Information pursuant to and for the purposes of art. 13 et seq., EU REG. 2016/679

This information, provided by Deborah Gottardi (CF and PI: GTTDRH88A59L407B, 04833270269), with registered office in 31100 – Treviso (TV), Via S. Margherita n. 8 (hereinafter also De_Luxe) has the purpose of complying with the obligations set forth in EU REG. 2016/679, relating to the protection of natural persons with regard to the processing of personal data.

Therefore, I inform you that the collection and processing of personal data provided by you and acquired by De_Luxe, in the use of this De_Luxe platform-application is carried out in compliance with the above-mentioned regulation as reported here.

1. Legal basis and purpose of the processing for which the data are intended.

The legal basis for personal data collected and processed by De_Luxe in any capacity is your direct consent or the consent given to third parties with express authorization for transfer and/or communication to third parties.

The processing of personal data provided is aimed solely at:

1. execution of the contracts stipulated with you and the related commitments;
2. fulfillment of obligations provided by laws connected to the contractual relationship;
3. organizational management of the contract, for example relationships with employees, external collaborators;
4. any external professional collaborations for the fulfillment of legal obligations;
5. protection of contractual rights;

The legal basis for the processing is the consent contractually granted for the purposes indicated in letters a) and c); the fulfillment of a legal obligation for the purposes indicated in letters b) and d); or the legitimate interest of the Data Controller for the purpose indicated in letter e).

2. Methods of processing and data retention period

Personal data will be processed in paper, computerized and telematic form and entered into the relevant databases which can be accessed by those in charge of data processing.

The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary to achieve the purposes mentioned above.

The data acquired for the purposes indicated in letters a) to d) of point 1. above, will be retained for the entire duration of the contractual relationship; those acquired for the purpose indicated in letter e) of point 1. above, for the time required by law.

For certain categories of data collected, such as age, gender, specific interests, purchases made online, the same may be made anonymous and used for profiling purposes.

Where expressly permitted, the personal data provided may be used to carry out advertising communications and/or surveys.

3. Nature of personal data.

The object of processing is your personal data, which will be used for the purposes indicated in point 1.

The personal data collected are essentially related to:

• identification data of natural persons, including identification documents;
• data relating to your financial situation;
• payment data;
• nature, number and type of purchases made through the De_Luxe app.

4. Provision of data and refusal.

The provision of data and the related processing are mandatory in relation to the purposes indicated in letters a) to e) of point 1 above; it follows that any refusal to provide data for this purpose may determine the impossibility of proceeding with the contractual relationships themselves and fulfilling the requested services.

In other situations, the provision of data is to be considered optional.

5. Scope of communication and dissemination of data.

The data may be communicated to the following subjects:

• banking institutions or credit operators for the management of collections and payments;
• financial administrations and other companies or public bodies in compliance with regulatory obligations;
• companies and professionals that the owner uses, including external ones;
• companies and professionals that the Client uses, for particular services and always at the Client's request.

It remains understood that communications are made for the sole purpose and purpose of performing the contractually agreed services.

6. Data controller.

The data controller is Deborah Gottardi (CF and PI: GTTDRH88A59L407B, 04833270269), with registered office in 31100 – Treviso (TV), Via S. Margherita n. 8, PEC gottardi.deborah@pec.it.

7. Rights pursuant to articles 15, 16, 17 18, 20, 21 and 22 of EU REG. 2016/679.

We inform you that in your capacity as interested party, you have, in addition to the right to lodge a complaint with a supervisory authority, the rights listed below, which you may assert by making a specific request to the Data Controller and/or the Data Processor, as indicated in point 6.

Art. 15 - Right of access

The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information regarding the processing.

Art. 16 – Right of rectification

The interested party shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the interested party shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 – Right to erasure (right to be forgotten)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.

Art. 18 – Right to limit processing

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) although the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;
d) the data subject has objected to processing pursuant to Article 21, paragraph 1, pending verification whether the legitimate grounds of the controller override those of the data subject.

Art. 20 – Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Art. 21 – Right to object

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on Article 6(1)(e), including profiling based on those provisions.

Art. 22 – Right not to be subjected to automated decision-making, including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

8. Exercise of rights. Revocation of consent to processing and exercise of rights.

You are entitled to exercise the rights referred to in point 7 and to revoke your consent to the processing of your personal data by writing to info@de-luxeshoponline.com / PEC gottardi.deborah@pec.it.

At the end of this operation, your personal data will be removed from the archives as soon as possible and in any case within the terms established by law.

9. Profiling.

The owner may carry out an automated profiling of your data after anonymizing them.

The profiling carried out has the purpose of carrying out the agreed contractual service.

Profiling may concern personal data of the subject transferred by third parties with prior consent, such as age, gender, location, interests, online activities, online purchases through platforms for the purpose of improving the purchasing experience and personalising the offer and navigation.

The interested party may receive different information based on the criteria addressed above.

In any case, this profiling has no other purpose than to refer to any online purchasing or browsing experiences.

10. Data retention.

The data is potentially stored both in paper and computerized form for the period necessary to carry out the activity and in any case not exceeding ten years, according to the methods set out in point 2. A data processing register is prepared.

11. Transfer of data abroad.

Personal data may be transferred to third parties for commercial purposes. Personal data may be transferred to countries of the European Union or to third countries outside of the European Union or to an International Organization, within the scope of the purposes referred to in point 1). Upon request, the interested party will be informed whether or not there is a decision on the adequacy of the EU Commission.

12. Complaint.

The right to complain may be exercised by sending a communication to the Authority for the Protection of Personal Data at the following addresses: Garante per la protezione dei dati personali, with headquarters in Piazza Venezia 11, IT-00187, Rome Email: protocollo@gpdp.it, PEC: protocollo@pec.gpdp.it, according to the instructions available on the website https://www.garanteprivacy.it/.

If you wish to have more information on the processing of your personal data, or exercise the rights referred to in the previous point 7., you can write to info@de-luxeshoponline.com / PEC gottardi.deborah@pec.it.

Before we can provide you with, or change, any information, we may need to verify your identity and answer some questions.

Current version as of 11.01.2023.