Dear Customer,

Pursuant to Articles 13 and 14 of the European Regulation 2016/679 on the protection of personal data (GDPR), we inform you that the personal data you provide will be processed in accordance with current legislation and the principles of fairness, lawfulness, transparency and protection of confidentiality provided therein.

DATA CONTROLLER

The Data Controller is Stellarfood SRL registered office: via del Tiratoio 1, 50124 Firenze P.iva: 06291340484 REA FI - 616282 in the person of its legal representative pro tempore who, within the scope of its prerogatives, may avail itself of the collaboration of specifically identified managers or appointees. The owner can be contacted at the e-mail address enjoy@stellarfood.it

DATA COLLECTED.

The data collected by the Owner are those provided by the user during registration (e.g., first name, last name AND e-mail).

MODE OF TREATMENT

The data will be processed with the aid of computer and/or paper tools, according to logic strictly related to the purposes indicated above and in any case adopting procedures and measures suitable to protect their security and confidentiality.

PURPOSE OF PROCESSING  

Data processing will be for the purpose of carrying out the activities listed below:

(a) Issuance of TheStellar Card to enable the use and recognition of discounts and promotions on services;

b) carrying out, subject to your express written consent, direct marketing activities, such as sending - including by e-mail, SMS - advertising material and communications having informative and/or promotional content in relation to products or services provided and/or promoted by the Owner or its business partners;

LEGAL BASIS OF PROCESSING NATURE OF DATA PROVISION

For the purposes referred to in (a) of the previous point, the provision of data is optional, but it is a necessary and indispensable condition for the issuance of TheStellar Card: failure to provide it therefore means that the applicant will be unable to obtain the Card itself. 

For the purposes referred to in letters b) of the preceding point, the provision of data is optional and any refusal to provide such data and to give consent thereto will result in the impossibility for the Holder to follow up on the direct marketing activities indicated therein, but will not affect the possibility for the applicant to obtain the issuance of the Loyalty Card and to access the benefits associated with it.

SCOPE OF DATA DISSEMINATION

Data processing will be carried out by personnel directly employed by the Data Controller and/or by natural or legal persons specifically identified by the latter as data processors or persons in charge of processing. The data provided will in no case be subject to dissemination or communication to third parties, with the exception of subjects whose right to access the data is recognized by provisions of the law or orders of the authorities as well as subjects, including external and/or foreign, which the Owner uses for the performance of activities instrumental and/or ancillary to the management of TheStellar Card and the provision of services and benefits related thereto.

STORAGE PERIODS

Personal Data will be kept by the Data Controller, for the period necessary to manage the purposes for which the data are collected in compliance with applicable regulations and legal obligations.

In contrast, data collected for marketing purposes will be retained for a period of 24 months. 

At the end of the retention period, the Personal Data and the customer's acquired data will be deleted. 

RIGHTS OF INTERESTED PARTIES

The individuals to whom the personal data refer may at any time exercise their rights granted to them vis-à-vis the Data Controller, in accordance with European Regulation 679/2016 (GDPR) and national legislation. In particular they will be able to:

1. To have confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and to have them communicated in an intelligible form;

2. obtain information on the origin of the personal data, the purposes and methods of processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the owner, managers and designated representative 

3. Obtain updating, rectification or supplementation of data;
   
   

4. obtain the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

5. have certification that the aforementioned operations have been brought to the attention of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the protected right;

6. object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection, and to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

7. receive its data, and those entered into the application, in a structured form that can be read by a data processor and in a format commonly used by a computing device (data portability); 

To exercise these rights, the data subject may contact the Data Controller directly.