Informativa privacy ai clienti (breve)

SUMMARY INFORMATION ON THE PROCESSING OF CUSTOMER PERSONAL DATA

(articles 13-14 EU Reg. 679/16 "GDPR")

NAVIGABLE INDEX:

1. 1. WHO IS THE DATA CONTROLLER
2. 2. IS THERE A DATA PROTECTION OFFICER?
3. 3. WHO ARE THE RESPONSIBLE FOR THE TREATMENT?
4. 4. WHAT DATA DO WE PROCESS?
5. 5. WHAT ARE THE PRIMARY PURPOSES AND LEGAL BASIS OF THE TREATMENTS?
6. 6. WHAT ARE THE SECONDARY PURPOSES AND LEGAL BASIS OF THE TREATMENTS?
7. 7. WHO DO WE COMMUNICATE YOUR DATA TO?
8. 8. HOW LONG DO WE PROCESS YOUR DATA?
9. 9. WHERE DO WE COLLECT YOUR DATA?
10. 10. HOW AND WHERE DO WE PROCESS YOUR DATA?
11. 11. DO WE TRANSFER YOUR DATA ABROAD?
12. 12. DO WE PROCESS MINOR DATA?
13. 13. WHAT ARE YOUR RIGHTS?
14. 14. WHERE CAN YOU FIND MORE INFORMATION ABOUT DATA PROCESSING?

1. 1. WHO IS THE DATA CONTROLLER

                The Data Controller is Rebecca s.r.l., with headquarters in Porto Recanati (MC) in Via Dell’Industria 17, 62018, VAT 02484770694, tel. : 0733 672081, email: privacy@mobilirebecca.it.

2. 2. IS THERE A DATA PROTECTION OFFICER?

Yes, the Data Protection Officer (R.P.D./D.P.O. - Data Protection Officer) is the Avv. Francesco Corallini Garampi, with office in via Lionetta 33, 60027 - Osimo (AN), Tel. And fax: 0712415178 - email: fcg@fcglex.it.

3. WHO ARE THE RESPONSIBLE FOR THE TREATMENT?

                The data controllers are particular suppliers (companies, consultants, etc ...) to whom the Data Controller delegates part of the data processing, providing them with specific instructions and demanding adequate protection for them.Specifically, the following are responsible for the treatment:

• IT and management service providers (including hosting services such as Netsons srl, whose servers host the Rebecca, Google, Facebook, Instagram WhatsApp, SmartsUpp, Wetransfer, Cloud services, Saas software, where used, anch they appointed data processors for the data that flow into their servers);
• administrative service providers, external professionals and consultants (accountant, job consultant, webmaster), payment gateway (eg Paypal, Fondy).

    The list of managers is available from the Data Controller.

4. 4. WHAT DATA DO WE PROCESS?

                Depending on the purposes, we process the following data from our customers:

- identification data

- Contact details

- Data relating to purchases and orders

- Data of particular categories: normally we do not process these data as they are not necessary for the pursuit of our activities. This could happen occasionally where, for example, we come into contact with a photo / video image of the customer from which we can deduce the customer's ethnic origin (this is the case of video surveillance).

- Browsing data: this occurs when customers visit our website www.mobilirebecca.it. To consult the information on cookies click here and for information on the website click here.

5. WHAT ARE THE SECONDARY PURPOSES AND LEGAL BASIS OF THE TREATMENTS?

                We show here the primary purposes for which we process customer data. In all these cases we are not required to request consent to the processing since the processing takes place on other lawful grounds indicated in this information. Failure to provide data, in these cases, could make it impossible for us to provide the requested services.

1. Commercial negotiations: we process your data to provide information on the products, the methods of purchase and shipping, quotes. In this case the legal basis of the treatment are the pre-contractual measures.
2. Customer contracts (sales and assistance): we process your data to manage your purchases and payments, ship the purchased products, assist customers in the event of complaints, returns. These treatments also concern the possibility for customers to create and use a reserved area on our website, where they can manage and consult their orders. Legal basis for this treatment is the contract.
3. Tax and legal obligations: we process your data to fulfill the obligations imposed by tax legislation, starting from the issue of the tax documentation relating to purchases (sales invoices) and the fulfillment of all declarative obligations. We also process data to fulfill other legal obligations imposed on us from time to time (e.g. compliance with data processing legislation). The legal basis for this treatment is the legal obligation or the relevant public interest.
4. Mandatory document retention: we process your data even when we keep the documentation (mostly fiscal and contractual) within the time limits imposed by law. The legal basis for this treatment is the legal obligation or the relevant public interest.
5. Management of disputes (complaints, judicial actions): we process your data for this purpose when disputes arise between us and it is necessary to protect our rights out of court or out of court (complaints, civil and criminal actions, conciliations). Legal basis for this treatment is the legitimate interest and defense of a right.
6. IT systems maintenance: we process your data when we access our IT systems where they are stored in order to carry out maintenance and / or updating of the systems, also in order to constantly monitor the security measures taken to protect the data (base legal of this treatment is the legitimate interest in the integrity of the IT systems).
7. Video surveillance: we process your data when you visit our legal and operational headquarters when, for the purpose of protecting the company's assets, we capture your image through CCTV systems specifically indicated and signaled (the legal basis of this treatment is the legitimate interest in the protection of corporate assets and the defense of a right.

6. 6. WHAT ARE THE SECONDARY PURPOSES AND LEGAL BASIS OF THE TREATMENTS?

                We show here the secondary purposes for which we process customer data. In all these cases, we are required to ask the Customer for a free, informed, specific, revocable consent in advance. Failure to provide consent for the following treatments will not in any way affect the processing envisaged on other legal bases nor will it compromise any contractual services. In these cases, the legal basis of the processing is consent.

1. Marketing: with your consent, we will process your data for marketing purposes (sending advertising material, carrying out market research, commercial communication, detecting the degree of customer satisfaction) and sending by mail, newsletter and / or SMS email / MMS of advertising information, offers and promotions related to our products and services.

2.Third-party profiling: with your further consent separate from that referred to in the previous point, which is normally requested when first accessing our website in the cookie management banner, we will also process your data for "profiling" purposes. . Technically we will not proceed directly to profiling, but this mainly occurs through the use of tools for tracking activities on the website www.mobilirebecca.it, such as profiling cookies and own or third-party pixels, such as Facebook Pixel, which allows you to use Facebook services such as Facebook Custom Audiences, Facebook Lookalike, Facebook Remarketing. In these cases, Facebook will then provide you with our personalized advertisements, based on your needs, in your Facebook diary or in other Facebook points. The Data Controller himself is unable to identify you personally through the Facebook pixel, as no other personal data, besides your browser ID, will be stored by us via the Facebook remarketing pixel. For information on the specific technologies used for profiling purposes (e.g. Facebook Pixel), please also refer to the information on cookies and other technologies available here, where the methods for providing / denying consent are also indicated.

7. 7. WHO DO WE COMMUNICATE YOUR DATA TO?

                The Data Controller does not disclose your data to indeterminate subjects or to the public.

    The Data Controller communicates your data to certain categories of subjects only within the limits and for the purposes described above, in particular, depending on the tasks assigned to them, he can communicate them to:

• internal subjects (authorized employees)
• External suppliers: professionals and accounting and legal consultants, suppliers of IT networks and services (e.g. Facebook, WhatsApp, Google, Aruba, SmartsApp), payment service providers (e.g. Fondy), surveillance systems (e.g. Mondialpol spa) , Banks and credit institutions
• Public bodies (e.g., Revenue Agency, Courts in case of litigation).

8. 8. HOW LONG DO WE PROCESS YOUR DATA?

                Referring to the extended information found here for the specific duration of treatment, in summary we inform you that the Data Controller processes your data for a time not exceeding what is strictly necessary, depending on the individual purposes, in full compliance with the principles of minimization and necessity imposed from the GDPR. The treatments for which the data are stored longer are related to the fulfillment of legal and conservative obligations (tax and civil) and that relating to the defense of a right, on the basis of which we will keep the data for a period not exceeding 10 years .

9. 9. WHERE DO WE COLLECT YOUR DATA?

                In most cases, you are the one who provides us with your data. With regard to the owner's website, browsing data may be collected during Users' browsing, for which processing please refer also to the information on cookies and to the specific information on the website.

10. 10. HOW AND WHERE DO WE PROCESS YOUR DATA?

                We process data through computer and paper archives located at the Data Controller's legal and operational headquarters (in Italy). However, the processing also takes place at the offices of the data processors and on their servers (e.g. at the accountant's office or on the servers that host the services used by the Data Controller) specifically appointed as responsible only for the purposes delegated to them, where necessary.

                Given the relevance of the Site for the activity of the Owner (e-commerce), it is important to inform that the Site www.mobilirebecca.it is hosted on machines managed by Netsons srl, an external company appointed responsible for the treatment, with headquarters in via Tirino 99 , 65129, Pescara, Italy. The servers are located in Italy, as can be verified from the information on the data processing of the supplier itself, available here.

    The Data Controller is constantly careful to put in place every suitable measure to guarantee the security, confidentiality, integrity of your data, starting from an adequate training of authorized personnel, from a selection of suppliers based on the security guarantees offered , from the adoption of cryptography, pseudonymisation and anonymization systems, to the use of robust passwords and their periodic replacement, to the adoption of physical and IT anti-intrusion systems. The list of security measures, constantly updated, is available at the headquarters of the owner.

11. 11. DO WE TRANSFER YOUR DATA ABROAD?

                We may transfer your personal data abroad when we use suppliers (eg Facebook, Google) or IT and telematic services for archiving, storing and managing IT data (eg Google Drive, WeTransfer, Drop Box), hosting services, housing , cloud, Saas and other remote IT services useful to the Data Controller for the pursuit and efficiency of the purposes. In some cases, these services could be located or managed outside the European Economic Area.

    In any case, the Data Controller will take care that this occurs in compliance with a condition of lawfulness envisaged by the GDPR, for example towards countries and third parties for which there is an adequacy decision (e.g. Privacy Shield).

12. 12. DO WE PROCESS MINOR DATA?

                All people under the age of 18 are minors. Pursuant to art. 2-quinquies Legislative Decree, 196/03 and ss. mm., in relation to the offer of information society services, all subjects under the age of fourteen are less.

The Data Controller does not intentionally request or collect personal data from or relating to minors even under the age of 18, without the consent of a parent or guardian.

    If the Data Controller learns that personal data relating to a minor have been sent without the consent of a parent or guardian, he will make all reasonable efforts to:

• delete, as soon as possible, such personal data from its archives;
• ensure that these personal data are not further used for any purpose, nor are they further disclosed to third parties.

13. 13. WHAT ARE YOUR RIGHTS?

                In relation to the processing of your data carried out by us, you have the following rights:

• Right of access
• Right to rectification
• Right to cancel
• Right to limitation of treatment
• Right to portability: allows you to receive your personal data supplied to us in a structured format, commonly used and readable by an automatic device and has the right to transmit it to another holder if the treatment: (i) was based on consent, ( ii) on the contract and (iii) whether the processing is carried out by automated means, unless the processing is necessary for the execution of a task of public interest or connected to the exercise of public powers and that such transmission does not affect the right to third.
• Right of opposition
• Right not to be subjected to a decision based solely on automatic processing
• Right to withdraw consent (in treatments based on this basis)
• Right to contact the Guarantor for the protection of personal data..

                You can exercise your rights in one of the following ways:

• recommended a / R. to Rebecca s.r.l., Porto Recanati (MC) in Via Dell’Industria 17, 62018;
• email: privacy@mobilirebecca.it;
• forms on the website reachable here to be sent to privacy@mobilirebecca.it.

14. WHERE CAN YOU FIND MORE INFORMATION ABOUT DATA PROCESSING?

                For more information regarding the processing of personal data, please consult the other information notices in our privacy area accessible here.

*****

Last updated: 8.5.20