Skip to main content

Privacy Policy.

WEBSITE PRIVACY POLICY INFORMATION

Browsing this website and/or accessing specific sections of it may involve the collection and processing of personal data by the Data Controller Spencer & Lewis.

This privacy policy provides information on the personal data processing procedures for users browsing the website https://www.spencerandlewis.com/ and using the functions and services present.

This Privacy Policy governs the processing of personal data carried out by our company on this website in accordance with current data protection legislation, in particular EU Regulation 2016/679 (hereinafter “GDPR”).

DATA PROCESSING

Data Controller: Spencer & Lewis

Registered Office: Viale dell’Arte 19a, 00144 Roma RM

Contact Information: Tel. 06 45582893 – Email: italia@spencerandlewis.com

The Data Controller is responsible to you for the lawful and correct use of your personal data and can be contacted for any information or request relating to such processing.

Data acquired during navigation

The computer systems and software procedures used to operate the website acquire some personal data whose transmission is implicit in the use of Internet communication protocols (IP addresses, URL addresses of the resources requested, time of the request, method used to submit the request to the server, etc.).

This information is not collected to be associated with identified users and/or data subjects, but, by its very nature, is used to operate the Website.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website in the Contact section for requests for information involves the subsequent acquisition of the sender’s address, as well as any other personal data contained in the request. The related processing is carried out exclusively to follow up on the request of the data subject.

Purpose of processing and legal basis

The personal data collected will be used by Spencer & Lewis in accordance with the legal provisions of Article 6 of the GDPR for the purposes indicated below:

  • The data acquired during navigation by all users will be processed to allow the correct functioning of the Website;
  • The personal data provided by users who send requests are used exclusively to follow up on the requests sent.

Processing methods

Personal data will be processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. The processing of data will be carried out in compliance with the security and confidentiality measures to prevent risks, such as loss, destruction, illegal use of data, in accordance with current legislation, by duly appointed Authorized Persons and Data Processors. In the event of withdrawal of consent by the data subject, the data will no longer be processed by the Data Controller.

Recipients of the data and transfer of data outside the EU

User data is processed by employees, other personnel of the Data Controller or external personnel as authorized persons and Data Processors who, on behalf of the Data Controller, perform tasks of a technical and organizational nature following specific instructions from the Data Controller.

The Data Controller transfers data to countries within the EU and may transfer data to countries outside the EU or to international organizations. In the event of transfer, the data will be transferred in accordance with Article 44 (General principle for transfers), Article 45 (Transfer based on an adequacy decision) and Article 46 (Transfer subject to appropriate safeguards). In particular, data may be transferred to third countries or international organizations for which the Commission has adopted an adequacy decision (Article 45 of EU Regulation 2016/679).

Data retention times

In compliance with art. 5 paragraph 1 letter e) of the European Regulation 2016/679, the personal data collected will be kept in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed and for other permitted and related purposes, or in compliance with the requirements of applicable legislation. The retention times of the data collected through browsing the website concerned are indicated below:

  • The data acquired during navigation of this website are kept for the duration of the browsing session;
  • Contact section: the data provided by users who send requests are kept for the period necessary to manage the request;

Rights of the data subject

Users have the following rights provided for by the GDPR:

  • Right to request access to their personal data (art. 15);
  • Right to rectification (art. 16);
  • Right to erasure of personal data (art. 17);
  • Right to restriction of processing of personal data (art. 18);
  • Right to object to the processing of personal data (art. 21);
  • Right to data portability (art. 20);
  • Right to withdraw consent to the processing of personal data for one or more specific purposes, at any time, without prejudice to the lawfulness of the processing based on consent given before revocation;
  • Right to lodge a complaint with a Supervisory Authority (art. 77).

How to exercise your rights

At any time, you will have the right to exercise the rights of the data subject by contacting the Data Controller at the e-mail address italia@spencerandlewis.com