Privacy breve

Information on the processing of personal data

- FRAMEWORK OF SYNTHESIS -

(art. 13 Legislative Decree 196/03 and articles 13-14 EU Regulation 679/16 "GDPR") 

If you want consult the information in an extended form please click here

1.    Data controller

The data controller of your data is Rebecca srl, based in Porto Recanati (MC) 62017, Via dell ’Industria, 27 VAT number 02484770694, in the person of its legal representative.                 

2. Primary purposes of the processing

The processing of the Customer's personal data pursues the primary purpose of favoring, stipulating and executing the purchase contracts for products in our Catalog (hereinafter the "Contract"), including the services related to the purchase, such as the management of the shipments, complaints, returns.

          Personal data are also processed to allow the Data Controller to fulfill the obligations required by law, by a regulation or by EU legislation and for civil, accounting and tax purposes.

          Additional primary purposes of processing are the need to allow registration on our site and the creation of a user account.

          Finally, personal data may be processed to assert or defend in the competent offices the rights of the Data Controller as well as for the legitimate interest of maintaining and guaranteeing the security of the company's IT systems. 

3. Data processing methods

The data will be processed manually and/or with the support of computer or electronic means. 

4. Scope of communication and dissemination of data

For the pursuit of the primary purposes, the Data Controller may communicate the Customer's data to Public Administrations for the fulfillment of civil and fiscal law obligations, to third party private suppliers who provide the Owner with additional services for the execution of the Contract, to consultants in the field accounting, tax, legal and administrative, to internal staff (managers and authorized persons as appointees) of the Data Controller. The data will not be disseminated. 

5. No need for consent for the primary purposes of the processing - In all the cases described above concerning the processing and communication of data to third parties for the primary purposes of processing, the Data Controller is under no obligation to acquire any consent from the Customer.

          All the treatments illustrated above in fact pursue primary aims for which Article 6 of EU Regulation 679/2016 on data protection excludes the need to acquire a specific consent of the interested party, being the legal bases of legitimacy of the treatment represented - depending on of the cases - from the Contract, from the obligation to comply with laws, the purpose of asserting or defending rights and the legitimate interest in maintaining and guaranteeing the computer security of the site and the corporate network. 

6. Secondary purpose of processing (Marketing)

The personal data collected are processed - if the Customer gives a specific consent (see below the specific information) - also for the following secondary and homogeneous purposes of the treatment: to pursue the aims of commercial promotion, advertising communication, solicitation to purchase behavior , market research, surveys (also by telephone, online or through forms), statistical processing (in identifying form), other sample marketing research in a broad sense of products and / or services referable to the Data Controller (hereinafter referred to as a whole , "Treatment for Marketing Purposes"). 

7. Scope of communication and dissemination of data processed for marketing purposes

The data subject to Treatment for Marketing Purposes as just explained above may, based on a specific and separate consent of the Customer, be communicated to the following third parties: ICT hardware and software, the data will not be disseminated. 

8. Consent is necessary for us, free and optional for you (without any consequence in case of refusal) for marketing purposes        

To proceed with the Treatment for Marketing Purposes it is mandatory for each Data Controller to collect the consent of the data subject, who must be informed, free, unambiguous, specific, separate, express, documented, preventive and entirely optional. A further and separate consent is also required in order to be able to communicate personal data to third parties so that they in turn treat them for marketing purposes. The user is also free to provide the Data Controller with the sole consent to the Treatment for Marketing Purposes but not also the further consent to communicate to third parties for marketing purposes. Where the user does not intend to give any marketing consent (to the owner and to the communication to third parties) there will be no consequence or impact on the contract. 

9. Right to revoke any consent given at any time

All consent, where provided by the user for any purpose, and with particular reference to marketing and profiling consents and related communication to third parties, can be revoked at any time without formalities, even after the performance through access to the reserved area of the site www.mobilirebecca.it. The authorized treatments carried out up to the moment of the revocation will be preserved.

10. Transfer of personal data to countries outside the European Union

Some personal data of the Customer will be transferred to countries outside the EU, mainly in the United States with Owners subject to an adequacy decision (Privacy Shield: https://www.privacyshield.gov/list). In this case the legal basis for the processing is the adequacy decision. 

1. Data retention times

The data processed for the primary purposes of the processing will be kept for ten years as required by the laws in force (tax, civil law).

          With reference instead to the personal data subject to Processing for Marketing Purposes or Processing for Profiling purposes, the same will be kept in compliance with the principle of proportionality and minimization for the duration of the Contract or until the revocation of the interested Customer occurs. 

12. All the rights that the interested party can exercise

The interested party has the right: (1) to request access to their personal data, to obtain the rectification, integration or cancellation of the same or limitation of the processing that concern them or to oppose their treatment, in the cases provided ; the person concerned also has the right not to be subjected to automated decisions, including profiling; (2) to obtain the data portability that allows the data subject to receive the personal data provided to the Data Controller in a structured format, commonly used and readable by an automatic device, and - under certain conditions - to transmit them to another data controller without impediments; (3) to make a complaint to the Guarantor for the protection of personal data or to the Authority of one's residence or domicile if not in Italy.

         The exercise of rights is not subject to any form restrictions and is free.

         The right to access and rectify your personal data, including the management of any consent given by the person concerned for the secondary purposes of the processing, may be exercised directly by the person concerned through our site on which the account was opened, in the specific: www.mobilirebecca.itaccessing your personal area with your credentials. All other rights (right to cancellation / oblivion, right to limitation of treatment, right to portability, right to object, right not to be subjected to automated decision-making including profiling) may be exercised by sending a specific request to the following email address: privacy@mobilirebecca.it.