Datenschutzerklärung
Information pursuant to articles 13 and 14 of the General Data Protection Regulation EU 2016/679
666 CARBON S.r.l.s. (hereinafter also "Company") makes this information pursuant to and by effect of art. 13 of Regulation (EU) 2016/679 (hereinafter "GDPR"), relating to the protection of individuals with regard to the processing of personal data, in order to make known the purposes and methods of processing personal data that could be communicated by users while browsing this website (hereinafter also the "Site").
It should be noted that the information refers only to this Site and not to websites of third parties, which may be accessible by the User via links present therein.
With the application starting from 25 May 2018 of EU Regulation 2016/679 GDPR - General Data Protection Regulation and pursuant to Legislative Decree 193/2003, as amended by the subsequent Legislative Decree 101/2018, the undersigned Company
666 CARBON Srls
Fiscal Code / VAT Number: 04988020261, with registered office in 31010 Ponte della Priula, Susegana (TV), VIA MERCATELLI MAGLIO 42 Telephone +39 3477154290, PEC: 666.carbon@pec.it, as
OWNER OF THE TREATMENT
is required to provide information regarding the use of the personal data in its possession.
By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as the collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of provision, comparison or interconnection, limitation, deletion or destruction.
CATEGORIES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the computer environment of the user. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, the data on web contacts do not currently persist for more than seven days.
Data provided voluntarily by the User
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information is also reported or displayed in the sections of the Site set up for particular services on request and subject, where appropriate, to the consent of the interested party.
Object of the processing - Purpose and legal basis of the processing for which the data are intended - Voluntary nature of the provision of data and consequences in case of refusal.
Based on current legislation, the personal data held by 666 CARBON S.r.l.s. are collected and processed on the basis of what is voluntarily communicated by the interested party both to facilitate navigation and to provide any services requested through the forms specially prepared on the Site.
In fact, on the Website the interested party has the possibility to order our products online. The Company processes personal data for the purpose of fulfilling the order. The communication of these data (name, surname, postal address, e-mail address, date of birth) is necessary because, failing that, it will not be possible to register the order and send the products; other data, such as telephone numbers, are not strictly mandatory but allow us to contact the customer for any communication, including service related to the order. With prior consent, the telephone number can be used to report advantageous offers and our news. For other purposes, see below.
Legal basis of the processing – this processing of personal data is permitted by law pursuant to art. 6, paragraph 1, lett. b) of the GDPR as necessary for the execution of the contract; consent pursuant to art. 6, paragraph 1, letter a), on the other hand, is the legal basis of the processing for telephone or SMS marketing purposes.
to. Personal area/customer account
In the context of our site there is the possibility of creating a password-protected customer account, through which you can access, at any time, the data that the customer has stored on our site (so-called Personal Area) and make a quicker order. Within the personal area, it is also possible to administer (modify, correct, cancel) the data registered on the customer account and manage the consents expressed.
To create a customer account on our site, the name, surname and e-mail address are collected. The legal basis is constituted by the art. 6, paragraph 1, lett. b) of the GDPR.
b. Fraud prevention
The data provided during the order can be used by the Company to verify that the order itself is not atypical (e.g. simultaneous ordering of a large number of products to be shipped to the same address using different customer accounts). There is a legitimate interest on the part of the Company to carry out this check (e.g. prevention of payment defaults/identity theft). The legal basis of the data processing for this purpose is established by law, art. 6, paragraph 1, lett. f) of the GDPR.
c. Data processing method
In relation to the indicated purposes, the processing of personal data takes place using manual and/or IT tools, with organization and processing logics strictly related to the purposes underlying their provision and in any case in such a way as to guarantee the security, integrity and confidentiality of the data itself.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The personal data provided by users who request dispatch of informative material (reports, technical data sheets, answers to questions, price lists, catalogues, etc.) are used for the sole purpose of performing the service or provision requested and are communicated to third parties only in if this is necessary for this purpose.
d. Data transmission to third parties
Exclusively for the purposes specified above, all the data collected and processed connected to the web services of this site take place at the headquarters of the Data Controller and may be communicated to internal figures authorized to process them by reason of their respective duties, or to any persons in charge of occasional maintenance operations in compliance with current legislation, as well as to external subjects to whom such communication is necessary, given that in the order fulfillment process we use suppliers, whose collaboration concerns the following areas:
d1. Payment services
For web orders, we offer various payment methods including cash on delivery, credit card and Paypal. If the customer selects payment by credit card and Paypal, the order data is transmitted to the respective payment service provider for the execution of the payment.
For postal orders we offer the option of paying by cash on delivery or prepayment.
For orders placed by telephone, payment can be made by cash on delivery, advance payment and credit card.
The legal basis is established by art. 6, paragraph 1, lett. b) of the GDPR.
Q2. Cargo delivery
The Company collaborates with the following transport companies to deliver the ordered goods to customers: BRT S.P.A. Express Courier, SDA Express Courier S.P.A., OMEST SAS DI STAMPFER PATRICK & CO. (EUROPACCO.COM), GLS ENTERPRISE SRL, United Parcel Service Italia, S.R.L.;
The data of the interested party can be transmitted to these companies to deliver the ordered goods or to notify their shipment: name, surname, postal address, e-mail address, telephone number. The processing of data is permitted by law as it is always aimed at the execution of the sales contract, pursuant to art. 6, paragraph 1, letter b) GDPR.
Q3. marketing services
For the creation of our promotional material (catalogues, newsletters, advertising material, etc.) we use various service providers (print shops, marketing agencies, etc.).
The legal basis of the data processing for this purpose is the art. 6, paragraph 1, lett. f) of the GDPR.
As far as specified up to now, therefore, the provision of data within the sections of the Site set up for particular services on request, apart from what is specified for navigation data and technical cookies, although not mandatory, it is required to obtain the chosen service. In fact, in the absence of data, it will not be possible to provide what has been requested.
The data is processed in compliance with the obligations of correctness, lawfulness and transparency imposed by the aforementioned legislation, protecting the privacy and rights of the interested parties.
DATA RETENTION PERIOD
Personal data collected through the use of the Site are processed for the time strictly necessary to achieve the purposes for which they were collected.
Possible transfer of personal data abroad
The management and storage of data takes place on paper archives and on the servers of the Data Controller and/or of any third-party companies appointed as Data Processors. The servers on which the above data are stored are located in Italy and within the European Union. Personal data is not transferred outside the European Union.
In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the archives and servers in Italy and/or in the European Union and/or in non-EU countries. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the European Commission.
RIGHTS OF INTERESTED PARTIES
Pursuant to articles 13, paragraph 2, letters (b) and (d), as well as from 15 to 21 of the Regulation, the interested party can exercise the following rights in the foreseen cases:
a) request access to personal data concerning him and obtain a copy;
b) obtain the rectification of inaccurate personal data concerning him;
c) request the cancellation of personal data concerning him;
d) obtain the limitation of the processing of personal data concerning him;
e) receive personal data concerning him in a structured, commonly used and readable format, from an automatic device for the purpose of exercising the right to portability and this only if subject to automated processing based on consent or on the contract;
f) oppose the processing of personal data concerning him and/or revoke the consent given for the processing purposes that require it, without prejudice to the lawfulness of the processing carried out up to the moment of revocation.
The exercise of the rights may take place by sending a request to the certified e-mail address 666.carbon@pec.it.
The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data, competent supervisory authority on the matter
This information may be subject to changes. It is therefore advisable to check this web page regularly and to take into consideration the most updated version of the information contained therein.
666 CARBON S.r.l.s. (hereinafter also "Company") makes this information pursuant to and by effect of art. 13 of Regulation (EU) 2016/679 (hereinafter "GDPR"), relating to the protection of individuals with regard to the processing of personal data, in order to make known the purposes and methods of processing personal data that could be communicated by users while browsing this website (hereinafter also the "Site").
It should be noted that the information refers only to this Site and not to websites of third parties, which may be accessible by the User via links present therein.
With the application starting from 25 May 2018 of EU Regulation 2016/679 GDPR - General Data Protection Regulation and pursuant to Legislative Decree 193/2003, as amended by the subsequent Legislative Decree 101/2018, the undersigned Company
666 CARBON Srls
Fiscal Code / VAT Number: 04988020261, with registered office in 31010 Ponte della Priula, Susegana (TV), VIA MERCATELLI MAGLIO 42 Telephone +39 3477154290, PEC: 666.carbon@pec.it, as
OWNER OF THE TREATMENT
is required to provide information regarding the use of the personal data in its possession.
By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as the collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of provision, comparison or interconnection, limitation, deletion or destruction.
CATEGORIES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the computer environment of the user. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, the data on web contacts do not currently persist for more than seven days.
Data provided voluntarily by the User
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information is also reported or displayed in the sections of the Site set up for particular services on request and subject, where appropriate, to the consent of the interested party.
Object of the processing - Purpose and legal basis of the processing for which the data are intended - Voluntary nature of the provision of data and consequences in case of refusal.
Based on current legislation, the personal data held by 666 CARBON S.r.l.s. are collected and processed on the basis of what is voluntarily communicated by the interested party both to facilitate navigation and to provide any services requested through the forms specially prepared on the Site.
In fact, on the Website the interested party has the possibility to order our products online. The Company processes personal data for the purpose of fulfilling the order. The communication of these data (name, surname, postal address, e-mail address, date of birth) is necessary because, failing that, it will not be possible to register the order and send the products; other data, such as telephone numbers, are not strictly mandatory but allow us to contact the customer for any communication, including service related to the order. With prior consent, the telephone number can be used to report advantageous offers and our news. For other purposes, see below.
Legal basis of the processing – this processing of personal data is permitted by law pursuant to art. 6, paragraph 1, lett. b) of the GDPR as necessary for the execution of the contract; consent pursuant to art. 6, paragraph 1, letter a), on the other hand, is the legal basis of the processing for telephone or SMS marketing purposes.
to. Personal area/customer account
In the context of our site there is the possibility of creating a password-protected customer account, through which you can access, at any time, the data that the customer has stored on our site (so-called Personal Area) and make a quicker order. Within the personal area, it is also possible to administer (modify, correct, cancel) the data registered on the customer account and manage the consents expressed.
To create a customer account on our site, the name, surname and e-mail address are collected. The legal basis is constituted by the art. 6, paragraph 1, lett. b) of the GDPR.
b. Fraud prevention
The data provided during the order can be used by the Company to verify that the order itself is not atypical (e.g. simultaneous ordering of a large number of products to be shipped to the same address using different customer accounts). There is a legitimate interest on the part of the Company to carry out this check (e.g. prevention of payment defaults/identity theft). The legal basis of the data processing for this purpose is established by law, art. 6, paragraph 1, lett. f) of the GDPR.
c. Data processing method
In relation to the indicated purposes, the processing of personal data takes place using manual and/or IT tools, with organization and processing logics strictly related to the purposes underlying their provision and in any case in such a way as to guarantee the security, integrity and confidentiality of the data itself.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The personal data provided by users who request dispatch of informative material (reports, technical data sheets, answers to questions, price lists, catalogues, etc.) are used for the sole purpose of performing the service or provision requested and are communicated to third parties only in if this is necessary for this purpose.
d. Data transmission to third parties
Exclusively for the purposes specified above, all the data collected and processed connected to the web services of this site take place at the headquarters of the Data Controller and may be communicated to internal figures authorized to process them by reason of their respective duties, or to any persons in charge of occasional maintenance operations in compliance with current legislation, as well as to external subjects to whom such communication is necessary, given that in the order fulfillment process we use suppliers, whose collaboration concerns the following areas:
d1. Payment services
For web orders, we offer various payment methods including cash on delivery, credit card and Paypal. If the customer selects payment by credit card and Paypal, the order data is transmitted to the respective payment service provider for the execution of the payment.
For postal orders we offer the option of paying by cash on delivery or prepayment.
For orders placed by telephone, payment can be made by cash on delivery, advance payment and credit card.
The legal basis is established by art. 6, paragraph 1, lett. b) of the GDPR.
Q2. Cargo delivery
The Company collaborates with the following transport companies to deliver the ordered goods to customers: BRT S.P.A. Express Courier, SDA Express Courier S.P.A., OMEST SAS DI STAMPFER PATRICK & CO. (EUROPACCO.COM), GLS ENTERPRISE SRL, United Parcel Service Italia, S.R.L.;
The data of the interested party can be transmitted to these companies to deliver the ordered goods or to notify their shipment: name, surname, postal address, e-mail address, telephone number. The processing of data is permitted by law as it is always aimed at the execution of the sales contract, pursuant to art. 6, paragraph 1, letter b) GDPR.
Q3. marketing services
For the creation of our promotional material (catalogues, newsletters, advertising material, etc.) we use various service providers (print shops, marketing agencies, etc.).
The legal basis of the data processing for this purpose is the art. 6, paragraph 1, lett. f) of the GDPR.
As far as specified up to now, therefore, the provision of data within the sections of the Site set up for particular services on request, apart from what is specified for navigation data and technical cookies, although not mandatory, it is required to obtain the chosen service. In fact, in the absence of data, it will not be possible to provide what has been requested.
The data is processed in compliance with the obligations of correctness, lawfulness and transparency imposed by the aforementioned legislation, protecting the privacy and rights of the interested parties.
DATA RETENTION PERIOD
Personal data collected through the use of the Site are processed for the time strictly necessary to achieve the purposes for which they were collected.
Possible transfer of personal data abroad
The management and storage of data takes place on paper archives and on the servers of the Data Controller and/or of any third-party companies appointed as Data Processors. The servers on which the above data are stored are located in Italy and within the European Union. Personal data is not transferred outside the European Union.
In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the archives and servers in Italy and/or in the European Union and/or in non-EU countries. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the European Commission.
RIGHTS OF INTERESTED PARTIES
Pursuant to articles 13, paragraph 2, letters (b) and (d), as well as from 15 to 21 of the Regulation, the interested party can exercise the following rights in the foreseen cases:
a) request access to personal data concerning him and obtain a copy;
b) obtain the rectification of inaccurate personal data concerning him;
c) request the cancellation of personal data concerning him;
d) obtain the limitation of the processing of personal data concerning him;
e) receive personal data concerning him in a structured, commonly used and readable format, from an automatic device for the purpose of exercising the right to portability and this only if subject to automated processing based on consent or on the contract;
f) oppose the processing of personal data concerning him and/or revoke the consent given for the processing purposes that require it, without prejudice to the lawfulness of the processing carried out up to the moment of revocation.
The exercise of the rights may take place by sending a request to the certified e-mail address 666.carbon@pec.it.
The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data, competent supervisory authority on the matter
This information may be subject to changes. It is therefore advisable to check this web page regularly and to take into consideration the most updated version of the information contained therein.
