Baby Stockeria srl, with registered office in Monza, Via Monti e Tognetti 7, in its capacity as data controller of personal data under Regulation EU 679/2016 applicable from 25 May 2018 – the General Data Protection Regulation (“GDPR”) - acknowledges the importance of the protection of personal data and considers the protection thereof to be one of the main objectives of its business.
In compliance with the provisions of Regulation EU 679/2016 and applicable national law (hereinafter GDPR and “applicable national law” are jointly referred to as the “Applicable Laws”) we hereby provide you with the required information on the processing of the personal data provided. This notice is provided pursuant to the Applicable Laws and Baby Stockeria srl invites you to read it carefully as it contains important information on the protection of personal data and the security measures adopted to guarantee the confidentiality thereof in full compliance with the Applicable Laws.
Baby Stockeria srl informs you that the processing of your personal data shall be based on the principles of lawfulness, correctness, transparency, purpose and storage limitations, data minimisation, accuracy, integrity and confidentiality. The personal data shall therefore be processed in accordance with the legal provisions of the Applicable Laws and the confidentiality obligations provided for therein.
1. DATA SUBJECTS
On the basis of the Applicable Laws, the data controller is Baby Stockeria srl with registered office in Via Monti e Tognetti 7, email address firstname.lastname@example.org
Baby Stockeria srl. hereby informs you that for the processing operations carried out in the Marketing area, the contact person is the organisational manager of the Marketing department in his/her capacity as Privacy Manager.
Baby Stockeria srl, furthermore, has appointed a Data protection Officer (“DPO”), who can be contacted at the address: email@example.com for all information regarding the processing of the personal data of Baby Stockeria srl., including the list of data owners.
2.TYPES OF DATA WE COLLECT AND PROCESS
Personal and Identification Data
Personal data is any information relating to natural persons that are or can be identified, even indirectly, by reference to any other information including a personal identification number. Identification data is any personal data allowing a data subject to be identified directly (for example: name, surname, date of birth, address, e-mail address, telephone number, etc.).
The computer systems and software procedures used for the operation of the Website will acquire, during their normal use, certain personal data that is automatically transmitted when Internet communication protocols are used. This is information that is not collected by us in order to be associated with identified data subjects. However, given its nature, and through processing and associations with other data held by third parties, it may enable to identify users. This category of data includes the IP addresses or the domain names of computers used by the users who log on to the Website, the URI addresses (Uniform Resource Identifier) of the required resources, the request time, the method used for submitting the application to the server, the size of the file got in response, the number code showing the status of the response provided by the server (successful conclusion, error, etc.) and further parameters concerning the operating system and computing environment of the data subject.
Data of person under the age of 18
Olla Parég does not knowingly collect personal data from people under the age of 18, and Olla Parég will not be responsible for false statements provided by persons under 18. If Olla Parég discovers that we have collected personal information from a child under the age of 18, we will promptly delete such information. The Data Controller will facilitate the requests concerning the personal data of minors to the person having parental responsibility or the legal guardian, pursuant to the Applicable Laws.
Data of third parties
Data Provided Voluntarily by Users
Sending e-mail messages to the addresses mentioned on this website, which is done on the basis of a freely chosen, explicit, and voluntary option, entails acquisition of the sender's address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s). Specific summary information notices will be shown and/or displayed on the pages that are used for providing services on demand.
The personal data voluntarily supplied by you will be processed for the following purposes:
A) purpose of:
surfing of this Website;
contact to release the information required by the user;
administrative accounting activities in general, also concerning online purchases and eventual debt collection. For the application of the personal data protection regulation, the processing carried out for administrative-accounting purposes is the one linked to the performance of organizational, administrative, financial and accounting activities, regardless of the processed data nature. In particular, internal organizational activities, and activities aimed at compliance with contractual and pre-contractual duties, including shipments and payments;
eventual reservation of appointment at the point of sale;
supply of goods and services requested by the data subject;
B) with prior consent and until any objection, purpose of:
in order to compare and possibly improve the outcome of communications, Olla Parég uses systems for sending newsletters and marketing communications with report and enjoys the reports connected to these systems. Thanks to the report, Olla Parég may know, for example: the number of readers, of opened e-mails, of unique “clickers” and of clicks, the type of device used for reading the communication (for example: IPhone, Blackberry, Nokia) and their operating systems (for example: Windows, Apple, Linux, Android), details on the activities of individual users,the number of pending users who have not yet confirmed their subscription, detailsabout sent emails listed by date, hour, minute, details about delivered and undelivered emails, list of users who have unsubscribed from the newsletter, list of users who have opened an email or clicked on a single link; users with problems in opening/viewing the message; link tracking (i.e. the number of clicks on the link contained in the message); and click tracking (which links were clicked and by whom);
participation in loyalty programs.
C) with prior consent and until any objection, purpose of:
for profiling activities, consisting in the creation of the profile of the data subject, and analysis of his habits and consumption choices, in order to improve the commercial offer and the services proposed.
The activities described as purposes B) and C) are pursued also by entering the data into the corporate CRM of Olla Parég.
The personal data of the data subject can be processed using additional methods and for other purposes connected to the maintenance of the website.
5. PROCESSING AND STORAGE METHODS
Processing will be performed in an automatic and manual way, with methods and tools aimed at guaranteeing utmost security and confidentiality, by parties specifically authorised and in charge of this in compliance with the provisions of the Applicable Laws. Data will be stored for a period of time not longer than strictly necessary to achieve the purposes for which such data was collected and then processed.
6. SCOPE OF COMMUNICATION AND DISSEMINATION
The processed data will not be disseminated. Data may on the contrary be communicated, for the purposes listed above, to companies related to and/or controlled by and/or belonging to the Group, and to companies contractually bound with Olla Parég or the Group and/or belonging to their distribution network. These companies may have offices in foreign Countries, belonging or not belonging to the European Union, with full respect for the Applicable Laws. In particular, third parties may belong to the following categories:
subjects providing services for the management of the information system and of telecommunication networks, including the management of the electronic mail, of the website and/or of specific sections of the website;
subjects who provide services connected to online shopping: for example couriers, banks, companies who provide payment management services, insurance companies, etc.;
subjects providing assistance and consulting services, for example in the legal, financial and/or debt collection ambit;
relevant authorities, where required by law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena;
if we are acquired by or merged with another company, if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the information we have collected from you to the other company;
staff of the Company or of other Companies of the Group.
In the case you have provided your consent to the activities referred as purposes B) and/or C), your data will be communicated to subjects specifically appointed in writing as authorised to access to the corporate CRM of Olla Parég. The parties belonging to the aforementioned categories either perform the function of Data Processor, or operate with complete autonomy as separate Data Controllers. The list of the appointed Data Processors is constantly updated and available at the registered office of Baby Stockeria srl, Via Monti e Tognetti, 7 – Monza (MB) Italy . Any further communication or dissemination will only take place with your prior explicit consent.
7. NATURE OF PROVISION AND REFUSAL
Subject to the specifications made with regard to navigation data, users are free to provide the personal data either to be entered in the application forms and/or voluntarily sent to the contact address, in order to request delivery of information and/or to join the services provided. Failure to provide such data may entail the failure to be provided with the items requested. Profiling and marketing activities are optional and will only be performed in case of free, specific and optional consent of the data subject. The eventual refusal of the consent for purpose B) and C) will not have any negative consequence referring to the faculty to join the services specified as purpose A).
8. RIGHTS OF THE DATA SUBJECTS
Within the limits of the Applicable Laws, the data subject is entitled to ask Olla Parég at any time, for access to his/her Personal Data, the rectification or erasure thereof or to oppose its processing, as well as to ask for the limitation of its processing and to obtain the data concerning him or her in a structured, commonly used and machine-readable format.
Requests are to be sent to the email address: firstname.lastname@example.org
He/She has the right to request erasure, transformation in anonymous form or blocking of any data that is processed in breach of the law, as well as to object to the processing thereof on legitimate grounds. If the data subject contacts the Data Controller, he/she should indicate his/her e-mail address, name, postal address and/or telephone number, in order to allow the correct management of the request.
You may also opt out of receiving email marketing messages (e-mail), by e-mailing us at email@example.com with “cancellation from automated system” in the subject line. To stop receiving traditional direct marketing communications (telephone calls by operators, paper mail), you only need to write at any time an e-mail to address firstname.lastname@example.org with “cancellation from traditional marketing system” in the subject line. To oppose profiling processing, you only need to write at any time an e-mail to address email@example.com with “no profiling” in the subject line. Under the Applicable Laws, the data subject is entitled in any case to lodge a complaint with the competent supervisory authority if he/she considers the processing of his/her personal data to breach the laws in force.
9. PRIVACY NOTICE CHANGES
Olla Parég reserves the right to change, update, add or remove parts of this Privacy Notice at its own discretion and at any moment. The data subject is responsible for periodically checking for any changes thereof. In order to facilitate this verification, the notice will contain the indication of the update date. The website use after the publication of changes will be considered as an acceptance thereof.
10. SOCIAL PLUG-INS AND CONNECTS