Gdpr ecommerce
Information for the e-commerce service
ELCOM DI ELIO COMPARIN - Via Canova 31/33 - 36033 - ISOLA VICENTINA (VI), VAT number: 00556890242, as Data Controller who accesses our website WWW.ELCOMSHOP.COM (henceforth only the "Site") and makes an explicit request to purchase our products through the e-commerce service in order to illustrate the essential elements of the treatments carried out.
Personal data processed
The data provided voluntarily will be processed. Through the Site you have the possibility to voluntarily provide personal data, for example, name, surname, tax code, tax data, contact details, billing address for the purchase of our products through the e-commerce service on the Site. We will use this data in compliance with applicable law, assuming that it refers to you. In the event that the data are related to third parties, for the latter, you make yourself the independent data controller, assuming all the obligations and responsibilities of law. In this sense, confer on the point the widest indemnity with respect to any challenge, claim, claim for compensation of the damage from treatment, etc. that it should reach our reality from third parties whose personal data have been processed through your use of the Site in violation of the applicable legislation currently in force.
Purpose of processing and legal basis
Specifically, your personal data are processed for the following purposes and legal bases:
-activities related to the performance of the contract to which you are party, including the pre-contractual phase (examples of activities are: the acquisition of information prior to the conclusion of the contract, communication of requests and/or responses to requests received, the management of reports for administration, accounting, orders, shipments, invoicing, services, fulfillment of contractual and legal obligations); the legal basis of the aforementioned purpose is identified in the contract and pre-contractual measures (art. 6.1, letter b, GDPR);
-activities related to the establishment and/or exercise and/or defence of rights (examples of activities are: disputes relating to the proper performance of the contractual relationship, warnings, debt collection); the legal basis of the aforementioned purpose is identified in the legitimate interest (art. 6.1, letter f, GDPR); retention of accounting records; the legal basis is identified in the legal obligation (art. 6.1, letter c, GDPR);
-other activities in execution of legal obligation/orders Authority (such as communication to third parties); the legal basis is identified in the legal obligation (art. 6.1, letter c, GDPR);
-maintenance of computer systems and devices (the subjects in charge of carrying out maintenance and repairs on the Site may accidentally have access to your personal data. These are events that are completely occasional and unpredictable and in any case without identification purposes and limited to the duration of the execution of the maintenance/repair operation); the legal basis for this purpose is in the legitimate interest (art. 6.1, letter f, GDPR). We do not carry out processing with automated decision-making processes or profiling.
Times of storage of data
Your personal data will be kept for the time strictly necessary to carry out the purposes described above and to fulfil the obligations provided by law. In particular, for the activities related to the execution of the contract of which you are part (including the pre-contractual phase), your personal data will be kept for the duration of the contractual relationship and, once the relationship is concluded, -will be kept for the purposes of ascertaining/exercising/defending a right and the right of storage, for activities related to the assessment and/or the exercise and/or defense of rights, your personal data will be kept for 10 years, as provided for by the ordinary limitation period (Art. 2946 of the Italian Civil Code), subject to further retention in the event of interruption of the limitation period; for activities related to retention by legal obligation, Your personal data will be stored for 10 years for the purpose of mandatory storage ex lege (art. 2220 c.c.; 22, paragraphs 2 and 3 D.P.R. 29.9.1973, n. 600), save further storage in the event of interruption of the prescription; for other activities in execution of legal obligation/ Authority orders and for maintenance computer systems and devices, referring to personal data we have for the other purposes indicated in this statement, the storage times coincide with those identified for the aforementioned purposes.
Consent and optionality / obligation to provide.
The processing of your personal data, for the purposes explained above, may be carried out without your consent. The provision of your data that you undertake to provide us contractually or by legal obligation, is mandatory and is a necessary requirement for the conclusion of the contract and failure to provide it will make it impossible for us to process the contracts and other related obligations. Any other provision of your personal data (e.g. for sending requests not yet contracted or for browsing the site) is purely optional. The only consequence of not providing optional will be the inability to provide or perform the services requested.
Target groups
Your Personal Data, moreover, may be disclosed to third parties, for technical and operational needs strictly related to the purposes stated above and in particular to the following categories of subjects:
a) subjects necessary for the provision of the services offered by the Site including, but not limited to, the sending of e-mails, the e-commerce service and the analysis of the operation of the Site that typically act as data processors of our reality;
b) entities, professionals, companies or other structures entrusted by us with the processing related to the fulfilment of the administrative, accounting, insurance and management obligations related to the ordinary performance of our economic activity, including for purposes of debt recovery;
c) public authorities and administrations for the purposes related to the fulfilment of legal obligations or persons entitled to have access to them by virtue of provisions of law, regulations and community regulations;
d) banks, financial institutions or other parties to whom the transfer of the aforementioned data is necessary for the performance of the activities of our company in relation to the fulfilment by us of the contractual obligations assumed against you;
e) suppliers of installation, servicing and maintenance services of computer and telematic systems and all functionally connected services necessary for the performance of the services covered by the contract;
f) persons authorised by us to process data who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and collaborators).
Transfers abroad
The Data Controller does not transfer personal data outside the European Economic Area. The Data Controller, however, reserves the right to use cloud services; in which case, the service providers will be selected from those who provide adequate guarantees in compliance with applicable law.
Method of treatment
Your personal data will be processed both in electronic and paper format. The processing will, however, be carried out mainly with computer tools and in any case with the observance of the minimum precautionary measures of data security and confidentiality. In particular, technical, IT, organisational, logistical and procedural security measures have been implemented in order to prevent loss, unlawful or irrelevant use of and access to data without authorisation.
Rights of the data subject and complaint before the Guarantor
We inform you that regarding the processing of your personal data you can exercise the following rights:
a) Right to obtain access to your personal data (art. 15 GDPR): you can contact us to find out if your personal data are processed and the legal information on processing;
b) Right of rectification (Art. 16 GDPR): obtain the correction of your inaccurate personal data or the integration of incomplete personal data;
c) Right to deletion/forgetting (art. 17 GDPR): obtain the deletion of your personal data, in the cases provided for by law;
d) Right to restriction of processing (art. 18 GDPR): obtain the submission of your personal data to storage only, with the exclusion of other activities, in the cases provided for by law;
e) Right to portability (Art. 20 GDPR): obtain your personal data in a structured, commonly used and machine-readable format and obtain, moreover, the direct transmission to another data controller, in the cases provided for by law;
f) Right to object (art. 21 GDPR): right to stop further processing of personal data for reasons related to your particular situation, subject to the prevalence of our compelling legitimate reasons, in the cases provided for by law;
g) Right to withdraw consent (art. 7.3 GDPR): right to revoke consent at any time for cases where the processing is based on consent. To exercise these rights you can use the Data Controller’s contacts provided in this Policy. The exercise of rights is not subject to any formal constraint and is free of charge. We also inform you of your right to lodge a complaint with the competent Data Protection Authority. Recall that the complaint, pursuant to art. 77.1 GDPR, can be promoted by the data subject to the Authority of the place where the data subject habitually resides, where he works or where the alleged violation occurred.
Data controller
The Data Controller is ELCOM DI ELIO COMPARIN
Contact details of the Data Controller:
e-mail: info@compelgoods.com
telephone: 0444976593
paper post: VIA CANOVA 31/33 - 36033 - ISOLA VICENTINA (VI)
Amendments
This policy has been in force since 25 May 2018. We reserve the right to modify or simply update the content, in part or completely, also due to changes in the applicable legislation. The updated Policy will be promptly published on this Site. Therefore, we invite you to visit this page regularly to see any updates.