Privacy Policy

Privacy Notice

The data controller of this site is the company :

BDC WEB SARL (tva FR96798050456), 201 Route d’Arles - Pôle de Cadillan,13690 Graveson, France with DPO (Data Protection Officer) who can be reached at the following e-mail address: [email protected] The company provides, pursuant to Articles 12 and 13 of the new EU Regulation 2016/679 (so-called "GDPR"), and Legislative Decree 101/2018, and when it is applicable the UK Data Processing Act 2018, this information describing the methods for processing the personal data of users who consult this site accessible electronically from the address: https://www.lourdes-giftshop.com (or however corresponding to the home page of the site). This information is provided for the site in question and not for any other websites that may be consulted by the user via links present on the site

Purposes of the Data collected.

Following consultation of this site and/or voluntary registration on it, the relevant personal data will be processed. To this end, the Data Controller informs the data subject that the personal data provided will be processed in accordance with the provisions of the GDPR and the revised Privacy Code and concern:

(i) Navigation Data;

(ii) Personal Data not falling within the special categories of personal data as listed in Article 9 GDPR (identification and contact data, payment data, IP address, purchases);

iii) Data falling under the special categories of personal data as listed in Art. 9 GDPR (data also indirectly related to religious belief, purchase "religious articles", "liturgy accessories", "special occasions")

Legal basis

The processing is carried out on the basis of the conditions of lawfulness envisaged under Article 6 GDPR, for the purposes inherent to the relationship established with the Data Controller, therefore, its legal basis with regard to the type of data referred to in point (i) above as required under Article 13 letter c) GDPR is justified in the reasons for which the relationship is established with the Data Controller and in this case in relation to navigation on this Site and/or completion by him/her of the relative contact form and the relative information or services requested and therefore, with legal basis;

a) consent of the data subject (art. 6, first par. lett. a) GDPR) (marketing, profiling, purchasing);

b) performance of a contract (Art. 6, para. 1, lit. b) GDPR) (purchasing);

c) performance of a legal obligation to which the data controller is subject (Art. 6, para. 1, lit. c) GDPR) (e.g. invoicing);

(d) legitimate interest of the controller (Art. 6(1)(f) GDPR) (soft-spam and/or defence in court).

Processing methods

The data will be processed on paper and/or electronically by persons specifically authorised to do so; it is also specified that no processing is carried out on the basis of automated decision-making processes. The provision of data is optional, however, failure to provide such data may make it impossible to perform the service. Some navigation data (on this point see our cookies policy) are, on the other hand, acquired automatically by the system. The processing of the data provided to the Data Controller will include: management, organisation, use, storage, creation of the database, processing throughout the EU and non-EU territory (countries falling within the cases ex art. 45 and 46 GDPR) and the performance of statistics, communication to the partners with whom the initiatives will be developed - subjects who will be appointed as data processor pursuant to art. 28 GDPR, Join Controllers or autonomous Data Controllers in the event that personal data will be communicated to them.

The processing will also include the communication of future initiatives and the sending of promotional material. Please also note that the processing of data related to the web services offered by the site hosted by a company located in France/Europe/USA, whose name will be communicated upon motivated request, are only carried out by collaborators and authorised third parties in the case of occasional maintenance operations or by our manager.

Spontaneous applications

In relation to the data that you provide or directly send us your CV (from here on only CV), we inform you that in our capacity as Data Controller we will use the data indicated in the form or CV sent to us to verify the correspondence with the ideal candidate that we are possibly looking for, we also specify that pursuant to art. 111 bis of Legislative Decree 101/2018 for this type of processing, the information referred to in art.13 GDPR will be provided at the first contact following the sending of the CV, otherwise the data will be deleted as soon as it is clear that no contact will be made without sending any further information. However, should you provide partial or erroneous data, it may be impossible for us to evaluate you for the requested job position and we will proceed with deletion as above.

Rights of data subjects

The Data Controller also informs that the rights of rectification under Art. 16 GDPR, the right to be forgotten under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR as well as the right of access to the personal data provided and to all consequential information as listed under Art. 15 GDPR are guaranteed. Data subjects also have the right to:

1. Ask the data controller for access to and rectification or erasure of personal data or restriction of processing concerning them or

2. To object to their processing;

3. To the portability of the data ex art 20 GDPR;

4. Where the processing is based on Article 6(1)(a) or Article 9(2)(a) to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given prior to the revocation;

5. To lodge a complaint with a supervisory authority;

To exercise the rights listed above or to obtain further information, simply send an e-mail to the following e-mail address [email protected] indicating in the subject line: "exercise of rights pursuant to the GDPR" and inserting in the body of the e-mail the right you wish to exercise, as well as your name, surname and the e-mail address where you wish to receive a reply from the Controller. Once the Controller has processed the information received, it will send a reply within the terms indicated in Article 12 of the GDPR.

The Data Controller in specific situations adopts specific information notices accompanied by the relevant consents to be given in order to allow the data processing, moreover, the Data Controller warns you that if it intends to further process the personal data for a purpose different from the one for which it was collected, before such further processing it will provide the data subject with information regarding such different purpose and any further relevant information, collecting, in the case of specific consent.

Retention of your data

Personal data will be kept as long as necessary to pursue the purposes for which it was acquired. The period of data retention depends on the purposes for which they are processed and therefore may vary, i.e. throughout the period during which the data subject is a customer and thereafter for 5 years unless explicit consent is requested to extend data retention. Personal data functional to the fulfilment of civil and tax obligations will also be retained afterwards, in compliance with the retention periods envisaged by the regulations applicable from time to time and for the eventual defence of the Data Controller in court.

Cookies

A cookie is a small text file that is deposited by a website on the hard drive of the user's device, cookies thus uniquely identify the surfer's browser. Cookies do not harm the computer and do not contain viruses. Cookies have the function of streamlining web traffic analysis or signalling when a specific site is visited and allow web applications to send information to individual users.

Only you can decide to delete cookies manually from your device or have them automatically deleted when you close your installed browser.

For more information please visit our cookies policy.

Sending newsletters and marketing. During the data retention period, the data controller reserves the right to send soft marketing offers as a legal basis for processing, or to be the recipient of non-soft marketing communications if you have given your consent.

Copyrights

All contents of this website are protected by the legal provisions on copyrights and intellectual property. Reproduction in any form, even partial, is prohibited. However, the Controller does not grant any licence to copyright, patents or any other intellectual property right.

Liability The Controller accepts no liability towards site visitors with regard to the content of what is published (accuracy and completeness of the information provided) or the use that third parties may make of it. The material and information on the site are subject without notice to changes or updates by the Controller.

Enforcement

The Controller regularly updates this policy and in general its compliance with the Privacy Policy, adapting it to any new regulations issued. If you have any questions or concerns regarding this Privacy Policy you may contact us at any time by writing to: [email protected].

Complaints

We will respond to users who send questions and/or formal written complaints to this address [email protected] in order to investigate the reported problem. We are committed to co-operating with the relevant authorities to resolve any complaints about the processing of personal data that are not resolved directly between the Data Controller and individuals.

Consent to data processing

Personal data will be kept as long as necessary to pursue the purposes for which it was acquired. The period of data retention depends on the purposes for which they are processed and therefore may vary, i.e. throughout the period during which the data subject is a customer and thereafter for 5 years unless explicit consent is requested to extend data retention. Personal data functional to the fulfilment of civil and tax obligations will also be retained afterwards, in compliance with the retention periods envisaged by the regulations applicable from time to time and for the eventual defence of the Data Controller in court.

Retention of your data

I hereby declare that I have received, read and understood the above information and therefore consent to the processing of my personal data in the terms indicated above:

a) for Marketing purposes.

consents does not consent

b) sale of articles in sections: religious articles, liturgy accessories, special occasions, all other type of articles

consents does not consent

consent is required for the purchase of these articles

Consent to the use of cookies.

For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

• Your consent status or the withdrawal of consent
• Your anonymised IP address
• Information about your Browser
• Information about your Device
• The date and time you have visited our website
• The webpage url where you saved or updated your consent preferences
• The approximate location of the user that saved their consent preference
• A universally unique identifier (UUID) of the website visitor that clicked the cookie banner