Privacy notice
Pursuant to European data protection law (Art.13, European Regulation 2016/679) the User acknowledges that Unopiù S.p.A. di Socio Unico, undertakes to process the personal data of Users according to the principles of correctness, lawfulness, transparency and the protection of confidentiality. Therefore, the User is informed that:
A. DATA CATEGORIES:
the purpose of the processing may relate to your personal data such as general personal data, contact data, demographic data, access and identification data (e.g. username, password, IP address, log, location), social network data, payment data and delivery and/or invoicing address, data relating to the user profile or provided during fast-checkout, data relating to orders placed and products purchased, data concerning browsing activities on the site and interactions with site services, as well as information on your preferences regarding the type of products or brands.
B. DATA CONTROLLER:
the data controller is Unopiù S.p.A. di Socio Unico, with registered office in Via Pontaccio,9 20121 Milan (MI) and operational headquarters in S.S. Ortana Km.14,500 01038 Soriano nel Cimino (VT), VAT number:05516670964. The Data Controller can be contacted by telephone at +39.0761.7581 or by mail at [email protected]
C. SOURCE OF PERSONAL DATA:
the personal data held by the Data Controller is collected directly from the interested party.
D. PURPOSE OF DATA PROCESSING AND LEGAL BASIS:
personal data is processed by the Data Controller for the following purposes:
• For purposes related to the fulfilment of legal obligations of an administrative, accounting, tax or other nature
• For purposes related to the existence of a legitimate interest on the part of the Data Controller:
1. For direct marketing purposes, for the sole purpose of using the email addresses that the Customer shall communicate to the Data Controller during this contractual relationship for sending email communications for commercial and marketing purposes, concerning products and services like those covered by the contract. At each sending it shall, however, be possible to unsubscribe (art.130, sub-section 4, Legislative Decree 196/2003).
2. For the execution of the "reminder" service for products saved in the "virtual cart" within 4 hours you shall receive a reminder message to complete the purchase.
3. Processing of employee or similar customer data (for example, name of the contact person of the business account), for the management of relations between the parties (data controller-customer).
4. Collection of data necessary for the creation and management of the user account; provision of services and/or functionalities related to e-commerce; management of profile data deriving from the site login service (e.g. “Log in with Facebook"); establishment, management and termination of the contractual and commercial relationship; communication of your data to any partners of the Data Controller for the correct execution of contractual and/or pre-contractual obligations; Assessment, exercise or defence of a right in or out of court deriving from the established relationship.
• Purposes based on the consent of the interested party relating to:
1. The activity: profiling activities by the Data Controller in order to offer personalised services, commercial proposals and communications in line with your interests, preferences and behaviour, taking into account the information you communicate within the profile and that derived from previous purchases (preferences on type of product, price range, quantity of items purchased and average spending) and from the activities of the cart, data relating to the way you use the portal deriving from information on your browsing experience and your preferences (also possibly deducible from the cookies to which consent has been freely modulated and is revocable. For further details on the functionality of cookies, please refer to the specific Cookie Policy).
2. The sending of commercial and/or marketing communications by the Data Controller, by means of newsletters, sms or other digital tools, or for research related to customer satisfaction.
E.DATA RECIPIENTS:
within the limits relevant to the defined processing purposes, your data may be communicated, if necessary, to other parties related to the processing activities, internal and external to the Data Controller, such as employees and assimilated, collaborators, partners, freelancers and consultancy companies, software providers, banking institutions, transport companies, technical intermediaries for the provision of the requested services. Your data shall not be distributed in any way.
F.TRANSFER OF DATA TO THIRD COUNTRIES:
The data collected may be transferred to third countries (USA) outside the European Economic Area, by virtue of an adequacy decision of the Commission, in the presence of Standard Contractual Clauses and adherence to the Data Privacy Framework, to fulfil the purposes set out above limited to points D1-D2.
G. RETENTION PERIOD:
the data collected shall be kept for a period of time not exceeding the achievement of the purposes for which it is processed ("conservation limitation principle", art.5, GDPR) or according to the deadlines established by law (accounting/tax data related to the contractual relationship, for a period of 10 years from the termination of this relationship). The verification of the obsolescence of the data stored in relation to the purposes for which it was collected is performed periodically. With regard to profiling and direct marketing activities, referred to in points D.1 and D.2, your personal data shall be kept for a period of three years; it shall be deleted in case of inactivity of the party for a period of 180 days, or, until any revocation of consent, request for deletion, opposition or limitation advanced by the interested party.
H. RIGHTS OF THE INTERESTED PARTY:
interested parties have the right, at any time, to request from the Data Controller access to their data, the correction or deletion of the same, the limitation of processing or the possibility of opposing the processing, to request data portability, to revoke consent to the processing by asserting these and the other rights provided by the GDPR by simple communication to the Data Controller. Interested parties may also lodge a complaint with a supervisory authority
I. OBLIGATION TO COMMUNICATE DATA:
for the purposes indicated above, the communication of personal data is necessary for the provision of the e-commerce service while for activities/purposes based on consent, the communication of data is optional and its refusal shall not in any way affect the provision of the service.
J. DATA PROCESSING METHODS:
the personal data you provide shall be processed in compliance with the above-mentioned legislation and the confidentiality obligations the activity of the Data Controller complies with. The data shall be processed both with IT tools and in hard-copy and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.
L. AUTOMATED DECISION-MAKING PROCESSES:
There are no automated decision-making processes.