Privacy Policy | Dondup Store
PRIVACY POLICY STATEMENT
for users who sign up to the newsletter
In accordance with Article 13 of Regulation (EU) 2016/679 on the protection of personal data (General Data Protection Regulation, or “GDPR”), COVER 50 S.P.A. wishes to provide you with the following information concerning the processing of the personal data (“Data”) you provide voluntarily.
Who is the data controller?
The data controller is the legal entity that identifies the purposes and methods of data processing and ensures that personal data is adequately protected. The “Data Controller” for your Data is COVER 50 S.P.A., of Via Torino 25, 10044 Pianezza (TO), Italy – VAT Registration/tax ID no. IT08601590014. You can contact the Data Controller by email at privacy@pt-torino.com.
What categories of Data are collected through the e-commerce channel?
The personal data we collect and process consist of:
· contact details (e-mail address)
· gender data (M or F).
Purposes of processing, basis of legitimacy and data retention times
By completing the form and signing up to the newsletter, the Data Controller will register your email address in a dedicated mailing list for you to receive our automated and periodic newsletter, containing promotional, marketing and/or advertising messages (concerning, for example, periodic and limited promotions). Gender data (M or F) is collected for the sole purpose of tailoring the content of the newsletter to the interests of each recipient. Your consent is understood to have been given voluntarily when you complete the form to sign up to the newsletter (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by clicking on the specific link provided in all our marketing messages. As such, the Data you provide to sign up to the newsletter will be retained by the Data Controller until you withdraw your consent.
What will happen if I decline to provide my Data?
The personal data specified above is provided on a voluntary and optional basis. However, considering the service requested, if you decline to provide the data it will not be possible for the Data Controller to send you the newsletter requested.
Will my Data be disclosed and to whom?
Your Data will be processed by data processing personnel acting under the authority of the Data Controller, pursuant to Article 29 of the GDPR, or by third parties engaged by the Data Controller to carry out essential processing on its behalf in connection with the purposes stated above and designated as Processors in accordance with Article 28 of the GDPR. (An example is the company that assists the Data Controller in managing the website.). A complete list of the Processors that may process your Data will be provided upon express request to the Data Controller.
Transfer of Data to Third Countries
In carrying out tasks for the purposes stated above, the Data Controller or one of the processors identified may disclose and transfer your Data to additional third-party data processors located outside the EU and/or the European Economic Area, and acting under the authority and instruction of the Data Controller and in accordance with laws in force, for the provision of services strictly connected with one or more of the purposes stated. In general, the Data Controller does not disclose Data to Third Countries, either directly or through its data processors. Nevertheless, should this happen, we guarantee that your Data will be transferred in strict compliance with the provisions of Chapter V of the GDPR.
What are your rights and how can you exercise them?
With regard to your Data, we advise you that current legislation, and in particular Articles 15 and following of the GDPR, envisages a number of rights for data subjects, which we list here below. You can exercise your rights as a data subject at any time and free of any charge. Right of Access; Right to Rectification; Right to Erasure or the “Right to Be Forgotten”; Right to Restriction of Processing; Right to Receive Notification Regarding the Rectification or Erasure of Personal Data or the Restriction of Processing; Right to Data Portability; Right to Object to Processing. To exercise your rights as a data subject, contact the Data Controller or the Data Protection Officer by writing to the specific email addresses provided above.
If you believe that the processing of your Data breaches the provisions of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority (Article 77 of the GDPR) or, alternatively, to take legal action (Article 79 of the GDPR).
