25inch srls via Moscova, 46 20121 Milano (MI) P.IVA 09045840965, hereinafter called Company in the person of Nicolò Giacomo Semenza appointed Data Controller owner, hereinafter called the Owner, states that pursuant to Art. 13 D.Lgs. 30.6.2003 n. 196 of the art. 13 EU Regulation n. 2016/679 that the data collected will be processed in the manner and for the purposes indicated below.
1. Data collected
Our Personal Data Protection Policy governs the use and storage of the data provided.
The Owner is responsible for the personal data provided to us.
2. Purpose of the collection
The purpose of the data collection is as follows
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with the identified data subjects, but could, by their very nature, allow users to be identified through processing and association with data held by third parties.
This category of data includes IP addresses or domain names of the computers used by the users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. They are deleted immediately after processing. The data could be used to establish responsibility in case of hypothetical computer crimes against the site. Except for this eventuality, at present the data on web contacts do not persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, as well as any other personal data included in the email, and are necessary to respond to the requests.
The site collects the personal data necessary to be able to provide the service requested voluntarily by the users and approved by signing the consent form on the Personal Data Processing Agreement.
The collected data, which are used for the personalization and sale of our products, are the following:
- personal data for billing and for accounting management of sales;
- personal data necessary for the management of shipments;
- photos necessary for customizing the product.
If special services are activated that affect the processing of personal data, such as collection for marketing purposes, before the acquisition of any information, specific summary information will be presented and displayed on the pages of the site.
No personal user data is purposely acquired by the site.
The use of c.d. session cookies, which are not permanently stored on the user’s computer and which disappear when the browser is closed, is strictly limited to the transmission of session identifiers, consisting of random codes generated by the server, necessary to allow safe and effective browsing of the site.
The c.d. session cookies used on this site allow us to avoid the use of other software technologies that could compromise the privacy of users’ browsing. This type of cookies does not allow the acquisition of user’s personal identification data.
Refer to the cookies policy for more information.
Optional Data Transfer
Except for what has been indicated for the navigation data, the user is free to provide personal data in the information request forms or in the contacts area of the site in order to receive informational material or to carry out any other type of communication.
Failure to provide personal data may often make it impossible to obtain what has been requested.
For full disclosure, it should be noted that in some cases that are not part of the ordinary management of this site, the Supervisory Authority of the Privacy Guarantor may request details and information pursuant to Article 157 of the Code regarding the Protection of Personal Data, in order to verify the processing of personal data. In these cases the answer is mandatory.
3. Storage location
The treatments connected to the web services of this site take place at the Company headquarters.
4. Processing methods
Specific security measures are taken to prevent data loss, illegal or incorrect use and unauthorized access.
5. Data retention period
All accounting data will be transferred to the company management system and will be kept for the time required by law (10 years).
All additional data collected for providing the service, such as personal images, will be stored in the Company’s e-commerce database for the time necessary for completing the operations and for handling any complaints. In any case no more than 3 months after their acquisition. After that period of time, they will be permanently deleted.
For reasons related to the automated management of images, we cannot easily distinguish the images provided by those who, for various reasons, have not completed their order. But since also the latter were acquired with the explicit consent of the user, they will remain in the company database along with other personal data provided, following the same procedure and timing of those connected to products sold. After the established period of time, they will be permanently deleted.
If the collection of personal data for marketing purposes has been explicitly authorized, that data will be kept for a maximum period of 2 years.
6. Rights of the interested parties
The parties involved in the processing of personal data have the right at any time to obtain confirmation if the same data does or does not exist, to know its content and origin, to verify its accuracy and to request its integration and updating. Article 7 of the Code concerning the Protection of Personal Data.
According to the same article, you have the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing.
7. How to exercise your rights
The interested party may at any time exercise the rights mentioned above by sending:
- a “registered letter” to 25inch srls via Moscova, 46 20121 Milan (MI);
- an email to firstname.lastname@example.org