The data controller of this site is the company:
Pulcranet S.r.l. (p. iva 03094930363), Via Martiniana 325/B, 41126, Modena with DPO (Data Protection Officer) who can be reached at the following e-mail address: dpo@holyart.it The company provides, pursuant to Articles 12 and 13 of the new EU Regulation 2016/679 (so-called "GDPR"), and Legislative Decree 101/2018, and when it is applicable the UK Data Processing Act 2018, this information describing the methods for processing the personal data of users who consult this site accessible electronically from the address: https://www.holyart.com (or however corresponding to the home page of the site).
This information is provided for the site in question and not for any other websites that may be consulted by the user via links present on the site.
Purposes of the Data collected. The User's Data are collected to enable the Data Controller to provide its services, as well as for the following purposes: Social Applications, Interaction with social networks and external platforms, Advertising, Statistics, managing addresses and sending email messages, Business affiliation, Managing RSS feeds, Contacting the User, managing payments, monitoring infrastructure, displaying content from external platforms and commenting on content.
Type of data processed. Following consultation of this site and/or voluntary registration on it, the relevant personal data will be processed. To this end, the Data Controller informs the data subject that the personal data provided will be processed in accordance with the provisions of the GDPR and the revised Privacy Code and concern:
(i) Navigation Data;
(ii) Personal Data not falling within the special categories of personal data as listed in Article 9 GDPR (identification and contact data, payment data, IP address, purchases); (
iii) Data falling under the special categories of personal data as listed in Art. 9 GDPR (data also indirectly related to religious belief, purchase "religious articles", "liturgy accessories", "special occasions");
Legal basis. The processing is carried out on the basis of the conditions of lawfulness envisaged under Article 6 GDPR, for the purposes inherent to the relationship established with the Data Controller, therefore, its legal basis with regard to the type of data referred to in point (i) above as required under Article 13 letter c) GDPR is justified in the reasons for which the relationship is established with the Data Controller and in this case in relation to navigation on this Site and/or completion by him/her of the relative contact form and the relative information or services requested and therefore, with legal basis (
a) consent of the data subject (art. 6, first par. lett. a) GDPR) (marketing, profiling, purchasing); (
b) performance of a contract (Art. 6, para. 1, lit. b) GDPR) (purchasing); (
c) performance of a legal obligation to which the data controller is subject (Art. 6, para. 1, lit. c) GDPR) (e.g. invoicing);
(d) legitimate interest of the controller (Art. 6(1)(f) GDPR) (soft-spam and/or defence in court).
Processing methods. The data will be processed on paper and/or electronically by persons specifically authorised to do so; it is also specified that no processing is carried out on the basis of automated decision-making processes. The provision of data is optional, however, failure to provide such data may make it impossible to perform the service. Some navigation data (on this point see our cookies policy) are, on the other hand, acquired automatically by the system. The processing of the data provided to the Data Controller will include: management, organisation, use, storage, creation of the database, processing throughout the EU and non-EU territory (countries falling within the cases ex art. 45 and 46 GDPR) and the performance of statistics, communication to the partners with whom the initiatives will be developed - subjects who will be appointed as data processor pursuant to art. 28 GDPR, Join Controllers or autonomous Data Controllers in the event that personal data will be communicated to them. The processing will also include the communication of future initiatives and the sending of promotional material. Please also note that the processing of data related to the web services offered by the site hosted by a company located in Italy/Europe/USA, whose name will be communicated upon motivated request, are only carried out by collaborators and authorised third parties in the case of occasional maintenance operations or by our manager.
Spontaneous applications. In relation to the data that you provide or directly send us your CV (from here on only CV), we inform you that in our capacity as Data Controller we will use the data indicated in the form or CV sent to us to verify the correspondence with the ideal candidate that we are possibly looking for, we also specify that pursuant to art. 111 bis of Legislative Decree 101/2018 for this type of processing, the information referred to in art.13 GDPR will be provided at the first contact following the sending of the CV, otherwise the data will be deleted as soon as it is clear that no contact will be made without sending any further information. However, should you provide partial or erroneous data, it may be impossible for us to evaluate you for the requested job position and we will proceed with deletion as above.
Rights of data subjects. The Data Controller also informs that the rights of rectification under Art. 16 GDPR, the right to be forgotten under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR as well as the right of access to the personal data provided and to all consequential information as listed under Art. 15 GDPR are guaranteed. Data subjects also have the right to:
1. Ask the data controller for access to and rectification or erasure of personal data or restriction of processing concerning them or
2. To object to their processing;
3. To the portability of the data ex art 20 GDPR;
4. Where the processing is based on Article 6(1)(a) or Article 9(2)(a) to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given prior to the revocation;
5. To lodge a complaint with a supervisory authority;
To exercise the rights listed above or to obtain further information, simply send an e-mail to the following e-mail address privacy@holyart.it indicating in the subject line: "exercise of rights pursuant to the GDPR" and inserting in the body of the e-mail the right you wish to exercise, as well as your name, surname and the e-mail address where you wish to receive a reply from the Controller. Once the Controller has processed the information received, it will send a reply within the terms indicated in Article 12 of the GDPR.
The Data Controller in specific situations adopts specific information notices accompanied by the relevant consents to be given in order to allow the data processing, moreover, the Data Controller warns you that if it intends to further process the personal data for a purpose different from the one for which it was collected, before such further processing it will provide the data subject with information regarding such different purpose and any further relevant information, collecting, in the case of specific consent.
Retention of your data. Personal data will be kept as long as necessary to pursue the purposes for which it was acquired. The period of data retention depends on the purposes for which they are processed and therefore may vary, i.e. throughout the period during which the data subject is a customer and thereafter for 5 years unless explicit consent is requested to extend data retention. Personal data functional to the fulfilment of civil and tax obligations will also be retained afterwards, in compliance with the retention periods envisaged by the regulations applicable from time to time and for the eventual defence of the Data Controller in court.
Cookies. A cookie is a small text file that is deposited by a website on the hard drive of the user's device, cookies thus uniquely identify the surfer's browser. Cookies do not harm the computer and do not contain viruses. Cookies have the function of streamlining web traffic analysis or signalling when a specific site is visited and allow web applications to send information to individual users.
Only you can decide to delete cookies manually from your device or have them automatically deleted when you close your installed browser.
For more information please visit our cookies policy.
Sending newsletters and marketing. During the data retention period, the data controller reserves the right to send soft marketing offers as a legal basis for processing, or to be the recipient of non-soft marketing communications if you have given your consent.
Copyrights. All contents of this website are protected by the legal provisions on copyrights and intellectual property. Reproduction in any form, even partial, is prohibited. However, the Controller does not grant any licence to copyright, patents or any other intellectual property right.
Liability The Controller accepts no liability towards site visitors with regard to the content of what is published (accuracy and completeness of the information provided) or the use that third parties may make of it. The material and information on the site are subject without notice to changes or updates by the Controller.
Enforcement. The Controller regularly updates this policy and in general its compliance with the Privacy Policy, adapting it to any new regulations issued. If you have any questions or concerns regarding this Privacy Policy you may contact us at any time by writing to: customerservice@holyart.com.
Complaints. We will respond to users who send questions and/or formal written complaints to this address customerservice@holyart.com in order to investigate the reported problem. We are committed to co-operating with the relevant authorities to resolve any complaints about the processing of personal data that are not resolved directly between the Data Controller and individuals.
Consent to data processing
I hereby declare that I have received, read and understood the above information and therefore consent to the processing of my personal data in the terms indicated above:
a) for Marketing purposes
consents
does not consent
b) sale of articles in sections: religious articles, liturgy accessories, special occasions, all other type of articles
consents
does not consent
consent is required for the purchase of these articles
Google Services: More information on how Google handles personal information