Address: via Giorgio e Guido Paglia n. 1/D
24122, Bergamo (IT).
DATA PROTECTION OFFICER (DPO)
E-mail address: firstname.lastname@example.org
PERSONAL DATA PROCESSED
Identity data*. Contact details*. Details relating to purchase(s).
|PURPOSE OF PROCESSING||LEGAL BASIS FOR PROCESSING DATA||PERIOD FOR WHICH PERSONAL DATA WILL BE STORED|
|The data provided by completing the form will be processed by the Company to respond to requests for information on the Company itself and/or its products/services.||Execution of the contract involving the data subject.||For the duration of the contract and/or for the time required to process the request. After this time, your data will be stored for an ordinary period of 10 years in compliance with the applicable law.|
OBLIGATORY PROVISION OF DATA
Your data (your name, telephone number, email address, address, pictures, data of the purchased order) must be provided to be able to provide the information requested, therefore if these information are absent the Company will not be able to process the request.
RECIPIENTS OF THE DATA
Personal data may be communicated to parties acting as data controllers (such as supervisory bodies and authorities and public organisations authorised to request data) or processed on behalf of the Company by parties appointed as data processors, who are provided with suitable operating instructions. These parties include the following categories:
a) companies belonging to the KIKO Group offering support services to Data Controller for organizational matters;
a) companies that manage/maintain the company website;
b) companies that provided Costumer Service Management (i.e. call center);
c) supervisory and control authority and any public entity entitled to request the Data.
THIRD PARTIES AUTHORISED TO PROCESS DATA
Your personal data may be processed by company employees tasked with the pursuit of the goals set out above, who are expressly authorised to process data and have received appropriate data processing guidelines.
PERSONAL DATA TRANSFERS OUTSIDE THE EU
The company does not transfer your Data to non-EU countries
DATA SUBJECTS’ RIGHTS - COMPLAINT TO THE SUPERVISORY BODY
By contacting the privacy office via e-mail sent to email@example.com, data subjects may ask the Controller or the DPO for access to personal data, or the rectification of inaccurate personal data and the completion and the deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 GDPR, and object to processing in the case of legitimate interests of the controller.
Where processing is based on consent or is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract, and the processing is carried out by automated means, the data subjects have the right to receive the personal data concerning them in a structured, commonly used, machine-readable format, and, if technically feasible, the right to have their personal data transmitted to another controller without hindrance
Data subjects have the right, at any time, to withdraw consent given for marketing and/or profiling purposes, and to object to the processing of personal data for marketing purposes, including any profiling connected with direct marketing. This will not prejudice the possibility available to any data subject who prefers to be contacted for the aforementioned purposes exclusively by traditional means to indicate his/her objection only to the receipt of communications by electronic means.