Information form "E-commerce"

Information on the processing of personal data pursuant to article 13 of EU Regulation 2016/679

Conforti S.p.A. (also the “Company”) informs you, pursuant to art. 13 of EU Regulation 2016/679 on the protection of personal data (“GDPR”), about the methods with which it will process the personal data communicated by you by sending your request via this contact form.

Data Controller

The Data Controller is the company Conforti S.p.A. based in Viale del Lavoro 13, 37036 - San Martino Buon Albergo (VR), contactable at the email address: conforti@conforti.it.

Type of data processed

All personal data and information communicated by you to the Company by filling out the form and completing the purchase are collected and processed, including name, surname, contact details such as email address, telephone number, billing address and shipping address of the goods. The data marked with an asterisk * are mandatory and must be provided to manage requests, the other information is optional, and you can decide whether to provide it or not.

Purpose, legal basis of processing and methods of providing data

Your personal data transmitted with the online purchase in this e-commerce are processed for the following purposes: 1) to allow the management of the online purchase including the shipment of the goods and the consequent contractual obligations; 2) to manage the established commercial relationship, including within the same the contact with our sales organization, as a contractual necessity; 3) to manage all the administrative and fiscal obligations that derive from it, as a legal obligation; 4) with your consent, for marketing purposes for sending newsletters on products.

The legal basis for the purpose referred to in numbers 1) and 2) is represented by the execution of a contract or other pre-contractual measures to which the interested party is a party (art. 6 letter b) GDPR) and for the purpose referred to in n. 3) the regulatory obligation of the Data Controller (art. 6 letter c) GDPR) and for the purpose referred to in no. 4) the consent of the interested party (art. 6 letter a) GDPR).

The provision of data is mandatory for the purpose referred to in numbers 1, 2 and 3 and optional for the purpose referred to in no. 4.

Data processing methods and categories of recipients

Personal data will be processed correctly, lawfully and transparently and in any case in compliance with the principles established by art. 5 GDPR, using paper, computer and/or telematic means, by personnel authorized by the Data Controller for the purposes indicated in this information notice. The Data Controller has adopted adequate technical and organizational measures to guarantee the security of the personal data processed. In addition to the internal personnel of the Data Controller involved in carrying out the processes, as authorized to process data, any third parties involved in carrying out the same activities as Data Processors or as Data Controllers may also become aware of the personal data transmitted by you (by way of example but not limited to, the subjects entrusted with assistance, communication, promotion and sale of products and/or services, IT service providers, managers and/or developers of websites or applications contained therein, managers of electronic platforms).

Data retention

The data will be retained for as long as necessary to allow the execution of the purposes for which they were transmitted and, in any case, until the interested party requests their deletion, except for different contractual or regulatory obligations.

Transfer of data to third countries

The data will not be transferred to third countries and, where they are transferred, the conditions and guarantees provided for by articles 44 and following of the Regulation will be respected.

Rights of interested parties

We remind you of the right to ask the Data Controller, at any time, for access to personal data, for the rectification or deletion of the same, or for the limitation of the processing that concerns you and to oppose such processing, in addition to the right to data portability; you may exercise these rights using the contact details above. The consent expressed may be revoked at any time by contacting the Data Controller at the email address indicated if the processing is based solely on the consent of the interested party.

Right to complain

If you believe that the processing of your personal data is in violation of the provisions of the Regulation, you have the right to lodge a complaint with the Data Protection Authority, as provided for by art. 77 of the Regulation itself or to take appropriate legal action (art. 79 of the Regulation).

The Data Controller

Conforti S.p.A.