INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 (GDPR)
1. NATURE OF THE DATA PROCESSED. HOLDER OF THE TREATMENT
This information has been prepared by STARPOOL s.r.l. (VAT number 01397570225), with registered office in Ziano di Fiemme (TN) 38030, via Stazione, 25, number REA Chamber of Commerce of Trento 134816 of 02/15/1993, share capital in Euros 550,000.00 (iv), telephone 0462 571881, email: firstname.lastname@example.org.
STARPOOL s.r.l. acts as data controller in relation to the personal data provided by the user when registering on the website www.starpool-shop.com (Site), or when purchasing products on the Site. This information is also intended for any person who interacts with the pages of the Site without making any registration.
2. PURPOSE OF THE TREATMENT
STARPOOL s.r.l. will process the personal data provided by the user for the following purposes:
(a) to allow registration on the Site and use the services reserved for registered users. The legal basis of the processing is your consent to the processing of your data to register on the Site and access the services reserved for registered users;
(b) in the event that the user makes use of the ecommerce service provided by STARPOOL s.r.l. on the site:
1. to allow the correct execution by STARPOOL s.r.l. of the operations connected with the online purchase and, therefore, to allow it to fulfill in a correct and timely manner the obligations deriving from the contractual relationship established with the user, as well as for the administrative and legal obligations connected to the same. The legal basis of the processing is the existence of a sales contract;
2. limited to the e-mail coordinates provided by the user in the context of the purchase of a product from the Site, to allow the direct sale of similar products (so-called soft spamming), provided that the user does not oppose such processing. The legal basis of the processing is the legitimate interest of STARPOOL s.r.l. to send this type of communication;
(c) to respond by email to user requests. The legal basis of the processing is the legitimate interest of STARPOOL s.r.l. to follow up on user requests;
(d) for administrative and accounting purposes related to registering on the Site and making an online purchase as well as to fulfill legal obligations;
(e) subject to your consent, for sending newsletters and for carrying out market surveys, also aimed at evaluating the degree of user satisfaction, and for sending advertising material relating to STARPOOL products and / or services srl and / or third parties, by means of automated systems, such as e-mail, fax, sms or MMS, or by traditional methods (eg: paper mail or telephone) (marketing purposes); subject to your consent, for the processing of your commercial profile, through the detection and processing of your choices and purchasing habits on the Site, in order both to monitor the degree of customer satisfaction to ensure a better satisfaction of their needs, and to send you advertising material relating to STARPOOL srl products and / or services and / or third parties, of your specific interest, by means of automated systems, such as e-mail, fax, sms or MMS, or by traditional methods (eg: paper mail or telephone) (profiling purposes). The legal basis of the processing is your consent to receive this type of communication;
(f) for statistical purposes.
METHOD OF TREATMENT
The processing of personal data concerning the user will mainly be carried out with the aid of electronic or automated means, in the manner and with the appropriate tools to guarantee the security and confidentiality of the data, in compliance with the provisions of the GDPR. In particular, all technical, IT, organizational, logistic and procedural security measures will be adopted, so that the minimum level of data protection required by law is guaranteed, allowing access only to the persons in charge of processing by the owner. of the treatment or of the managers eventually designated by the owner.
The information acquired and the methods of treatment will be relevant and not excessive in relation to the type of services rendered.
The data will also be managed and protected in environments whose access is under constant control.
DATA RELATING TO THE CREDIT CARD
To make a payment on the Site by credit card, the user must enter the confidential data of the credit card (card number, holder, expiry date, security codes). These data will be acquired by the payment service provider who will act as independent data controller, without passing through the STARPOOL s.r.l. server. which, therefore, will not process such data in any way. The user who has registered on the Site may request, through the Site, the saving of such data but the data will be saved directly by the payment service provider and will not be acquired by STARPOOL s.r.l.
They are not processed by STARPOOL s.r.l. the user’s sensitive or judicial data.
IP ADDRESSES AND LOG FILES
STARPOOL s.r.l. will keep, within the terms of the law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions.
It is possible to access the Site without requiring the provision of any personal data. However, the computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but also by their very nature could, through processing or associations, allow the identification of the user.
This category includes the IP addresses or domain names of the computers used by the user who connects to the Site, the addresses in Url notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, etc. These data are used only to obtain anonymous statistical information on the use of the Site (such as, in particular, the number of accesses) and to check its correct functioning and are deleted immediately after processing. In this process, the processing of directly identifying information is not envisaged.
3. CONFERMENT OF DATA AND CONSEQUENCES IN CASE OF FAILURE TO CONSENT TO THE TREATMENT
The provision of data for the purposes referred to in points (a), (b.1) and (d) of art. 2 is purely optional. However, since this processing is necessary to allow registration on the Site and the execution of the online purchase service, any refusal by the user to provide the data in question will make it impossible to register on the Site and conclude an online purchase.
The provision of data for the purposes referred to in point (c) of art. 2 is optional. However, since this processing is necessary to allow the response to the user’s requests, any refusal of the latter to provide the data in question will make it impossible for STARPOOL s.r.l. to respond to requests.
The consent to the processing of your data for marketing, profiling and transfer purposes is purely optional. Failure to consent will only imply the consequences described below.
Failure to consent to the processing of data for marketing purposes will make it impossible for you to receive advertising material relating to STARPOOL s.r.l. products and / or services. and / or third parties as well as the impossibility for STARPOOL s.r.l. to carry out market surveys, also aimed at assessing the degree of user satisfaction, as well as to send you newsletters.
Failure to consent to the processing of your personal data for profiling purposes will make it impossible for STARPOOL s.r.l. to elaborate your commercial profile, through the detection of your choices and purchasing habits on the Site (also in order to ensure greater satisfaction of customer needs), as well as to send you advertising material relating to goods and / or services of STARPOOL s.r.l. and / or third parties, of your specific interest.
The user may, in any case, revoke any consent given for marketing and or profiling purposes by contacting STARPOOL s.r.l. at the addresses indicated in art. 1; (ii) by clicking on the “click here” link present in each promotional communication and newsletter sent by email by STARPOOL s.r.l .; (iii) access your personal page on the Site.
4. SCOPE OF DATA COMMUNICATION
The personal data provided by the user, for the purposes described in art. 2 above, may be brought to the attention of or communicated to the following subjects:
– employees and / or collaborators of STARPOOL s.r.l. for carrying out administration, accounting and IT and logistic support activities that act as, respectively, managers and persons in charge of processing;
– to the company that sends, on behalf of STARPOOL s.r.l., promotional communications and newsletters sent on behalf of STARPOOL s.r.l.;
– to subjects who manage online payment transactions;
– to all those public and / or private subjects, natural and / or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional for the correct fulfillment of the contractual obligations assumed in relation to the services provided through the Site , as well as the obligations deriving from the law;
– to shippers and to persons in charge of the delivery and / or collection of the purchased products;
– to all those subjects (including Public Authorities) who have access to data under regulatory or administrative provisions.
All personal data provided by the user in relation to registration on the Site and / or purchase through the Site are not subject to disclosure. The updated list of data processors and persons in charge of processing can be consulted at the headquarters of the data controller.
5. DATA STORAGE
User data will be kept only for the time necessary to ensure the correct provision of the services offered.
In the event of closure of the Site account at the initiative of the user, the data contained therein will be kept for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for the purpose of public security. In order to close your personal account on the Site, the user can contact STARPOOL s.r.l. at the addresses indicated in art. 1. In any case, it is understood that personal data will be stored and processed for the purposes referred to in letter (e) of art. 2 above, for the period of time permitted by law and by the provisions of the Guarantor for the Protection of Personal Data. Before this period STARPOOL s.r.l. may ask the user to renew consent to the processing of his data for these purposes or make them anonymous and keep them only for statistical purposes.
6. USER’S PRIVACY RIGHTS
STARPOOL s.r.l. informs you that you have the right to:
– ask STARPOOL s.r.l. access to personal data and the correction or cancellation of the same or the limitation of the processing that concerns you or to oppose their processing, in addition to the right to data portability;
– withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
– propose a complaint to a supervisory authority (e.g. the Guarantor for the protection of personal data).
The above rights may be exercised with a request addressed without formalities to STARPOOL s.r.l. to the contacts indicated in art. 1 above.
In particular, STARPOOL s.r.l. Informs you that the right to portability implies that you have the right to receive the personal data concerning you provided to STARPOOL s.r.l. in a structured format, commonly used and readable by an automatic device. and has the right to transmit such data to another data controller without impediments by STARPOOL s.r.l.
The above rights may be exercised with a request to the data controller, at the addresses listed in art. 1. 1.