IALTY SRL – WEBSITE PRIVACY INFORMATION PURSUANT TO ART. 13 OF THE “GENERAL DATA PROTECTION REGULATION” (2016/679 / EU)
The Company Ialty Srl (hereinafter, for the sake of brevity, the “Company” or “the Data Controller”), as the data controller, wishes to inform you that the Personal Data collected from the website www.ialty.it (hereinafter, for the sake of brevity, “the site “) will be processed in compliance with the legislative and contractual provisions in force and in accordance with the General Regulation on the protection of Personal Data (” Regulation “or” GDPR “) EU 2016/679.
1. HOLDER OF THE TREATMENT
The data controller is the Ialty Srl company, with registered office in corso Re Umberto, 2 – 10121, Turin (TO), VAT number 12496190013, in the person of Mr. Riccardo Ronchi. The following contact details are provided by e-mail firstname.lastname@example.org .
2. PERSONAL DATA OBJECT OF TREATMENT
A. Personal data in relation to the operation of the website and the execution of the services and functionalities offered through the website: The IT systems and software procedures used to operate this website may acquire, in the course of normal operation, the some personal data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, source URL addresses, time of requests, other parameters relating to the user’s operating system). These data are collected exclusively to monitor the correct functioning of the site, and therefore have no commercial purposes, nor are they used in any way to identify the user.
B. Personal data such as name and surname, name of the Company (if legal person), e-mail address, telephone number, shipping address;
C. Tax data and data necessary to make or receive payments;
3. PURPOSE OF THE PROCESSING AND LEGAL BASES
The data acquired during navigation are processed for a legitimate interest of the Data Controller. This acquisition takes place exclusively to monitor the correct functioning of the site and therefore has no commercial purposes. Personal identification, contact and tax data are freely provided by the interested party and are processed by the Data Controller exclusively for the following purposes:
to provide feedback to a request for a contact received by filling in the “contact” form on the site.
- For the management of customer relations based on contractual or pre-contractual agreements.
- For the sale of goods and products online: The Personal Data collected are used for the sale of products to the interested party, including payment and possible delivery. Payments are processed exclusively through Satispay and Paypal, payment services that allow the User to make online payments.
- to fulfill the obligations deriving from the law as well as from the existing contract with the Data Controller;
- for the management of any disputes and the protection of the Company’s rights.
Your consent is not required for the aforementioned purposes. The legal bases that legitimize the processing are:
- the execution of pre-contractual measures or a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same.
- the need to fulfill a specific legal obligation on the part of the Data Controller;
- for a legitimate interest of the Data Controller, for example the right to defense in court, the recovery of overdue credit and for specific direct marketing activities.
If the data controller intends to further process the Personal Data for a purpose other than that for which they were collected, before such further processing, he will provide the interested party with information on this different purpose and any further relevant information.
4. NATURE OF THE PROVISION
The Personal Data will be processed by the Company with computer and paper systems according to the principles of correctness, loyalty and transparency provided for by the applicable legislation on the protection of Personal Data and protecting your privacy and your rights by adopting suitable technical and organizational to ensure a level of security appropriate to the risk.
The provision of data is necessary for the fulfillment of the contractual, accounting and tax obligations connected to them.
5. RECIPIENTS OF PERSONAL DATA
The data is processed by the Data Controller and by authorized subjects under the Data Controller’s responsibility for the purposes indicated above in compliance with current legislation. Exclusively for the purposes indicated above, personal data could be transmitted both to employees of the company and to external subjects, eg. External payment platforms – eg. PayPal -, financial administration, public security company and / or other entities appointed in execution of the EU / EEA tax and legal provisions, business consultants – eg. Bank manager, legal consultant, accountant -, in general to companies or other external entities in their capacity as Data Processors. The complete list of authorized data processing managers can be requested by e-mail from the Data Controller by writing to email@example.com .
DATA TRANSFER TO THIRD COUNTRY
There are no transfers of Personal Data to recipients outside the European Union.
If for technical and / or operational reasons it becomes necessary to make use of subjects located outside the European Union, we inform you as of now that these subjects will be appointed as Data Processors pursuant to and for the purposes of art. 28 of the Regulation or Joint Data Controllers pursuant to art. 26 of the Regulation and the transfer of Personal Data to these subjects, limited to the performance of specific processing activities, will be regulated in accordance with the provisions of Title V of the Regulation. All the necessary precautions will therefore be taken in order to guarantee the most complete protection of the Personal Data of the interested party.
6. PROCESSING METHODS AND DATA STORAGE PERIOD
The data collected will be processed using electronic, IT and telematic tools, or through manual processing with logic strictly related to the purposes for which the Personal Data were collected and, in any case, in order to guarantee their security in any case.
The Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed and in compliance with civil and fiscal obligations (for example, a civil obligation to keep records accounting and further business correspondence for 10 years).
Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The interested party can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
Personal data for which conservation is not necessary or for which conservation is not required by current regulations will be deleted or encrypted or made anonymous. Therefore, upon reaching these terms, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
7. DATA PROFILING
The owner does not use automated processes aimed at profiling.
8. COOKIES AND SIMILAR TECHNOLOGIES
By browsing the site, technical information relating to the hardware and software used by visitors is collected. This information does not provide personal data from the interested party, but only technical / IT data that are used in an aggregate and anonymous manner for the sole purpose of improving the quality of the service and providing statistics concerning the use of the Site. For more information see the section dedicated to cookies.
9. LINKS TO OTHER WEBSITES AND SOCIAL MEDIA
Our Platform may, from time to time, contain external links from our advertisers and affiliate partners. If you follow a link to any of these websites, you should remember that these websites have their own privacy practices and that we accept no responsibility for those policies. Please consult these policies before submitting Personal Data to these websites.
10. RIGHTS OF THE INTERESTED PARTY ON DATA PROCESSING
It should be noted that, with reference to Personal Data, the interested party may exercise the following rights:
A. right of access to Personal Data, Art. 15 GDPR;
B. Right to obtain data rectification, Art. 16 GDPR;
C. Right to delete data (right to be forgotten), Art. 17 GDPR;
D. Right to limit the processing, Art. 18 GDPR;
E. right to object to processing at any time, Article 21 GDPR;
F. right to lodge a complaint with the Supervisory Authority if you believe that the Personal Data have been processed illegally.
To exercise the aforementioned rights, the interested party may contact the Data Controller by e-mail at firstname.lastname@example.org or by registered letter with return receipt to the following address: Ialty Srl, corso Re Umberto, 2 – 10121, Turin ( TO).