Privacy Policy

The Data Controller is Lira S.r.l., with registered office in Via San Francesco di Paola n. 10 / A – 50124 – Florence (FI), legally represented by Marco Fattori.
The following contact information of the Data Controller are listed:
– Telephone number: 055224112
– Fax: 0552336438
– Email address: info@lirafirenze.it
– PEC: lirasrl@pec.it

The purposes of processing personal data are as follows:

a) Allow browsing and consultation of the website;
b) Respond to requests for assistance or information that the Data Controller will receive via e-mail, telephone or chat through the application or through the appropriate form;
c) Obtaining legal, accounting and tax obligations;
d) For exclusive purposes of security and prevention of fraudulent behavior, the holder implements an automatic control system that involves the detection and analysis of user behavior on the site associated with the processing of personal data including the IP address;
e) Electronic payments and management of customer billing history;
f) Pursuant to article 7 EU of Regulation 2016/679, your data will be processed for the following marketing purposes: communication via e-mail, mail and/or text messages and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered from the Owner or surveys of the degree of satisfaction with the quality of the services; send them via e-mail, mail and/or text message and/or telephone contacts commercial communications and/or advertising material on products or services offered by third parties (for example, business partners).

The processing of your personal data is carried out by means of the operations indicated in article 4 n. 2) of EU Regulation 2016/679 and precisely: collection, registration, organization, structuring, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Your personal data are not subject to disclosure, with the exception of cases expressly provided for by the law, or to any fully automated decision making process, including profiling.

Personal data will be processed in paper form, computerized and telematic, with logics strictly related to the same purposes also through the use of fax, telephone, mobile phone, e-mail or other remote communication techniques; personal data will be entered in the relevant databases to which only the Data Controller and its representatives will be able to access. Personal data will be managed by implementing appropriate technical and organizational measures to guarantee a level of security appropriate to the risk pursuant to article 32 of EU Regulation 2016/679.

The legal basis of the processing of personal data for the purposes described above is article 6 part 1 letter b) of EU Regulation 2016/679 as the treatments are necessary for the provision of the contracted services. The provision of personal data for these purposes is optional but failure to provide it would make it impossible to activate the required Services.

The purposes related to legal obligations are a legitimate processing of personal data pursuant to article 6 part 1 letter c) of the 2016/679 EU Regulation. Once the personal data have been transferred, the processing may indeed be necessary to comply with legal obligations to which the Data Controller is subject.

The treatments performed for marketing and newsletter purposes described above are based on the issue of your consent pursuant to article 6 part 1 letter a) of the EU 2016/679 Regulation. The provision of your personal data for these purposes is entirely optional and does not affect the use of the services. Subsequent processing, carried out for purposes of e-mail marketing on products or services similar to those purchased by you, is instead based on its legal basis, pursuant article 6 part 1 letter f) of EU Regulation 2016/679, in the legitimate interest of the Owner to promote its products or services in a context in which the interested party can reasonably expect this type of treatment, to which he can also oppose at any time. In fact, if you wish to oppose the processing of your data for these marketing purposes, you may at any time do so by sending a request to the owner at info@lirafirenze.it.

Without the need to express consent (Article 6 letter b) and c) EU Regulation 2016/679 the holder may communicate his/her data for the purposes referred to in this information to: Supervisory bodies, Judicial authorities, as well as those subjects to whom the communication is mandatory by law for the accomplishment of the purposes expressed. These subjects will process the data in their capacity as independent data controllers.

Your data may be made accessible for the purposes set out in this statement to employees and collaborators of the Data Controller or of the Companies related to the Data Controller in Italy and abroad, in their capacity as authorized processing and/or system administrators; to third-party companies or other entities that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.

Furthermore, in relation to the purposes set out in this statement, with the exception of those related to marketing activities, the data may be disclosed to the following subjects or to the categories of subjects indicated below:
– Studies of recognized accountants related to the profession of assistance to companies when the communication is due by law, or is in the interest of the subject (natural or legal person);
– Studies of recognized lawyers related to the profession of assistance to companies when the communication is due by law, regularly in charge of this form of treatment in full compliance with the minimum measures in force, or when the communication is in the interest of the subject (natural or legal person).
Only if you have given a specific consent, your data may be shared with commercial partners for their separate and autonomous purposes. The Data Controller also informs that it does not intend to transfer data to a non-EU third country or to an international non-EU organization. The complete list of data processors and data processors is available, constantly updated, at the registered office of the Data Controller and can be viewed by sending a written request to the Data Controller at the address info@lirafirenze.it.

The management and storage of personal data will be carried out on servers located within the European Union of the Owner and/or third-party companies appointed and duly appointed as Data Processors. In any case, it is understood that the Data Controller, where necessary, will have the right to move the server location to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for European Commission.

Your personal data will be processed by the Data Controller only as necessary for the pursuit of the purpose referred to in this statement. In particular, your personal data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of EU Regulation 2016/679, meaning until the termination of the contractual relations between you and the Data Controller, without prejudice a further retention period that may be imposed by law, as also foreseen by Recital 65 of EU Regulation 2016/679. Beyond this period, personal data will be stored anonymously or destroyed.

With regard to the data themselves, the interested party, or a person delegated in writing, can exercise the following rights: – the right of access, expressly provided for by art. 15 of EU Regulation 2016/679, ie the possibility to access all personal information concerning him;
– the right of rectification, expressly provided for by art. 16 of EU Regulation 2016/679, ie the possibility of obtaining the updating of inaccurate personal data concerning him without justified delay;
– the right to be forgotten, expressly provided for by art. 17 of EU Regulation 2016/679, consisting of the right to cancel personal data concerning the individual concerned;
– the right to limit processing when one of the hypotheses provided for by art. 18 of the 2016/679 EU Regulation;
– the right to data portability, expressly provided for by art. 20 of EU 2016/679 Regulation, ie the right to obtain their data and / or the right to receive their personal data in an interoperable format to another data controller without hindrance by this Company;
– the right to object to the processing of personal data, expressly provided for by art. 21 of the 2016/679 EU
– the right of withdrawal of consent at any time, expressly provided for by art. 7 of the 2016/679 EU Regulation;
– the right to lodge a complaint with a supervisory authority;
– the right to bring a judicial remedy in case of unlawful processing of data, even against acts taken by the Guarantor pursuant to Article 78 of the 2016/679 EU Regulation.
To exercise your rights you can contact the Data Controller at the contact points indicated in this statement.

The provision of personal data necessary for the provision of the services requested by the user is optional, but any failure to provide it makes it impossible to activate the services requested.
With respect to the data that the owner is obliged to know in order to fulfill the obligations established by law, regulations and community legislation, or by provisions issued by Authorities legitimated by the law and by supervisory and control bodies, their failure to provide on the part of the user implies the impossibility of establishing or continuing the relationship, within the limits in which such data are necessary for the execution of the same.
The provision of personal data for marketing and newsletters, as described in this statement, is entirely optional and does not affect the use of the services requested.

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please periodically consult this page or section of the Site, taking as reference the date of the last modification indicated above. In case of non-acceptance of the changes made to this Privacy Policy, the user is required to cease use of the Site and may request the Data Controller to remove their personal data.

Finally, we inform you that if you believe that your rights have been violated by the Owner and/or a third party, you have the right to lodge a complaint with the Personal Data Protection Authority and/or with another competent Supervisory Authority. of the EU Regulation n.

Download the PDF
Cookie Policy