The data controller Papillon S.r.l. - Via G. Galilei 4/8 - 80027 - Frattamaggiore (NA) - P.IVA: 02793251212 - Register of Companies NAPLES: 517912 Informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the manner and for the purposes below:


Papillon S.r.l. processes personal, identification data (for example, name, surname, company name, address, telephone, e-mail - hereinafter, "personal data" or also "data") communicated by you on the occasion of the conclusion of contracts for services provided by Papillon S.r.l. or for the conclusion of supply contracts between the parties as well as in relation to data communicated for the provision of services also in collaboration with other Entities and Companies that act as Data Controllers for what concerns them.


Your personal data are processed without your express consent (art. 6 lett. b), e) GDPR), for the following Purposes of Service:

  • the data are processed by Papillon S.r.l. as data controller because the processing is necessary for the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures dictated at the request of the same (personal data relating to contracts or pre-contractual activities with customers and suppliers);
  • to fulfil the obligations provided for by the law, by a regulation, by the community legislation or by an order of the Authority (such as, for example, anti-money laundering);
  • to exercise the rights of the Owner, for example the right of defense in court.



Your data may be made accessible for the purposes of art. 2

  • to employees and collaborators of the owner also external, in their capacity as officers and / or managers of the treatment and / or system administrators;
  • Tax and legal consultants, banks for the provision of their services (accounting, contracting, etc.), which operate as data controllers;
  • other companies in partnership with Papillon S.r.l. for the management of outsourcing services which act as Data Controllers.

Personal data is stored on servers located within the European Union. It remains in any case understood that the Owner, where necessary, will have the right to move the servers outside the EU. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in accordance with applicable laws, subject to the stipulation of standard contractual clauses provided by the European Commission.
Without the need for express consent art. 6 lett. b) and c) GDPR), the Owner may disclose your data for the purposes referred to in art. 2 to supervisory bodies (such as IVASS), judicial authorities, as well as to those subjects to whom disclosure is mandatory by law for the fulfillment of the above purposes. These subjects will treat the data in their quality of autonomous holders of the treatment.


The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and precisely: collection, recording, organization, storage, consultation, processing, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to manual processing both on paper and electronically. The Data Controller will process personal data for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes.


In your capacity as data subject, you have the rights under Art. 15 GDPR and specifically the rights to:

  1. obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in intelligible form;
  2. obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing with the aid of electronic instruments; d) the identity of the owner, manager and the representative appointed under Art. 3, paragraph 1, GDPR; e) the subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
  3. obtain: a) the updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
  4. oppose, in whole or in part: a) for legitimate reasons the processing of personal data concerning you, even if pertinent to the purpose of collection; b) the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and / or through traditional marketing methods by phone and / or mail. It should be noted that the right of the interested party to object, as set out in point b) above, for the purposes of direct marketing by automated means extends to traditional methods and that, in any case, the interested party may exercise the right to object even partially. Therefore, the interested party may decide to receive only communications by traditional means or only automated communications or neither of the two types of communication.
  5. Right to rectification of your personal data if they are modified and do not correspond to those previously acquired or communicated (art. 16)
  6. Right to the deletion of data ("right to be forgotten" art. 17). Papillon S.r.l., if one of the following cases exists, proceeds to delete the data from all databases and archives where it is contained:
    a. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    b. the data subject withdraws consent and if there is no other legal basis for the processing;
    c. the data subject objects to the processing pursuant to Article 21(1) and there is no overriding legitimate ground for processing, or objects to the processing pursuant to Article 21(2);
    d. the personal data have been unlawfully processed;
    e. the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the data controller is subject;
    f. the personal data have been collected in connection with the provision of information society services referred to in Article 8(1).
  7. Right to restriction of processing (Art. 18). The data subject shall have the right to obtain from the data controller the restriction of processing when any of the following applies:
    a. the data subject disputes the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
    b. the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests that their use be restricted;
    c. although the data controller no longer needs the personal data for the purposes of processing, the personal data are necessary for the establishment, exercise or defence of a legal claim;
    d. the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.
  8. Right to object (Art. 21-22): The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling on the basis of these provisions. Papillon S.r.l. does not subject data to decisions based solely on automated processing.

Papillon S.r.l. notifies each data subject of any rectification, restriction or erasure of data.
Papillon S.r.l. refrains from further processing personal data unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
For data which Papillon S.r.l. processes for marketing purposes, the rights of the interested party are expressed in the specific Information on the processing of data for marketing purposes.


You may exercise your rights at any time by sending
- an e-mail addressed to


The provision of data for the purposes referred to in art. 2. is mandatory. In their absence, we can not guarantee the services of art. 3.

We inform you that our e-shop uses cookies and any personal and sensitive data are not stored automatically, except for information included in cookies. Read more

Or sign in with:

My Wishlist (0 items) Contact us
Please login first

Or sign in with:

Your cart

There are no more items in your cart