DATA PROCESSING
Matteo Aprea (hereinafter “Sticky Shell”) as data controller wishes to inform users of the site www.stickyshell.it (the “Site”) regarding the methods of processing of personal data provided to Sticky Shell, as provided for by Legislative Decree no. 196/2003 (the “Privacy Code”) and the new European Regulation no. 679/2016 on the protection of personal data (the “European Privacy Regulation”), applicable from 25 May 2018.
1. Owner and data controllers
The Data Controller is Matteo Aprea with registered office in Via Terenzio 14, 04100 LATINA. The Data Processor is Matteo Aprea and can be contacted at the following email address: info@stickyshell.it. The complete list of data controllers appointed by Sticky Shell is available upon written request sent to the email address indicated above.
2. Personal data collected
Sticky Shell processes, in accordance with this privacy policy, the data provided by Users, including
a) the personal and contact details provided when creating an account on the Site;
b) data relating to purchases made through the Site;
c) navigation data relating to the use of the services offered through the Site collected through cookies in accordance with the cookie policy;
d) the data provided in the event of a request for information and assistance;
No health data and in general special categories of personal data pursuant to Article 9 of the European Privacy Regulation are processed. Data of minors will be processed according to the methods set out in the following paragraph 7.
The above data are processed only to the extent necessary to achieve the purposes described in paragraph 4 of this information.
3. Data processing methods
The User's personal data are processed with the support of computer and/or paper means and are protected through adequate security measures suitable to guarantee the confidentiality and security of personal data. In particular, Sticky Shell adopts appropriate organizational and technical measures to protect the personal data in its possession against loss, theft, as well as unauthorized use, disclosure or modification of personal data.
Sticky Shell proceeds to the anonymization of personal data and the removal of identifying data when there is no need to process personal data in an identifiable form for the purposes of processing and upon expiry of the retention period indicated in the following paragraph 9.
4. Purpose of the treatment
The purposes for which the User is asked to provide Sticky Shell with his/her personal data are the following:
a) allow the User to register on the Site by creating a personal account and carry out the activities regulated in the Conditions of Use and Conditions of Sale of the Site, including purchases on the Site, use the services made available through the Site, including customer support services, and assert and defend rights against the User and third parties (hereinafter jointly defined as "Contractual Purposes");
b) comply with any legal and regulatory obligations (hereinafter referred to as “Legal Purposes”);
c) send newsletters and commercial communications, through traditional means of communication and remotely via email, social networks, instant messages, mobile applications, for the promotion and/or sale of products and/or services marketed by Sticky Shell (hereinafter referred to as “Marketing Purposes”);
5. Legal basis of the processing
The processing of personal data for Contractual Purposes is mandatory as it is necessary for registration, for carrying out the activities referred to in the Conditions of Sale of the Site, for purchasing products online and for using specific services offered through the Site. The provision of personal data for Legal Purposes is mandatory as it is required under applicable laws. If the User does not want his/her personal data to be processed for these purposes, he/she will not be able to use the Site and the services made available through it.
6. Scope of communication and dissemination of data
Sticky Shell, for the purposes referred to in paragraph 4, may communicate the Users' data, strictly necessary for each type of processing, to the following categories of subjects:
a) to subcontractors and/or suppliers engaged in activities related to the performance of the services and products offered by Sticky Shell;
b) to post offices, shipping agents and couriers for the sending of products purchased by the User and/or other material relating to the performance of Sticky Shell services;
c) to legal, administrative and tax consultants to the extent necessary or functional to the performance of Sticky Shell's activity, in the manner and for the purposes illustrated above; and
d) to banking institutions for the management of collections and payments deriving from the execution of contracts with the User.
The User's personal data will not be disclosed.
7. Minors under 18 years of age
The Site offers services that can also be used by persons under the age of 18. In these cases, Sticky Shell collects and processes the personal data of minors exclusively for the purposes and in the manner set out in this information notice in compliance with the rules on the processing of personal data of minors pursuant to art. 8 of the Privacy Regulation with the prior consent of the parent and/or guardian and/or person acting on their behalf whose data may be collected only to obtain said consent in accordance with the methods set out on the Site.
8. User Rights
The User may, at any time and free of charge (a) obtain confirmation of the existence or otherwise of data concerning him/her and have communication of such data; (b) know the origin of the data, the purposes of the processing and its methods, as well as the logic applied to the processing carried out through electronic means; (c) request the updating, rectification or - if interested - the integration of the data; (d) obtain the cancellation or blocking of data possibly processed in violation of the law, as well as to oppose, for legitimate reasons, the processing; (e) oppose, in whole or in part, the processing of data concerning him/her for direct marketing purposes carried out through automated methods and/or traditional methods; (f) revoke, at any time, the consent to the processing of data, without this in any way prejudicing the lawfulness of the processing based on the consent given before the revocation.
In addition to the rights listed above, the User may benefit from the rights set out in paragraph 25, letter b) of this information notice with effect from 2018 May 9.
At any time, the User may exercise the above rights, change the contact methods, notify Sticky Shell of any updates to their data, request the removal of their personal data communicated by third parties, or obtain further information about the use of their personal data by Sticky Shell, by contacting Sticky Shell at info@stickyshell.it.
9. Provisions applicable from 25 May 2018
The following provisions will become effective from 25 May 2018, as a consequence of the entry into force of the Privacy Regulation.
a) Period of retention of personal data: Sticky Shell will retain personal data for the period necessary to fulfill the purposes for which they were collected pursuant to paragraph 2 above. In any case, the following retention periods apply to the processing of personal data for the purposes indicated below:
– the data collected for the Contractual Purposes referred to in paragraph 4, letter a) are retained for the entire duration of the contract and for 10 years following its expiry for defense purposes and/or to assert a right of Sticky Shell in judicial and/or extrajudicial proceedings in the event of disputes related to the execution of the contract;
– the data collected for the Legal Purposes referred to in paragraph 4, letter b) are retained for a period equal to the duration prescribed for each type of data by law;
– the data collected for the Marketing Purposes of Sticky Shell referred to in paragraph 4, letter c) are retained for a period equal to the entire duration of the User's registration on the Site through his/her account and/or participation in the competition and/or collection as well as for the 2 years following the termination, deactivation and/or cancellation of the same;
Once the above-mentioned terms have expired, the User's data may be deleted, anonymized and/or aggregated.
b) Additional rights: the User may at any time, according to the methods set out in the previous paragraph 9, (a) request the restriction of the processing of personal data in the event that (i) the accuracy of the personal data is contested, for the period necessary to verify the accuracy of such personal data; (ii) the processing is unlawful and the User opposes the erasure of personal data and requests instead that their use be limited; (iii) although Sticky Shell no longer needs them for the purposes of the processing, the personal data are necessary for the User to ascertain, exercise or defend a right in court; (iv) the User has objected to the processing pursuant to art. 21, paragraph 1, of the Privacy Regulation pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party; (b) object at any time to the processing of personal data; (c) request the erasure of personal data concerning him/her without undue delay; (d) obtain the portability of personal data concerning him/her; (e) lodge a complaint with the Data Protection Authority where the conditions exist.
11. Changes and updates
This information is valid from the date indicated in its header. Sticky Shell may also make changes and/or additions to this information, also as a consequence of any subsequent changes and/or regulatory additions to the Privacy Regulation. The changes will be notified in advance and you will be able to view the text of the information constantly updated at the link: https://www.stickyshell.it/privacy.
If the User has any doubts, observations or complaints about the methods of collection or use of his/her personal data, he/she is kindly requested to contact Sticky Shell by email info@stickyshell.it.