Cookie Policy

What are they?

The term cookie refers to a small text file in which brief information about your browsing on a particular website is stored, and which is installed on your device when you log in. Each cookie contains various data (e.g. the name of the server it comes from, a numeric identifier, etc.), may remain in the system for the duration of a session (until the browser is closed) or for long periods and may contain a unique identifier. When you visit the site again, they will be redirected to the site that generated them (first-party cookies) or to those provided by third parties able to recognise them (third-party cookies) . Rastelli Arms Srl wants to reassure you about the security of the cookies on its website: they do not damage your device in any way, but they will allow you to navigate faster, giving you a better experience. What are cookies used for? Cookies are used for different purposes depending on their type: some are strictly necessary for the correct functionality of a Website (technical cookies), while others optimise its performance to offer a better user experience or allow the acquisition of statistics on the use of the Site, such as analytics cookies, or allow personalised advertising to be displayed, such as profiling cookies. The Rastelli Arms Srl site uses both cookies that do not require your consent for their installation (such as technical cookies) and cookies that require your prior consent before they can be used (such as profiling cookies). In particular, cookies may be activated on the site:

Technical cookies (which do NOT require your consent):

These cookies are necessary for the operation of the site and allow you to access its functions (so-called navigation cookies) or to authenticate yourself in the session. There is also the use of functional cookies, which allow you to store your preferences and settings, thus improving your browsing experience on the site. To ensure their functionality, these cookies are generally not deleted when you close your browser; however, they have a predefined lifetime (generally up to a maximum of 2 years) and after this period they are automatically deactivated. These cookies and the data they collect will in no way be used for any further purposes. The installation of technical cookies occurs automatically after logging in to the site or to activate certain functionalities (e.g. by selecting the "remember me" option). You can always decide to disable them at any time by changing the settings of your browser: in this case, you may, however, experience some problems viewing the site.

Analytical cookies (which do NOT require your consent):

These cookies keep track of the choices made on the site and data relating to navigation, in order to carry out statistical analysis, in an anonymous and aggregate form.

Profiling cookies (which require your CONSENT):

This site also uses profiling and third-party cookies, the installation of which is subject to your prior consent. Profiling cookies can include several categories, including advertising profiling, retargeting or social cookies.

• Advertising profiling cookies: they create a user profile that allows you to view advertising content in line with the preferences you expressed when browsing the site;
• Retargeting cookies: these are created in order to send you advertising content related to products in which you have expressed interest;
• Social cookies: this site provides for the installation of social network plug-in cookies. These cookies are managed directly by third parties and enable the display of advertisements in line with your preferences.

When you access the site, a banner will inform you of the presence of profiling and retargeting cookies and, through it, you will be able to consent or not to their installation. You may revoke your consent at any time, without affecting your ability to visit the site and enjoy its contents. The installation of profiling, retargeting, analytical and social cookies, including any other activity related to them, is managed through third party services. For more information and to activate or deactivate these cookies, you can access the information provided directly by the third party companies: the relevant list is available in our Cookie Policy. The user is informed both through the short information notice (banner displayed until consent is given or denied) and through our Cookie Policy which we invite you to read carefully for all other information on the cookies used on the site and for information on how to disable them.

For what purposes will you use my data and on what legal basis?

1. Your personal data will be used in order to: a) Allow you to browse the site; b) Allow you to register on the site; c) Provide you with the requested services or allow you to carry out transactions on the e-commerce platform; d) Ensure adequate support in relation to your needs or requests; e) Comply with requests from public and government authorities. f) Manage any disputes or litigation and therefore defend the rights of Rastelli Arms Srl, both in and out of court. The purposes under points a), b), c), d), e), f) above are jointly defined as “Mandatory Purposes” and therefore the provision of your data is necessary. Exclusively through your prior consent: g) Your data may be used to carry out market surveys in order to improve the experience and quality of the services offered; h) You will receive newsletters and commercial communications from Rastelli Arms Srl through appropriate means of communication (such as e-mail or direct mail, SMS or telephone calls), regarding the products and services offered, special events or promotion of dedicated offers; i) A profile may be created based on your preferences or needs in order to send you personalised commercial communications about products and services that you have requested or that may be of interest to you. . The purposes referred to in points g), h), i) are jointly defined as “Marketing Purposes” and therefore the provision of your data is optional.

2. In order to ensure that we process your personal data for the purposes set out in this Section, please note that:

• The Mandatory Purposes are such because they are necessary for the registration, use and provision of the services offered by the website; therefore, if you do not intend to provide us with your personal data for such purposes, you will not be able to register with the Site and consequently you will not be able to use the services offered by Rastelli Arms Srl;
• The Marketing Purposes are discretionary, but failure to consent to their execution will make it impossible for Rastelli Arms Srl to provide you with commercial communications based on your interests. You may, however, at any time revoke the consent previously given for these purposes, by sending a communication to the e-mail address indicated in the section "How can I contact the Data Controller or handle my complaints?" or, in the case of the newsletter, request cancellation from the service by selecting the link at the bottom of each communication.

3. With reference to the purposes indicated in point 1, the legal basis used is as follows:

• For data concerning site navigation (point a)), the legitimate interest of Rastelli Arms Srl in the proper functioning of the website and in ensuring safe navigation;
• For the registration and use of the e-commerce platform (points b) and c), the performance of contractual services;
• For the request for information and support (point d)), the provision of the service you have requested;
• For orders from the authority (point (e)), the fulfilment of a legal obligation;
• For the protection of the holder's rights (point (f)), the legitimate interest of the holder;
• For marketing and profiling purposes and for the newsletter service (points g), h) and i)), your free and informed consent is always revocable.

With whom will you share my data?

In compliance with the purposes indicated in the previous section, the staff of Rastelli Arms Srl may be assigned to process your data in order to provide you with the requested services, information or support. Therefore, access to your personal data will be expressly authorised by the Data Controller, who, should it be necessary, may appoint the subjects he or she uses for the provision of services and activities falling within his or her competence as Data Processors pursuant to Articles 28 and 29 of the GDPR. We would also remind you that the list of Data Processors is available at the Data Controller's registered office or, alternatively, you can request it from them using the contact details indicated in the section "How can I contact the Data Controller or handle my complaints?".

How will you process my data?

Your personal data will also be processed with the aid of electronic means for the time strictly necessary to achieve the purposes for which they were collected. Divisione Filatelica Numismatica San Marino will take appropriate technical and organisational measures to prevent the loss, unlawful or incorrect use of your data, as well as to prevent any unauthorised access by third parties. Therefore, Rastelli Arms Srl will guarantee the security of your personal data, limiting the number of subjects who will be allowed access to the servers or databases and setting up protection systems aimed at avoiding the risk of computer attacks.

Are my data processed outside Europe?

The data processed by Rastelli Arms Srl resides on servers located within the territory of the European Union. Some cookie service providers are based in non-European countries, in particular in the United States, as specifically indicated in our Cookie Policy. In these cases, personal data also reside in servers located in the United States, but always in compliance with the provisions of Articles 45 et seq. of the GDPR. All necessary precautions will therefore be taken to ensure the most complete protection of personal data by basing such transfer: a) on adequacy decisions expressed by the European Commission; b) on adequate guarantees expressed by the third-party recipient pursuant to Article 46 of the Regulation; c) on the adoption of corporate binding rules. These requirements are always guaranteed by the suppliers of the services of Rastelli Arms Srl

How long will you keep my data?

Rastelli Arms Srl will process your personal data for the time strictly necessary to achieve only the purposes listed above and, in any case, within the terms provided for by law to be consulted in Section "For what purposes will you use my data and on what legal basis?". At the end of the retention period, your personal data will be deleted or irreversibly anonymised and aggregated. Regarding the terms of deletion of data processed via cookies, you can find all information in our Cookie Policy.

What are my rights and how can I protect my privacy?

A: In relation to your personal data and in compliance with the GDPR, Rastelli Arms Srl informs you that you have the right to request:

• access to your data;
• the rectification of any errors in our databases relating to your data;
• the deletion of your data if they are held in the absence of the legal prerequisites;
• the restriction of the processing of your data;
• opposition to data processing;
• data portability.

Models and more information are also available here: https://www.garanteprivacy.it/web/garante-privacy-en/the-italian-data-protection-authority-who-we-are. In the following table we detail how to exercise your rights:

Rights of the data subject

At any time, the data subject may exercise, in connection with the data processing described, the rights provided for in the applicable data protection legislation, including the right to:

• receive confirmation of the existence of their personal data and access to their content (access rights);
• update, amend and/or correct their personal data (right of rectification);
• request the deletion or restriction of data processed in breach of the law, including data whose retention is not necessary for the purposes for which the data were collected or otherwise processed (right to be forgotten and right to restriction);
• object to processing based on legitimate interest (right to object);
• revoke consent, without prejudice to the lawfulness of the processing based on the consent given before revocation;
• lodge a complaint with the Supervisory Authority in the event of a breach of data protection regulations;
• receive a copy of the data in electronic format concerning him or her made for the recruitment service and request that such data be passed on to another data controller (right to data portability).

PTo exercise these rights, you may contact the Controller at any time by sending your request to the following email address: contatti@softairrastelli.com. In addition, the data subject may lodge a complaint with the Supervisory Authority, represented in Italy by the Garante per la Protezione dei Dati Personali www.garanteprivacy.it .