Processing of personal data refers to "any operation or set of operations carried out also without the use of electronic instruments, concerning the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blockage, communication, dissemination, cancellation and destruction of data, even where not recorded in a database".
The personal data provided or collected through the activities done by the Users on the Website will be processed by Geb Negozionline srl, Via Mazzini 18/A, 25020, Flero (BS), Italy (hereinafter, the "Company"), as Data Controller.
PURPOSES OF THE PROCESSING
The purposes of processing users data (the "Purpose") is exclusively:
- to allow the creation of user profiles and the delivery of email messages for the confirmation of the creation of the user profile on the Web Site;
- allow the purchase of products in the e-commerce platform of the Website;
- sending, upon express consent of user, the newsletter and/or other promotional messages by e-mail;
- to collect and use the data for profiling purposes and marketing purposes, upon express consent of the user;
- to create a database of users interested in the Website;
- to manage the requests of the users: of technical or commercial nature or of others kind.
For these reasons, it will be asked to users that are interested to purchase the products on the e-commerce platform, to create a user profile on the Website and to provide their personal data like the name, surname, email address, telephone number, the address for the delivery of the purchase products, the password, the identification data of the payment methods. The data will be processed purely to achieve the Purpose and to extent required for the purposes of the specific case.
CONSENT OF THE USER
By entering his data on the Website, the user specifically consents to:
- transmitting his e-mail address to automatic e-mail forwarding services managed by third parties for advertising purposes;
- receiving advertising e-mails or other correspondence from the Company;
- the collection, storing and processing of his personal data;
- his data being archived in databases by the Company and/or by third parties or individuals contractually bound to the Company and specifically charged of processing users personal data.
The user may withdraw his consent to the processing of his data, at any time, by sending an e-mail to email@example.com
PLACE OF DATA PROCESSING AND COMMUNICATION OF DATA TO THIRD PARTIES
The web services of the Website will be processed on the servers of outsourced companies offering hosting services on behalf of the Company, as well as clouds.
Users personal data may be processed also by third parties the Company may use for certain activities (e.g. to analyze data, to store data, sending newsletter or other commercial and non-commercial communications, providing marketing assistance; market analysis purposes).
Regarding the communication of personal data, the information issued may be disclosed to the following subjects or categories of subjects:
- public administrations to meet statutory obligations, regulations or Eu laws. In this case, it is excluded the obligation to obtain the prior consent of the person concerned by such communications;
- holding companies, associate companies or subsidiaries of the Company;
- other companies or individuals contractually bounded to the Company and appointed specifically to process the personal data of users.
The Company uses third parties and individuals to perform certain activities on its behalf (e.g. hosting services, delivery of the purchased goods, platform for credit card payments and other customer services). Third parties who perform these operations have been selected and are considered to have the experience, capacity and reliability to grant a fully compliance with the current provisions on data processing.
Third parties who process users’ data on behalf of the Company have been appointed "Data Processors" by the Data Controller. The user may request the list of Data Processors by writing to firstname.lastname@example.org
Surfing the Website, the user provides his consent to the communication of his personal data to third parties that provide services on behalf of the Company and to this method of data processing.
In cases other than those above mentioned, the user will be informed in case his personal data has to be communicated to third parties and the user will be free to decide if authorizing or not such communication.
TYPES OF DATA PROCESSED
Navigation data:the hardware and software of the Website acquire some personal data which is transmitted implicitly during the use of Internet communication protocols. This information could, if processed and associated to data held by third parties, lead to the identification of the users. This category of data includes the IP addresses used by the users when connecting to the website, the time of the request, the method used in submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the state of the reply given by the server (OK, error, etc.) and other parameters concerning the operating system and computer environment of the user.
This data is used only for anonymous statistical information concerning the use of the website and to check the correct operation, and is cancelled immediately after processing. Data may be used to ascertain responsibility in the case of hypothetical data processing crimes to the detriment of the website: apart from this case, the web contact data is currently not kept for more than seven days. Personal data related to the geographical location may be used to provide users with information, proposals and other customized contents based on their location. If users do not want to share information related to their geographical position, they will have to disable location services on their devices.
Data provided voluntarily by the user: the personal data entered into the Website by the user (when creating the user profile on the Website and/or in case of purchase of products on the e-commerce platform) and the data sent by the user by e-mails to the addresses indicated in the Website (including the sender’s e-mail address and any other personal data contained in the e-mail).
NON-MANDATORY NATURE OF THE PROVISION OF DATA
Some fields requested on the Website (which may be marked by an asterisk or other symbol) may be mandatory to ensure the correct registration on the Website and to access the relative services (including the purchasing of products on the e-commerce platform of the Website and the subscription to the newsletter).
Entering his personal data on the Website, the user ensures that his personal information is corrected and updated. The user acknowledges to be the sole responsible for the data provided, be they personal, photos, comments or other, releasing from liability the Company.
If the user does not provide his express consent to the data processing, it may be impossible to surf the Website, to receive the newsletter or other information and advertising material and to complete the purchase process of products on the e-commerce platform of the Website.
METHODS OF PROCESSING
The personal data is processed using automated tools for the time strictly necessary to achieve the Purpose for which it was gathered.
The Company has adopted specific security and technical measures to grant the security of data and to prevent the loss of data, unlawful or improper use and unauthorized access.
The personal data collected and stored in the databases of the Company will be processed by the employees and/or collaborators of the Data Controller (as defined herein) or by persons appointed to process such data ("Data Managers")
RIGHTS OF THE PARTIES CONCERNED
The parties to which the personal data refers have the right at any time to obtain the confirmation of the existence or otherwise of their data and to know the contents and origin thereof, check the exact nature check the correctness or request the integration, updating or correction of their data.
Persons to whom the personal data refers have also the right to obtain the deletion, transformation into an anonymous form or suspension of any data processed in breach of the law, and to oppose the processing of their data for legitimate reasons.
Requests should be sent:
by e-mail, to: email@example.com
Or by post to Geb Negozionline srl, Via Mazzini 18/A, 25020, Flero (BS), Italy