©

Cookie PolicyPrivacy

Information

Information on the processing of personal data.

(Articles 13 and 14 EUROPEAN REGULATION NO. 679/2016)

Premise

The following information is intended for all individuals who visit and interact with this e-commerce website of Annachiara Babbo, the so-called web store (“e-shop”), where it is possible to purchase products online

Dear Navigator,

the undersigned company, with registered office at Via Udine 14, 33080 Roveredo in Piano (PN) VAT No. 01967100932 as the "Data Controller" hereby informs you, pursuant to Articles 13 and 14 of European Regulation No. 679/2016 (hereinafter "EU Regulation"), that your data will be processed as indicated below:

1. Subject of Processing

The Data Controller informs you that personal and identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and/or payment details, etc.), hereinafter referred to as "personal data" or simply "data", relating to you, acquired verbally either directly or through third parties in the past, as well as those that will be collected in the future, may be subject to processing in full compliance with the EU Regulation. The Data Controller processes the data lawfully, specifically for the execution of a contract to which you are a party or for the execution of pre-contractual measures (e.g. preparation of an offer, etc.) requested by you (Art. 6 of the EU Regulation).

By data processing is meant any operation or set of operations concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, destruction of the data itself.

2. Legal basis and Purpose of processing

Legal basis: EU Regulation no. 679/2016

A) without your express consent (art. 6 lett. b), c), e) of the EU Regulation), for the following Purposes:

- in order to manage access to the e-shop services and facilitate the purchase of products online as well as to allow your registration to the e-shop and the possible conclusion of the purchase contract through the e-shop;

- fulfill the pre-contractual, contractual, and fiscal obligations arising from existing relationships with you;

- allow you to access the e-shop, even as a non-logged-in user, and to browse the e-shop;

- allow you to register on the Site by creating an account, and to use the services reserved for registered users, including, in particular, the possibility to make purchases through the e-shop;

- allow you to access the e-shop and browse the e-shop as a logged-in user;

- maintain and manage your account;

- store in your account data and information, such as, by way of example, your personal details, the history of your orders and any returns, your preferred delivery and/or billing addresses;

- allow you to add products to the cart and to conclude the purchase contract through the e-shop.

- to fulfill the obligations arising from the purchase contract concluded through the e-shop, such as, by way of example, the delivery of the products sold;

- to allow you to fulfill the obligations arising from the purchase contract concluded through the e-shop, such as, by way of example, the payment, including online, of the purchased products;

- for general assistance and customer care activities and therefore to respond to information requests from users or to respond to complaints, reports, and disputes;

- fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as, for example, in matters of anti-money laundering);

- exercise the rights of the Data Controller, for example the right of defense in court;

- for keeping general accounting;

- for management purposes (invoicing, possible document management, etc.);

- for credit management;

- for statistical analysis and quality control;

- for insurance management;

- for technical assistance.

In particular, your data will be processed for purposes related to the implementation of the following requirements, relating to legislative or contractual obligations:

- Technical and functional access to the Site: no data is retained after the Browser is closed;

- Purpose of advanced navigation or management of personalized content;

- Statistical and analysis purposes of navigation and users.

B) Only with your specific and separate consent (art. 7 of the EU Regulation), for the following commercial and/or marketing and/or profiling purposes:

- sending via e-mail, mail and/or SMS and/or telephone contacts of newsletters, commercial communications and/or advertising material about products or services offered by the Data Controller and/or surveys on the level of satisfaction regarding the quality of what has been carried out at your request;

- sending by e-mail, mail and/or SMS and/or telephone contacts of commercial and/or promotional communications from third parties (for example, business partners).

3. Processing methods

The processing of your personal data is carried out through the operations indicated in art. 4 no. 2) of the EU Regulation and specifically: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction, blocking. Your personal data are processed both on paper and electronically and/or automatically (in any case suitable to ensure the security and confidentiality of the data).

4. Data retention periods and other information.

The Data Controller will process personal data for the time necessary to fulfill the purposes mentioned above and, in any case, no longer than the legal terms from the termination of the relationship for the purposes related to the existing relationship (e.g.: the data necessary for the execution of the purchase contract until the delivery of the product or, in case of non-delivery, until the termination of the contract).

With reference to personal data subject to Processing for Marketing Purposes or Processing for profiling purposes, such data will be retained in compliance with the principle of proportionality and, in any case, until the purposes of the processing have been achieved or until the specific consent is revoked by the data subject.

Specifically, the Data Controller will process the data for no longer than 2 years from the collection of the data for Marketing Purposes and one year for data collected for Profiling Purposes.

The personal data you provide will be processed "lawfully, fairly, and transparently," protecting your privacy and your rights.

A periodic check is scheduled to be carried out annually on the data processed and on the possibility of deleting them if they are no longer necessary for the intended purposes.

5. Data access

Your data may be made accessible for the purposes referred to in the previous points 2.A) and 2.B):

- to members, employees and collaborators of the Data Controller in Italy and abroad, in their capacity as persons in charge and/or internal managers of processing and/or system administrators;

For brevity, the detailed list of such figures is available at our office and at your disposal.

6. Data disclosure

Without the need for express consent (art. 6 lett. b) and c) of the EU Regulation), the Data Controller may communicate your data for the purposes referred to in the previous point 2.A) to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the purposes indicated above.

These subjects will process the data as independent data controllers.

During and after browsing, your data may be communicated to third parties, in particular to:

- Google: Advertising service, Advertising targeting, Analytics/Measurement, Content personalization, Optimization;

- Google AdWords: Advertising service, Advertising targeting, Analytics/Measurement, Content personalization, Optimization;

- Google Analytics: Advertising target, Analytics/Measurement, Optimization.

Your data will not be disclosed.

7. Data transfer

Personal data is stored on devices located at the Data Controller's headquarters or with providers within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to transfer the data to non-EU countries as well. In such cases, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with applicable legal provisions, after the signing of contractual clauses and standard checks required by the European Commission.

Both with regard to the data present on its own devices and any data held by providers, the Data Controller has implemented appropriate technical and organizational measures to ensure an adequate level of security, in full compliance with the provisions of Article 32 of the EU Regulation.

Browsing: your browsing data may also be transferred, limited to the purposes mentioned above, to the following countries: - EU countries, - United States.

Cookie management: if you have doubts or concerns regarding the use of cookies, you can always take action to prevent their setting and reading, for example by changing the privacy settings in your browser to block certain types.

Since each browser, and often different versions of the same browser, differ even significantly from each other, if you prefer to act independently through your browser preferences, you can find detailed information on the necessary procedure in your browser's guide.

8. Nature of data provision and consequences of refusal to respond

The provision of data for the purposes referred to in the previous point 2.A) is mandatory. Without them, we will not be able to guarantee you the Services indicated in 2.A) (for example: failure to provide the data will make it impossible for the user to conclude such a contract and therefore to make purchases through the e-shop).

The provision of data for the purposes referred to in point 2.B) above is optional. You may therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications, advertising material and/or anything else related to the Services offered by the Data Controller.

You will still be entitled to the Services referred to in point 2.A).

9. Data subject rights

In your capacity as data subject, you have the rights set out in Art. 15 of the EU Regulation as reported below and specifically:

1. has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to access the personal data and the following information: a) the purposes of the processing;

b) the categories of personal data in question;

c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations;

d) when possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;

e) the existence of the data subject's right to request from the Data Controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;

f) the right to lodge a complaint with a supervisory authority (the Data Protection Authority);

g) if the data are not collected from the data subject, all available information about their origin;

h) the existence of automated decision-making, including profiling as referred to in Article 22, paragraphs 1 and 4 of the EU Regulation, and, at least in such cases, meaningful information about the logic used, as well as the significance and the envisaged consequences of such processing for the data subject.

2. If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the existence of appropriate safeguards pursuant to Article 46 of the EU Regulation relating to the transfer.

3. The Data Controller will provide you with a copy of your personal data being processed if you request it.

If you request additional copies, the Data Controller may charge you a reasonable fee based on administrative costs. If you submit the request by electronic means, and unless you indicate otherwise, the information will be provided to you in a commonly used electronic format.

4. The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedoms of others.

Furthermore, where applicable, you may enjoy the rights set out in Articles 16 to 22 of the EU Regulation and specifically have:

- the right to rectification of personal data;

- the right to be forgotten (right to erasure);

- the right to restriction of processing;

- the right to data portability;

- the right to object;

- the right to lodge a complaint with the Supervisory Authority.

You also have the right to withdraw any consent already given at any time without affecting the lawfulness of processing based on consent given before the withdrawal.

10. Methods of exercising rights

You may exercise your rights at any time by sending:

- a registered letter with return receipt to the undersigned (see the address indicated on the letterhead);

- an email to the address info@onemoregin.it

11. Minors

What is offered by the Data Controller and the subject of the relationship with you does not involve the intentional acquisition of personal information relating to minors. In the event that information about minors is inadvertently recorded, the Data Controller will promptly delete it upon request of the data subject.

12. Personal data not obtained from the data subject

It may happen that the writer is not the Data Controller to whom you provided your personal data, but is instead a joint controller or external data processor, and therefore your data has reached the writer secondarily due to a contract governing the parties. In this case, please note that the writer will do everything possible to ensure that you have been informed and have given consent to the processing. You may at any time ask the writer about the origin of the acquisition of your data.

13. Data Controller and Processors

Below we provide you with some information that you need to be aware of, not only to comply with legal obligations, but also because transparency and fairness towards our customers are fundamental parts of our business.

Data Controller. The Data Controller of your personal data is Annachiara Babbo, Via Udine 14, 33080 Roveredo in Piano (PN) VAT No. 01967100932, on behalf of the legal representative, responsible to you for the legitimate and correct use of your personal data and whom you may contact for any information or request at the following address: info@onemoregin.it

Appointees. The updated list of data processing appointees is kept at the Data Controller's headquarters.