INFORMATION NOTICE ON PERSONAL DATA PROCESSING
In compliance with Community legislation (European Regulation for the protection of personal data No. 679/2016, GDPR), please find here below some information on the processing of the personal data our customers supply when browsing our Website and filling out the registration form.
1) Data Controller
The Data controller is MAURIZIO VICINI SS, having registered office at Via Piemonte, 22/D –Vizzolo Predabissi (MI), Italy, tel. +39 02 98.23.16.65, fax. +39 02 98.12.97.35, e-mail info@beltforyou.it.
2) Objectives of data handling
Your personal data will be processed for the following purposes:
- for the Website registration process, to purchase the Products on the Website and therefore to complete a Purchase Order as indicated in the General Conditions of Sale (LINK).
- for accounting and administration purposes linked to the registration on the Website and/or to the purchase of Products on the Website and to the execution of fulfillments related to legislative obligations.
- to provide the user with our communications for marketing and sale purposes, relating to products similar to those already purchased by the user, however without prejudice to his/her right to oppose such processing.
- for statistical purposes in anonymous format
3) Legal basis for processing, data provision and possible withdraw
The provision of data for the purposes laid down in points A), B) is mandatory to create your account and fill your order proposal. Any refusal implies the impossibility to purchase Products on our Website. The basis for the processing referred to in point C) shall be laid down by the Owner who may send commercial materials and other communications about its Products. You may withdraw any consent to carry out the marketing activity you have previously given us at any time, according to the methods indicated below.
For the purposes detailed in point D), consent is not required as the data are anonymous.
4) Nature of the data processed
Personal data of the user
In the user registration form we only gather common data, in order to allow creation of an account, necessary to fill your order proposal relatively to our Products.
CREDIT CARD INFORMATION
When purchasing our products on the Website with your credit card, the user shall enter his/her credit card details (credit card number, cardholder name, expiration date, authorization number or security code). This information is collected directly by the payment service provider, who will act as an autonomous controller, without passing through the server of Beltforyou.
The data will be acquired in encrypted format, in accordance with the standards set by the PCI Security Standard Council, keeping track of the last four digits of the user’s card number and its expiration date, only and solely to prevent frauds in online payments.
The payment service provider uses Secure Socket Layer (SSL) protocol.
5) Data processing methods
The data will be processed by the Data Controller and/or by Data processors, including by electronic means, in accordance with the applicable laws.
Personal data are stored both in a paper archive and in an electronic database.
The automated information system and the paper archives of the Data Controller are both protected by appropriate security measures, in order to minimize the risks of destruction or loss of data, unauthorized access or processing not compliant with the purposes indicated in this Privacy Policy.
6) Data transmission
Your data will be transmitted to our partners for fiscal, administrative and legal purposes.
Your personal data may be transmitted, for the purpose of performance of the purchase contract, to the freight forwarders who will deliver the Products.
We will not disclose any personal data you provide to us.
We will not transmit any personal data abroad.
7) Data retention period
Personal data will be retained for the time period necessary for the achievement of the aforementioned purposes, in accordance with obligatory legal terms regarding the retention of data.
Personal data will be retained for the time period necessary for the performance of the purchase contract, the provision of post-sale services and to fulfil fiscal, administrative and legal obligations.
8) Rights of the Data subjects
In accordance with the Regulation, the subjects of personal data are entitled to obtain confirmation of the existence of said data in any moment, and also to know their content, origin and way of processing (Right of access). They can obtain cancellation, updating, rectification or integration of the data. A registered user has also the right to object to this processing and in some cases a right to portability of these data.
The subjects of personal data may at any moment exercise their rights to lodge a complaint with a supervisory authority, according to GDPR, if they suffered damage as a result of an infringement of data protection rights.
