Pursuant to and for the effects of art. 13 of EU Regulation 2016/679 (hereinafter also referred to as the "Regulation") and national legislation applicable to the processing of personal data, this notice is provided in order to inform the data subjects of the purposes and methods of use of the data provided by the latter for the execution of contracts governed by the online General Sales Conditions, hereinafter "GSC", available on the website www.terranovastyle.com.
The Data Controller is Teddy S.p.A., with headquarters in via Coriano no. 58, Grosrimini, block 97, 47924, Rimini (RN), tel. +39 0541 301411, fax +39 0541 383430, email firstname.lastname@example.org.
Purpose of processing
The purpose of data processing is to fulfil the obligations arising from the execution of contracts governed by the GSC.
The personal data are processed manually and electronically in order to achieve the purposes for which they were collected. Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorized access.
The data processing will be carried out by personnel directly employed by Teddy S.p.A. and/or by natural or legal persons specifically identified by the latter as persons in charge, duly appointed processors and their persons in charge of processing.
The processing described in this notice is carried out both on the basis of consent and on the basis of contractual agreements.
Processing recipients are all overage customers of Teddy S.p.A. who purchase products on the e-commerce site www.terranovastyle.com.
Data communication and transfer
The data provided will not in any case be subject to dissemination or communication to third parties, except for those whose right to access the data is recognized by law or by orders of authorities, and the entities, including external and/or foreign, to whom communication is necessary to fulfil tax or administrative obligations, or entities used by Teddy S.p.A. to perform activities instrumental and/or ancillary to the fulfilment of its obligations arising from the execution of contracts governed by the GSC and/or related to the services offered.
It should also be noted that, in order to carry out the above activities, the data collected may be transferred to servers that could be located in non-EU countries. In this case, Teddy S.p.A. will guarantee suitable security measures on the basis of the provisions of the Regulation. Further details are available to the data subject by sending a simple request to the following email address: email@example.com.
Duration of processing
Personal data will be processed for the period necessary to fulfil the obligations arising from the execution of contracts governed by the GSC. In any case, the personal data will be kept by Teddy S.p.A. in order to prove the fulfilment of its obligations, as long as this is necessary.
Optional nature of providing data
The data subject is free to decide whether or not to provide personal data to Teddy S.p.A., however, failure to provide data may make it impossible for Teddy S.p.A. to execute contracts governed by the GSC and/ or to fulfil the obligations arising from them.
Data Protection Officer
Where applicable, the data relating to the Data Protection Officer may be obtained by the data subject by sending an ordinary request to the following email address: firstname.lastname@example.org.
Rights of data subjects
The entities to whom the personal data refer may at any time exercise their rights with respect to the Data controller under articles 15 to 22 of the Regulation and national legislation applicable to the processing of personal data. In particular, they may:
a) access the data and have confirmation of the existence or not of personal data concerning them, even if not yet recorded, and receive communication of such existence in an intelligible form;
b) obtain information on the origin of the personal data, of the purposes and of the methods of processing; the logic applied in the event of processing using electronic media; identification details of the data controller, the data processors and the appointed representative; the entities and categories of entities to which the personal data may be communicated or which may become aware of them as representative appointed within the country, as data processors or persons in charge;
c) obtain the updating, rectification or supplementing of the data, as well as their portability;
d)obtain the erasure, restriction, transformation into anonymous form or blockage of the processed data, including the data, the storage of which is unnecessary for the purposes for which they were collected or subsequently processed;
e) have certification that the aforementioned operations have been brought to the attention of those to whom the data were communicated or disseminated, unless such requirement proves impossible or involves means manifestly disproportionate to the protected right;
f) object, in whole or in part, for legitimate reasons, to the processing of the personal data concerning them, even if pertinent to the purpose of collection, and to the processing of personal data concerning them for purposes of sending advertising or direct sales materials or for carrying out market surveys or commercial communication.
The data subject also has the right to lodge a complaint with a supervisory authority, which in Italy is the "Data protection authority".
The data subject is also entitled to withdraw its consent to the processing of its personal data at any time.
In order to exercise these rights, the data subject may contact the Data Controller directly by writing to the email address email@example.com.