Pursuant to Article 13 of EU Regulation No. 2016/679 (General Data Protection Regulation), the following information is provided.
Data controller
LANDSCAPEABC DI CANNONE FRANCESCO, with headquarters in ANDRIA (BT) VIA TRANI 30, VAT number 07461470721, Digital domicile/PEC
The “Data Controller”, as the “Data Controller”, hereby informs you, pursuant to Articles 13 and 14 of EU Regulation No. 2016/679 (hereinafter, “GDPR”), that all personal data processing carried out by the Data Controller will be based on the principles of fairness, lawfulness, transparency, and protection of the privacy and rights of data subjects.
Personal data
According to Article 4, paragraph 1, of EU Regulation 2016/679, personal data means any information relating to an identified or identifiable natural person (data subject).
Purpose and legal basis
Your personal data is processed in the context of specific processing operations for the purposes and pursuant to the legal bases set out below.
A. Type of processing: Purchase of products online
Purpose: To conclude and execute the purchase contract for the products offered on the website. We also process your personal data for further
contract execution activities, such as payment, invoicing, product shipping, and any returns management.
Legal basis: Execution of the sales contract to which you are a party from the moment you accept the terms and conditions of sale, fulfillment of legal obligations of a
fiscal, accounting and administrative nature and Legitimate Interest of the Data Controller for the possible exercise of the Data Controller's rights in court.
B. Type of processing: Registration on the Site and services offered to registered users
Purpose: Registration on the site is possible by entering some personal information, necessary to guarantee your identification and the performance of the services offered
to registered users.
Legal basis: Conclusion and execution of a contract
C. Type of processing: Newsletter
Purpose: Sending informational and advertising emails relating to this website
Legal basis: Your consent. Registration on the mailing list occurs only with your prior authorization
You can always withdraw your consent and object to the processing, as explained in the section on your rights.
D. Type of processing: Customer Service
Purpose: The owner offers a customer service (via chat/email/telephone) for any needs related to the purchase of our products or the use of our services. In some cases,
we may ask you for your personal data when necessary to respond to your requests to Customer Service.
Legal basis: The need to execute the contract of sale of products or pre-contractual measures based on your request
E. Type of treatment: Loyalty card
Purpose: To manage participation in the Loyalty Card program in order to provide members with a series of benefits and, more generally, to fulfill all
related contractual and administrative obligations. Some data in the registration form is mandatory, while providing certain data and specific authorizations is optional.
Legal basis: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject's request prior to entering into a contract, and
is partly based on the data subject's consent.
By joining the Program, you consent to the processing of data necessary for the loyalty program. You can also optionally choose, with
separate consent, to subscribe to the newsletter, request advertising, and send your data for marketing and profiling purposes. Furthermore, with separate consent, you can
authorize the Data Controller to send your data to Google as part of the Google Store Sale service, which offers advanced in-store sales measurement and
improved reporting data to better optimize online advertising.
You can always withdraw your consent and object to the processing, as explained in the section on your rights.
F. Type of processing: Advertising
Purpose: Sending commercial and promotional communications following the purchase of one of our products or registration for one of our services or loyalty programs. Following
the purchase of one of our products on the Site, we may send you communications containing our commercial offers for similar products and services to the email address you provided.
Legal basis: Consent of the interested party.
You can always withdraw your consent and object to the processing, as explained in the section on your rights.
G. Type of processing: Profiled marketing (Profiling for marketing purposes)
Purpose: We will use the data you provide online to use individual services (for example, data provided to make purchases or data provided following membership in a
loyalty program) to process it and enable us to develop products and services with features in line with your preferences and interests, and thus send you advertising communications that are as relevant as possible. To better understand your tastes and interest in our products, we may use automated systems that do not, in any case, have legal or other significant effects on the data subject.
Legal basis: Consent of the data subject.
You can always withdraw your consent and object to the processing, as explained in the section on your rights.
H. Type of processing: Browsing data
Purpose: While you visit our website, the computer systems responsible for its operation acquire certain data (for example, IP addresses, names and domains, URIs), the
transmission of which is implicit and necessary for the functioning of the Internet. The Data Controller uses this data for the sole purpose of enabling users to navigate and obtaining
anonymous statistical information on the use of the sites, to monitor their correct functioning, or to ascertain responsibility in the event of cybercrime.
Legal basis: The legitimate interest in ensuring the correct functioning of IT systems
J. Type of processing: Participation in demonstrations, events, competitions
Purpose: We will use the data you provide to allow you to participate in specific initiatives you may choose to participate in from time to time. For each event, you will be
provided with specific information regarding the purposes of the processing.
Legal basis: Contractual fulfillment. Processing will only be carried out upon acceptance of a specific Regulation.
K. Type of processing: Statistics
Purpose: Creation of statistical reports and behavioral models to examine – in aggregate form – the economic effectiveness of commercial initiatives and to
target promotional initiatives.
Legal basis: Legitimate interest of the Data Controller to analyze – in pseudonymized form (therefore without information directly attributable to individual customers) – customer data
to obtain information relating to customer purchasing behavior, the ways in which customers interact through the various communication channels and
the effectiveness of commercial and promotional initiatives.
In any case, the Customer will always be able to ask the Data Controller for further clarifications regarding the specific legal basis of each processing operation and the methods used to carry
it out.
Personal data is processed in compliance with the conditions set forth in EU Regulation 2016/679 and in particular Article 6, paragraph 1, letter e), and Article 2 ter of Legislative Decree 196/2003, the
"Personal Data Protection Code." Subscription to the selected services may be revoked independently at any time using the same subscription method. Revocation does not affect the lawfulness of processing carried out based on the subscription expressed before the revocation.
Types of data processed
The categories of personal data that the Data Controller collects and processes when you browse, use web services, or purchase products are as follows:
- personal data, such as name, surname, gender, age/date of birth, profession, residence or domicile;
- contact information, such as address, email, telephone number, mobile number;
- payment method data; data for any invoicing and product shipping;
- Connection, geolocation and navigation data, such as IP address, cookies and similar technologies
- Data relating to purchasing and browsing preferences, marketing data, event data (browsing, purchases, installations, etc.)
- further information necessary for the performance of the requested services
Special categories of personal data are not processed.
The mandatory or optional nature of the provision is specified from time to time, with reference to the specific information requested. Any refusal to provide data
marked as mandatory will make it impossible for the Data Controller to execute the contract or provide the available services. Providing additional data is optional.
Treatment methods
The processing is conducted in compliance with fundamental rights and freedoms and is based on the principles of fairness, lawfulness, transparency, and confidentiality, ensuring the
relevance and proportionality of the information collected and used for the described purpose. Your personal data will be processed using
computerized, electronic, and paper-based tools and media in compliance with applicable laws and regulations.
The Data Controller may collect personal data
- Directly from you, if you register to make an online purchase on the site, create an account or sign up for the loyalty card program, participate in a sweepstakes or
promotional initiative, ask a question, or interact with our Customer Service services. When you register with your social media account, specifically your Facebook or Google account, the Data Controller will obtain the personal data you choose to share through these social media services based on their privacy settings. Consequently, the data will be shared with the social media service and, where applicable, shared on your social media profile. Therefore, please refer to the privacy policies of these third-party social media providers to learn more about their policies.
More information on how Google processes data can be found at this link: https://policies.google.com/privacy/update.
More information on how Meta processes data can be found at this link: https://it-it.facebook.com/privacy/policy/ - Through the use of website features. We use cookies and other technologies, such as pixel tags, on our websites and in our emails to collect data on your usage and better target our advertising. To learn more, please read our Cookie Policy.
The Data Controller may collect third-party data directly from you. Any provision (for example, for product shipping) of personal data and contact information of any third
party other than yourself constitutes the processing of personal data for which you act as an independent data controller, assuming all obligations and responsibilities under applicable personal data legislation. In this regard, you guarantee the Data Controller that any third-party data you provide has been acquired by you in full compliance with applicable personal data legislation and that there is an appropriate legal basis for the disclosure of such third-party personal data to the Data Controller. You hereby indemnify the Data Controller against any dispute, claim, or request for compensation for damages that may arise from any interested third party arising from such disclosure.
Nature of the treatment
Providing your data is, in principle, optional, but failure to provide it will prevent you from using the full functionality of the Site, or specific services
(e.g., loyalty cards).
Communication and dissemination
Personal data may be communicated or disseminated, as explained in the next paragraph.
Categories of data recipients
Data processing is carried out by authorized persons, committed to confidentiality, and assigned to the relevant activities in relation to the purposes pursued.
Data processing may also be carried out by persons attributable to external entities acting on behalf of the Data Controller and specifically designated as Data Processors
pursuant to Art. 28 of EU Regulation 2016/679. Data recipients may also include third parties, such as cookie providers or commercial partners, for the performance of their own services and related activities, to whom the necessary personal data will be transmitted.
For example, through API conversions, the Data Controller shares online and offline data with Meta or Google, which will obtain the personal data you choose to share through these services based on
their privacy settings. Consequently, the data will be shared with the external third party with your prior consent. Therefore, please refer to the privacy policies of these third-party providers to learn more about their policies.
More information on how Google processes data can be found at this link: https://policies.google.com/privacy/update
More information on how Meta processes data can be found at this link: https://it-it.facebook.com/privacy/policy/
Data retention
The data will be retained for the time necessary to achieve the purposes for which it was collected, which varies depending on the type of activity that involves the processing of
your personal data. After this period, your data will be permanently deleted or otherwise irreversibly anonymized. This does not apply in cases where retention for
a longer period is required for potential disputes, requests from competent authorities, or pursuant to applicable legislation.
Your personal data is stored by us in compliance with the terms and criteria specified below:
- a) Data collected to conclude and execute purchase agreements for goods on the website: until the administrative and accounting formalities are completed. Billing data
will be retained for ten years from the invoice date. - b) registered user data: the data will be retained until you request the deletion of your profile
- c) payment data: until the payment is certified and the related administrative-accounting formalities are completed following the expiry of the right of withdrawal and the terms applied for contesting the payment
- d) data collected for membership to the Loyalty Card program: this data is retained until the subscription to the loyalty service is cancelled
- e) marketing data and data for commercial communication activities: this data is retained until the cessation of the activity or your request to interrupt the activity (objection to receiving it) and in any case within 2 (two) years from your last interaction.
- f) Email address provided to receive our newsletters: until you request to stop receiving them (withdraw your consent or object to receiving them). You can, at
any time, independently stop receiving these communications by simply clicking the appropriate link at the bottom of each of our newsletters. - g) mobile phone number provided to receive our text messages (communications on news and commercial promotions): until you request to interrupt the activity (revoke your consent or object to receiving it).
- h) data used for commercial communications, as well as for the personalization of commercial communications: until your request to discontinue the activity and in any case
within 2 (two) years from the last interaction. - i) data used to personalize the Site and to display personalized commercial offers: until you request the cessation of the activity and in any case within 2 (two) years
from the last interaction.
Existence of an automated decision-making process
The Data Controller may use the processed data for automated decision-making, including profiling, pursuant to Article 22, paragraphs 1 and 4, of GDPR
2016/679, particularly for marketing, advertising, or newsletter sending purposes. In such cases, processing is always based on the data subject's consent.
Data transfer to third countries
The data processed for the aforementioned purposes are also transferred to other EU or non-EU countries, but are not transferred to third countries outside the European Union or the
European Economic Area (EEA) that have not received an adequacy decision.
Rights of the interested party
The interested party may exercise the rights specified in Articles 15 to 21 of the GDPR, as indicated below:
- Right to access personal data, or to know whether or not personal data is being processed, for what purposes and for what types of data, as well as the recipients
and the retention period of the same (Article 15); - Right to rectification or the right to obtain, without undue delay, the modification of inaccurate personal data by the data controller (art. 16);
- Right to erasure (“right to be forgotten”), i.e. the right to obtain from the Data Controller without undue delay the erasure of personal data concerning you, for the reasons set out in the relevant provision of the GDPR, specifically including the possibility of withdrawing consent (Article 17)
- Right to restriction of processing, or to limit the use of data by the data controller in the following cases: contesting the accuracy of the data, objecting to processing in the event of unlawful processing, use for the purpose of exercising legal claims, and concurrent overprocessing by the data controller, pending verification of the prevalence of the legitimate interests of the data controller over those of the data subject (Article 18);
- Right to data portability, i.e. the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer it
to another controller, where the processing is based on consent or is carried out by automated means (Article 20); - Right to object to the processing of your personal data (Article 21).
Right to complain
The interested party may lodge a complaint with the Privacy Guarantor - Piazza Venezia n.11 - 00186 – Rome www.garanteprivacy.it
Exercise of rights
The interested party may exercise his or her rights by sending a request to the Data Controller's contact details at the following email address:
Finally, we inform you that interested parties, if they believe that the processing of their personal data violates the provisions of the GDPR (Article 77), have the right to
lodge a complaint with the Guarantor (www.garanteprivacy.it) or to take appropriate legal action (Article 79).