DATA CONTROLLER FOR PRIVACY AND GENERAL INFORMATION
X, whose registered office is located in X, is responsible for processing the personal data provided by users.
X is committed to protecting the right to protection of Users' personal data.
This privacy policy is provided to users in accordance with and for the purposes of national and European legislation on the protection of personal data, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), in addition to any other legislation on the protection of personal data applicable in Italy, including the provisions of the Guarantor.
Please read the following carefully to understand our considerations and practices regarding personal data and how we will treat it.
DATA PROCESSING MANAGERS
The Data Controller uses subcontractors to achieve the purposes indicated below and a Data Protection Officer (DPO) appointed to monitor the protection of personal data. We remind you that you can contact the Data Protection Officer at any time and address any questions or requests relating to your personal data and respect for your privacy by writing to the address X.
TYPES OF DATA COLLECTED
Among the Personal Data collected by this Application, independently or through third parties, may be: email, name, surname, delivery address, postal code, delivery city, mobile phone number, tax code or VAT number, Cookies and Application Usage Data.
Personal Data may be directly provided by the User or, in case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating this Data, without this having any consequences on the availability of the Service or on its operation.
Users who have doubts about which Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that he/she has the right to communicate or disseminate them, releasing the Owner from any liability towards third parties.
METHODS AND PLACE OF PROCESSING OF COLLECTED DATA
Treatment methods
The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly linked to the purposes indicated.
In addition to the Owner, in some cases, other parties involved in the organization of this Application (administrative, commercial, marketing, legal, system administration staff) or external parties (such as administrative and accounting service providers, couriers and logistics operators, hosting providers and system engineering service providers, collection service providers, IT and online marketing companies) may have access to the Data, also appointed, if necessary, as Data Processors by the Owner. The updated list of Subcontractors can always be requested from the Data Controller. These service providers only have access to the personal data necessary to carry out their tasks. We guarantee that they cannot use the same Data for other purposes and are also required to process Personal Data in accordance with this Privacy Policy, and in accordance with applicable personal data protection regulations.
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
the User has given consent for one or more specific purposes; the processing is necessary for the performance of a contract with the User and/or the implementation of pre-contractual measures; the processing is necessary for compliance with a legal obligation to which the Controller is subject; the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; processing is necessary for the pursuit of the legitimate interests of the Owner or third parties. It is always possible to ask the Owner to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to enter into a contract.
Place
The Data is processed at the headquarters of the Data Controller and in any other place where the parties responsible for the processing are located.
The User's Personal Data may be transferred to a country other than the one in which the User is located, even outside the European Union. When such a transfer occurs, we ensure that it is carried out in accordance with this privacy policy and that it provides adequate protection.
If any of the transfers described above take place, the User may refer to the respective sections of this document or request information from the Owner by contacting the contact details provided at the beginning.
Shelf life
The Data is processed and stored for the period necessary for the purposes for which it was collected. In general, the data will be kept until the tenth anniversary after registration on the Platform.
The following categories of data may be retained for additional periods:
Financial and accounting data (e.g. invoices, payments, refunds, etc.) are retained for the period required by applicable tax and accounting laws; All user-generated content (e.g., products purchased, behavioral patterns) is anonymized, but remains available for our analysis in aggregate form. At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, cancellation, rectification and the right to portability of Data can no longer be exercised.
PURPOSE OF PROCESSING COLLECTED DATA
User Data is collected to allow the Owner to provide and optimize its Services, and in particular to:
the identification of the User necessary for access to the Application and the dedicated products and services, as well as to allow the proper performance of the User's support activity; execution of the order and management of collection with appropriate control and security measures on the operation; preparation and delivery of orders; management of order invoicing and completion of associated administrative and tax procedures; after-sales assistance and management of support and contact requests; the development of marketing activities relating to our Services as well as to analyze and understand our customers in order to improve our service (including the user interface experience) and optimize the selection of products offered.
To obtain further information and on the Personal Data specifically relevant for each purpose, the User may request information from the Owner by contacting him at the contact details provided in the opening.
USER RIGHTS
Users may exercise certain rights regarding the Data processed by the Owner. In particular, the User has the right to: revoke consent at any time. The User may revoke the consent to the processing of his Personal Data previously expressed.
object to the processing of their Data. The User may object to the processing of their Data when it is based on a legal basis other than consent. Further details on the right to object are set out in the section below.
access their Data. The User has the right to obtain information about the Data processed by the Owner, about certain aspects of the processing and to receive a copy of the processed Data.
check and request a correction. The User can verify the accuracy of his Data and request their updating or rectification.
obtain a limitation of processing. When certain conditions apply, the User may request the limitation of the processing of their Data. In this case, the Owner will not process the Data for purposes other than their retention.
obtain the deletion or removal of your Personal Data. When certain conditions apply, the User can request the Owner to delete his/her Data.
receive your Data or have it transferred to another owner. The User has the right to receive his Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer without hindrance to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures related to it.
file a complaint. The User may lodge a complaint with the competent supervisory authority for the protection of personal data or take legal action.
Details on the right to object
Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Owner or for the purposes of pursuing a legitimate interest thereof, Users have the right to object to the processing for reasons relating to their particular situation.
Users are informed that they may, at any time and without having to provide a reason, object to receiving newsletters from the Data Controller by sending an email to X indicating their wish.
How to exercise your rights
To exercise User rights, Users may direct a request to the Owner's contact details provided in this document. Requests are processed by the Owner as soon as possible, in any event within one month.
EN 
FR 
DE 
IT 
AR 
