INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to art. 13 EU Reg. 2016/679
Dear Customer,
Below we provide, pursuant to EU Regulation 2016/679, information on the processing of your personal data.
1. OWNER
The data controller is Vintage is better srl
Registered office: Via di monte verde 16 00152 Rome
E-mail: info@theauthenticvintage.com
2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
to. The personal data collected during registration on the site and in the subsequent phases are processed for the purposes indicated below according to the legal basis indicated below. The provision of such data is necessary for the execution of the requested service.
Purpose | Categories of data processed | Legal basis | Let's take an example |
Fulfillment of legal obligations | Personal data | Necessary to fulfill a legal obligation to which the data controller is subject (art. 6, 1, c) | For example, we need your data to issue the purchase invoice. |
Management of the contractual relationship or the requested service | Personal data | Necessary for the execution of the contract or the execution of pre-contractual measures (art. 6, 1, b) | For example, we need your data and your address to respond to your request, deliver your purchase or to manage any returns. |
Dispute management | Personal data | Necessary for the pursuit of the legitimate interest of the data controller or third parties (art. 6, 1, f) | For example, we need your details and address to deal with any complaints. |
Sending newsletters | Personal data | Necessary for the pursuit of the legitimate interest of the data controller or third parties (art. 6, 1, f) | We need your data and address to send you our newsletters, without prejudice to your right to object to this processing. |
b. Furthermore, some data will be processed for the following purposes, of optional and additional nature with respect to the execution of the requested service:
Purpose | Categories of data processed | Legal basis | Let's take an example |
Marketing and commercial information | Personal data | Consent (art. 6, 1, a) | For example, we need your email address to manage marketing campaigns. You can revoke your consent at any time. |
3. CATEGORIES OF RECIPIENTS
Within the scope of the purposes indicated above, the data collected may be communicated to the following subjects:
Recipient | Motivation |
Public bodies, bodies responsible for controls and checks, bodies assimilated to public bodies | Compliance with a legal obligation |
Banks and credit institutions Insurance companies Professionals, consultants or companies that work for the company Other organizations that provide services for society (e.g. IT services and shipping services) Parent, controlled or associated companies | Instrumental for the execution of the service |
4. DISSEMINATION OF DATA
The data will not be subject to dissemination.
5. DATA TRANSFER
The data controller does not intend to transfer personal data to a third country or to an international organisation.
6. DATA RETENTION
The personal data collected will be kept for the time necessary for the execution of the contract and for the further period prescribed by regulations having the force of law for the purposes referred to in point 2.a and for 2 years for the purposes referred to in point 2. b (unless consent is withdrawn).
7. RIGHTS OF THE INTERESTED PARTY
In relation to the data provided you can ask to exercise the following rights: access, cancellation, rectification, limitation of processing, opposition to processing, data portability, revocation of consent given when the processing is based on the consent itself.
If you believe that processing violates Regulation (EU) 2016/679 you can also lodge a complaint with the supervisory authority of the member state in which you reside, work or where the violation occurred.
To exercise your rights you can send a written request or email to the Owner's addresses indicated above (point 1).
8. AUTOMATED DECISION MAKING
The Owner does not adopt any automated decision-making process, including profiling.