INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR DATA COLLECTED FROM OTHER SOURCES
FOR TREATMENT: Customer Marketing – cookiess – Site NURAH SRL
Pursuant to Art. 14 of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data
NURAH SRL (hereinafter the “Company” or the “Owner”), with registered office at VIA FELICINA 340132 BOLOGNA (BO), ITALY and P. IVA 04161061207, as the data controller, informs you, pursuant to Art. 13 of the European Data Protection Regulation 679/2016 (“GDPR”), regarding the processing of your personal data that will be carried out by the writer.
Type of data processed
The Company is the controller of the personal data communicated by the User to the writer and include:
Last name, first name, email
Business Name/Surname and First Name, Tax Code and other identification numbers
Purpose of processing
The processing of Data is carried out by the Company in the performance of its activities. Specifically, the Data provided by the Data Subjects will be processed, with computer and non-computer tools, for the following purposes:
Business , accounting and tax obligations
– The lawfulness criterion for which processing is made possible is: The processing is necessary to fulfill a legal obligation to which the data controller is subject
– The basis of which is reflected in a Reference Standard: Union Standard
Marketing (market analysis and surveys)
– The lawfulness criterion for which processing is made possible is: The data subject must consent to the processing of his or her personal data for the specific purpose
– The basis of which is reflected in a Reference Standard: Union Standard
Direct Email Marketing Campaigns
– The lawfulness criterion for which processing is made possible is: The data subject must consent to the processing of his or her personal data for the specific purpose
– The basis of which is reflected in a Reference Standard: Union Standard
Customer information of new services/products
– The lawfulness criterion for which processing is made possible is: The data subject must consent to the processing of his or her personal data for the specific purpose
– The basis of which is reflected in a Reference Standard: Union Standard
Customer management
– The lawfulness criterion for which processing is made possible is: The data subject must consent to the processing of his or her personal data for the specific purpose
– The basis of which is reflected in a Reference Standard: Union Standard
– Additional notes that may describe the purpose: to enable users to register on the Site; to provide the services available through the Site (e.g. management of the registration and account access process, account management); to enable order processing, fulfillment, billing and delivery of products or services ordered by users on the Site; for the technical management of the Site and related operational functions (including logistics), including troubleshooting any technical problems, statistical analysis, testing and research; for the purpose of preventing or deterring fraudulent activities or misuse that may damage the Site or compromise the security of operations; to comply with obligations required by law, regulation or EU legislation and for the exercise of its rights in court. Fulfilling user requests (e.g., Handling inquiries); Sending users operational communications related to service or product delivery, sales or post-sales assistance.
The data processed were not collected from the data subject
Mode of Treatment
The Data will be processed by the Company with electronic and manual systems in accordance with the principles of fairness, lawfulness and transparency provided for in the applicable legislation on the protection of personal data and protecting the confidentiality of the Data Subject through technical and organizational security measures to ensure an adequate level of security.
Data retention
The Data provided by the Data Subject will be processed for a duration:
Start date: 04/02/2024
Criterion duration: predetermined period
Duration: 1 Year(s)
5 Interested
Customers or Users
Potential customers
Exceptions Art. 9/10
Communication, dissemination and transfer of Data
The Data will be processed, to the extent necessary, by authorized, properly educated and trained personnel of the Data Controller as well as by personnel of third parties who provide services to the Data Controller and perform Data processing on behalf of and at the instruction of the Data Controller as data processors. In case of communication to third parties, the recipients may be:
Categories:
– Recipient: Customers, carriers, shippers, agents, software users, professionals to whom we address to fulfill the obligations.
Target audience:
No specific recipients to whom the data may be disclosed have been defined
More generally, in the performance of its ordinary business activities, the Data may be communicated to subjects carrying out control, audit and certification activities of the activities carried out by the Data Controller, consultants and freelancers in the context of tax assistance services, judicial and in the case of corporate transactions for which it is necessary to evaluate the company’s assets, entities and public administrations, as well as to parties entitled by law to receive such information, Italian and foreign judicial authorities and other public authorities, for purposes related to the fulfillment of legal obligations, or for the fulfillment of obligations assumed and arising from the contractual relationship, including for the need for defense in court.
Data collected will not be transferred to countries outside the EU
Profiling and/or automated processing activities
The processing of your data may involve profiling or automatic processing, according to these characteristics:
Condition: explicit consent of the person concerned
Description and logic used: Communicate, optimize, and serve advertisements based on a user’s past use of the site
Reference Standard: Union Standard
Specifically then, we inform you that for profiling or automatic processing activity:
The processing is carried out in accordance with the criteria set forth in the European Data Protection Regulation, Reg. 2016/679/EU, in force since May 25, 2018 (hereinafter G.D.P.R.). According to the indicated regulations, the processing must be based on the principles of fairness, lawfulness and transparency and the protection of the confidentiality and rights of the data subjects. The profiling services used by the company NURAH SRL allows it to communicate, optimize, and serve advertisements based on the user’s past use of the site. This activity is carried out by tracking usage data and the use of Cookies, information that is transferred to partners to which the remarketing and behavioral targeting activity is linked. For this purpose, the Regulations cited above require the express consent of the data subject. The data controller may not, under any circumstances, install profiling cookies without the data subject having been able, through affirmative action, to consent to this type of processing. Therefore, if you do not give consent, you will not be profiled.
Additional subjects related to the treatment
Owner(s) and EU representative(s), if any:
There is no representative in EU for the holder
Co-owner(s):
There is no co-owner for this treatment(s)
Responsible person(s):
– First and Last Name: CHIARA BARANI
– Tax_code: BRNCHR77T49H223B
DPO:
There is no provision for the appointment of a DPO/RDP for the processing(s) in question
What are the rights of the Data Subject
The Data Subject may exercise, in connection with the data processing described herein, the rights provided by the GDPR (Articles 15-21), including:
Receive confirmation of the existence of the Data and access to its content (access rights);
Update, modify and/or correct the Data (right of rectification);
Request deletion or restriction of the processing of Data processed in violation of the law including Data that need not be kept in relation to the purposes for which the Data were collected or otherwise processed (right to be forgotten and right to limitation);
Object to the processing (right to object);
Propose a complaint to the Supervisory Authority (Data Protection Authority www.garanteprivacy.it) in case of violation of personal data protection regulations;
receive an electronic copy of the Data concerning him or her as a Data Subject, when such Data has been rendered in the context of the contract, and request that such Data be transmitted to another data controller (right to data portability).
To exercise these rights, the Data Subject may contact the Data Controller by sending a communication to:
– Contact Type: E-mail
– Address:info@nurah-shop.com
When contacting us, the Respondent should be sure to include his or her name, email/postal address and/or phone number(s) to be sure that his or her request can be handled properly.