The Gallery
Pet friendly

Privacy Policy

1. Data controller
Impavit srl, with registered office at Via Regolo Sartori 11 A – 37024 Negrar di Valpolicella (VR) (Italy) (the “Company” or the “Data Controller”) guarantees compliance with the personal data protection regulations pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), providing the following information regarding the processing of data communicated or otherwise collected during navigation on this site.

2. Data processed, purposes and legal bases of the processing
Data generated by accessing the site
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This data (such as domain names, IP addresses, operating system used, type of device and browser used for the connection) is not accompanied by any additional personal information and is used to:
i) obtain anonymous statistical information on the use of the site;
ii) manage control needs regarding the ways in which it is used,
iii) ascertain responsibility in the event of hypothetical computer crimes.

The legal basis for processing this data is the need to make the site's features usable following user access.

Data provided voluntarily by the user 
The personal data provided by the user via the form are collected and processed for the following purposes:
a) to carry out customer relationship activities in accordance with contractual agreements;
b) for administrative purposes and to fulfill legal obligations such as accounting and tax obligations, or to respond to requests from judicial authorities;
c) in the presence of specific consent, for the periodic sending, via email, of newsletters and advertising material;
d) with specific consent, to receive updates on our activities and notifications on the publication of posts on our blog;
e) in the presence of specific consent, to receive promotional communications and invitations to events, training courses, webinars, special promotions or to participate in market analyses and research;
f) in the case of sending a CV, exclusively for selection purposes;
g) in the presence of an online shop/sales area, for the fulfillment of sales and contractual activities, and to be able to send any products or services, freebies, catalogs, or reports.

The legal basis for processing is the performance of a contract to which the data subject is party or the implementation of pre-contractual measures adopted at the data subject's request. In the cases expressly indicated, the legal basis is the freely given consent of the data subject.

3. Nature of the transfer
Aside from what is specified for navigation data and data collected through the site, the provision of data:
A) With respect to the purposes related to the contact form, it is mandatory. If the information is not accepted, it will not be possible to send the request form.;
B) Subscribing to the newsletter is optional. If you refuse consent, you will not receive newsletters, advertising materials, or invitations to the Data Controller's events and initiatives.

4. Data processing methods and retention periods
The collected data will be processed using electronic or automated, computerized, and telematic tools, or through manual processing using methods strictly related to the purposes for which the personal data was collected and, in any case, in a manner that guarantees its security. The data is retained for the time strictly necessary to manage the purposes for which it was collected, in compliance with applicable regulations and legal obligations.

In any case, the Data Controller applies rules that prevent the indefinite retention of data and therefore limits the retention period in compliance with the principle of data minimization.

5. Authorized data processors, data controllers, and data communication
The collected data is processed by internal company personnel specifically identified and authorized for this purpose, according to specific instructions provided in compliance with current legislation.

The data collected, if necessary or instrumental to the execution of the indicated purposes, may be processed by third parties appointed as external data processors, or, depending on the case, communicated to them as independent data controllers, namely:
people, companies, associations or professional firms that provide assistance and consultancy services to our Company;
companies, entities, and associations that provide services related and instrumental to the execution of the purposes indicated above (market analysis and research services, credit card payment management, IT system maintenance).

In any case, personal data will never be transferred or disclosed.

6. Rights of the interested party
At any time, you can access your data, object to the processing or request the deletion, modification or updating of all personal information collected by the Data Controller, exercising the right to limit the processing and the right to data portability, by sending an email to info@villabocchi.it. The interested party has the rights set forth in art. 7 of the Privacy Code and art. 15 of the GDPR, specifically the rights to:
A) Obtain confirmation of whether or not personal data concerning you exists;
B) Get the indication:

  • On the origin of personal data;
  • Of the purposes and methods of processing;
  • Of the logic applied in the case of processing carried out with the aid of electronic instruments;
  • The identifying information of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR; and the entities or categories of entities to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing;

C) Obtain:

  • The updating, rectification or, when relevant, integration of the data;
  • The deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  • Certification that the operations referred to in Articles 8.A) and B) have been brought to the attention of those to whom the data was communicated or disseminated, including their content, except where such compliance proves impossible or involves the use of means manifestly disproportionate to the right being protected;

D) Object, in whole or in part:

  • For legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
  • To the processing of your personal data for the purposes of sending advertising or direct sales materials, or for market research or commercial communications, through the use of automated calling systems without human intervention, via email, and/or through traditional marketing methods such as telephone and/or mail. Please note that the data subject's right to object, set forth in point B) above, for direct marketing purposes via automated means extends to traditional means, and that the data subject may exercise the right to object even partially. Therefore, the data subject may decide to receive communications only via traditional means, only automated communications, or neither.
  • Where applicable, you also have the rights set forth in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

7. How to exercise your rights

You can exercise your rights by sending a registered letter to the address indicated in point 1), or an email to info@villabocchi.it