Pursuant to the Regulation (EU) 2016/679 and the applicable laws, we wish to provide you with the following information concerning the processing and protection of your personal data
Data Controller
The data controller is Ave Caprice – Strada Giuseppe Mazzini 1/b 43121 Parma ITALIA – P.IVA IT00587450347 who may also be reached by calling the number 0521 348263, or by email at info@avecaprice.it
Source of personal data:
Personal data is collected directly from the data subject when completing this form for the purpose of purchasing the products offered, even without the need to create a specific account.
Purposes of the processing
The personal identification data collected from the data subject, user of the website, are the subject of the processing and are processed and used directly for the following purposes:
- To satisfy users’ purchase requests and register their personal account. Any incorrect or insufficient communication of the requested data may result in the total or partial impossibility to implement the data subject’s requests.
- consent is not required for account registration.
- retention period 10 years from registration
- to sign and implement the contract for the purchase. When sending products found on this website. The provision of data is mandatory to proceed with the purchase
- since this is a contractual purpose, consent is not required
- retention period 10 years from the purchase
- For administrative and accounting purposes.
- purpose and retention period as required by law
- for defence purposes or debt collection.
- Consent, for legitimate interest, is not required
- retention period 10 years from the last purchase
- to improve our services, for possible customer satisfaction feedback on the products or services provided directly and/or indirectly by the Controller
- consent is not required as it is an integral part of the contract itself
- retention period 3 years from any request
Recipients
The data collected will not be disseminated.
They will be transmitted to third parties to whom the communication is necessary to fulfil tax or administrative obligations, or to individuals that the Controller makes use of for carrying out instrumental and/or ancillary activities to fulfil its obligations deriving from the conclusion of contracts and/or in any case connected to the services offered (by way of example, your data will be transmitted to the transport company in charge of delivering the purchased products, to legal offices, to any customer satisfaction agencies, to payment circuits such as Nexi). Also to individuals whose authority is recognised by legal provisions or by orders of the authorities.
Methods of processing
Your personal data will be processed according to the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the help of the current IT systems or paper supports by specifically authorised personnel trained on matters concerning confidentiality and the obligation to use the data only for the purposes identified by the Controller. The Controller will put in place technical and organisational measures appropriate to the level of risk. Once the retention periods indicated above have elapsed, all data will be destroyed or made anonymous, in accordance with the technical cancellation and backup procedures.
Extra-ue data transfer
The data of the Data subject will not be transferred to non-European countries. Should the Data be transferred to non-European countries or international organisations in the future, all the provisions of Chapter V (EU Regulation 2016) will be complied with.
Rights of the data subject
You have the right to request the data controller for access to his/her personal data, rectification, modification and cancellation of personal data as well as, if applicable, the limitation of the processing of said data. You also have the right to request a full list of these rights by writing to the Data Controller’s address.
Right to Complain
Should you believe that the processing regarding you violates the General Data Protection Regulation (EU) 2016/679 (GDPR), you have the right to lodge a complaint with the Data Protection Authority.