Privacy Policy
Premise and Information pursuant to Article 13 of Legislative Decree 196/2003 (Privacy Code) and subsequent European Regulation EU/679/2016
Last updated: October 15, 2024
For the “Monks’ Shop of the Abbey of Monte Oliveto Maggiore” (hereinafter referred to as “Monks’ Shop”), the protection of user privacy is very important. This document describes, among other things, the personal data we collect, the purposes and methods of processing to which the collected personal data is destined, and the security measures adopted to protect it. These regulations refer to the website shop.monteolivetomaggiore.it (hereinafter referred to as the “site”).
Our Privacy Rules contain the information required by Article 13 of Legislative Decree No. 196 of June 30, 2003 (Privacy Code), which implements Directive 95/46/EC on personal data protection, as well as Directive 2002/58/EC on personal data protection in electronic communications. As of May 25, 2018, the European Regulation EU/679/2016, known as the General Data Protection Regulation (GDPR), is also in effect and will complement the aforementioned decree. For more information about Italian privacy law, visit the official website of the Italian Data Protection Authority.
In particular, we inform you that the ‘Data Controller’ under the Privacy Code is the Congregazione Benedettina Olivetana, Località Monte Oliveto Maggiore, 53041 Asciano Siena, Italy, hereinafter referred to as such.
The personal data that the Monks’ Shop processes to provide its online services generally includes:
- Personal details;
- Addresses;
- Phone numbers;
- Email addresses;
- Request form data.
For a more detailed list of your personal data processed by the Monks’ Shop, see paragraph 2 of the Privacy Rules.
Your personal data is collected by the Monks’ Shop when filling out the contact form or finalizing an order, by sending an email to the provided address and through traditional mail and/or phone. The collection of your personal data is necessary to ensure and fulfill the user’s request. Refusal to provide such personal data may result in the inability to complete your request and, therefore, to use the Monks’ Shop services.
Your personal data is collected and processed using electronic tools. In some cases, automatic collection tools such as ‘cookies’ may be used to allow you to enjoy certain personalized services. For an explanation of how data is collected through these tools, see paragraph 3.
Your data will be stored on our PC located at the legal office, in the offices of the Monks’ Shop, Località Monte Oliveto Maggiore, Asciano Siena, Italy, where it will be processed for the purpose of allowing you to use our services and for the other purposes stated in these Privacy Rules (see paragraph 4).
The processing of your personal data may be carried out by the Monks’ Shop without your explicit consent also to fulfill specific legal obligations, regulations, and applicable community legislation. Moreover, in cases identified by the Italian Data Protection Authority, to pursue a legitimate interest of the Monks’ Shop or a third party, such as the protection against fraud, as well as to assert and defend a right in court.
To the extent and for the purposes indicated in the Privacy Rules, some of your personal data may be communicated by the Monks’ Shop to third parties, public and/or private entities, such as:
- State financial administration and public authorities;
- Judicial authorities and law enforcement agencies;
- Consultants for the company and professional studies (legal, accounting, tax consultants, etc.);
The Monks’ Shop may process some of your personal data (such as email address) to send you communications and updates on the services offered by the Monks’ Shop itself.
The Monks’ Shop ensures the utmost confidentiality of your personal data by applying the most appropriate technologies, in compliance with Italian and European standards regarding minimum security measures to prevent unauthorized access to its databases and possible accidental loss and/or destruction of data. For more information, see paragraph 9.
The Monks’ Shop recognizes to each user of the Site the rights provided by Article 7 of the Privacy Code and Article 17 of the GDPR. For a detailed explanation of these rights, see paragraph 8.
For any request and/or communication regarding privacy, you can contact the Monks’ Shop at the Asciano Siena office.
Index of Contents
1 – A Special Note for Minors
2 – The Personal Data We Collect
3 – Use of ‘Cookies’
4 – How We Process Your Personal Data
5 – How We Store Your Personal Data
6 – Scope of Communication of Your Personal Data
7 – Access, Control, and Modification of Your Personal Data
8 – Security
9 – Notice
(1) A Special Note for Minors
Minors under 18 years old may not use our services; therefore, they should not provide any personal data during the registration process. If you are under 18, you can only use our services with the supervision and control of your parents or other adults on their behalf.
(2) The Personal Data We Collect
The Monks’ Shop collects your personal data for the purposes related to the provision of its services. When you fill out the request form, the following identifying data will be requested:
- Name and surname
- Address
- Tax code and/or VAT number
- Phone number and Fax
- Email address
(3) Use of ‘Cookies’
Some pages of shop.monteolivetomaggiore.it may use automatic data collection methods such as ‘cookies.’ Cookies are small files stored on your hard drive. The Monks’ Shop primarily uses cookies that are automatically deleted at the end of each login session. These are used by the Monks’ Shop to allow you to:
- Enjoy some personalized services;
- Create carts and complete orders;
- Improve website security, including through the prevention of illegal activities.
In cookies, the following personal data may be temporarily stored: - Referring URL
- URL typed afterward
- Browser type used
- IP address
If your browser allows it, you can always and freely refuse cookies, but in this case, you might be prevented from using certain services of the Monks’ Shop.
The following cookies are installed on your PC by the site:
When visiting the site pages while logged into Facebook or your Google account, other proprietary cookies from these platforms may be installed, which are not under our control.
For more information, please refer to the dedicated page.
(4) How We Process Your Personal Data
The Monks’ Shop processes the personal data you provide solely to fulfill your requests and enable you to use the related services.
The Monks’ Shop may also process some of your personal data in activities to verify non-compliant behaviors, or to resolve disputes, address problems, and assert the rights in this document.
The Monks’ Shop may use your email address to send you information about its services.
(5) How We Store Your Personal Data
Most of your personal data will be stored in the archives and on the Monks’ Shop’s PC to allow you to enjoy all the services you requested. You can always ask for modifications, updates, rectifications, and even partial deletions of your personal data.
(6) Scope of Communication of Your Personal Data
The Monks’ Shop informs you that some of your personal data may be communicated to third parties in compliance with the current laws. We do not sell or disclose the personal data of our users to third parties for purposes other than those stated in our Privacy Rules. Below are some cases where your personal data might be communicated to third parties.
(6.1) Internal Service Providers
The Monks’ Shop may rely on internal service providers to whom some of your personal data may be provided. In some cases, communication is necessary for the provision of the Monks’ Shop services you requested. Access and use by internal service providers of your personal data provided by the Monks’ Shop occurs lawfully and solely for the purposes related to the service performance. Communication will occur in compliance with personal data protection regulations and confidentiality and privacy contractual obligations.
To deliver the ordered goods, some of your personal data will be communicated to BRT Corriere Espresso. You can consult their privacy policy here: https://www.brt.it/it/privacy.do
For order payments, you may be redirected to PayPal. Your data will be processed securely via HTTPS protocol. You can review PayPal’s privacy policy here: https://www.paypal.com/it/webapps/mpp/ua/privacy-full. Your personal data may also be processed outside the European Community and in the USA.
(6.2) Legal Requests
The Monks’ Shop collaborates with public authorities to ensure compliance with the law and the rights of other users and third parties, particularly regarding intellectual property rights. Therefore, in case of formal requests and in compliance with applicable laws, your personal data may be communicated to judicial authorities or other public administration for state defense and security needs, prevention, investigation, or prosecution of civil, criminal, and administrative offenses. Public entities are also authorized to request and obtain personal information about you if necessary or appropriate for investigations or checks regarding fraud, cybercrimes, intellectual property violations, cyber piracy, or other illegal activities, which might expose the Monks’ Shop or our users to legal, civil, or criminal liabilities.
(7) In accordance with Article 7 of the Privacy Code and Article 17 of EU Regulation EU/679/2016 (GDPR), the following rights are granted to you:
- The right to obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet recorded, and to receive them in an intelligible form.
- The right to obtain the following information: a. the origin of the personal data concerning you; b. the purposes and methods of processing; c. the logic applied in the case of processing carried out with the aid of electronic tools; d. the identifying details of the data controller, the data processors, and the representative designated under Article 5, paragraph 2 of the Privacy Code and Articles 25 and 25, Section IV of the GDPR; e. the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as representatives designated in the state, or as data controllers or processors.
- The right to obtain: a. the updating, correction, or, when you have an interest, the integration of the data; b. the deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including those that are no longer necessary to be retained for the purposes for which the data were collected or subsequently processed; c. confirmation that the operations referred to in points a) and b) have been made known, even regarding their content, to those to whom the data has been communicated or disseminated, except in cases where this fulfillment is impossible or involves a disproportionate use of means compared to the right being protected.
- You also have the right to object, in whole or in part: a. for legitimate reasons, to the processing of personal data concerning you, even if they are relevant to the purpose of collection; b. to the processing of personal data concerning you for the purpose of sending advertising materials or direct sales, or for market research or commercial communication. To exercise the above rights, please contact the Negozio dei Monaci.
(8) Security. The security standards used by the Negozio dei Monaci to keep your personal information confidential, including ‘firewalls,’ are the highest available techniques. Additionally, specific techniques are used to protect this data from unauthorized access by third parties. In any case, the minimum security measures indicated by the Privacy Code and subsequent amendments are guaranteed.
(9) Notice In the future, Negozio dei Monaci reserves the right to make changes to these Privacy Rules.