18.1. Customers' personal data are processed by Antichi Sapori dell'Etna S.r.l., as Data Controller, in compliance with EU Regulation 2016/679 ("GDPR") and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. For any question relating to data protection the Customer can write to privacy@pisti.it or to the PEC antichisaporisrl@arubapec.it.
18.2. The data is processed to execute the Contract and related obligations (art. 6, par. 1, letter b, GDPR), to fulfill legal obligations, including tax and accounting (letter c), and, subject to consent or on another suitable legal basis, for marketing purposes. Purposes, legal bases, retention times, categories of recipients and methods of exercising rights are described in detail in the privacy information published on the Site, which constitutes an integral part of these Conditions.
18.3. The provision of the data necessary for the execution of the Contract is a condition for its conclusion; otherwise it is not possible to process the order. The provision of data for marketing purposes is optional.
18.4. Some service providers (e.g. analysis tools, sending communications and payment management) may involve the transfer of data to non-EU countries. In such cases the transfer takes place on the basis of an adequacy decision by the European Commission (including, where applicable, the EU-US Data Privacy Framework) or adequate guarantees pursuant to articles. 44-46 GDPR, such as the Standard Contractual Clauses. The list of suppliers and the related guarantees are indicated in the privacy policy.
18.5. The interested party can exercise the rights referred to in the articles at any time. 15-22 GDPR (access, rectification, cancellation, limitation, portability, opposition) and revoke the consent given, as well as lodge a complaint with the Guarantor for the protection of personal data.