Privacy Policy
Personal data processing policy
Dear Visitor, following the consultation of this website data relevant to identified or identifiable natural persons can be processed.
With reference to this processing, and also pursuant to articles 13 and 14 of the European General Data Protection Regulation (Regulation EU 2016/679 – GDPR), to Legislative Decree no. 193/2003 and to Legislative Decree no. 101/2018, the following information are expressed, whose validity is not extended to possible other external websites consulted by the user through links present on this website.
By continuing to browse, and by adhering to the service features contained in the various sections of the website (subscription to our newsletter, filling out the shop registration form, filling out of the checkout form at the moment of purchase, filling out of the form to request information), it is accepted that these general information on processing are known, as well as potential specific information on processing with different and specific purposes, and the user expresses their own approval for the processing.
Please note that the consent is only valid if it origintes from an adult or a minor older than 14 years old (art. 8, clauses 1 and 2 of GDPR, and Legislative Decree no. 101/2018).
Data controller
The Data Controller is Cooperativa Sociale QUID (hereinafter QUID), based in Via della Consortia, 10/D – 37127 Verona represented by the Legal Representative, mail [email protected] tel +39 045 83416860, fax +39 045 8532196, VAT number 04179470234.
Types of processed data
Pursuant to the purposes shown below, the following categories of data will be subject to processing:
Dati forniti attraverso i form di registrazione allo shop e di check out al momento dell’acquisto
- Dati identificativi: nome, cognome, indirizzo, sesso e data di nascita;
- Dati di contatto: numero di telefono, mail;
- Dati relativi all’interesse per un prodotto o servizio offerto da QUID.
Browsing Data
- IT systems and software procedures in charge of the functioning of this website obtain, during their normal activity, some personal data whose transmission is implicit in the use of Internet communication protocols. These are information that are not collected to be associated to identified interested users, but by their own nature may be, through elaborations and associations with data owned by third parties, allow the identification of users. This type of data includes, for example, IP addresses or domain names of computers or other devices used by users while connecting to the website, addresses in URI (Uniform Resource Identifier) marking of requested resources, the time of the request, the used method to submit the request to the server, the size of the obtained file, the numerical code showing the status of the server reply (successful, error, etc.) and other parameters concerning the operative system and the IT environment of the user.
Cookies
- Si veda apposita sezione informativa al seguente link: Cookies Policy
Data directly provided by the user
- The optional, explicit and voluntary act of sending an e-mail message to the e-mail addressed shown on this website implies the subsequent acquisition of the sender’s address, necessary to answer to their requests, as well as other possible personal data present in the mail. Specific summary reports are also contained or displayed in the website sections designated for particular services by demand and, if needed, can undergo the consent of the interested user (for example, for the newsletter subscription).
Processing purposes and facultative bestowing of data
Apart from what has been specified regarding browsing data and technical cookies, users are free to bestow their personal data through the use of specific forms or questionnaires present on the website to subscibe to the newsletter, to the shop and to checkout at the moment of purchase, to request informative material or other communications and, in general, for the purposes reported in the relative and specific reports.
The lack of bestowal can entail the impossibility to obtain what was requested.
The company is committed to treat data complying with the principle of “minimization”, that is obtaining and processing data limited to what is necessary for the following purposes :
a) Dati relativi al form di checkout al momento dell’acquisto, sono trattati al fine di espletare le attività amministrative e logistiche correlate alla fornitura di quanto acquistato (esecuzione del contratto);
b) Data concerning the shop registration form are processed to DATO MANCANTE. The bestowal of these data is optional and does not preclude in any way the possibility to purchase our products and the browsing inside the website;
c) Data concerning the subscription to the newsletter are processed to DATO MANCANTE. The bestowal of these data is optional and does not preclude in any way the possibility to purchase our products and the browsing inside the website;
d) direct marketing by QUID: to receive communications, newsletters, informative material, to measure the degree of satisfaction, promotional, commercial and advertising material or regarding events and initiatives, market researches or other sample research and direct selling, via automatized media, electronic mail, SMS (Short Message Service) or of other types, as well as via telephone calls through phone operators and ordinary post. In order to measure and eventually improve the results of communications, the Owner uses newsletter and promotional communications mailing services with reports. Thanks to reports the Owner will get to know, for example: the number of readers, of openings, of unique “clicks” and of clicks; devices and operative systems used to read the communication; the detailed activities of each single user; the detail of sent, of delivered and undelivered, of forwarded e-mails; reports are used to measure and eventually improve the results of communications;
e) profiling actions by QUID: in order to improve the offer of products/services, to allow the elboration of its profile and to analyze the habits and consumer behaviour, to improve the commercial offer and the available services. These analyses consiste also of an electronic elaboration (per geographical area, activity or profesion, age, etc.) of the Customer’s data to identify its preferences, behaviours and interests concerning used products and services.
Please also note that:
- relating to the purposes referred to in point a), the processing may be carried out even without your consent because it is necessary to execute the contractual measures you requested (art. 6.1 lett. b) of the Regulation);
- relating to the purposes referred to in points b), c), d), e) f) g) the processing will be carried out subject to the acquisition of your consent (art. 6.1 lett. a) of the Regulation).
The bestowing of data for the purposes referred to in point a) is optional but necessary. The potential lack of bestowal in relation to this purpose can entail the impossibility to supply what was requested.
The bestowal and the consent to the processing for the purposes referred to in points b), c), d), e) f) g) is optional and the potential refusal does not entail any negative consequence regarding purposes referred to in point a)
Data Management
Our Company, as data controller, and each one of the potential external Managers appointed in accordance with art. 28 of the Regulation, will manage and archive with automatized and/or hardcopy tools the personal data collected though the use of the website and of its various features activated by demand, for the time strictly necessary to obtain the purposes they were collected for or voluntarily bestowed by the user.
Specific safety measures, as provided for by art. 32 of the Regulation (EU) 2016/679, are observed in order to prevent data loss, illecit or incorrect uses and unauthorized accesses. Data are managed only by personnel authorized by the data controller; if necessary, personal data connected to newsletter services can be managed by the personnel of the society/consultant that handle the technical maintenance of the website, MailChimp appointed as the external data processor in accordance with art. 28 of Regulation 679.
Hosting and data archiving is carried out on platforms located inside the European Union. In no case whatsoever data will be subjected to diffusion.
In nessun caso i dati saranno oggetto di diffusione.
Trasferimento dei dati personali
I suoi dati non saranno trasferiti in Paesi terzi non appartenenti all’Unione Europea.
Categorie di destinatari
I Suoi dati personali potranno essere comunicati, in stretta relazione alle finalità sopra indicate, ai seguenti soggetti o categorie di soggetti:
a) società partners contrattualmente legate aQUID per loro finalità di marketing e/o profilazione, previa acquisizione del Suo consenso;
b) soggetti che forniscono servizi per la gestione del sistema informativo usato daQUID e delle reti di telecomunicazioni (ivi compresa la posta elettronica);
c) soggetti che gestiscono i servizi di logistica e di trasporto utilizzate da QUID per consegnare la merce acquistata;
d) consulenti aziendali;
e) studi o società nell’ambito di rapporti di assistenza e consulenza;
f) call center per customer care;
g) autorità competenti per adempimenti di obblighi di legge.
La informiamo inoltre che i soggetti di cui alla lettera a) tratteranno i Suoi dati in qualità di Titolari del Trattamento. In relazione alle categorie di soggetti di cui alle lettere b), c), d), e), f), invece, il Titolare del Trattamento si impegna ad affidarsi esclusivamente a soggetti che prestino garanzie adeguate circa la protezione dei dati, e provvederà a nominarli Responsabili del Trattamento ex art. 28 del Regolamento.
L’elenco dei Responsabili del Trattamento è disponibile in azienda e potrà prenderne visione previa richiesta al Titolare del Trattamento. I Suoi dati, inoltre, verranno trattati, esclusivamente per le finalità di cui sopra, da parte del personale aziendale dipendente e/o collaboratore, appositamente autorizzato e istruito dal Titolare ai sensi dell’art. 29 del Regolamento.
I Suoi dati personali non saranno oggetto di diffusione, salvo qualora richiesto da una norma di legge o di regolamento o dalla normativa comunitaria.
Periodo di conservazione
Categoria: Dati identificativi – Dati di contatto – Dati relativi al contratto di vendita/servizi
Conservazione: 10 anni a partire dal momento della acquisizione dei dati.
Normativa: Art. 5.1 lett. e) Reg. UE 2016/679 – art. 2946 codice civile sulla prescrizione ordinaria – art. 43 del D.P.R. 600/73.
Diritti dell’interessato
In ogni momento, Lei potrà esercitare ai sensi degli articoli da 15 a 22 del GDPR, il diritto di:
a) chiedere l’accesso ai dati personali ex art. 15 del GDPR;
b) ottenere la rettifica dei dati personali inesatti ex art. 16 del GDPR;
c) ottenere la cancellazione dei dati nei casi e nei limiti di cui all’art. 17 del GDPR;
d) ottenere la limitazione del trattamento nelle ipotesi previste dall’art. 18 del GDPR;
e) revocare in ogni momento il consenso es art. 13 comma 2 lettera c) del GDPR;
f) proporre reclamo all’Autorità di Controllo secondo le modalità reperibili al sito www.garanteprivacy.it.;
Lei potrà inoltre opporsi al trattamento di dati trattati per un legittimo interesse del titolare ex art. 21 del GDPR.
Esercizio dei diritti
In ogni momento Lei potrà esercitare i Suoi diritti con richiesta scritta inviata all’indirizzo di posta elettronica privacy@progettoquid.it o accedendo al Modulo reperibile all’indirizzo www.progettoquid.it / oppure scrivendo all’indirizzo di posta ordinaria di QUID sita Via Della Consortia, 10D – 37127 Verona; il nostro ufficio privacy esaminerà quindi il suo reclamo e lavorerà con lei per risolvere il problema.
Se ritiene che i suoi dati personali non siano stati gestiti in modo appropriato secondo la legge, può contattare l’Autorità Garante per la Protezione dei dati personali seguendo le istruzioni reperibili all’indirizzo internet www.garanteprivacy.it