This Privacy Policy is intended to describe the methods of managing the website www.jbosk.it, with reference to the processing of personal data of users/visitors who consult it.

This document concerns only the aforementioned website and not other sites that may be visited through links contained therein, and it contains information provided to users in compliance with the provisions of EU Regulation 2016/679 and Legislative Decree 196/2003 as subsequently amended.

The contents of this Site – including data, news, information, images, graphics, designs, trademarks, and domain names – are the property of JLB BOOKS s.a.s. di Nicola Svaizer & C. and, unless otherwise indicated, are covered by copyright and the regulations on industrial and intellectual property. 

It is specified that the term “Personal Data” is used with reference to any information that allows the operators of the website www.jbosk.it to identify the user (or a third party whose data the user provides), directly or indirectly, including any information related to the purchase of goods or services, or that the user chooses to communicate or share during the use of the Website.

Users/visitors are therefore invited to carefully read this Privacy Policy before submitting any type of personal information and/or filling out any electronic form on the site itself. 

1. Data Controller

The “Data Controller” is the company JLB BOOKS s.a.s. di Nicola Svaizer & C. (VAT No. 01506190220), with registered office in Via S. Andrea 4/A – Primiero San Martino di Castrozza – 38054 Trento, Italy.

The Data Controller can be contacted by registered mail with return receipt or by using the email address privacy@jlbbooks.it or the certified email address ufficio@pec.jlbbooks.it.

2. Types of Data Processed and Purposes of Processing

Navigation Data

The Data Controller will process some personal data of users who interact with the computer systems and software procedures used to operate the site. In particular, navigation data will be processed, which the computer systems automatically acquire during the use of the site, such as the IP address, domain names, and browser types that are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site, control the methods of use of the same; as well as for the ascertainment of responsibility in case of hypothetical computer crimes. 

Data Provided Voluntarily by the User

If users/visitors, when connecting to this site, send their personal data to access certain services or to make requests by email, they are aware that this involves the acquisition by the Data Controller of the sender’s address and/or any other personal data that will be processed exclusively to respond to the request or for the provision of the service.

The personal data provided by users/visitors will be communicated to third parties only if the communication is necessary to comply with the requests of the users/visitors themselves or by legal obligation (such as in the case of invoicing).

In addition to the data expressly provided to the Data Controller, other data deriving from the user’s navigation on the site may be recorded: when the user accesses it, in fact, the site may send the user a “cookie.” A “cookie” is a small text file that the site can automatically send to the user’s computer when they view our pages. “Cookies” serve to make navigation more convenient, as well as to obtain information on the navigation of the individual user within the site and to allow the operation of some services that require the identification of the user’s path through different pages of the site. For any access to the site, regardless of the presence of a “cookie,” the Site records the browser type (e.g., Internet Explorer, Chrome, Firefox), the operating system (e.g., Windows, Macintosh), and the host and referring URL of the user-navigator, as well as data on the requested page. This data may be used in aggregate and anonymous form for statistical analysis on the use of the site. For the complete management of cookies, please refer to the “cookie policy” page of this site.

In addition to those indicated in the specific information notices preceding the completion of the forms in the various sections of the site, the purposes of the processing carried out by the Data Controller are to be understood as:

• collection, storage, and processing for the establishment and operational and administrative management of the contractual relationship connected to the provision of the service offered on the site;
• use of the user’s personal data (in particular email address) to carry out communications relating to the performance of the established contractual relationship;
• processing of personal data provided and those inferred from browsing the site in order to provide a service consistent with the indications transmitted during the use of the service;
• collection, storage, and processing of data to perform statistical analysis in anonymous and/or aggregate form;
• purposes functional to the performance of our business, such as the offer of personalized content such as newsletter services;
• for the communication of commercial information on future initiatives, announcements of new products or services;
• for market research, statistical and economic analysis;
• for sending advertising or promotional material and for the execution of prize games, promotional initiatives in general. 
   

Personal data will also be processed, even without your consent, for the purpose of: fulfilling obligations under tax and accounting regulations; fulfilling obligations provided by law, regulations, EU legislation, or an order of the authority; prevention or detection of fraudulent activities or harmful abuses to the website; exercising the rights of the Data Controller, such as, for example, defense in court.

4. Legal Basis

The legal basis for the processing of customer data carried out by the Data Controller through the website indicated in the heading consists of the contract concluded with the Data Subjects, while, in the absence thereof, the legal basis is to be found in the legitimate interest of the Data Controller in free economic initiative pursuant to Article 41 of the Italian Constitution. Regarding the further purposes that require consent, this will be requested in a specific form and will equally be considered a valid legal basis.

5. Recipients

In addition to the Data Controller, in some cases, categories of Data Processors and authorized persons involved in the organizational structure of the Site (administrative, commercial, marketing, legal, system administrators) may have access to the data. Furthermore, the Data Controller may use external parties (such as third-party technical service providers, transporters, hosting providers, cloud services, IT companies, communication agencies) who may be appointed as external data processors. The updated list of data processors can always be requested from the Data Controller by contacting the address indicated above.

6. Methods of Data Processing

Personal data are collected using automated procedures (e.g., using electronic procedures and media) and/or manually for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the current regulatory provisions on the matter. Personal data will be processed within the European Union. The data processed by the Data Controller will never be disseminated.

7. Data Retention

Personal data will be kept for the time strictly necessary to achieve the purposes for which they are collected and processed. Once the purpose of the processing has been exhausted, or in case of exercise of the right to object to the processing or withdrawal of the consent given, the Data Controller will still be entitled to further retain the personal data in whole or in part for the purposes permitted by the GDPR (such as the need to assert a right in court). After this period, the data will be deleted or made anonymous.

8. Optional or Mandatory Nature of Data Provision

Apart from what is specified for navigation data that is acquired automatically, users/visitors are free to provide their personal data or not to provide them. Failure to provide them may only make it impossible to obtain what is requested.

9. Rights of the Data Subject

The subjects to whom the personal data refer have the right to exercise the following rights, as defined by the GDPR:

• to ask JLB Books S.a.s. for access to their personal data and information relating thereto;
• the rectification of inaccurate data or the integration of incomplete data;
• the erasure of personal data concerning them (upon the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article);
• the restriction of the processing of their personal data (upon the occurrence of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR).
• to request and obtain from JLB Books S.a.s. – in cases where the legal basis of the processing is the contract or consent, and the processing is carried out by automated means – their personal data in a structured, commonly used, and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to data portability);
• to object at any time to the processing of their personal data if there are particular situations that concern them;
• to withdraw consent at any time, limited to cases where the processing is based on their consent for one or more specific purposes and concerns common personal data (e.g., date and place of birth or place of residence), or particular categories of data (e.g., data revealing their racial or ethnic origin, political opinions, religious or philosophical beliefs, health or sex life). The processing based on consent and carried out prior to the withdrawal of the same remains, however, lawful;
• to lodge a complaint with a supervisory authority (the Italian Data Protection Authority – www.garanteprivacy.it).

To exercise the aforementioned rights, you may contact JLB Books S.a.s. by sending an email to the certified email address ufficio@pec.jlbbooks.it or to privacy@jlbbooks.it.

10. Amendments to the Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy and the information notice at any time by informing users through publication on the site and, if in possession of an email address, by email.

If the changes concern processing for which the legal basis is consent, the Data Controller will again collect the user’s consent if necessary.