Privacy Policy
The protection of your privacy is one of our main objectives.
This information is provided, in compliance with art. 13 and 14 of EU Regulation 679/2016 (hereinafter "Regulation"), to users (hereinafter: "Users" or "User") of the site in desktop and mobile version, (hereinafter: "Site") owned by LIBELLA srl, with registered office in Piazza San Tommaso D'Aquino, 1 - Frosinone - VAT number: 03037540600 REA: FR195600, in the person of the pro-tempore legal representative Claudio Di Pietro, as Data Controller of personal data (hereinafter : "Owner") and has the purpose of describing the methods of management of the Site with reference to the processing of personal data, as well as to allow Users of the Site to know the purposes and methods of processing personal data by the Owner in case of their conferment.
This document will allow you to know our privacy policy to understand how your personal information is managed when you use our services and to allow you, if necessary, to give consent to the processing of your personal data, expressed and aware, in the sections of the site where you are asked to provide personal data.
We remind you that in the various sections of the website www.cbdworld.it/it/ where we collect your personal data, specific information is published pursuant to art. 13 of EU Regulation 2016/679 for your necessary acknowledgment before providing the requested data. The information and data provided by you or otherwise acquired in the context of the use of the various services of the owner, will be processed in compliance with the provisions of the Regulations and the confidentiality obligations. According to the rules of the Regulation, the treatments carried out by the Data Controller will be based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality.
1. Data controller
The Data Controller carried out through the Site is LIBELLA srl, with headquarters in Piazza San Tommaso D’Aquino, 1 - Frosinone - VAT number: IT03037540600 REA: FR195600.
The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.
2. The personal data being processed
By "processing of personal data" we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, the conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
We inform you that the personal data being processed will consist of an identifier such as the name, surname, email address, location data, an online identifier and other data suitable for making you identified or identifiable, depending on the type of Services requested (hereinafter only "Personal Data").
In particular, the Personal Data processed through the Site are as follows:
a. Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the Site and our customers' sites and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties.b. Dati forniti volontariamente dall'interessato
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the personal data provided.
Entering personal data to take advantage of the specific services offered by the Site (such as the contact form, newsletter subscription, quick purchase or for proposing an application) involves the acquisition of the personal data provided.
In any case, specific information regarding the data provided will be contained with reference to specific services offered on the WebSite.
c. Registration data
The Website offers the possibility for users to register and create their own personal account in order to provide some additional services.
With regard to the processing of Personal Data carried out as part of the registration service, it is specified that the Data Controller will only implement the treatments strictly necessary to provide the service, except for further processing on the basis of an appropriate legal basis pursuant to art. . 6 of the Regulations (for example consent for sending newsletters). The data collected by the Data Controller in the context of the registration request are the common personal data strictly necessary for the provision of the service.
For registration purposes only, the required and mandatory Personal Data are exclusively these. The additional information necessary for the completion of orders may be provided at a later time and are:
• Name
• Surname
• Date of birth
• Shipping address
• Phone number
• Country
• Billing data (if different from shipping data)
The provision of such data is in itself optional, however in the absence of such provision, the Data Controller will not be able to proceed with the creation of the account.
It should be noted that the personal data of the interested party, for purposes strictly related to the provision of the service, may be disclosed to third parties who will manage them as independent owners and under their responsibility (for example shippers, credit institutions, platforms for the management of online payments).
The User assumes responsibility for the Personal Data of third parties published or shared through the Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
If the processing of Personal Data is based on the User's consent, the same can revoke it at any time.
The Data Controller, to the extent of its competence, will not publish and disseminate your personal data.
d. Social Network Links
The website also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so provided by the social networks, only when the user, following the links, logs in to the social network.
Keep in mind that if the user browses the website being "logged in" in the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of the information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.
Facebook: https://www.facebook.com/policies_center/
e. Usage data
Data relating to the use of the Site by the User may also be collected, such as the pages visited, the actions performed, the features and services used.
3. Cookie
a. Types of Cookies
The website www.cbdworld.it/it/ uses cookies to make the user's browsing experience easier and more intuitive.
Cookies are small text files that the sites visited by the user send and record on their computer or mobile device, to be then re-transmitted to the same sites on the next visit. Thanks to cookies, a site remembers the user's actions and preferences (such as, for example, login data, the chosen language, font size, other display settings, etc.) so that they do not have to be indicated again. when the user returns to visit said site or browse from one page to another. Cookies, therefore, are used to perform computer authentication, session monitoring and storage of information regarding the activities of users who access a site and may also contain a unique identification code that allows you to keep track of the user's navigation within. of the site itself for statistical or advertising purposes.
While browsing a site, the user can also receive on his computer or mobile device cookies from sites or web servers other than the one he is visiting (so-called "third party" cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the site to function.
Types of cookies
There are various types of cookies, depending on their characteristics and functions, and these can remain on the user's computer or mobile device for different periods of time: the session cookie, which is automatically deleted when the browser is closed; persistent cookies, which remain on the user's device until a pre-established expiry date.
According to the legislation in force in Italy, explicit consent for the use of cookies is not always required and depends on the type to which they belong. In this regard, the following are distinguished:
- "technical cookies", ie those used for the sole purpose of transmitting a communication over an electronic communications network, or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the functioning of the site or necessary to perform activities requested by the user. The user's consent is not required for this category of cookies.
- "Analytical cookies", used by the site manager to collect information on the number of users and how they visit the site;
- "Profiling cookies", ie those aimed at creating profiles relating to the user and used in order to send advertising messages in line with the preferences expressed by the user while surfing the net.
For non-anonymized third-party analytical cookies and for first and second-party profiling cookies, the explicit consent of the user is always required.
Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the protection of personal data, with the Measure Identification of simplified procedures for the information and the acquisition of consent for the use of cookies. 'May 8, 2014, hereinafter only "Provision", also includes anonymized third-party analytical cookies, when used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site.
How to disable them?
It is possible to disable cookies both through the browser settings and through the mechanisms made available by some third parties ("Specific types of cookies used on the site").
The cookies used on our website
- Technical cookies: they are essential for the maintenance of the session and the correct functioning of the site
- Analytical cookies (third party) anonymized: they are used for the purpose of aggregate analysis of visits to the site, through the use of a third-party service, i.e. Google Analytics.
Google Analytics: http://www.google.com/intl/it_ALL/analytics/learn/privacy.html
How to disable cookies?
- At the first access to the site, a banner is presented that gives the user the possibility to accept or not accept the installation of third-party analytical cookies from Google.
- Control via browser: to disable cookies, it is also possible to act on commonly used browsers (for example, Internet Explorer, Firefox, Chrome, Safari) by changing your preferences on the settings, in order to prevent their installation. This applies to both PCs and mobile devices such as tablets and smartphones: it is a generally and widely supported function. Therefore, cookies can easily be deactivated or disabled by accessing the options or preferences of the browser used and generally only third-party cookies can be blocked; in general, these options will only have effect for that browser and on that device, unless options are active to unify preferences on different devices. Specific instructions can be found on the options or help page of the browser itself. Disabling technical cookies, however, can affect the full and / or correct functioning of various sites.
As a rule, the browsers used today:
offer the "Do not track" option, which is supported by some websites (but not all). In this way, some websites may no longer collect certain navigation data;
offer the option of anonymous or incognito browsing: in this way no data will be collected in the browser and the browsing history will not be saved, but the browsing data will still be acquired by the operator of the website visited;
allow you to delete the cookies stored in whole or in part, but when you visit a website again they are usually installed where this possibility is not blocked.
Finally, the links to the support pages of the most popular browsers are indicated (with instructions on disabling cookies on these browsers):
Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie);
Internet Explorer (http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies);
Safari (iOS)( https://support.apple.com/it-it/HT201265);
Chrome (desktop: https://support.google.com/chrome/answer/95647?hl=it; Android e iOS https://support.google.com/chrome/answer/2392971?hl=it).
4. Purpose of the treatment
The Data Controller informs Users of the Site that the data collected will be lawfully processed pursuant to art. 6 of the Regulation, and with your specific consent where necessary, exclusively for the following purposes:
a) Allow the provision of the requested Services and the subsequent and autonomous management of the control panel, which you will access by registering and creating your user profile, including the collection, storage and processing of data for the purpose of establishing and subsequent operational, technical and administrative management of the relationship connected to the provision of the Services and the making of communications relating to the performance of the established relationship;
b) Requirements relating to the stipulation of contracts, their execution and subsequent amendments or variations and for any obligation envisaged for the fulfillment of the same;c) Consentire la navigazione e la consultazione del Sito;
d) Respond to requests for assistance or information, which you will receive by e-mail, telephone or through the "Contact Us" page of our WebSite;
e) Operational, organizational, managerial, fiscal, financial, insurance and accounting requirements relating to the contractual and / or pre-contractual relationship established;
f) Needs to monitor the methods of providing services, the progress of relations with suppliers and the analysis and management of risks associated with the contractual relationship;
g) To elaborate studies, researches, market statistics;
h) For the sole purpose of security and prevention of fraudulent conduct, the Data Controller sets up an automatic control system that involves the detection and analysis of user behavior on the site associated with the processing of Personal Data including the IP address;
i) If you have given your consent, the sending of newsletters regarding the products and promotions of the website.
5. Legal basis and mandatory or optional nature of the processing
The Owner processes Personal Data relating to the User if one of the following conditions exists:
• The User has given consent for one or more specific purposes:
• The processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
• The processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• The processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Owner;
• The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment.
The provision of personal data by the User is always optional, but it is essential, in relation to those data indicated as mandatory and marked with an asterisk (*) through request forms. Any refusal, even if legitimate, to provide all or part of the requested data, could compromise the regular development of the relationship and in particular, for the personal data defined as indispensable, it could make it impossible for us to carry out the regular provision of the requested services.
6. Recipients of personal data
The Personal Data that will be provided may be known and used by the employees and / or collaborators of the Owner, in charge of managing the Site and the Users' requests, for the sole purpose of carrying out the activities strictly functional to achieving the purposes stated in the previous art. 3.
The Personal Data of Users may also be disclosed to third parties, in charge of lawful processing on behalf of the Data Controller, as External Data Processors or as Autonomous Data Controllers.
More specifically, the Personal Data of Users may be disclosed to third parties for the following purposes, strictly necessary for the provision of the requested services:
• External management of payments by credit card, bank transfer or other tools. The data used for payment are acquired directly by the payment service provider requested without being processed in any way by this application. Payments are provided by communicating the Data to: VIVA PAYMENT SERVICES S.A. - ITALIAN BRANCH Via Lodovico il Moro 27, 20142 Milano Registration Code: 10671810967 VAT: IT10671810967
• Storage, hosting and back-end infrastructure management by communicating the Data to SERVERPLAN srl, Via G.Leopardi, 22 - 03043 Cassino (FR) Italy - REA 156549 - VAT 02495250603 ;
Users, upon simple request addressed to the Data Controller, will be able to obtain the list of any External Data Processors in charge.
7. Existence of an automated decision-making process
The website does not use profiling cookies or other automated algorithms for profiling purposes.
8. Place of data retention
The Data is processed at the Data Controller's operating offices and in any other places where the parties involved in the processing are located.
Personal Data may be transferred to non-EU countries: USA. EUROPE NOT EU
The Data Controller ensures that the processing of your Personal Data by these Recipients takes place in compliance with the Regulations. Indeed, transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. More information is available from the Data Controller.
9. Processing methods and security measures
The processing of Personal Data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
The processing is carried out in a manner and with suitable tools to ensure the security and confidentiality of the data in accordance with the provisions of art. 32 of the 2016/679 European Regulation.
In carrying out the processing operations, all technical, IT, organizational, logistical and procedural security measures will always be adopted so that the adequate level of data protection required by law is guaranteed.
10. Retention period
The Owner will process the Personal Data for the time necessary to fulfill the purposes related to the execution of a contract between the Owner and the User and, in any case, no later than 10 years from the termination of the relationship with the User.
When the processing of Personal Data is necessary for the pursuit of a legitimate interest of the Data Controller, the Personal Data will be kept until such interest is satisfied.
If the processing of Personal Data is based on the User's consent, the Data Controller may keep the Personal Data until revocation.
Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted upon expiry of the retention period. At the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
For more detailed information relating to the specific processing of interest to the user, you can contact the owner at the email address: libellasrl@gmail.com
11. Rights of interested parties
Users can exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:
• Withdraw consent at any time;
• Oppose the processing of your data;
• Access your data (Article 15 of the GDPR);
• Verify and request rectification (Article 16 GDPR);
• Obtain the limitation of processing (Article 18 of the GDPR);
• Obtain the cancellation or removal of their Personal Data (Article 17 GDPR);
• Receive your data or have it transferred to another owner (Article 20 GDPR);
• Propose a complaint to the supervisory authority for the protection of personal data and / or take legal action.
To exercise their rights, Users can send a request to the following email address info@cbdworld.it. Requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days.
Last update: May 2, 2022