Privacy conditions

Stilcolor Service Srl, with registered office in via Parini snc - corner of via Rossi, 23880 - Casatenovo (LC), represented by its director, Mr. Alessandro Doni, in his capacity as Data Controller, in accordance with art. 13 of EU Regulation no. 679/2016, regarding the protection of personal data, hereby provides the following information:

1. Processing methods

The data provided will be processed by manual and/or automated means for the purposes set out in point 3 below. The data processing shall be carried out by staff directly employed by Stilcolor Service Srl, and by natural or legal persons specifically appointed by Stilcolor Service Srl as data processing managers or officers. Personal data is processed with automated tools for the period of time strictly necessary to achieve the purposes for which it is collected. Specific security measures are in place to prevent data loss, illicit or incorrect use and unauthorised access.

Types of data processed

“Personal data” refers to information or fragments of information that could allow for the user to be identified. This usually includes information such as, for example, their name, email address, telephone number and IP address. The computer systems and software procedures used for the regular operation of the website acquire, over the course of their usual operation, certain personal information whose transmission is implicit in the use of the communication protocols of the Internet. This information could, by its very nature and through processing and association with data held by third parties, allow for the computers that access the website to be identified. This category of data includes the IP addresses or domain names of computers used by the users who access the website, and other parameters regarding the operating system and environment of the user’s computer. This data could be made available to the legal authorities and the police in order to ascertain responsibility in the event of offences committed through the website or cybercrimes perpetrated against the website. The optional, explicit and voluntary submission of personal data in order to access specific services entails the subsequent acquisition of the personal details which the sender includes in the requests, which are necessary to respond to said requests. Users can opt not to provide their personal details, but in this case, Stilcolor Service Srl may be wholly or partially unable to fulfil the user’s requests.

Data regarding non-registered users

The information generated by users who visit the website and are not yet registered (or, even if they are registered, do not have an active session open) is used to allow the user to browse the website in its optimal form, for statistical analysis, and to personalise the content displayed.

Data from registered users

When registered users provide their consent for the processing of their data, Stilcolor Service Srl may process the data regarding the operations they perform and pages they view on the website. When registered users provide their consent for the processing of their data for profiling purposes, Stilcolor Service Srl may process data relating to their consumption choices (i.e. items purchased and amounts spent), so as to adapt the commercial offer to their profile and requirements as much as possible.

Payment data

As far as payment data is concerned, the only information that Stilcolor Service Srl receives from digital payment companies and credit card payment processors has to do with the status of the payment (successful/declined). All details of prepaid or credit cards are stored by the processors which operate the relevant service, and they are not authorised to use any personal details received for any other purposes.

Location of data processing

The data processing operations connected to the services of the website are performed in the offices of Stilcolor Service Srl and are carried out only specific data processing staff, or by staff responsible for occasional maintenance operations. The data obtained from the website may be communicated to the technological and logistical partners with which the Data Controller works in order to provide the services requested by the users. The personal data provided by users who submit requests is also made available to third parties appointed as Data Processors, by whom it is used for the sole purpose of performing the service requested and only where this is necessary for that purpose.

2. Data Controller and Data Processors

Following a visit to this website, data may be processed that is related to identified or identifiable persons. The Data Controller responsible for its processing is the director of the company, Mr. Alessandro Doni. The email address at which users can contact the company is: [email protected].

3. Purposes of processing

Stilcolor Service Srl may use the website users’ personal data to examine how the website is being used, analyse the effectiveness of advertisements, personalise the browsing experience and examine (in an anonymous and aggregate form) statistics relating to activities on the website, and to simplify how the website is used and better adapt it to the user’s personal interests and choices. The user may opt out of receiving communications from Stilcolor Service Srl at any time. Every piece of marketing communication that Stilcolor Service Srl sends will provide the user with the necessary information and means to opt out. User data may be used to provide products or services that the users themselves request.

4. Transferral of data

The personal data collected will be processed in Italy and will not be transferred to any countries outside the EU.

5. Compulsory or optional nature of data transferral

The provision of data is optional, but any refusal on the part of the data subject, or a subsequent request to delete said data, could make it impossible or extremely difficult to respond to any requests submitted by the user.

6. Data retention

The personal data will be retained for the purposes mentioned in point 3 of this policy for the duration of the periods applicable under current legislation.

7. Transferral of data to third parties

The personal data will not be transferred to third-party companies for the purpose of sending out their commercial communications in return for payment.

8. Rights of the data subject

In accordance with articles 13, 15, 16, 17, 18, 19, 20 and 21 of the Regulation, please note that:

a) the data subject has the right to request that the Data Controller provide access to or the correction or erasure of any personal data concerning them, the limitation of the processing of said data, and the right to object to the processing of said data, as well as the right to the portability of said data;

b) the data subject has the right to revoke their consent at any time without affecting the lawfulness of the processing performed based on the consent provided before the revocation thereof;

c) if the processing is based on article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), the data subject has the right to withdraw their consent at any time without affecting the lawfulness of the processing performed based on the consent provided before the revocation thereof;

d) the data subject has the right to lodge a complaint with the Italian Data Protection Authority, and may do so by following the procedures and directions posted on its official website: www.garanteprivacy.it. Requests should be sent to the email address [email protected].

9. Automated decision-making process

No automated decision-making processes will be used to manage the data collected.