INFORMATION ON THE TREATMENT OF PERSONAL DATA TO ART 13 OF THE REGULATION (EU) 2016/679 (“GDPR”) AND OF THE NATIONAL NORMATIVE RELATING TO THE PROTECTION OF FISIC PERSONAL PERSONAL PERSONAL DATA (“NORMATIVA VIGENTE”).
Dear User, Quieti Marta is the owner of the website www.mygrashop.it (“Site”) and informs you that the data you provide on the occasion of access to the Site will be processed in accordance with the provisions of the following information.
[1] Data controller; Responsible for treatment; Data Protection Officer
Data controller is QUIETI MARTA with registered office in Via S.P. Feltresca 9, 20/a - 61029 URBINO (PU), C.F. / P.Iva. 02537760411, registered in the Business Registry of Pesaro E Urbino nr. 02537760411 and R.E.A. 189939, Tel +39 340 2994818, e-mail [email protected] (the “Titolare”).
[2] Purposes and methods of processing – Data retention times
QUIETI MARTA processes the personal data of Users for the following purposes:
(a) for registration to the Site or for proceeding to purchase goods or services of QUIETI MARTA through the Site and, therefore, to carry out any activity connected, in particular, to the selection of products or services, to the sending of orders and/or to the relative acceptance, to the shipment, to the delivery and/or to the eventual exercise of the right of withdrawal and to the consequent withdrawal of the goods or to any other performance provided in the general conditions of sale of QUIETA;
(b) to allow the use of services reserved to registered Users as from conditions of use of the Site in which the provision of services is provided at the request of the User as the alert service, sending messages to receive customer support, for the booking of goods and services, for the release of reviews and comments from Users in specific online forms;
(c) for the performance of any administrative and accounting activity connected with the registration to the Site, the execution of a purchase through the Site, and the fulfilment of legal obligations;
(d) for the sending of communications aimed at the promotion and/or direct sale of products or services similar to those already purchased/used by the User (c.d. "soft spamming"), subject to the User's right to object at any time;
(e) for the sending of commercial communications on products and services of the Site, special offers, promotions and news, coupons, for the conduct of market research, by means of automated systems, e-mail, sms, mms, fax, or similar, and/or by means of the postal service (c.d. marketing purposes);
(f) for statistical and historical purposes (only with anonymous data). Personal data are processed with manual and electronic tools and are stored in the database. The personal data contained in the aforementioned automated information system, as well as those stored in the electronic archives of the Data Controller, are processed in accordance with the provisions of current law and GDPR in the matter of security measures, in order to minimize the risks of destruction, loss, modification, unauthorized disclosure or access, accidentally or illegally, or processing not in accordance with the purposes of the collection. The personal data, moreover, are retained for the time necessary to achieve the aforementioned purposes, as well as to fulfil the legal obligations imposed for the same purposes.
[3 ] Type of personal data processed
QUIETI MARTA processes the personal data freely entered by the User on the Site or entered by the User through connection to social platforms (such as, in particular, personal data, tax codes, addresses, telephone numbers and/or fax numbers, e-mail addresses, data contained within comments or reviews, etc.), as well as autonomously generated technical data (in particular, IP addresses, log files relating to navigation on the Site, purchases made, etc.). QUIETI MARTA will retain, within the terms of law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions. C. Credit card details To make a payment on the Site by credit card, the User must enter the confidential credit card data (card number, owner, expiry date, security codes). This data will be acquired by the payment service provider (PAYPAL) who will act as an independent controller, without transiting from the QUIETI MARTA server. The data will be acquired in encrypted format according to the security requirements of the PCI certification using the TLS (Transport Layer Security).
[4] Data conferment and consent to the relevant processing – Consequences in case of failure to provide.
The provision of the data for the purposes referred to in points (a), (b) and (c) of Article 2 above is necessary and, therefore, the failure to provide the personal data in question will result in the impossibility for the User to conclude the procedures of purchase, sale, delivery and/or return of the goods, to use the services reserved to the registered users or from these last requests from time to time as indicated in the conditions of use of the Website. The consent to the processing of personal data for the aforementioned purposes is not required, in particular, pursuant to art. 6, par. 1, letter b), GDPR and current legislation. With reference to the purposes referred to in point (d) of Article 2 above, consent to the processing is not necessary in accordance with the applicable legislation, however, the right of the User to object at any time to sending notices in accordance with the methods indicated below.
With reference to the purpose of the processing referred to in point (e), the consent to the processing of personal data is purely optional, provided that its failure to provide will make it impossible for the User to receive information and/or commercial communications relating to products and/or services of QUIETI MARTA and to benefit from any promotions from these offers.
[5] Scope of data communication
The personal data provided by the User for the purposes described in Article 2 above may be disclosed to or communicated to the following recipients:
- employees and/or collaborators any title of QUIETI MARTA for the conduct of activities of administration, accounting and IT and logistic support;
- public and/or private individuals, natural persons and/or legal persons (legal, administrative and tax consultancy studies, forwarders and couriers, any computer companies and any other subject) of which QUIETI MARTA takes advantage in carrying out the activities referred to in points (a), (b) and/or (c) of Article 2;
- to all those subjects (including public authorities) who have access to data under regulatory or administrative measures.
All personal data provided by Users regarding registration to the Site and/or purchase through the Site are not subject to disclosure.
[6] Rights of interested parties
Pursuant to Articles 15 and 15 of the GDPR and the legislation in force, the User has the right, in addition to lodge a complaint with the Italian Data Protection Authority and to withdraw at any time the consent provided, of:
a) obtain confirmation of the existence or not of personal data concerning it and their communication in an intelligible form, receiving them in a structured format, of common use and readable with the possibility to transmit them to another holder ("right to portability");
b) obtain indications:
on the origin of personal data, on the purposes and methods of processing, on the logic applied in case of processing carried out with the help of electronic instruments;
on the identification details of the Data Controller, the Data Processor, and the Data Protection Officer;
on subjects or categories of subjects to which the data may be communicated or who may come to know of them as designated representative on the territory of the State, of managers or designated persons.
c) get:
updating, rectification or integration of the data concerning it or, in the event of a dispute about the correctness of the data, the restriction of the processing of the data for the time necessary for the appropriate verifications,
transformation into anonymous form or blocking of data processed in violation of law, including those of which conservation is necessary in relation to the purposes for which the data was collected or subsequently processed,
the fact that the operations referred to in the preceding points have been made known also as regards their content, of those to whom the data has been communicated or disseminated, unless such performance is impossible or involves the use of means manifestly disproportionate to the protected right.
d) oppose, in whole or in part:
to the processing of data concerning it, even if pertinent to the purpose of the collection,
to the processing of personal data concerning him, provided for commercial information or sending advertising material or direct sales
e) obtain the cancellation without undue delay (“right to oblivion”) in case the data is no longer necessary than the purposes for which they have been collected or otherwise processed, have been processed unlawfully or in case the User:
you ask,
opposes all or part of the treatment.
f) obtain the restriction of processing in case the data:
are unlawfully treated but the User opposes the cancellation of the same,
are necessary to the User for the establishment, exercise or defense of a right,
both pending an assessment of the legitimate reasons for processing by the Data Controller.
The above rights may be exercised by request to the Data Controller, at the e-mail address [email protected] or, also by means of a specific link at the bottom of any promotional or informative e-mail sent by QUIETI MARTA