The Data Controller of the Data collected from this Website is Kima S.S.D. A.R.L., with registered office in Santa Maria Nuova (AN), 60030, Piazza Del Torrione n. 23, VAT number 02829790423 email: email@example.com.
Disclosure obligations for public disbursements:
state aid and de minimis aid received by the company are contained in the Registro nazionale degli aiuti di Stato to art. 52 of Law 234/2012 “and available at the following link, inserting as a search key in the tax code field 02829790423
Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to processing based on principles of correctness, lawfulness, transparency, and protection of confidentiality pursuant to current regulations. The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
Purpose of the processing of personal data and legal basis
Personal data can be collected independently by the owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (e.g., the IP address, the type of browser used, the operating system, the name, and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet. These data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning and will be deleted immediately after processing.
The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:
a) to fulfill the obligations arising from the contract stipulated between the User and the Owner for the sale of the Products on the Website and to provide the information requested by the User. This treatment is mandatory for the execution of the contract of which the User is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject;
b) for any registration procedure aimed at purchasing the Products and for the purchase procedure in which to enter your personal data and billing or similar tax profiles. In this case, the Data are processed to execute the Contract stipulated, to contact the User in relation to the Contract and for the management of the same, for the management of requests for legal guarantees, assistance, requests for withdrawal, management, and termination of the Contract. same. This treatment is mandatory for the execution of the contract of which the User is part of it;
c) to fulfill any type of obligation contemplated and envisaged by current laws, regulations, related regulations, commercial uses, and tax / fiscal matters. This treatment is mandatory to fulfill a legal obligation to which the Data Controller is subject;
d) for other ancillary purposes or related to those indicated above and, in any case, falling within the scope of the Website’s activities;
e) to follow up on the specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via e-mail messages or by filling in the contact form and other communication tools such as telephone or instant messaging WhatsApp Business. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the Services offered by the Owner;
f) for sending information and promotional and commercial offers sent by e-mail, post, or text message. This treatment is based on the consent freely expressed by the User;
g) for sending promotional and commercial information and offers via the newsletter service to stay updated on the activities carried out by the Data Controller. This treatment is based on the consent freely expressed by the User;
h) for soft spam purposes to allow the Owner to send promotional communications by e-mail to the User concerning Products and / or Services purchased without the need for the User’s express and prior consent, as required by art. 130, paragraph 4, of the Privacy Code, and provided that the user does not exercise the right to object; This treatment is based on art. 130, paragraph 4, of the Privacy Code as amended by Legislative Decree 101 of 2018;
i) to perform statistical analysis on aggregate and anonymous data to analyze the behavior of the User to improve the products and services provided by the Owner as well as meet the User’s expectations;
l) for profiling activities for marketing purposes. This treatment is based on the consent freely expressed by the User.
Category of Personal Data processed
Among the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as: Cookies, Usage Data, name, email, telephone, Tax data useful for purchase and Personal Data useful for the delivery of the Product purchased. The optional, explicit, and voluntary sending of e-mails via the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the e-mail.
In addition to the Data Controller, in some cases, may have access to the Data:
a) categories of specially trained persons involved in the organization of the website (administrative, commercial, marketing, legal, system administrators);
b) external subjects (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;
c) public or private subjects who can access the Data in compliance with legal obligations;
d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Owner;
As expressly provided by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
– The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
– The data collected for tax / administrative obligations or contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law;
– The Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied; The User can obtain further information regarding the legitimate interest pursued by the Owner by contacting the Owner.
– The Data collected on the basis of the User’s consent may be kept until such consent is revoked;
The Data may be kept by the Data Controller for a longer period in compliance with legal obligations or by order of an authority.
At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, cancellation, rectification, and portability of the Data will no longer be exercised.
Place of processing and transfer of data abroad
The Data are processed at the Data Controller’s operational headquarters. For more information, you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the case that the Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate data protection.
Tools used for the processing of personal data
By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through Contact Form: Email, Name.
WPForms (WPForms, LLC.)
OTHER CONTACT TOOLS
EMAIL ADDRESS MANAGEMENT
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on links inserted in messages.
By registering for the newsletter, the User’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User’s email address could also be added to this list because of registering on this Site or after making a purchase. The User can choose at any time to unsubscribe from the newsletter by clicking on a specific button that he will find in the emails. After clicking on the delete button, the User Data will be deleted immediately from the “email marketing” software. Personal data collected: email and name. This Website uses the newsletter service provided by:
SendinBlue (SendinBlue SAS)
REVIEW OF PRODUCTS SOLD
The User can provide a review relating to a purchase of a Product made on the Website.
These services analyze the traffic of this Website, potentially containing Users’ Personal Data, to filter it from parts of traffic, messages and contents recognized as SPAM.
WP Cerber Security (Cerber Tech, Inc.)
REGISTRATION TO THE WEBSITE
With the registration service, the User allows the Site to identify him and give him access to dedicated services.
The user registers directly on the site by filling out the form and providing their data.
The statistical services only allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. This website uses the following services:
1. Google Analytics (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. The IP address anonymization function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.
2. Facebook pixel conversion tracking (Meta Platforms, Inc.)
INTERACTION WITH SOCIAL NETWORKS
These services allow interaction with social networks directly from the pages of this website. The interactions and information acquired from this Website are in any case subject to the User’s privacy settings relating to each social network. In the case that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
1. Facebook (Meta Platforms, Inc.)
2. Instagram (Meta Platforms, Inc.)
3. Youtube (Google Ireland Limited)
4. Spotify (Spotify AB)
REMARKETING AND RETARGETING
Facebook Remarketing (Meta Platforms, Inc.)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, which connects the activity of this Website with the Facebook advertising network. This website uses the Facebook Pixel tool to measure conversions. Thanks to the Facebook Pixel it is possible to understand the actions that people perform on the Website. The data collected can be used for:
– make sure your ads are shown to the right people;
– create audience groups to target advertisements;
– take advantage of the additional advertising tools of the platform on which you advertise
CONTENT ON EXTERNAL PLATFORMS
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
In the case that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
This Website uses
1. Youtube (Google Ireland Limited)
2. YITH Event Tickets (Your Inspiration Solutions S.L.U.)
The payment management services allow this Website to process payments by credit card, bank transfer or other tools. The data used for the payment are acquired directly by the manager of the requested payment service without being processed in any way by this site. Some of these services may also allow the scheduled sending of messages to the user, such as emails containing invoices or notifications regarding the payment. This website uses the following services:
PayPal (Paypal Europe S.à.r.l. et Cie, S.C.A Inc.)
Exercise of the rights of the interested party
The interested party has the right to exercise the faculties provided for in Articles 7, 15-22 of the European Reg. 679/2016. In particular, the interested party has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain updating, limitation of processing, rectification of data and cancellation of those processed in breach of current legislation. He has the right, for legitimate reasons, to oppose the processing of personal data concerning him and the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data. The interested party may exercise his rights by contacting the Data Controller by email at the address: firstname.lastname@example.org.