INFORMATION PURSUANT TO ART. 13 of LEGISLATIVE DECREE 30 JUNE 2003 no 196 ("PRIVACY CODE")
1. data controller
The processing controller of personal data is DADA Dadasystem SOFTWARE, con socio unico, VAT number/tax code 10944971000 email: firstname.lastname@example.org
Only if you purchase a product sold under the MarketPlace-from a third party vendor, as identified from time to time in the product chosen by the user, the third party vendor will assume the role of autonomous holder of your personal data entered in the order form (with the exception of the email address that is not in any case acquired by the seller) and any correspondence , connected to purchase online, exchanged through the internal messaging system MarketPlace (in particular, through the "contact the seller", "seller" currency "ask a made" accessible to the registered user). In that case, apply, even with reference to the third party vendor, the following provisions of this policy:
paragraph 2 (processing purposes) only for the purposes referred to in subparagraphs (b)-conclusion of the contract and after-sales service-and (c)-administrative and accounting tasks-and under "sensitive data";
point 3 (provision of data and consequences in case of non-consent to treatment) for lefinalità only letters (b) and (c) of paragraph 2;
4 point (data processing methods);
point 5 (transmission of data) for paragraphs (v) to (viii);
point 6 (data retention), last paragraph;
section 7 (right to access personal data).
2. purposes of data processing
DADA Dadasystem SOFTWARE will treat the personal data provided by users for the following purposes:
(a) grant registration to the site and use the services reserved to registered users, including the ability to make a purchase online within the MarketPlace.
(b) to permit the conclusion of the purchase agreement and the correct execution of transactions relating thereto, including the activities of after-sales service. In addition, users, even if not registered, can send requests for information about products for sale on the site, and to make such a request, SOFTWARE LICENSE will require the submission of certain personally identifiable information (e.g. first name, last name and e-mail address);
(c) for administrative and accounting purposes and to comply with legal obligations;
(d) prior written express consent of the user to send information and promotional communications (including the "newsletter"), discount coupons and special offers by DADA Dadasystem SOFTWARE, in relation to products and services of DADA Dadasystem or third-party SOFTWARE, as well as for conducting market research, by means of email and postal service (so-called "marketing purposes").
(e) limited to e-mail coordinates provided by the user in the context of the purchase of a product or service offered and sold on the site directly from DADA Dadasystem SOFTWARE, to allow the direct sale of similar products or services without the prior consent of the person concerned (as foreseen by art. 130, paragraph 4 of the Privacy Code), provided that the user does not exercise the right of objection in the ways described in paragraph 3 below (the so-called "soft" spam ").
(f) prior written express consent of the user, for the processing of consumer choices and shopping habits by DADA Dadasystem SOFTWARE through a survey of the type and frequency of your purchases made on the website, for the purpose of sending informative material and/or advertising of user interest via e-mail and improved proposals sent by SOFTWARE LICENSE s.r.l ("profiling").
Credit card data
To make a payment on the site using a credit card, you must provide your confidential credit card information (card number, holder, expiration date, security code). These data will be acquired by payment provider who will act as independent data controller, without transiting by DADA Dadasystem SOFTWARE that will not process such data in any way. The data will be captured in an encrypted format and according to the safety requirements of PCI certification. The payment service uses Secure Sockets Layer (SSL) Protocol. The user may request, through the site, saving such data but the data will be saved directly by the service provider and the payment will not be captured by DADA Dadasystem SOFTWARE that will keep track of only the last four digits that make up the credit card number only to prevent fraud in online payments. Please note that even if your payment relates to the purchase of a third party vendor product, within the MarketPlace, your credit card information will not be disclosed to the seller.
Data provided within the service "say via e-mail"
On the occasion of visits to the site, registered users and unregistered users may report one or more products to your friends/contacts by entering your name and email as well as the name and email address of the friend. Users should be aware that DADA Dadasystem SOFTWARE will not retain this information after the sending of the email, if not for the time strictly necessary to document that you have given your request of users. This service to stakeholders must be able to lawfully use the data of your friends/contacts.
To register for the site and make a purchase through the site has never required the transfer of sensitive data. You may be asked to provide documentation proving the existence of a disability, and then the transfer of sensitive data, in case he wishes to make use of the reduced VAT rate in connection with the purchase of a product that allows the application of that scheme, as provided by law No. 30, February 28, 1997. The cos data & igrave; conferred shall be processed by the seller of the product, be it SOFTWARE or Dadasystem DADA a third party vendor, only to allow the seller of the product to fulfil the provisions of law No. 30, February 28, 1997 on the application of a reduced VAT rate.
You can access the site and view the products offered for sale without requiring the provision of any personal data. However, the computer systems and software responsible for site operation acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the internet.
This information is not collected to be associated to identified interested parties, but also by their very nature could, through elaborations and associations, allow the identification of the user.
This category includes IP addresses or domain names of computers used by users who access the site, the addresses in notation Url of the requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in response, etc. These data are used for anonymous statistical information on site usage (such as, in particular, the number of visits) and to control its correct functioning. In this process there is no directly identifying information treatment.
Navigation data will be acquired in the manner indicated above, only by DADA Dadasystem SOFTWARE
3. Provision of data and consequences in case of non-consent to treatment
Providing your data for the purposes referred to in points (a) (b) and (c) of paragraph 2 that precedes it is optional. However, because such treatment is needed to allow the registration to the Site and the services, including the online purchase service, any refusal to provide such data will make it impossible to register on the website and/or conclude a purchase online.
With reference to the purposes of the processing referred to in subparagraphs (d) ("marketers") and female ("profiling") of point 2 above, consent to the processing of personal data is purely optional and can be manifested through the selection of an appropriate box, for each distinct purposes, present at the bottom of the registration form. Failure to consent will not have any effect on the possibility to register to the site and/or to make purchases on the same and will involve only the consequences described below:
-failure to consent to the processing of personal data for the purposes of paragraph 2, lett. (d) ("marketers") that precedes it, will make it impossible to receive information and/or promotional communication (including the "newsletter"), discount coupons and special offers by DADA Dadasystem SOFTWARE, in relation to products and services of SOFTWARE LICENSE or agent, as well as for conducting market research, by means of email and postal service;
-failure to consent to the processing of personal data for the purposes of paragraph 2, lett. (f) ("profiling") preceding will make it impossible for DADA Dadasystem SOFTWARE to analyzing user consumption choices through a survey of the type and frequency of your purchases made on the website for the purpose of sending informative and/or advertising of specific interest to the user.
The user may, in any case, revoke the consent which may be lent for the purposes described in paragraphs (d) ("marketers") and female ("profiling") of point 2, or object to the processing for the purposes referred to in point (e) ("spamming") by contacting D Dadasystem at the address SOFTWARE listed in item 1 above.
In addition, limited to the purposes described in paragraphs (d) ("marketers") and (e) ("spamming") of point 2 above, the user can object to the processing of data concerning him/her via unsubscribe link at the bottom of any email to promotional content contributed by DADA Dadasystem SOFTWARE. The opposition with these modes also extends to the sending of communications through the postal service.
4. Data processing methods
The data processing will be mostly carried out with the aid of electronic or automated means, in the manner and with appropriate means to ensure the security and confidentiality of the data, in accordance with the provisions of the Privacy Code. In particular, all measures will be taken, computer techniques, organisational, logistical and procedural safeguards, so that it is guaranteed a minimum level of data protection provided by the law, allowing access only to persons in charge of the processing by the data controller or data processors designated himself.
5. communication of data
The personal data provided by the user, for the purposes described in section 2 above, may be brought to the attention of or communicated to the following subjects:
(i) companies or consultants are responsible for the installation, maintenance, updating and, in General, the management of hardware and software of DADA Dadasystem SOFTWARE (including platform);
(ii) companies appointed by DADA Dadasystem SOFTWARE sending online communications;
(iii) the persons in charge for the repair of the products purchased in performing the legal conformity warranty in case D Dadasystem SOFTWARE acts as a seller of the product;
(v) all those public entities and/or private individuals and/or legal entities (legal, administrative and tax), when the communication is necessary or functional to the proper fulfilment of contractual obligations in relation to the services provided through the site, and the obligations imposed by law
(vi) to shippers and to those charged with delivery and/or collection of purchased products;
(vii) to all those subjects (including public authorities) having access to data under regulatory or administrative measures;
(viii) to subjects other than those listed above, nominated responsibles or people in charge of personal data processing by the seller, for the execution of activities relating to the conclusion of the purchase contract in all cases when you purchase a product sold by a third party Seller on MarketPlace.
All personal data provided by users in connection with the registration on the site and/or purchase through the site are not subject to disclosure. The updated list of data processors and persons in charge of data processing is available at the offices of the owners.
6. data storage
The personal data will be kept only for the time necessary to ensure proper rendering of the services offered.
In the event of account termination at the initiative of the site user, the data herein will be stored for administrative purposes for a period not exceeding three months, without prejudice to any specific legal obligations on preservation of accounting documentation or for purposes of public security.
In any case, it is understood that personal data will be stored and processed for the purposes referred to in points (d) and "marketing" (f) "profiling", referred to in paragraph 2 above, for the period of time permitted by law and the requirements of the authority for the protection of Personal Data. At the end of that period may Dadasystem SOFTWARE D ask you to renew your consent to the processing of personal data for such purposes or make themselves anonymously and stored for statistical purposes only.
With reference to the use made by each third party vendor, as found in the presentation of the product selected by the user, in relation to the activities described in paragraph 2 (b)-conclusion of the contract and after-sales service-and (c)-administrative and accounting tasks, above, please note that your personal data will be kept for the time required by the provisions on record keeping and accounting and contractual in any case, for the time and for the purposes of public security.
7. Right of access to personal data
Pursuant to art. 7 of the Privacy Code, you are entitled to:
to) obtain confirmation of the existence or not of personal data and their communication in an intelligible form;
b) obtain for each of the controllers:
-an indication of the origin of personal data, the purposes and methods of processing, the logic applied in case of treatment effected with the aid of electronic instruments;
-indication of the identity of each of the controllers;
-information about the subjects or categories of subjects to whom the data may be communicated or who may become aware of them as appointed representative in the territory of the State, managers or agents;
-the updating, correction or integration of data concerning him;
-the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
-the attestation that the operations referred to in the foregoing points have been notified as also related to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves the use of means manifestly disproportionate to the protected right;
d) object, in whole or in part:
-for legitimate reasons, the processing of data concerning him/her, even if pertinent to the collection purpose;
-to the processing of personal data relating to him, provided for the purposes of commercial information or advertising or direct sales material or for carrying out market research or commercial communication.
The above rights may be exercised by making a request to the data controller, at the addresses indicated in paragraph 1 of this statement.
The data subject's right to object to the processing of personal data for the purposes of paragraph 2, lett. (d) (marketing) made through automated mode of contact (email) also extends to the traditional (mail), without prejudice to the possibility for the data subject to exercise this right in part, pursuant to art. 7, par. 4, letter. b) of the Privacy Code, which is opposing, for example, to only send promotional communications made via automated tools.
1 * "holder" means the natural person or legal person, public administration or any other institution, association or organization, also jointly with another data controller, decisions regarding the purposes and methods of processing of personal data and the means used, including the security profile;