The processing of personal data also refers to “any operation or set of operations carried out without the use of electronic instruments which refer to the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, diffusion, cancellation and destruction of data, even where not recorded in a database”.
The personal data provided or collected through the activities done by the Users on the Website www.galagloves.it will be processed by Gala Gloves SRL Unipersonale , Via Benedetto Croce 20, Casavatore ( NA), Italy (hereinafter, the “Company“), as Data Controller.
PURPOSES OF THE PROCESSING
The purposes of processing users data (the “Purpose”) is exclusively:
to allow the creation of user profiles and the delivery of email messages for the confirmation of the creation of the user profile on the Web Site;
allow the purchase of products on the e-commerce platform of the Website;
sending, upon express consent of user, the newsletter and/or other promotional messages by e-mail;
to collect and use the data for profiling purposes and marketing purposes, upon express consent of the user;
to create a database of users interested in the Website;
to manage the requests of the users: of a technical or commercial nature, or other type;
collect data about the use of the website in order to understand which products and services are of interest to the user and to collect certain personal information such as name, email address, phone number, and a unique identifier associated with the user’s device. This information is then used to assist the user in the buying process including by contacting the user from time to time (either by email or SMS) or to personalize advertising displayed to user’s online.
For these reasons, users that are interested in purchase the products via the e-commerce platform will be asked to create a user profile on the Website and to provide their personal data like their name, surname, email address, telephone number, the address for the delivery of the purchase products, the password, the identification data of the payment methods. The data will be processed purely to achieve the Purpose and only to the extent required for the purposes of the specific case.
CONSENT OF THE USER
By entering their data on the Website, the user specifically consents to:
transmitting their e-mail address to automatic e-mail forwarding services managed by third parties for advertising purposes;
- receiving advertising e-mails or other correspondence from the Company;
- the collection, storage and processing of their personal data;
- their data being archived in databases by the Company and/or by third parties or individuals contractually bound to the Company and specifically commissioned with processing users personal data.
The user may withdraw his consent to the processing of his data, at any time, by sending an e-mail to firstname.lastname@example.org
PLACE OF DATA PROCESSING AND COMMUNICATION OF DATA TO THIRD PARTIES
The web services of the Website will be processed on the servers of outsourced companies offering hosting services on behalf of the Company, as well as in the cloud.
Users personal data may be processed also by third parties the Company may use for certain activities (e.g. to analyze data, to store data, sending newsletter or other commercial and non-commercial communications, providing marketing assistance; market analysis purposes).
Regarding the communication of personal data, the information issued may be disclosed to the following subjects or categories of subjects:
public administrations to meet statutory obligations, regulations or EU laws. In this case, it is not obligatory to obtain the prior consent of the person concerned by such communications;
holding companies, associated companies or subsidiaries of the Company;
other companies or individuals contractually bound to the Company and appointed specifically to process the personal data of users.
The Company uses third parties and individuals to perform certain activities on its behalf (e.g. hosting services, delivery of the purchased goods, platform for credit card payments and other customer services). Third parties who perform these operations have been selected and are considered to have the experience, capacity and reliability to grant full compliance with the current provisions on data processing.
Third parties who process users’ data on behalf of the Company have been appointed “Data Processors” by the Data Controller. The user may request the list of Data Processors by writing to email@example.com
Surfing the Website, the user provides his consent to the communication of his personal data to third parties that provide services on behalf of the Company and to this method of data processing.
In cases other than those above mentioned, the user will be informed in case his personal data has to be communicated to third parties and the user will be free to decide whether they wish to authorise such communication.
CATEGORIES OF PERSONAL DATA CONCERNED
Navigation data: the Website hardware and software acquire some personal data which is transmitted implicitly during the use of Internet communication protocols. This information could, if processed and associated to data held by third parties, lead to the identification of the users. This category of data includes the IP addresses used by the users when connecting to the website, the time of the request, the method used in submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the state of the reply given by the server (OK, error, etc.) and other parameters concerning the operating system and computer environment of the user.
This data is used only for anonymous statistical information concerning the use of the website and to check the correct operation, and is cancelled immediately after processing. Data may be used to ascertain responsibility in the case of hypothetical data processing crimes to the detriment of the website: apart from this case, the web contact data is currently not kept for more than seven days. Personal data related to the geographical location may be used to provide users with information, proposals and other customized contents based on their location. If users do not want to share information related to their geographical position, they will have to disable location services on their devices.
Data provided voluntarily by the user: the personal data entered onto the Website by the user (when creating the user profile on the Website and/or in case of purchase of products on the e-commerce platform) and the data sent by the user via e-mail to the addresses indicated on the Website (including the sender’s e-mail address and any other personal data contained in the e-mail).
NON-MANDATORY NATURE OF THE PROVISION OF DATA
Some fields requested on the Website (which may be marked by an asterisk or other symbol) may be mandatory to ensure the correct registration on the Website and to access the relative services (including the purchasing of products on the e-commerce platform of the Website and the subscription to the newsletter).
Entering their personal data on the Website, the user ensures that their personal information is correct and up to date. In addition, the user acknowledges sole responsibility for the personal data provided, such as, photos, comments or other, taking away any liability from the Company.
If the user does not provide his express consent to the data processing, it may be impossible to navigate the Website, to receive the newsletter or other information and advertising material and to complete the purchase process of products on the e-commerce platform of the Website.
METHODS OF PROCESSING
The personal data is processed using automated tools for the time strictly necessary to achieve the Purpose for which it was gathered.
The Company has adopted specific security and technical measures to grant the security of data and to prevent the loss of data, unlawful or improper use and unauthorized access.
The personal data collected and stored in the databases of the Company will be processed by the employees and/or collaborators of the Data Controller (as defined herein) or by persons appointed to process such data (“Data Managers“).;
RIGHTS OF THE DATA SUBJECT
The parties to which the personal data refers (the Data Subject) have the right at any time to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her are being processed, and to know the origin, the purposes of the processing, the type of personal data concerned, the recipients of the personal data which have or will be disclosed, even if in another country, and how long the data was stored with them;
obtain without undue delay the rectification of the inaccurate personal data
obtain without undue delay, the removal of the personal data in the case of art. 17 GDPR;
obtain the restriction of data processing, even if the accuracy of said personal data is contested, or the processing is unlawful, as listed in art. 18 GDPR;
obtain and receive the said data in a transferable, structured, commonly used format pursuant to art. 20 GDPR;
object to the data processing pursuant to art. 21GDPR.
Above mention requests should be sent:
- via e-mail, to: firstname.lastname@example.org
- Or by post to Gala Gloves SRL, Unipersonale via Benedetto Croce 20 Casavatore 80020 ( NA) , Italy.