Dear Customer, in accordance with the applicable data protection legislation,
Elite Stone S.r.l., with registered office 00196 Rome, Via Flaminia, 135,VAT reg. no. 10104411003, e-mail email@example.com, as the Data Controller, will use your data to carry out the activity indicated below:
- online purchase: to execute the customer’s purchase orders for the products marketed by the Data Controller through the e-commerce website, to fulfil the related administrative and accounting obligations (e.g. for order processing, invoicing, etc.), as well as, where expressly requested by the customer, to identify the shipping and/or transport company that, on the customer’s request, will handle the delivery of the purchased products.
The fields indicated as mandatory, if not completed, will result in the impossibility of processing your purchase orders placed through the e-commerce website. Optional data, if not provided, will not affect the online purchase of products. The assessment of mandatory data was made taking into account the principles of necessity and proportionality in the processing, in accordance with the Privacy Regulations and all the specific sector regulations.
With reference to the purposes related to online purchases, the provision of data is necessary to process your purchase orders made through the e-commerce website: failure to provide such data will make it impossible for you to make online purchases of the Data Controller’s products. The legal basis for the processing is to provide the services on the e-commerce website, pursuant to article 6, paragraph 1, letter b) of the Privacy Regulation.
The data you provide will be processed mainly by IT tools under the authority of the Data Controller, by personnel specifically authorised and trained to process it, pursuant to Articles 28 and 29 of the Privacy Regulations and article 2-quaterdecies of the Privacy Code. We inform you that appropriate security measures are observed, also in accordance with Articles 5 and 32 of the Privacy Regulations, to prevent loss of data, illegal or incorrect use and unauthorised access.
The personal data subject to processing will be kept for the time strictly necessary with regard to the contractual relationship of online purchase, as well as, thereafter, for the fulfilment of all legal obligations connected with or arising from the contract you have entered into with the Company.
Your data may be communicated within the EU, in full compliance with the Privacy Regulations, to the following parties:
- entities and/or other public authorities, where required by law or at their request;
- the structures, subjects and external companies that the Data Controller uses to carry out activities that are instrumental and/or incidental to the online purchase, including suppliers of software solutions, web applications and storage services also provided through Cloud Computing systems (all the data will be stored on servers located in the territory of the European Community);
- external consultants (e.g. for tax compliance management), if not designated in writing as Data Processors.
The updated list of designated Data Processors can be provided upon request by data subjects.
At any time, you may exercise your rights under Articles 15 et seq. of the Privacy Regulations, for access, rectification, transformation, blocking, cancellation and restriction of processing, in the manner established by Article 12 of the Privacy Regulations.
The complete form for exercising rights can be found at the link with instructions on how to complete it and send it to the Data Controller.
In the event of failure to receive a timely reply of or inadequate response from the undersigned company, or if you believe there has been a violation of the Privacy Code and/or the Privacy Regulations, you may lodge a complaint with the Garante per la protezione dei dati personali (Data Protection Authority), as follows: www.gpdp.it – www.garanteprivacy.it, Email: firstname.lastname@example.org, Telephone switchboard: (+39) 06.69677.1.