The processing of users’ personal data is carried out in compliance with the provisions of the legislation on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter “GDPR”).
Personal data collected through the Site are exclusively those voluntarily provided by users when registering on the Site, purchasing products and/or services, subscribing to the newsletter, as well as those collected in an automated manner during the use of the Site.
Users’ personal data are processed for the following purposes:
– Site registration and personal account management;
– Purchase of products and/or services;
– Sending commercial and/or promotional communications, including newsletters;
– Processing statistics on the use of the Site;
– Prevention and countering of fraud and/or abuse.
The processing of users’ personal data is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
In addition, to ensure the security and confidentiality of personal data, the Site adopts appropriate security measures, physical and logical, to prevent unauthorized access, dissemination, unauthorized modification or destruction of users’ personal data.
Users to whom personal data refer have the right at any time to obtain confirmation of the existence or non-existence of such data and to know its content and origin, verify its accuracy or request its supplementation or updating, or rectification (Article 7 of the GDPR).
According to the same article, one has the right to request the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be addressed to the data controller, who can be contacted through the contact details provided in this document.
In addition, users have the right to revoke their consent to the processing of their personal data at any time, without affecting the lawfulness of the processing based on the consent given before revocation.
The data controller of users’ personal data is [name of data controller], with registered office in [address of data controller].