Privacy Policy | Dondup Store
PRIVACY POLICY STATEMENT
for registered users of this e-commerce website
In accordance with Article 13 of Regulation (EU) 2016/679 on the protection of personal data (General Data Protection Regulation, or “GDPR”), COVER 50 S.P.A. wishes to provide you with the following information concerning the processing of the personal data (“Data”) you provide voluntarily.
Who is the data controller?
The data controller is the legal entity that identifies the purposes and methods of data processing and ensures that personal data is adequately protected. The “Data Controller” for your Data is COVER 50 S.P.A., of Via Torino 25, 10044 Pianezza (TO), Italy – VAT Registration/tax ID no. IT08601590014. You can contact the Data Controller by email at privacy@pt-torino.com.
What categories of Data are collected through the e-commerce channel?
The personal data we collect and process consist of:
· identification data (name, surname, tax ID, VAT registration no.);
· location data (domicile, residence);
· contact details (e-mail address, telephone number),
· bank details (IBAN or other bank details).
Purposes for which we process your Data
|
The legitimate basis for us to process your Data
|
How long your Data is retained for
|
User registration and account creation: Your Data will be used to register you with the e-commerce website and create a personal account through which you can access your profile to view and review the orders or purchases you have made and manage your user preferences
|
The processing of your data is necessary for the performance of precontractual tasks initiated at your request, pursuant to Article 6(1)(b) of the GDPR |
Your Data will be retained until you decide to close your account |
Order management: Your Data will be used to enable us to process any orders you place and to send you the products you choose to purchase, as well as to provide you with assistance and support, as necessary.
|
The processing of your data is necessary for the performance of any contract to which you are a party, pursuant to Article 6(1)(b) of the GDPR |
Your data will be retained until the lapse of the ten-year statute of limitations for any contract lawsuits that may arise in connection with the performance of the contract for which your Data has been processed
|
Purchase process management: Your Data will be processed to allow you to proceed with and complete a purchase. |
The processing of your data is necessary for the performance of any contract to which you are a party, pursuant to Article 6(1)(b) of the GDPR
|
Your data will be retained until the lapse of the ten-year statute of limitations for any contract lawsuits that may arise in connection with the performance of the contract for which your Data has been processed
|
Compliance with legal obligations connected with the purchase process: issue of tax and accounting documents
|
The processing of your Data is necessary for compliance with a legal obligation to which the Data Controller is subject, pursuant to Article 6(1)(c) of the GDPR
|
Your Data will be retained for the statutory record-keeping terms applicable (ten years for accounting records and invoices pursuant to Article 2220 of the Italian Civil Code) |
Fraud prevention, legal protection and dispute management: Your Data may be processed to enable us to prevent fraud perpetrated against us or other customers, to stop a statutory violation, or to protect and defend our interests through all legal remedies, including through the courts.
|
The processing of your Data is necessary to pursue the legitimate interests of the Data Controller in guaranteeing high service levels and in protecting its rights in the case of statutory violations or to prevent statutory violations, pursuant to Article 6(1)(f) of the GDPR
|
Your Data will be retained for the necessary time required to allow the Data Controller to take legal action or defend itself against any claims raised against it or to prevent damages arising from or in connection with conduct by users or customers pursued in violation of statutory obligations, and until the lapse of the statute of limitations for any contract lawsuits that may arise in connection with the performance of the transaction for which your Data has been processed.
|
Marketing communications With exclusive reference to the email address you use to complete a purchase, said address may be used to send you promotional and marketing messages concerning products or services similar to those you have purchased, unless you decide to object to such a purpose, by writing in advance to the email address provided in the section “Rights of the Data Subject” or via the specific channels indicated in our email messages. |
The email address you provide for the sale process will be used by the Data Controller for the purposes of proposing similar products to those you have purchased (pursuant to Article 6(1)(f) of the GDPR and Article 130(4) of Italian Legislative Decree 196/03), unless you decide to object to such a purpose, by writing to the email address provided in the section “Rights of the Data Subject” or via the specific channels indicated in our email messages.
|
Your Data will be retained until you object to its processing |
Signing up to the newsletter: Your consent may be requested to sign up to our periodic and automated newsletter containing promotional, marketing and/or advertising messages (for example, periodic and limited promotions)
|
Your Data will be processed subject to your express consent, which can be given by checking the relevant box in the registration form (pursuant to Article 6(1)(a) of the GDPR). We remind you that you can withdraw your consent at any time by clicking on the link provided in every marketing message we send, or by writing directly to the Data Controller at the email address provided in the section “Rights of the Data Subject” or via the specific channels indicated in our email messages. We also remind you that withdrawing consent will not affect the lawfulness of processing based on the consent before its withdrawal.
|
Until consent is revoked |
Profiled marketing: Your Data may be processed in order to show you advertising suggestions that are more in line with your purchasing preferences and habits, as detected when browsing our website after logging in or after making a purchase.
|
Your Data will be retained until you withdraw your consent, or for no longer than 24 months from the date of collection and processing |
In addition to the foregoing, your Data and any information gathered may be processed by the Data Controller to prepare sales reports or for other internal statistical purposes. Such purposes will draw primarily on information concerning the purchases and preferences shown by our customers or browsing activity on the website. In some cases, the information may be gathered through a questionnaire sent to you following a purchase, with the aim of collecting information on your shopping experience. Such information will be processed in aggregate form for the sole purpose of enabling us to improve the website, our service levels and your user experience.
What will happen if I decline to provide my Data?
Personal data is provided on a voluntary basis. However, where Data is necessary or strictly required for the contractual relationship, if you decline to provide your Data, it may be impossible for us to perform the tasks related to the Data (or it may delay the performance of those tasks), in which case you will not be able to register with our e-commerce website.
If you decline to provide your Data for purposes not stated as necessary or strictly required for the contractual relationship (where personal data is processed exclusively subject to your consent, for instance), this may prevent us from performing such additional tasks, but it will in no way interfere with the contractual relationship or the performance of precontractual tasks.
Will my Data be disclosed and to whom?
Your Data will be processed by data processing personnel acting under the authority of the Data Controller, pursuant to Article 29 of the GDPR, or by third parties engaged by the Data Controller to carry out essential processing on its behalf in connection with the purposes stated above and designated as Processors in accordance with Article 28 of the GDPR. (An example is the company that assists the Data Controller in managing the website and e-commerce platform.). A complete list of the Processors that may process your Data will be provided upon express request to the Data Controller. Some Data may also be disclosed to other categories of recipients, which carry out their activities as independent data controllers (such as, for example, banks and credit institutions, government agencies, statutory auditors and accountants, etc.).
Transfer of Data to Third Countries
In carrying out tasks for the purposes stated above, the Data Controller or one of the processors identified may disclose and transfer your Data to additional third-party data processors located outside the EU and/or the European Economic Area, and acting under the authority and instruction of the Data Controller and in accordance with laws in force, for the provision of services strictly connected with one or more of the purposes stated. In general, the Data Controller does not disclose Data to Third Countries, either directly or through its data processors. Nevertheless, should this happen, we guarantee that your Data will be transferred in strict compliance with the provisions of Chapter V of the GDPR.
What are your rights and how can you exercise them?
With regard to your Data, we advise you that current legislation, and in particular Articles 15 and following of the GDPR, envisages a number of rights for data subjects, which we list here below. You can exercise your rights as a data subject at any time and free of any charge. Right of Access; Right to Rectification; Right to Erasure or the “Right to Be Forgotten”; Right to Restriction of Processing; Right to Receive Notification Regarding the Rectification or Erasure of Personal Data or the Restriction of Processing; Right to Data Portability; Right to Object to Processing. To exercise your rights as a data subject, contact the Data Controller or the Data Protection Officer by writing to the specific email addresses provided above.
If you believe that the processing of your Data breaches the provisions of the GDPR, you have the right to lodge a complaint with the data protection supervisory authority (Article 77 of the GDPR) or, alternatively, to take legal action (Article 79 of the GDPR).
