Privacy Policy

Pursuant to articles 13 and 14 of the European Regulation 2016/679 (later "GDPR") and subsequent national adaptation rules (hereinafter Applicable Law) on the processing and protection of personal data, the Holder of the Treatment commit oneself to:

Be transparent about the information collected and its use.
Use the information provided for the purposes described in the privacy policy.
Put in place measures to protect the information provided.
Respect data protection rights
Allow the interested party to exercise their rights
In the following information, the methods, times, nature, purposes of processing and dissemination of the information and data we collect when you connect to our site, consult it or interact with it are explained in more detail. it, regardless of the purpose of the connection itself, in line with Italian and European legislation, regarding both the protection of personal data and the free circulation of the same.

HOLDER OF THE TREATMENT

The data controller is AMONREE S.R.L. with registered office in Via Vittorio Veneto, 23 - 80028 Grumo Nevano (NA), C. F./P. IVA 07511751211 in the person of the sole administrator Mr. Domenico D'Errico.

CATEGORIES OF PERSONAL DATA PROCESSED

For the sale of products through its website www.antonioderricoshop.com the Data Controller processes some personal data. These data, functional to the execution of the online sale, can be provided either implicitly by the tools used to access and use the site or can be provided explicitly by the interested party

The categories of data processed may include:

Technical navigation data relating to the IP address, type of browser and parameters of the device used to connect to the site, name of the internet service provider (ISP), identification codes of the devices used by the user for the use of the site or services , date and time of visit, web page of origin of the visitor and exit, possibly the number of clicks;
Common identification data provided by the user such as:
Surname and Name, address, postcode, city, telephone number, email, tax code and VAT number and all the data necessary to be able to purchase the products for sale on the site; order data and order history (products ordered, quantity, price, date and time of purchase, payment instrument used), registration data (username, encrypted password, IP). The Owner reminds the User that part of this data could be sent to third parties for the purpose of completing the payment of an order (for example PayPal). Please refer to the privacy policy of the respective payment managers for further information on data processing.

PURPOSE AND LEGAL BASES OF THE PROCESSING

The user data collected by the site are necessary to allow the Data Controller to provide its sales services and in any case will be processed solely for the purposes:

Closely connected and necessary for the purchase of products for sale on the site, starting from the visit of the site by a guest user, registration on the site and the operations necessary for the purchase of products by the user, management requests for contact or information.
Activities related to the management of the User's requests and the sending of feedback which may include the transmission of promotional material; for the completion of the purchase order for the products offered, including the aspects relating to payment through the methods explained in detail in the TERMS OF SALE (create link)
Correlate to the public compliance required by community and national regulations, to the protection of order, to the detection and repression of crimes;
Marketing, ie sending advertising material, direct sales, carrying out market research or communicating services offered by the Data Controller; this activity may be carried out by sending advertising / informative / promotional material and / or invitations to participate in initiatives and events promoted by the Data Controller.
Profiling, with the aim of providing the user with services in line with their preferences
Site security: the automatically recorded data, such as the IP address, could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause damage to other users, or in any case activities harmful or constituting a crime.
The provision of data for the purposes referred to in points 1), 2) and 3), connected to a pre-contractual and / or contractual phase or functional to a purchase or provided for by a specific regulatory provision, is mandatory (Article 6 paragraph 1 letters b, execution of a contract) and, failing that, it will not be possible to receive information and even less to proceed with a purchase of any services requested;

For the purposes referred to in points 4) and 5), consent to the processing of data by the interested party is required (Article 6 paragraph 1 letter a, consent); the consent is, in any case, free and optional and always revocable without consequences on the usability of the services except for the impossibility for the Owner to keep up to date on new initiatives or on particular promotions or advantages that may be available.

Please note that the interested party can always withdraw consent and exercise the right to object to direct marketing (in "traditional" and "automated" form). The opposition, in the absence of any indication to the contrary, will refer to both traditional and automated communications.

The Data Controller may send commercial communications, without the need to request consent, relating to products similar to those already purchased, pursuant to Directive 2002/58 / EU, using the e-mail coordinates, or paper ones, to which you can oppose. with the methods and contact details below.

In the latter case, the data will be kept for a maximum period of 24 months after which, if the user has no longer had interaction with e-commerce, the legitimate interest of the owner is deemed to cease.

METHOD OF TREATMENT AND STORAGE TIMES

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, use, interconnection, blocking, communication, cancellation and destruction of data.

Your personal data are subjected to both paper and electronic and partly automated processing.

These data may also be organized in databases or archives and will be kept, starting from their receipt / update, for a maximum period of 10 years for the management of Marketing services, after which they will be deleted or made anonymous.

AREAS OF COMMUNICATION AND DATA TRANSFER

Your data may be made accessible for the purposes mentioned above to employees and collaborators of the Data Controller, including external ones, in their capacity as persons in charge and / or data processors and / or system administrators, control authorities, payment managers. We will only provide these third parties only with the information necessary to perform the requested services by taking all measures to protect personal data.

The data collected digitally are stored on SQL databases on servers located within the European Union; subscriptions to the newsletter are stored in the mailchimp platform; however, contact lists are managed and stored only by the Data Controller. It is in any case understood that the Data Controller, should it become necessary, will be able to move the servers also outside the EU. In this case, the Data Controller ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, after stipulating the standard contractual clauses provided by the European Commission. Without the need for an express consent art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the above purposes to supervisory bodies (such as IVASS), judicial authorities, as well as to those subjects to whom the communication is mandatory by law for the fulfillment of the aforementioned purposes. These parties will process the data in their capacity as independent data controllers.

RIGHTS OF THE INTERESTED PARTY

In your capacity as an interested party, you have the rights referred to in art. 15 GDPR and precisely the rights of:

Obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
Obtain the indication: a) of the origin of personal data; b) the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic tools; d) the identity of the owner, managers and designated representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents;
3.Obtain: a) the updating, rectification or, where it is of interest, the integration of data; b) the cancellation, the transformation into anonymous form or the blocking of data processed in violation of the law, including those for which storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) proof that the operations referred to in paragraphs a) and b) have been brought to the attention of including as regards their content, those to whom the data have been communicated or disseminated, except where such compliance proves impossible or involves the use of means manifestly disproportionate to the protected right;

4.Oppose, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of the collection; b) the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for the performance of market research or commercial communication, by the use of automated call systems without the intervention of an operator by e-mail and/or by traditional marketing methods by telephone and/or paper mail. Please note that the data subject’s right of objection, set out in paragraph b above), for purposes of direct marketing by automated means extends to traditional ones and that however remains subject to the possibility for the data subject to exercise the right of opposition even in part. Therefore, the data subject may decide to receive communications only through traditional means or only automated communications or neither of the two types of communication.

Right to rectification of your personal data if they are modified and do not correspond to those previously acquired or communicated (Art. 16)
Right to erasure of data ("right to be forgotten" art. 17). Amonree srl, if one of the following occurs, proceeds to the cancellation of the data from all the data bases and archives where it is contained:
a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the data subject revokes the consent and if there is no other legal basis for the processing;
c) the data subject opposes the processing pursuant to Article 21, paragraph 1, and there are no overriding legitimate grounds for processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) personal data have been processed unlawfully;
e) personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the provision of information society services referred to in Article 8.1.
Right to restriction of processing (Art. 18). The data subject has the right to obtain from the data controller the restriction of processing where one of the following situations occurs:
a) the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be restricted;
c) although the data controller no longer needs it for the purposes of processing, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the data subject has opposed the processing pursuant to Article 21, paragraph 1, pending the verification of the possible prevalence of the legitimate grounds of the data controller with respect to those of the data subject.
Right to object (art. 21-22): The data subject has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, paragraphs e) or f), including profiling on the basis of these provisions.
Amonree s.r.l. does not submit data to decisions based solely on automated processing.

Amonree s.r.l. shall notify each interested party of any corrections, limitations or cancellations of data.

Amonree s.r.l. abstains from further processing of personal data unless there are compelling legitimate reasons for processing that override the interests, rights and freedoms of the data subject or for the investigation, the exercise or defence of a right in court.

PROCEDURES FOR THE EXERCISE OF RIGHTS

You can exercise your rights at any time by sending an email to privacy@antonioderricoshop.com