Gdpr personal data
Information pursuant to and for the purposes of art. 13 of Reg. EU 2016/679 on the protection of personal data.
ELCOM DI ELIO COMPARIN - Via Canova 31/33 - 36033 - ISOLA VICENTINA (VI), VAT number: 00556890242, as Data Controller, informs you, pursuant to art. 13 of Reg. EU 2016/679 (Reg. on the protection of personal data, henceforth only "GDPR"), about the essential elements of the processing carried out and illustrated below. We would like to highlight that our company operates in full compliance with the applicable Italian legislation on the protection of personal data and the GDPR, recognising its absolute importance.
Before proceeding to navigation
We therefore invite you to read this information carefully (from now
on only "Information")as it contains important information
on the protection of personal data and the security measures taken to
ensure confidentiality. This Policy, moreover: is intended only for
the website www.elcomshop.com ("Site") while it does not
apply to other websites that may be consulted through external links;
it is intended as an Information made pursuant to art. 13 of the GDPR
to those who interact with the Site. These are the essential elements
of the processing carried out.
Personal data subject to
processing
Personal data means any information
relating to an identified or identifiable natural person with
particular reference to an identifier such as name, identification
number, location data, an online identifier or one or more elements
characteristic of its physical, physiological, psychological,
economic, cultural or social identity.
The personal
data collected by the Site are as follows:
a) Navigation data: the computer systems of the Site collect certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to identify you, but by its very nature could, through processing and association with data held by third parties, allow you to identify yourself. The collected data includes, for example, the IP addresses or domain names of the devices used to connect to the Site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc. ) and other parameters related to your operating system and computer environment;
b)
Data provided voluntarily: through the Site you have the possibility
to voluntarily provide personal data, for example, the name and
e-mail address for subscription to the newsletter service or to
contact us through the "contact us" form or contact
details, billing address for the purchase of our products through the
e-commerce service on our Site. We will use this data in compliance
with applicable law, assuming that it refers to you. In the event
that the data are related to third parties, for the latter, you make
yourself the independent data controller, assuming all the
obligations and responsibilities of law. In this sense, confer on the
point the widest indemnity with respect to any challenge, claim,
claim for compensation of the damage from treatment, etc. that it
should reach our reality from third parties whose personal data have
been processed through your use of the Site in violation of the
applicable legislation currently in force;
c)
Cookies and related technologies: We collect personal data through
cookies. More information on the use of cookies and related
technologies can be found under cookie-policy in the information
pages of this site.
Purpose
and legal basis of processing
Specifically, your
personal data are processed for the following purposes and legal
bases:
-visualization of the site and navigation (these
are activities related to the correct provision of the various
functionalities requested by you, for reasons of safety and
accountability in the event of hypothetical computer crimes against
the Site, as well as to obtain anonymous statistical information on
the use of the Site and to check its correct functioning); the legal
basis of the aforementioned purpose is identified in the contract and
pre-contractual measures (art. 6.1, letter b, GDPR);
-activities
related to contact management (examples of activities are: filling in
the contact form on the site or more generally sending an e-mail that
involves the processing of personal data such as, for example, name,
surname, subject; the legal basis for this purpose is identified in
the contract and pre-contractual measures (art. 6.1, letter b,
GDPR);
-activities related to the performance of the
contract to which you are party, including the pre-contractual phase
(Examples of activities are: the provision of a service or the sale
of a product through the e-commerce service through this Site, the
response to a request, the contact request through the form
"contacts" (OR OTHER), registration for the newsletter
service (etc.); the legal basis for this purpose is identified in the
contract and pre-contractual measures (art. 6.1, letter b,
GDPR);
-statistical research/analysis on aggregated or
anonymous data (This activity does not involve the processing of
personal data, since it does not involve the identification of the
user and serves, for example, to measure the operation of the Site,
measure traffic and assess interest);
-activities related
to the establishment and/or exercise and/or defence of rights
(examples of activities are: disputes relating to the proper
performance of the contractual relationship, warnings, debt
collection); the legal basis for this purpose is in the legitimate
interest (art. 6.1, letter f, GDPR);
-other activities in
execution of legal obligation/orders Authority (such as communication
to third parties); the legal basis is identified in the legal
obligation (art. 6.1, letter c, GDPR);
-maintenance of
computer systems and devices (the subjects in charge of carrying out
maintenance and repairs on the Site may accidentally have access to
your personal data. These are events that are completely occasional
and unpredictable and in any case without identification purposes and
limited to the duration of the execution of the maintenance/repair
operation); the legal basis for this purpose is in the legitimate
interest (art. 6.1, letter f, GDPR). We do not carry out treatments
with automated decision-making processes. We do not carry out
profiling activities except for profiling through cookies. More
information on the use of cookies and related technologies can be
found under cookie-policy in the information pages of this site.
Specific information will be published on the pages of the Site
prepared for the provision of certain services (e.g. contact form,
newsletter, e-commerce).
Times
of storage of data
Your personal data will be kept for
the time strictly necessary to carry out the purposes described above
and to fulfil the obligations provided by law. In particular, to view
the site and browse your data are deleted after seven days, unless
they are necessary for the exercise or defense of rights, for
activities related to the management of the contact your personal
data are deleted at the time when the purpose of contact, response or
correspondence is definitively exhausted, for activities related to
the execution of the contract to which you are a part (including the
pre-contractual phase), your personal data are kept for the duration
of the contractual relationship and, once the relationship is
concluded, will be kept for the purposes of
ascertaining/exercising/defending a right, for activities related to
the establishment and/or exercise and/or defense of rights, up to the
time allowed by national law to protect their interests (Art. 2946
and 2947 of the Civil Code), save further storage in the event of
interruption of the limitation period; for activities in compliance
with legal obligations/ Authority orders and for the maintenance of
computer systems and devices, referring to personal data we have for
the other purposes indicated in this Policy, the storage times
coincide with those identified for the aforementioned purposes.
Consent
and optionality/ obligation to provide.
The processing
of your personal data, for the purposes explained above, may be
carried out without your consent. The provision of your data that you
undertake to provide us contractually or by legal obligation, is
mandatory and is a necessary requirement for the conclusion of the
contract and failure to provide it will make it impossible for us to
process the contracts and other related obligations. Any other
provision of your personal data (e.g. for sending requests not yet
contracted or for browsing the site) is purely optional. The only
consequence of not providing optional will be the inability to
provide or perform the services requested.
Target
groups
Your Personal Data, moreover, may be disclosed
to third parties, for technical and operational needs strictly
related to the purposes stated above and in particular to the
following categories of subjects:
a) subjects necessary
for the provision of the services offered by the Site including, but
not limited to, the sending of e-mails and the analysis of the
functioning of the Site that typically act as data processors of our
reality;
b) entities, professionals, companies or other
structures entrusted by us with the processing related to the
fulfilment of contractual, administrative, accounting, insurance and
management obligations related to the ordinary performance of our
economic activity, also for credit recovery purposes;
c)
public authorities and administrations for the purposes related to
the fulfilment of legal obligations or persons entitled to have
access to them by virtue of provisions of law, regulations and
community regulations;
d) banks, financial institutions or
other parties to whom the transfer of the aforementioned data is
necessary for the performance of the activities of our company in
relation to the fulfilment by us of the contractual obligations
assumed against you; e) suppliers of installation, servicing and
maintenance services of computer and telematic systems and all
functionally connected services necessary for the performance of the
services covered by the contract;
f) persons authorised by
us to process data who are committed to confidentiality or have an
adequate legal obligation of confidentiality (e.g. employees and
collaborators).
Transfers abroad
The Data Controller does not transfer personal data outside the European Economic Area. The Data Controller, however, reserves the right to use cloud services; in which case, the service providers will be selected from those who provide adequate guarantees in compliance with the Applicable Law.
Method of treatment
Your personal data will be processed both in electronic and paper format. The processing will, however, be carried out mainly with computer tools and in any case with the observance of the minimum precautionary measures of data security and confidentiality. In particular, technical, IT, organisational, logistical and procedural security measures have been implemented in order to prevent loss, unlawful or irrelevant use of and access to data without authorisation.
Rights of the data subject and complaint before the Guarantor
We inform you that regarding the processing of your personal data you can exercise the following rights:
a) Right to obtain access to your personal data (art. 15 GDPR): you can contact us to find out if your personal data are processed and the legal information on processing;
b) Right of rectification (Art. 16 GDPR): obtain the correction of your inaccurate personal data or the integration of incomplete personal data;
c) Right to deletion/forgetting (art. 17 GDPR): obtain the deletion of your personal data, in the cases provided for by law;
d) Right to restriction of processing (art. 18 GDPR): obtain the submission of your personal data to storage only, with the exclusion of other activities, in the cases provided for by law;
e) Right to portability (Art. 20 GDPR): obtain your personal data in a structured, commonly used and machine-readable format and obtain, moreover, the direct transmission to another data controller, in the cases provided for by law;
f) Right to object (art. 21 GDPR): right to stop further processing of personal data for reasons related to your particular situation, subject to the prevalence of our compelling legitimate reasons, in the cases provided for by law;
g) Right to withdraw consent (art. 7.3 GDPR): right to revoke consent at any time for cases where the processing is based on consent. To exercise these rights you can use the Data Controller’s contacts provided in this Policy. The exercise of rights is not subject to any formal constraint and is free of charge. We also inform you of your right to lodge a complaint with the competent Data Protection Authority. Recall that the complaint, pursuant to art. 77.1 GDPR, can be promoted by the data subject to the Authority of the place where the data subject habitually resides, where he works or where the alleged violation occurred.
Data controller
The Data Controller is ELCOM DI ELIO COMPARIN
Contact details of the Data Controller:
e-mail: info@compelgoods.com
telephone: 0444976593
Paper post: VIA CANOVA 31/33 - 36033 - ISOLA VICENTINA (VI)
Modifications
This policy has been in force since 25 May 2018. We reserve the right to modify or simply update the content, in part or completely, also due to changes in the applicable legislation. The updated Policy will be promptly published on this Site. Therefore, we invite you to visit this page regularly to see any updates.