This page describes the methods of managing the information contained in the website www.everydayforfuture.allmyfy.com, with reference to the processing of personal data of users who consult it or who access the e-commerce service through registration and purchase of products online.
This is information provided pursuant to art. 13 European Regulation n. 679/2016 (hereinafter “GDPR”) and also pursuant to Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (hereinafter “Privacy Code”), to those who access the site.
The information is provided only for the site in question and not for other websites that may be consulted by the user via links.
THE DATA CONTROLLER AND THE DPO
Following consultation of this site, data relating to identified or identifiable persons may be processed. The “owner” of their processing is ALLMYFY S.R.L. with registered office in Via Mattei 14, 20005 Pogliano Milanese (MI), VAT number 10397480962, REA number MI 2528208, share capital €10,000.00 (hereinafter, the “Company”). The Company has appointed its own Data Protection Officer (DPO), in the person of the lawyer. Michela Maggi, pec address michela.maggi@milano.pecavvocati.it.
PLACE OF DATA PROCESSING AND PERSONS RESPONSIBLE FOR PROCESSING
The processing connected to the web services of this site takes place at the Company’s headquarters and on servers located within the European Union and is handled only by employees and collaborators authorized to process, as persons authorized to process. The data may also be processed by anyone in charge of occasional maintenance or management operations of the website, as well as by shippers, legal and accounting consultants, as well as by credit institutions and similar: these subjects will operate as independent data controllers or data controllers. .
TYPES OF DATA PROCESSED
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, data on web contacts currently do not persist for more than seven days.
Cookies and other tracking tools
See the extended information on cookies
Data relating to CVs sent spontaneously to the dedicated address
The personal data contained in the curricula sent to the addresses indicated on the site will be used solely for the purposes of evaluating the candidates’ profiles and selecting them. If the selection is unsuccessful, they will be canceled after seven days. We may also use your data to respond to any requests you send to the Company.
Any sending of sensitive data (relating, in particular, to racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or union, as well as personal data suitable for revealing the state of health and sexual life) involves the immediate cancellation of the data in the absence of a written declaration of consent of the interested party to their processing by the Company. Please do not send us any document containing your personal data if you do not wish your data to be processed in the manner and for the purposes described in this document.
Data provided voluntarily by the user or otherwise collected by the Data Controller
These are the data of the subjects who access the web page and the related registration or purchase form in order to comply with the conditions of sale and delivery (this is name, surname, date of birth, gender, VAT number in the case of a company individual or other type of company, e-mail address, billing and shipping address of the purchased goods, telephone number, tax code, choice of payment method and data relating to the same) Buyers are required to provide true, correct and updated in order to create and manage the contractual relationship with the Data Controller and to proceed correctly with purchases. The user acknowledges that if he does not provide true, correct and updated personal data, the Data Controller will be unable to provide his services correctly.
METHOD AND PURPOSE OF THE PROCESSING
Personal data will eventually be processed by the Company in paper format or with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Apart from what is specified for navigation data and cookies which are regulated in the extended information, the personal data provided by users are processed for the following purposes:
1) for browsing the website;
2) to respond to any user requests, also in relation to CVs sent;
3) to conclude purchase contracts for products online through the e-commerce platform and to manage all phases of sales, shipping, payment, invoicing, delivery and anything else necessary for this purpose.
4) for judicial or extrajudicial defense needs.
5) to contact those who have already made purchases on this site and are already customers of the Company to propose products similar to those already purchased, exclusively via e-mail.
6) subject to the user’s consent, the user’s name, surname, telephone number, email address and postal address will be used for marketing purposes or to send the user newsletters and commercial offers relating to the products marketed by the Owner or of third parties, even if not similar to those already purchased by the user, or for invitations to participate in events or competitions, market analyses, via email, sms, mms, telephone, traditional mail.
7) subject to the user’s consent, data during registration such as the user’s name, surname and e-mail may be used for profiling activities or to analyze preferences, habits, behaviors and interests deduced, for example, from online clicks on articles/sections of the site and send targeted offers to the user. The processing of your personal data for profiling purposes will take place, in case of consent, with data processing tools which, following cross-referencing, will create your commercial and behavioral profile on the web. This data processing tool relates the data collected during your browsing on the Sites through the use of first and third party profiling cookies accepted by you with the data collected through your registration using the appropriate forms. Furthermore, such data and/or information will be associated with any and/or additional data and/or information already in our possession following your subscription to our services. This activity may be carried out directly by the Data Controller or by subjects who will operate on behalf of the Data Controller and who will be appointed as data controllers (including, by way of example and not limited to: Facebook and Google Analytics. These subjects also operate as independent Data Controllers of processing, according to the policies and appointments referred to in the following links: https://www.facebook.com/legal/terms/dataprocessing; https://policies.google.com/privacy?hl=it). Since these are fully or partially automated decision-making processes, you have the right to object to these processes according to the methods set out in this document. We therefore specify that this processing will involve the transfer of data outside the European Union
PROVISION OF DATA
Apart from what is specified for navigation data, cookies are regulated as in the extended information. The provision of data for the purposes of sending requests for information and CVs is optional, but failure to provide them will make it impossible for the Data Controller to process the requests received and examine the CVs. The provision of data for the purchase of products is necessary and failure to provide it will make it impossible for the Data Controller to correctly conclude the contract.
The provision of data for the purposes referred to in n. 5) above is optional and the user can, at any time, object to the processing, without prejudice to the purchasing or browsing purposes. The provision for the marketing purposes referred to in n. 6) above is optional and failure to provide or consent will prevent the sending of advertising materials or the possibility of the Owner contacting the user through the means indicated for the purposes of invitations to events and competitions, sales and market analysis, without prejudice to the purposes of purchasing or browsing. The provision of data for profiling purposes referred to in n. 7) is optional and failure to provide or consent will prevent the activity of analyzing preferences and sending targeted advertising to the user, without prejudice to purchasing and browsing activities.
LEGAL BASIS OF THE PROCESSING
The legal basis of the processing for browsing the site referred to in no. 1) it is the legitimate interest of the owner of the Company to offer the possibility of accessing the site and allowing access to navigation services. The legal basis for the processing of data relating to requests received via the dedicated e-mail address and for the receipt of CVs referred to in no. 2) it is the legitimate interest of the Data Controller in evaluating the candidate and possibly responding to him. The legal basis of the processing for the purpose of buying/selling products via the e-commerce platform referred to in no. 3) is the execution of the contract. The legal basis for the purpose of judicial and extrajudicial defense referred to in n. 4) it is the legitimate interest of the owner in taking action or defending himself in court. The legal basis for the purpose referred to in n. 5) it is the legitimate interest of the owner in sending communications about products and services similar to those already purchased (so-called soft-spam). The legal basis for purposes no. 6) and n. 7) is the consent of the interested party.
STORAGE TIMES
For purpose no. 1) the data is stored for the time specified in the cookie policy. For purpose no. 2) the data relating to CVs are deleted after seven days, unless contact is established which will be subject to subsequent information. For the purposes referred to in n. 3) the data retention time will be for a maximum of 10 years from the termination of the contract in compliance with the legal prescription, while for purpose no. 4) may last longer than ten years from the termination of the contract and will follow the timescales of justice or the settlement of any disputes or complaints. The data retention time for the purpose of direct sales and commercial offers to customers referred to in no. 5) corresponds to the time in which the relationship between the Company and the customer exists and cannot last longer than five years from the termination of the contract. The data retention time for marketing purposes and commercial offers to customers referred to in no. 6) and profiling referred to in n. 7) will be two years, from the date of granting consent by the interested party.
RECIPIENTS OF THE DATA
The data may be processed by external parties operating as independent data controllers such as, by way of example, supervisory and control authorities and bodies and, in general, subjects, including private ones, entitled to request the data, public authorities who express request to the owner for administrative or institutional purposes, in accordance with the provisions of current national and European legislation, as well as persons, companies, associations or professional firms that provide assistance and consultancy activities.
The data may also be processed, on behalf of the owner, by external parties designated as Data Controllers pursuant to art. 28 of the GDPR, who are given adequate operational instructions. These subjects are essentially included in the following categories:
to. companies that offer website and information system maintenance services;
b. companies that offer support in carrying out market studies;
c. companies that carry out management and maintenance services for the Company’s database;
d. companies that offer email sending services;
And. company that offers marketing automation platform management services;
Your personal data may be processed, in the event of your explicit consent being given for marketing and profiling purposes, by third parties to whom the data are communicated.
TRANSFER OF DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION
The data may be transferred abroad to non-European countries, and in particular to the United States, only on the basis of one of the bases provided for in Chapter V of the GDPR and, specifically, following the adoption of the standard contractual clauses (Standard Contractual Clauses). approved by the European Commission pursuant to art. 46, par. 2, letter. c) and d) of the GDPR or of the binding rules for the company referred to in the art. 47 of the GDPR or, in its absence, by virtue of one of the derogating measures referred to in the art. 49 of the GDPR.
RIGHTS OF INTERESTED PARTIES
In relation to the aforementioned data processing, you may exercise the rights referred to in the art. 13 GDPR as better expressed in the articles. 15-16-17-18-20-21 and 22 GDPR and specifically you will have the right to:
- obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
- ask the Data Controller for access to personal data, in addition to the right to data portability;
- obtain the updating and rectification or, when interested, the integration of the data;
or object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication. - obtain the cancellation and transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
- revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
or lodge a complaint with a supervisory authority (Guarantor for the protection of personal data); - obtain certification that any rectification or cancellation operations or limitation of processing have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment proves impossible or involves a use of means that is manifestly disproportionate to the protected right.
In any case, you can exercise your rights by sending a request to the following email info@allmyfy.com
