NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679
PERSONAL DATA PROTECTION CODE

Below is a description of how the site is managed with regard to the processing of the personal data of the users who consult it.

Elisabet Srl is aware of the importance of protecting the confidentiality of personal data and is committed to complying with current privacy directives and regulations that guarantee safe and confidential internet browsing

The user of the website elisabet.it (the “website”), interested in the processing of personal data, is invited to carefully read this document which governs, in general, the rules that Elisabet Srl observes when collecting and processing personal data and, in particular, the manner and purpose of the processing of personal data provided by the user through navigation on the website, use of the registration and contact forms therein, as well as through the purchase of goods or provision of services made available and offered through the website.

This information is also provided pursuant to Article 13 of the EU Regulation 2016/679 on the protection of personal data to those who interact with the website of Elisabet Srl, the Data Controller, which can be accessed electronically from the address elisabet.it.

The information is also given for all sites and services under the domain elisabet.co.uk and not for other websites that may be consulted via links.

The notice is also inspired by national and European regulations, including Recommendation No. 2/2001 of the Article 29 Working Party on minimum requirements for the collection of personal data on-line in the European Union, to identify the minimum requirements for the collection of personal data on-line, and, in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.

THE DATA CONTROLLER
The “owner” of the processing is Elisabet Srl.

GENERAL PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA
The processing of personal data is governed by the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimisation, accuracy, integrity and confidentiality. In particular:

• process the data exclusively for the purposes and in the manner set out in the information notice;
• process data for purposes for which the prior consent of the data subject is required only if expressly authorised to do so;
• respect for anonymity, allowing anonymous navigation of the site in areas that do not require authentication, except for the automatic acquisition of navigation data;
• make data available to third parties only for purposes instrumental to the provision of the requested service or in other cases, except where permitted by law, only when the person concerned has given his or her consent;
• Respect the rights of data subjects, responding to requests for deletion, modification, integration of the data provided, opposition to the processing of data for the purpose of sending commercial information and advertising;
• ensure proper and lawful handling of personal data, safeguarding the data subject's right to privacy, and apply appropriate security measures to protect the confidentiality, integrity and availability of the data processed;
• ensure maximum transparency by accompanying each data collection action with appropriate disclosures;

TYPES OF DATA PROCESSED
Personal data“ means ”any information relating to an identified or identifiable natural person (i.e. the data subject); an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity;”(Art. 4 of EU Regulation 2016/679).

Therefore, personal data are the name, contact information and contact details, as well as any other information of the user of the site that is directly or indirectly derivable from them.

REGISTRATION DATA
When registering on the site and creating an account, as well as afterwards, by filling in special forms and registration forms, the user will be asked to provide certain personal data, such as first name and surname, e-mail address, postal address, and billing data.

The information requested during registration will be used to allow access to online services and to ensure the proper performance of all activities connected with or instrumental to the provision of such services.

Furthermore, since registration is a prerequisite for access to and use of our services, the personal data of website users, once the choice of service has been made and subject to further information, will be processed for purposes connected with and/or functional to the chosen service.

In the event that the chosen services are operated by third parties, the data will be disclosed to the individual operators, subject to information provided to the user. The latter act as “data controllers” for processing in connection with the provision of the services for which they are responsible.

DATA PROVIDED VOLUNTARILY BY THE USER
The voluntary and explicit sending of electronic mail messages to the addresses indicated in the various access channels of the elisabet.it site and the filling in of the forms specifically prepared entail the subsequent acquisition of the sender's/user's address and data, which are necessary to reply to the requests made and/or provide the service requested.

The sending of this data is done on an optional, explicit and voluntary basis, and involves the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data entered.

Elisabet Srl will process these data assuming that they refer to the user or to third parties who have expressly authorised the user to provide them on the basis of a suitable legal basis legitimising their processing. In this case the user is the autonomous holder of the treatment, and assumes all the obligations and responsibilities of law, conferring the widest indemnity with respect to any dispute, claim, request for compensation for damages from treatment, etc.. that Elisabet Srl may receive from third parties whose personal data have been processed through the use of the site in violation of current regulations.

Elisabet Srl invites you in any case not to send personal data unless strictly necessary: some categories of Personal Data can be processed only with your explicit consent and in compliance with the regulations in force. The Data Controller therefore stresses the importance of expressing your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.

Specific summary information will be given or displayed on the pages of the site set up for particular services on request.

NAVIGATION DATA
The computer systems and software procedures used to operate the elisabet.it website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected in order to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, enable users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the browser and operating system used and other parameters relating to the user's operating system and computer environment.

This data is used solely for the purpose of obtaining statistical information not associated with any user identification data on the use of the site and to check its correct operation and is deleted immediately after processing or within a maximum of one week. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site.

This data is stored in the systems of the data controller or in those of the persons in charge of managing the website.

SYSTEM LOG
Access to the Site, consultation of its contents and use of the services offered enables the web server to automatically record so-called “system LOGs”, i.e. the information that the user's browser sends while browsing the site. This information consists of the web pages requested by the user, the documents consulted, modified or created, the IP address, browser type, browser language, and the date and time of the request.

STATISTICAL DATA
Statistical analysis services enable the Data Controller to monitor and analyse traffic data, aimed at measuring the operation of the site for research purposes, usability evaluations and interest. The data are in aggregated or anonymous form, therefore without the possibility of identifying the user.

This website uses Google Analytics, a service for the statistical analysis of website activity provided by Google Inc. (“Google”). On this site, Google Analytics is configured for anonymous data collection. The data collected are cookies and site usage data.

Google Analytics uses your personal data, including the data you provide to Google when registering for other services, for the purpose of evaluating your use of this website, compiling reports and sharing them with other services provided by Google.

Google may use the user's personal data to contextualise and personalise the ads in its advertising network.

Data processing takes place in the United States on the basis of the European Commission's adequacy decision “Privacy Shied” (http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5306161), to which Google adheres. Privacy policy Goolgle: https://goo.gl/k4J1Nb.

Google makes an add-on available to deactivate data collection by Google Analytics (https://goo.gl/BdFny5).

COMMERCIAL COMMUNICATIONS AND NEWSLETTERS
The processing of personal data collected through subscription to the newsletter is carried out in order to promote and advertise our products and services, by sending, by e-mail (or also SMS, telephone messaging applications and services, social networks, FAX when specified), commercial communications and informative and advertising material.

This type of service enables the data controller to manage a database of email contacts, telephone contacts or contacts of any other kind used to communicate with the user.

These services may also collect data on the date and time the user views the messages, as well as the user's interaction with them, such as information on clicks on links in the messages.

You may at any time stop receiving commercial communications by using the unsubscribe tools available in the communications themselves or update your preferences for sending communications, restricting or denying them altogether.

COOKIES
This website uses cookies to offer its users the best possible experience on the site and to optimise their visit.

Please refer to the specific information notice, provided in accordance with the provisions of Privacy Guarantor Order No. 229 of 8 May 2014.

PURPOSE OF THE PROCESSING OF DATA PROVIDED BY USERS
Personal data voluntarily provided by website users are processed for different purposes, specified below, for which consent may be required:

One or more consents given may be revoked at any time by contacting Elisabet Srl in the manner indicated for the exercise of rights, at the end of this privacy policy

PURPOSE OF PROCESSING NAVIGATION DATA AND SYSTEM LOGS
Personal data whose transmission is implicit in the use of Internet communication protocols and system LOGs are processed solely for the purpose of obtaining anonymous statistical information on the use of the site, to check its correct operation and to protect the computer systems that enable it to function.

The data do not allow for the identification of data subjects and are not associated with other data sources that could allow for the assimilation of data that could identify users.

Such data, such as the user's IP address, could also be used to ascertain liability in the event of hypothetical computer crimes against the site.

OBLIGATION OR OPTION TO PROVIDE DATA
Apart from what has been specified above for navigation data, the user is free to provide the personal data indicated in the forms or in the registration procedures. Failure to provide them may make it impossible to obtain what has been requested or to carry out certain services, as specified below with reference to the above-mentioned purposes:

1. REQUEST MANAGEMENT AND SERVICE DELIVERY

the provision of data (which may be marked as necessary in the forms) is necessary for the pursuit of the purposes referred to in point 1 and any refusal to provide such data will make it impossible for elisabet.it to process orders or satisfy user requests and for users to take advantage of the services available through the website.

Furthermore, the processing of data for these purposes is necessary in order to fulfil any legal obligations: personal data must be processed in accordance with applicable law, including their storage and communication to the authorities for accounting, tax or other obligations.

METHODS OF TREATMENT
Personal data are processed using automated tools, methods and procedures for the time strictly necessary to achieve the purposes for which they were collected and for the pursuit of the purposes set out in this information sheet.

In particular, the processing is carried out, by specially appointed staff, mainly with the aid of electronic, computerised or otherwise automated means, through the use of electronic mail or other distance communication techniques.

DATA RETENTION
The data are kept for the time strictly necessary to provide the requested service or for the time stipulated by the regulations in force.

In general, personal data provided by users that are no longer necessary for the pursuit of the purposes for which they were collected are immediately deleted or rendered anonymous, except in the case of the storage obligations set out herein, prescribed by law or indicated otherwise by the data subject.

In order to protect its own interests, Elisabet Srl shall also process personal data for as long as permitted by law, in accordance with Article 2947 of the Civil Code, particularly as may be necessary to protect the interests of the Data Controller from possible claims relating to the services provided.

DATA SECURITY
The data controller takes specific, appropriate and preventive security measures in order to safeguard the confidentiality, integrity, completeness and availability of the personal data of the data subject, as well as to prevent the loss of data, unlawful or incorrect use and unauthorised access.

In particular, in order to protect the personal data of the person concerned, the Site uses an encryption system with SSL (Secure Sockets Layer) technology, which guarantees protection by encrypting the information both on the login page and in the other sections where it is possible to release, view or modify one's personal data.

In any case, the Controller shall not be liable for any untruthful or incomplete information sent directly by the user (e.g. correctness of e-mail address or payment or postal address details), as well as information concerning the user that was provided by a third party, even fraudulently.

RECIPIENTS OF PERSONAL DATA
Personal data may be communicated to persons who have access to the data by virtue of legal provisions, regulations or EU legislation, within the limits provided for by these rules.

For the provision and management of the services requested by the user, the user's personal data may be communicated to other subjects, in their capacity as autonomous controllers and/or processors of personal data (such as payment services managed by third parties such as PayPlug or Paypal, couriers or Poste Italiane S.p.A, web service providers, e-mail or technical services that provide services instrumental to providing the services of the site, subjects that provide assistance and consultancy in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of services, internal staff authorised to process data and bound by obligations of confidentiality) to the extent necessary to carry out their duties in our organisation, and who act as data processors or who have committed themselves to confidentiality, even with appropriate legal obligations.

The data may also be disclosed to persons, entities or authorities for legal obligations, protection against abuse or fraud, or by order of the authorities.

The full list of the aforementioned subjects can be requested directly from Elisabet Srl. The personal data collected shall not be disseminated.

PLACE OF DATA PROCESSING
Processing related to the web services of this site takes place at the aforementioned headquarters of the Data Controller, which makes use of external providers for the web site hosting service, and is handled only by technical staff authorised to process data and, occasionally, by persons in charge of maintenance operations.

If necessary, the data may be processed by the staff of the company in charge of maintaining the technological part of the site, appointed as data processor at the company's premises.

Personal data will be stored on servers and databases of the Controller or its suppliers located within the territory of the European Union. Except as further indicated, data will not be transferred outside the European Union.

RIGHTS OF THE INTERESTED PARTIES
The users of the site to whom the personal data refer, in their capacity as data subjects and within the limits of the legislation in force, are granted the rights set out in Articles 15 to 22 of EU Regulation 2016/679, i.e., in short, the right to request from Elisabet Srl, at any time:

• access to personal data, as well as further information on their processing
• rectification or updating of data
• deletion of data

The user may also:

• object to the processing,
• request restriction of processing
• obtain data concerning the user in a structured, commonly used and machine-readable format
• withdraw consent for the purposes of processing that require it

Pursuant to and within the limits of the legislation in force, the user has the right to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali) if he considers that the processing of personal data violates the legislation.

The rights listed above may be exercised by the interested party at any time by contacting Elisabet Srl, tel +39 0734 840019, email customerceservice@elisabet.it

We also inform you that registered users of the site may at any time view and modify their personal data by accessing the data modification mask within their personal account, as well as grant or revoke any previously given consent for sending commercial communications.

CHANGES AND UPDATES
This privacy policy is in force as of 24 May 2018. Elisabet Srl reserves the right to modify or update its content also in relation to changes in applicable legislation. All changes and updates will be binding as soon as they are published on the website.

INFORMATION ON THE USE OF COOKIES

This document is an integral part of the Privacy Policy and information provided pursuant to Article 13 of EU Regulation 2016/679.

This website uses cookies to offer its users the best possible experience, to optimise their visit and to improve its functionality.

WHAT ARE COOKIES?
A cookie is a small file, in the form of a text string, generated by the website and stored on the user's navigation device (Personal Computer, Laptop, tablet, smartphone, etc.) and retransmitted to the same site on the next visit.

WHAT ARE COOKIES USED FOR?
Cookies serve to:
- safely navigate the site by supporting or activating security features
- customise the browsing experience, the services offered and improve site performance
- keep track of certain data, such as user name and password or other preferences, so that they do not have to be entered on a subsequent visit, thus providing customised functionality, information and content.
- allow the use of certain functionalities of the site, such as the possibility of accessing personal accounts, making purchases or using interactive functions
- obtain statistical information, including information on access to the site from websites, applications or devices such as computers or mobile devices, and measure the use and performance of the site to optimise the browsing experience and services offered
- present relevant advertising information according to the interests and behaviour expressed by the user during browsing, provide statistics and reports on the performance of advertisements.

TYPES OF COOKIES
Cookies can be:
• TECHNICIANS necessary to carry out navigation or to provide a service requested by the user. They are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service” (see Article 122(1) of Legislative Decree 196/2003).
• PROFILING aimed at creating user profiles and are used for the purpose of sending advertising messages in line with the preferences expressed by the user during web browsing.

WHO INSTALLS COOKIES?
Cookies can be installed and used by various parties. Cookies
• OF FIRST PART are generated and installed by the website you are visiting
• OF THIRD PARTIES are installed by parties other than the website you are visiting (identifiable by a different domain name), which therefore operate through the website.

CAN COOKIES BE DISABLED?
The user can deactivate the installation and use of cookies at any time by following the suggestions in this policy. If you do so, the site may function incorrectly or less securely: some sections may not be accessible or some services or functions may not be available or may not function properly. In addition, it may be necessary to change or manually enter certain information or preferences each time the user visits the site.

COOKIE RETENTION PERIOD
The storage time of cookies is variable and depends on the cookie and its purpose.
Cookies can be:

• PERSISTENT i.e. transmitted by the site and stored permanently, and at least until its deletion, and enable personalised browsing, e.g. by recognising the user or remembering certain user preferences, such as the shopping cart.
• OF SESSION i.e. to identify a single visit to the site. These cookies are temporary in nature (i.e. they are not stored persistently on the user's computer and disappear when the browser is closed) and their use is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site.

THIS WEBSITE USES TECHNICAL COOKIES
This site uses the technical cookies specified below:
• BROWSING OR SESSION, which guarantee normal navigation and use of the website (e.g. allowing a purchase to be made or authentication to access restricted areas)
• ANALYTICS used to collect information in aggregate form on the number of users and how they use the site, to collect statistical data, to monitor the operation of the site and to improve its performance (via performance cookies).
• OF FUNCTIONALITY, which allow the user to navigate according to a set of selected criteria (e.g. products selected for purchase) in order to improve the service and browsing experience.

These cookies are necessary to enable the proper functioning of this site and to ensure a safer and more efficient navigation. The site may not function properly without cookies.

The analytical technical cookies used on this website collect information in an anonymous and aggregate form on how the user uses the website, therefore they do not collect personal identification data of the user and do not require specific consent to be installed.

THIS SITE DOES NOT USE PROFILING COOKIES
This site does not use profiling cookies for the purpose of presenting advertising information relevant to the interests and behaviour expressed by the user while browsing, or to provide statistics and reports on the performance of advertisements.

ⓘ this website does not use either first- or third-party profiling cookies.

THIS SITE USES THIRD-PARTY COOKIES
The following is a summary and analytical description of the third-party cookies used, for which we provide links to the privacy policies of the respective authors.

GOOGLE ANALYTICS
This website uses third-party analytical cookies from Google Analytics, a web traffic analysis service provided by Google, Inc. for the purpose of collecting statistical data, analysing traffic sources and controlling access to and functionality of the site.

ⓘ elisabet.co.uk uses analytical cookies with IP anonymisation.

These cookies are set to collect information in an anonymous form, by disabling the options that allow Google Analytics to track users the adoption of tools that reduce the identifying power of cookies. The tools for correlating and cross-referencing information acquired through other cookies used by Google are also disabled.

For more information on:

- Privacy policy and the use of Google Analytics cookies:
https://www.google.com/analytics/learn/privacy.html?hl=it

- For more information on Google's Privacy Policy:
http://www.google.it/intl/it/policies/privacy/

The authorisation to store this data can be revoked at any time. The user can deactivate the use of cookies by Google either through the online tools provided by Google or through the options and settings of different browsers.

ENABLING AND DISABLING COOKIES
Most browsers are set to accept cookies, but you can still configure your browser to refuse cookies or to receive a warning when a cookie is sent to your computer.
If the user decides to refuse/disable the site's cookies, some of the site's web pages may not be reachable and/or may not function properly (e.g. by refusing cookies, the user will be obliged to log in again each time he/she wants to access his/her personal account, or it will not be possible to store certain preferences, such as pending purchases, on subsequent visits).

Refusal/disabling of first-party technical cookies may result in the site not working or in a worsened user experience.

Although third-party cookies are not indispensable for the functioning of the site, their refusal/disabling may result in the loss of certain functionalities, such as the collection of statistical information.

You can also express your choice on the use of cookies by this website through the options and settings of the different browsers, which are listed below for the most popular browsers:

GOOGLE CHROME
1. Click on the Chrome menu in the browser toolbar.
2. Select Settings.
3. Click on Show Advanced Settings.
4. In the “Privacy” section, click on the Content Settings button.
5. In the “Cookies” section, change your cookie settings
6. To disable all cookies, uncheck “Allow saving data locally”.”
7. To disable third-party cookies select “Block all third-party cookies, no exceptions”.

For more information:
https://support.google.com/chrome/answer/95647?hl=it

INTERNET EXPLORER 7 / 8
1. Click the Tools button and then choose Internet Options.
2. To block or allow all cookies click on the Privacy tab and under Settings move the slider up to block all cookies or down to allow all cookies and then click OK.
3. To block or allow specific cookies click on the Privacy tab, move the slider to the privacy level you wish to set and then click OK.

For more information:
http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies

MOZZILLA FIREFOX
1. Click the Edit button and then choose Preferences
2. Click on the Privacy tab
3. Operate the options under “Accept cookies from sites”, customising the settings for exceptions, third-party cookies and cookie retention duration

For more information:
https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

SAFARI
1. select “Preferences” from the “Safari” menu”
2. click on “Security”.
3. to accept and store all cookies, click on “Always”.”
4. in order not to store cookies from websites other than those you are consulting, click on “Only from sites you are consulting”.”

For more information:
http://support.apple.com/it-it/HT1677

For other browsers, please consult the relevant guides. Mobile device browsers, e.g. tablets and smartphones, may offer different or more restricted settings for handling cookies. Please refer to the respective usage and configuration guides.

FUNCTION DO NOT TRACK
The Do Not Track (anti-tracking) option is a feature present in most of the latest generation of browsers that allows the user to tell the website that he or she does not wish to be tracked, for instance in order not to display personalised advertisements.

ANONYMOUS BROWSING MODE
This function allows the user to surf without storing information and navigation data in the browser. By activating this function, which is available in most state-of-the-art browsers, browsing data will not be stored in the browser, cookies and history will be deleted.
Browsing data, on the other hand, will continue to be available to the website operator and connectivity providers.

MORE INFORMATION ON COOKIES
http://www.garanteprivacy.it/cookie
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3585077

in English:
http://www.allaboutcookies.org/
http://cookiepedia.co.uk/

CHANGES
Any changes to this website, to the applicable regulations or to the recalled privacy policies may be implemented without prior notice.

CONSENT TO THE USE OF COOKIES
Pursuant to Article 122, paragraph 2 of Legislative Decree 196/2003, consent to the use of such cookies is expressed by the user concerned through the freely set individual setting of the browser used to navigate the site, as well as by the action of closing the information banner by clicking on the specific link.
This is without prejudice to the user's right to assert his or her rights under Articles 15 to 22 of EU Regulation 2016/679 by notifying the Data Controller at any time of his or her wishes regarding the data managed via cookies.