- HOME
- COLLECTIONS
- PURO T-SHIRT
- PURO CASHMERE
- KNITWEAR
- BLUSES AND SHIRTS
- TROUSERS
- SKIRTS
- DRESSES
- JACKETS & COATS
- PURO PLEASURE TO WEAR
- FRAGRANCE
| The company SABINTIMA SRL in the person of the legal representative LABONI ALBERTO, P.IVA02261550160, with registered office in via Vaccarezza 14a – 24040 Osio Sopra (Bg) - Italy, as Data Controller of personal data pursuant to Articles 4 and 28 of Legislative Decree 30 June 2003, n. 196 - Privacy Code (hereinafter "Code") and Articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereinafter, the "Regulation") informs pursuant to art. 13 of the Code and 13 of the Regulation that it will proceed to the processing of personal data relating to customers or individuals who request information through forms (if they are individuals). 1. Object of treatment The data processed are personal data and contact information such as telephone number, e-mail address. The personal data indicated will be processed exclusively for the provision of the service as requested by the customer and for all activities instrumental to this, including the purposes of establishing and managing contractual relationships of any kind, as defined by industry regulations. The provision of the requested data is mandatory as it is necessary to carry out the service, any refusal to provide such data may result in the failure to perfect or maintain the contractual relationship, the treatment will be carried out either manually, or through the use of computer procedures, the data will not be disclosed. 2. Purpose of treatment The processing of data will be carried out to allow the performance of related activities. The processing of data will be carried out to allow the performance of activities related to the establishment and management of the service requested by the Owner. The same data will be processed lawfully, correctly and with the utmost confidentiality, mainly by electronic and computerised means and stored both on computerised and paper supports and on any other suitable support, in compliance with the minimum security measures as provided for by the Code and the Regulations. Only if expressly authorised by means of a special flag/check will the data be used to send commercial information. 3. Methods of treatment The processing of personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 no. 2) GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subject to processing both paper and electronic and / or automated. The owner will process personal data for the time necessary to fulfil the above purposes and in any case for not more than 10 years from the conclusion of the contract, not more than 2 years from the request for information. In case of consent to the processing for sending commercial information, the email that will be included in the mailing list will be used for the above purposes until the cancellation by the user and no later than 5 years after sending the last email containing commercial information. 4. Access to the data The owner may provide access to personal data to the following parties (for purposes of fulfilling the obligations related to the relationship established or for purposes of data retention security): - employees and contractors of the owner in their capacity as authorised persons and / or DPO and / or system administrators, all formally mandated or appointed; 5. Data communication The Data Controller may communicate the data for the purposes referred to in art. 2 to supervisory bodies, judicial authorities and all other subjects to whom communication is required by law for the purposes provided for by law. The above data will not be disclosed. 6. Data Retention and Transfer The management and storage of personal data will take place on servers located within the European Union of the Owner and / or third companies appointed and duly appointed as data processors. Currently, the servers are located in Italy. The data will not be transferred outside the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the location of the servers to other countries of the European Union and / or countries outside the EU. In this case, the Data Controller hereby guarantees that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission. The data will be transferred only in case of acquisition or transfer of a company or business unit and in any case, after sending new information to the user. 7. Rights of the interested party The customer in his capacity as an interested party has the rights under art. 7 Privacy Code and art. 15 of the customer in his capacity as an interested party, has the rights under art. 7 Privacy Code and art. 15 of the Regulation and precisely: 1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet recorded, and their communication in intelligible form. 2. The interested party has the right to obtain the indication: (a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with the help of electronic instruments; d) the identification details of the owner, managers and representative; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State, managers or agents. 3. The interested party has the right to obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, including c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or distributed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. 4. The interested party has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection; b) the processing of personal data concerning him/her for the purposes not covered by Article 2. Where applicable, the data subject also has the rights under Articles 16-21 of the GDPR (Right of rectification, right to be forgotten, right to restriction of processing, right to data portability, right of opposition), as well as the right to complain to the Guarantor Authority. 8. Procedures for the exercise of rights The customer at any time may exercise the rights under the previous article by sending: - a registered letter with acknowledgement of receipt: SABINTIMA SRL VIA VACCAREZZA 14a – 24040 OSIO SOPRA (BG) - ITALY - an e-mail to the address: info@purotatto.com or to the PEC address: sabintima@pec.it |