Privacy Policy
With reference to the information art. 13 Legislative Decree 196/2003
1. Definitions and Data Controller
PORRINI MODA s.r.l. unipersonale
VAT number: 03092960123
Tax code: 03092960123
Via XXV Aprile 4/B
21023 Besozzo (VA)
email: info@porrini.store
tel: +390332770433
Personal data: all information provided by the interested party (as listed in the following Art. 2) as well as, if registered on the site www.porrini.store, navigation data (IP addresses, devices and programs used).
Processing: any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization , structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison, or interconnection, limitation , cancellation or destruction.
2. How to exercise the right of withdrawal
The Data Controller markets consumer goods online and, therefore, acquires, stores and uses the Personal Data of the Interested Parties in order to correctly fulfill the contractual obligations deriving from its activity.
In any case, the Data Controller acquires, stores and uses exclusively the following Personal Data:
- name and surname or denomination;
- residence and/or shipping address of the goods;
- e-mail address;
- number telephone number;
- Tax code and/or VAT number;
In any case, if the payment is made by credit/debit card, the relevant data is not communicated to the Data Controller but directly to the payment service manager.
Under no circumstances will the Data Controller request, store or process:
- sensitive and judicial data;
- credit card numbers or access credentials to the payment systems used by the customer.
The aforementioned personal data of the interested party are processed by the Company for the following purposes on the basis of the related legal bases:
- contractual purposes: execution of the contract of which the interested party is a party and use of the services offered by the Company;
- legal obligations and civil liability of the Company: fulfillment of the obligations established by national legislation and supranational, especially of an accounting and tax nature, as well as prevention of any form of civil liability on the part of the Company for the activity carried out (e.g., by way of example but not limited to, the Personal Data that can be used to contact the interested party are necessary if the Company decides to carry out a recall campaign for a product that is suspected to be defective);
- rights of the Owner: to ascertain, exercise or defend the rights of the Company in judicial or extrajudicial proceedings if necessary; < li>functioning of the site: the personal data of the interested party entered therein are necessary for its functioning and the use of the services offered by the Company through the same.
3. Data acquisition and storage methods
Personal data is acquired:
- directly to the interested party, by completing specific online forms or by telephone;
- not to the interested party, but through third parties (the so-called "Marketplaces" such as, for example, Amazon, eBay, ManoMano, etc.) who, as intermediaries in the sale, transmit them to the Data Controller
In the case of personal data not acquired from the interested party, but through third parties, the Data Controller will bring this information to the attention of the interested party via e-mail or suitable notice in the form attached to the goods shipped. The aforementioned information will be provided by the Data Controller at the latest within one month of obtaining the Personal Data or, if the latter are intended for communication with the Interested Party, at the latest at the time of the first communication with the same, or, if communication to another recipient is envisaged, no later than the first communication of the Personal Data.
The data thus acquired are stored electronically on servers made available to the Data Controller by IT service providers.
A complete and updated list of the appointed data processors can be obtained by contacting the Company via registered letter with return receipt to the addresses referred to in the Art. 1, attaching in this case a signed copy of an identity document.
4. Obligation to provide
The provision of personal data by the interested party is mandatory and necessary for the fulfillment of contractual obligations and for compliance with the mandatory rules of the law regarding fiscal, tax and accounting obligations.
In the event of refusal to provide data by the interested party, the Data Controller will not be able to accept any order or execute any contract.
The provision of personal data relating to the date of birth and generic title of the interested party is merely optional and possible. These data will be processed in an impersonal manner exclusively for internal statistical purposes.
5. Data retention period
The Personal Data of the interested party will be kept for the entire duration of the contract and, after termination, for the term referred to in the art. 2220 of the civil code for the purpose of fulfilling the relevant fiscal and tax obligations.
In the event of a judicial or extrajudicial dispute, the Personal Data will be retained for the entire duration of the same and until the deadlines for appeals are exhausted.
After the aforementioned deadlines have expired, the personal data of the interested party will be deleted, compatibly with the technical procedures established for this purpose.
6. Independent Data Controllers, Data Processors and Recipients of Personal Data
In addition to the Data Controller, the Personal Data of the Interested Party may be processed by external parties operating as independent Data Controllers such as, by way of example, companies that offer transport and shipping services for goods or pre- and post-sales assistance .
Furthermore, as in the case of the IT services referred to in Art. 3, the Personal Data may be processed, on behalf of the Company, by external parties authorized and designated as Personal Data Processors, to whom adequate operating instructions are given. A complete and updated list of the appointed Personal Data Processors can be obtained by contacting the Company via registered letter with return receipt to the addresses set out in Art. 1, attaching in this case a signed copy of an identity document.
Finally, the recipients of the interested party's personal data may be the Judicial or Administrative Authority to which they must be communicated for the fulfillment of specific legal obligations.
7. Rights of the interested party and complaint to the Supervisory Authority
The interested party has the right:
- to access the Personal Data concerning him;
- to obtain the rectification of such data or the limitation of the Processing concerning him;
- to object to the Processing;
- to obtain the deletion of personal data concerning him;
- to revoke consent at any time without prejudice to the lawfulness of the Data Processing based on the consent given before the revocation;
- li>
- to receive, if the Processing is based on consent or on the contract and is carried out with automated tools, in a structured format, commonly used and readable by automatic device, your Personal Data, as well as, if technically possible, to transmit them to another owner without impediments.
To exercise the aforementioned rights, the interested party can contact the Company via registered letter with return receipt to the addresses referred to in the Art. 1, attaching in this case a signed copy of an identity document.
The interested party also has the right to lodge a complaint with the competent Supervisory Authority in the Member State in which he habitually resides or works or in the State in which the alleged violation occurred.
If the interested party has registered on the site [WEB SITE URL], by accessing his/her account, he/she can view his/her personal data and/or rectify it.
In order to prevent fraud and/or allow the Judicial or Administrative Authority to prosecute the same, the Data Controller retains the history of the changes made as well as the origin of the connection (IP address).
8. Changes to the Privacy Policy
This Privacy Policy may be modified, also as a consequence of legislative or regulatory changes, technological developments and provision of new services or modification of those already provided. The user/visitor/customer is therefore invited to periodically consult the Privacy Policy of the Data Controller.
9. Security of Personal Data
The Data Controller has adopted specific security measures to prevent the loss of the interested party's personal data, illicit or incorrect use and unauthorized access. However, it is necessary for the interested party to use devices equipped with suitable tools for this purpose (such as, for example, updated antivirus and internet connection that guarantees the transmission of data through