Privacy & Cookie


Information on the protection of personal data.
Art. 13 EU Reg. 679 of 27 April 2016 (effective from 25 May 2018)

Pursuant to Article 13 of the "European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (from now on "GDPR"), ERBORISTERIA COMO of Dott.ssa Laura Comollo, as Owner, is required to provide users who connect to the domain (regardless of the purposes of the link) some information related to the processing of personal data therein.
This document constitutes the "Privacy Policy" (subject to future updates) of this site. For the purpose of this information, the definitions all referred to in art. 4 of the GDPR means:
"Domain": the domain, reachable through the world wide web service of the Internet, at, consisting of data, applications, technological resources, human resources, organizational rules and procedures for the acquisition, storage, processing, exchange, retrieval and transmission of information.
"Collection points": areas within the domain for the collection of personal data.

I. Warnings and Protection of Minors
The processing of personal data will apply the principles of lawfulness, fairness and transparency. Personal data will be collected for specific, explicit, legitimate purposes (purpose limitation) and will be adequate, relevant and limited to the purposes for which they are processed (data minimization). They will always be up to date and accurate and kept for a period of time not exceeding what is necessary for the purpose of executing the Contract, without prejudice to the fulfillment of legal and tax obligations that establish longer retention periods (limitation of conservation). Personal data will be processed by adopting all appropriate security measures to ensure the integrity, confidentiality and unavailability of unauthorized third parties (integrity and confidentiality). If not expressly indicated, the provision of personal data through the collection points on the site is reserved for adults.

II. Reference standards and legal bases of processing.
The processing operations, which we will explain below in detail, have their legal basis in the rules governing your right to the protection of your personal data, your right to privacy, and finally in those that allow you to express or revoke , at any time, your informed consent to processing operations namely:
• The EU 679 General Regulation of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free movement of such data;
• Your informed consent, manifested in accordance with the current legal provisions on the protection of personal data (Article 6 GDPR).
• The fulfillment of contractual obligations assumed by ERBORISTERIA COMO in your favor at the time of your participation in the Service (Article 6 GDPR);
• Fulfillment of obligations or orders to which the Data Controller is bound by law or order of the Authority (Article 6 GDPR).

III. - Nature of the data being processed.
III.1. - The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request. In any case - where the law provides - you will be required from time to time consent to the processing of your personal data.
III.2. - Exclusively after your consent, where necessary, the following categories of personal data concerning you will be or may be processed for the purposes indicated.
(A). - Common personal data, identification data.
Such as Name and Surname, Year of birth, Gender, Address, City, Province, E-mail address, Telephone number, C.A.P., Links to the profiles of the following social networks: Facebook, Instagram and Twitter.

(B). - Technical treatments.
The IP number and the type of browser used by you for connection to the domain (non-identifying data), automatically recorded by the logical protection devices, are also subject to processing. and control of access to the domain. This personal data will be used exclusively for the purpose of controlling network traffic to the domain. This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow you to identify users. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site: except for this possibility, at present, data on web contacts do not persist for more than seven days.

(C). - Cookies.

ERBORISTERIA COMO performs an anonymous treatment and procedures for the analysis of data relating to the pages of the domain you have visited, found through cookies. By means of these technologies (which allow you to understand your browsing preferences, checking the areas of the domain previously visited) ERBORISTERIA COMO can customize their services to your needs, without making unnecessary registrations. A cookie is a file that is downloaded to your PC, tablet, smartphone or other terminal when you access our web page. Cookies allow you to store and retrieve information about your browsing habits or the Device from which you generally access anonymously. The information we obtain refers to the number of pages you visit, the language, the place from which you access, the number of new users, the frequency and repetition of visits, the duration of the visit, the browser or the device through which you connect or run the application. What kind of cookies does this website use? uses only co technical okie, with respect to which, pursuant to art. 122 of the Privacy Code and the Provision of the Guarantor of May 8, 2014, no consent is required from the party concerned • Third party cookies: The social buttons.They are those that are sent to you Device from a device or domain that does not is managed on our behalf, but on behalf of another person who processes the data obtained through cookies, through the use of these buttons are therefore not installed on the site third-party cookies. At the following link you find the declaration on the protection of data Facebook:• Session cookies: These are cookies that are deleted when you leave our website or close the application. • Analysis cookies: These are the ones that are treated for our account or on behalf of others, and that allow us to quantify the number of visits, with the purpose of making a measurement and a statistical analysis of its use in order to correct the problems we detect and make to use our website. Authoring, blocking and deleting cookies If you wish, you can allow, block or delete cookies installed on your Device using the browser options installed on your PC or the privacy options of the Device from which you make the visite.Nel if it is not allowed to install cookies in your browser it is possible that you can not access any of the sections of our web page.For example, you can find information on how to do it if you use these browsers: • Firefox:• Chrome:• Explorer: http: //• Safari:• Opera;

(D). - Particular categories of personal data. In the case in which, through the domain, the collection of particular categories of personal data pursuant to art. 9 EU Reg. 679/2016, you will be informed in advance and put in a position to express - in the manner of the law - the relative consent.

IV. - Nature of the provision, sources of data. The provision of your personal data is not mandatory, but in some cases, it is necessary, and therefore mandatory, to allow you to benefit from the services and functionalities of the site.

IV.1. - Data whose conferment is necessary.

IV.1.1. - The provision of some personal data is necessary, and therefore mandatory, to give effect to your specific requests; you are always free / or not to provide your personal data, but in this case it could be impossible for the Data Controller to meet your requests, meet your needs or make them use, in their entirety, all the functions available on the website

IV.1.2. - It is necessary to provide personal identification data to be able to register on the site and receive, together with other advantages, the desired information on the products, services and initiatives of ERBORISTERIA COMO .

IV.1.3. - These identification data will be processed both on paper and electronic media, and will be stored by ERBORISTERIA COMO exclusively as long as the interested parties, will keep their registration on the Site, or for a maximum of three years from the last action carried out inside the Site. Once these retention times have elapsed, the personal identification data will be deleted automatically.

IV.2. - Data used for authentication.Perfected registration, during which you can decide the related login credentials, including your password, which only you know, you can access the site ERBORISTERIA COMO from mobile device or from desktop, by entering in the appropriate fields the authentication credentials chosen, personal, which you must keep with the utmost care. We advise you to choose a password that has at least the following characteristics: length not less than eight characters, including at least one special character. In case you forget your password, the recovery procedure provides a link to reset it independently. The authentication data will be encrypted from their first use and ERBORISTERIA COMO can not know them in any way.

IV.3. - Data Sources. We will collect your data, directly from you, through your interactions with the website

V. Purpose of the Treatment.

ERBORISTERIA COMO in addition to the necessary treatments in relation to legal obligations, regulations, or deriving from the order of the Authority, will carry out, only with your consent, if necessary, the operations necessary to allow you to benefit the services and functionalities of the website; specifically:

1. the management of your relationship with ERBORISTERIA COMO;

2. purposes strictly connected and instrumental to the management of the aforesaid relationship (eg for the acquisition of pre-contractual information and to execute the services and operations, as contractually agreed);

3 purposes of analyzing the information obtained for the purpose of the proposal, by sending ERBORISTERIA COMO of the newsletter and / or promotional or advertising information, services and / or products of ERBORISTERIA COMO, or third parties, from ERBORISTERIA COMO considered to be of interest to you, as well as the development by ERBORISTERIA COMO of opinion polls;

4. purposes relating to the monitoring of customer relations and credit and fraud risk controls related to the services provided by ERBORISTERIA COMO;

5. fulfill specific requests of the interested party.

VI. Methods of processing personal data.

In relation to all the purposes indicated in the previous paragraphs, your personal data will be processed electronically and processed by special computer procedures in order to customize the services that ERBORISTERIA COMO able to offer them. The data will be processed in such a way as to guarantee its logical and physical security and confidentiality, and may be carried out using manual, computerized and telematic tools designed to store, transmit and share the data. The logic of the processing will be strictly related to the purposes pursued.

VI.1. - Data Retention Policy. In relation to the purposes referred to in the letter (V.3), namely the proposition of commercial or promotional information, the related processing that, in compliance with the provisions of the Prov. Doc. Web 1103045, of the Authority for the protection of personal data, will not have sensitive data, will occur, by the owner, subject to the manifestation of his consent, for no more than 24 months from collection exclusively on aggregated data.VI. 2. - Security and data retention.

VI.2.1. - Your personal data will be stored within the European Union, the related security policies are reviewed in accordance with the relevant Best Practices.

VII. - Recipients of data and transfers abroad.

VII.1. - Data processors and persons in charge of data processing.

They may become aware of the personal data referred to in this information, as Data Processors or Data Processors: • within ERBORISTERIA COMO, qualified personnel, each limited to their duties and duties and on the basis of the assigned tasks and instructions given • outside ERBORISTERIA COMO, third parties, also specifically designated as Managers or in charge of processing - of which ERBORISTERIA COMO avails itself for various services and exclusively to perform these services - each limited to their own skills and duties and based on assigned tasks and instructions given.

VII.2. - Communication (to certain external parties) of the data.

ERBORISTERIA COMO, does not sell to third parties your personal data (including your name, residential address, e-mail address and credit card details). However, we must disclose your information to the following companies in order to provide you with our services, as provided in this statement. A) Companies that operate to enable us to send you the products you have purchased, such as payment service providers, warehouses, packaging companies and dispatch of orders. b) Professional service providers, such as marketing agencies, advertising partners and website hosts who collaborate with us in our business. c) Credit Rating, Law Enforcement and Fraud Prevention Agencies , to help counter fraudulent activities) Companies approved by you, such as social media sites (if you choose to link your accounts to Herbalisteria Officinal Plants) .

VII.3. - Transfer of personal data abroad.

The transfer of personal data to non-EU countries or international organizations meet the security standards in the field of protection.

VII.4. - Dissemination (to external undetermined subjects) of the data.

In no case personal data may be disseminated.

VIII. - Rights of the interested party. Articles 15 to 22, GDPR confer on the interested parties the exercise of specific rights. Article. 15 GDPR recognizes the right of individuals to access their personal data and to obtain a copy thereof. The right to obtain a copy of the data must not affect the rights and freedoms of others. These are your rights regarding your personal information:

a) The right to be informed when your information is used

b) The right to access your personal information that are in our possessiono

c) The right to request the correction of inaccurate personal information that is in our possession (although, probably, you can change most of them from your account)

d) The right to request the cancellation of your data or the interruption of their use or collectio

e) The right to stop receiving direct business communications and to revoke at any time the authorization to process the data for other activities not necessary.

f) The right to request that we transfer or We bring portions of your data to you or another service provider.

g) The right to complain before the responsible guarantor of Italian privacyThe interested party who believes that the processing of their personal data violates the provisions of the GDPR or of the internal regulations regarding the protection of personal data, has the right to lodge a complaint with the Personal Data Protection Authority based in Rome, pursuant to art. 77 GDPR and / or to appeal to the judicial authority. For the exercise of these rights, or to obtain any other information about them and, more generally, to the processing of personal data, requests may be addressed -mail to the following address:

IX. Revocation of Consent; Questions about Privacy Access and Feedback

Ti is entitled at any time to withdraw consent to the processing of your personal information by communicating the intention. Article 17 of the General Regulation of Personal Data Protection (GDPR) provides, specifically, that "The person concerned has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller has the obligation to cancel personal data without undue delay if one of the following reasons exists: personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; the interested party revokes the consent on which the processing is based and if there is no other legal basis for the processing; the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing; personal data have been processed unlawfully; personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject; personal data have been collected in relation to the offer of information society services ". For any questions or wishes and for more information on the processing of your personal data or exercise the rights referred to in the previous n. VI, you cansend an e-mail to the administrator of the website, writing to You can also contact us at the same address for answers regarding the management of information by ERBORISTERIA COMO. Before ERBORISTERIA COMO can supply or modify any information, it may be necessary to verify your identity and answer some questions. Our response will be provided as soon as possible.

X. - Holder of the Treatment.

The subject of treatment is ERBORISTERIA COMO with headquarters in via Zara n° 2, 22063 Cantù (CO) .

XI. - Data Protection Officer (DPO)

The Data Protection Officer is  ConfCommercio Servizi srl with headquarters in Via Ballarini 12, 22100 Como (CO).