What does this document represent?
This document describes the processing of personal data of users consulting the website www.dfn.sm. This information does not concern other Internet sites, pages or online services that can be reached via hypertext links that may be published on the sites but refer to external resources.
Why such information?
National and international regulations on the processing of personal data require that the person concerned, i.e. the user consulting this website, be informed in a clear, transparent and intelligible manner of the manner and purpose of the processing of his or her personal data.
What are the legal references?
2. DATA CONTROLLER
The Data Controller is Poste San Marino S.p.A. in the person of its pro-tempore legal representative. The Data Controller is based in Strada Borrana, 32 - 47899 Serravalle, Republic of San Marino and can be contacted at the following e-mail address firstname.lastname@example.org or by telephone on 0549 882558 for any questions concerning the processing of personal data carried out through this website.
3. DATA PROTECTION OFFICER
Poste San Marino has appointed its own Data Protection Officer (DPO), who may be contacted for any information concerning the processing of personal data at the following e-mail address: email@example.com.
4. TYPE OF DATA PROCESSED
The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could enable users to be identified through processing and association with data held by third parties.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. This data is not disclosed to third parties and is not disseminated.
Data provided by the user
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site, as well as the completion and forwarding of the forms on this site, entail the subsequent processing of the sender's contact data, which are necessary to reply, as well as all personal data included in the communications.
Users are requested not to send names or other personal data of third parties that are not strictly necessary, but rather to use fictitious names whenever possible.
Access to the reserved area of this site is permitted after registering an account using login credentials and entails the subsequent processing of the personal data requested during registration, which is necessary to be able to proceed with the purchase of goods on the Shop page of the website. Personal data collected during registration are processed to fulfil legal, accounting and administrative obligations arising from the distance selling of goods.
Personal data and information required to make payments for goods purchased are also processed. The personal data subject to processing are indicated on the Payment Conditions page.
Cookies and other tracking tools
A 'cookie' is a small text file transferred from the web server to the user's computer, the purpose of which is to inform the server of the user's accesses to that particular web page, and of any other information it obtains from the system's readable parameters by means of functions contained in the web page.
5. PURPOSES, LEGAL BASES, RETENTION PERIODS AND NATURE OF PROCESSING OPERATIONS
Personal data are processed for the following purposes:
|Purposes||Legal bases||Retention periods||Nature of processing operations|
|Replying to contact requests.||The legal basis is the need to execute pre-contractual measures taken at the request of the user in concern.||The storage period for personal data is the time needed to process the request.||The provision of personal data is optional, but refusal to provide it will make it impossible for the user to forward the request.|
|Newsletter subscription.||The legal basis is the consent of the user concerned.||The retention period of personal data is determined by the user's request for revocation of consent.||The provision of personal data is optional, but refusal will make it impossible to subscribe to the newsletter.|
|User registration in the Customer Area.||The legal basis is the need to execute pre-contractual measures taken at the request of the user interested in the registration of his or her data necessary to make purchases on the Shop page of this website.||The retention period of personal data is linked to the purposes of processing, as well as to the retention periods determined by the tax, accounting and legal regulations in force in the Republic of San Marino.||The provision of personal data is optional, but refusal will make it impossible to register in the reserved area and to make purchases.|
|Processing of purchase order and shipment of goods.||The legal basis is the contractual obligation arising from the purchase of goods by the user. Please refer to the conditions of sale for more detailed information. A further legal basis is represented by compliance with legal obligations under current administrative, fiscal and accounting regulations.||The retention period of personal data is linked to the purposes of processing, as well as to the retention periods determined by the tax, accounting and legal regulations in force in the Republic of San Marino.||The provision of personal data in the order form is mandatory in order to proceed with the purchase of the goods.|
|To prevent, detect and prosecute unlawful conduct.||The legal basis for this processing is the pursuit of the data controller's legitimate interest in preventing, detecting and prosecuting unlawful acts or infringements of intellectual/industrial property rights (including those of third parties) or computer crimes or those committed via telematic networks.||The period of retention of the processed data is equal to the time reasonably necessary to assert the rights of the data controller from the moment of knowledge of the offence or its potential commission.||The processing of personal data by the data controller is mandatory to prevent, detect and prosecute unlawful conduct.|
|E-mail marketing and regular newsletters on promotions or commercial initiatives||The legal basis is the user's consent given during registration or in the newsletter form in the footer.||The period of storage of personal data is determined by the user's possible request for revocation of consent. The user may at any time request to no longer be subscribed to the newsletter by sending a communication to the contact points indicated in this notice.||The processing of personal data for marketing purposes is optional, but refusal will result in the impossibility of receiving periodic communications on promotions and commercial initiatives.|
6. DATA RECIPIENTS
The recipients of the personal data processed following consultation of this site are the following persons designated by the Data Controller as being responsible for the processing carried out:
7. DATA TRANSFER
Some personal data are shared with recipients that may be located outside the European Economic Area (EEA). The Controller ensures that the processing of your personal data by these recipients is carried out in compliance with the relevant regulations.
8. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING
The Data Controller does not adopt an automated decision-making process on the processing of personal data carried out by consulting this site.
9. PROTECTION OF MINORS
Persons under 16 years of age may not provide personal data. The Data Controller shall not be liable in any way for any collection of personal data, as well as for any false statements, provided by the minor, and in any case, should it be found to have been used, the Data Controller shall facilitate the right of access and cancellation forwarded by the guardian, custodian or person exercising parental responsibility.
10. RIGHTS OF INTERESTED PARTIES
Users consulting this site, in the cases provided for by the relevant regulations in force, have the possibility of exercising access, at any time, to the data, of receiving them in a structured and commonly used, electronically readable format and of requesting that they be transmitted to another data controller (data portability), as well as of having them corrected, updated, modified or deleted (subject to any applicable exceptions). Also recognised is the right to object to and restrict processing, as well as the right to delete data. The right to revoke the consent originally given is also recognised at any time.
It is possible to exercise the above-mentioned rights by contacting the Data Controller at the contact points indicated in section 2 above.
Users who consider that the processing of personal data relating to them carried out through this site is in breach of the provisions of the relevant legislation in force, have the right to lodge a complaint or report to the competent Data Protection Authority.
This information is updated on 15/01/2023. The Controller reserves the right to make changes to this policy at any time.