performance of a contract to which it is a party, and the data will be retained for the duration of the contract as well as, after termination, for the ordinary limitation period (10 years);
• to fulfill legal obligations under national and supranational regulations. The legal basis for processing is the need to fulfill legal obligations. The retention period for such data is 10 years from the conclusion of the contract;
• to manage the post-sale contractual relationship (warranty, returns, goods exchange, package tracking, assistance...). The legal basis for such processing is the performance of a contract to which it is a party, and the data will be retained for the entire contractual term as well as, after termination, for the ordinary limitation period (10 years);

Data voluntarily provided by the user

In some sections of the Website, you will be asked to provide personal data. In this case, information will be provided in accordance with Article 13 of the GDPR regarding the processing of personal data in relation to the individual purposes pursued, summarized below:

• To subscribe to the newsletter
• To register to the reserved area of the Website

Cookies

Information about the cookies used on this Web Site can be found at the following url: https://antheianatural.it/cookies-policy/

Provision of data

Apart from what is specified for navigation data, the provision of data for further processing purposes is optional. Failure to provide them may result in the impossibility of pursuing such further purposes.

Treatment’s modalities

Personal data will be processed by automated means and in accordance with the principle of necessity and proportionality, avoiding the processing of personal data where operations can be carried out through the use of anonymous data or by other means.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Recipients of personal data

Pursuant to Article 28 of the GDPR, the Data Controller must appoint the third-party companies that process Personal Data on its behalf as External Data Processors to whom appropriate operational instructions are given (hereinafter collectively Processors). These parties are essentially included in the following categories:

• companies that perform statistical analysis and/or market research;
• companies that perform computer system maintenance services;

Data may also be processed by third parties, autonomous data controllers, namely:
persons, companies, associations or professional firms that provide assistance and consulting services (lawyers, accountants, auditors...).
Personal data will in no case be subject to dissemination.

Persons authorized to process

Personal data will be processed by employees and/or collaborators of the Owners/Directors who have received appropriate operational instructions and who have been expressly authorized for processing by the Owners/Directors. Any further indications regarding the scope of communication and dissemination of personal data will be provided in the individual sections of the Website

Transfer of data outside the European Union

Data may be transferred abroad to countries outside Europe, and in particular to Switzerland, whose level of data protection has been deemed adequate by the European Commission under Article 45 of the GDPR."

The rights

In relation to the processing of personal data carried out by the Data Controller, you may request from the Data Controller access to the data concerning you, their deletion, the rectification of inaccurate data, the integration of incomplete data, the restriction of processing in the cases provided for in Article 18 GDPR, as well as the opposition to processing in cases of legitimate interest of the Data Controller.

In the event that the processing is based on consent or contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit it to another data controller without hindrance.

Without prejudice to any other administrative or judicial remedy, he/she has the right to lodge a complaint with the competent supervisory authority in the Member State where he/she normally resides or in the State where the alleged infringement occurred.

To exercise your rights, you may contact the Data Controller by sending a written communication to the above address or an email to info@antheianatural.it.