Privacy | STIMM

INFORMATION ON THE PROCESSING OF CUSTOMERS' PERSONAL DATA

PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”)

DATA CONTROLLER AND JOINT DATA CONTROLLER

Road Group Spa (OWNER)
Via Conegliano 35/3
31053 Pieve di Soligo (TV)
CF/P.IVA 04560140263,
tel. 0438 840301
email privacy@stimm.com

STIMM Srl (JOINT OWNER)
Via Conegliano 35/3
31053 Pieve di Soligo (TV)
CF/P.IVA 00625170261,
tel. 0438 840301
email privacy@stimm.com

(both referred to as “Companies”).

PERSONAL DATA PROCESSED

name, surname, email, password, gender, shipping data, billing data, date of birth, telephone contact, products purchased

PURPOSE OF THE PROCESSING

Purposes related to the establishment and execution of the registration made by the user.

LEGAL BASIS FOR THE PROCESSING

Execution of your request via a specific form on the Internet.

DATA RETENTION PERIOD

For the entire duration of the user's registration on the STIMM site and 36 months from cancellation.
In the event of legal disputes, for the entire duration of the same, until the terms for the exercise of appeal actions have expired.
The place of data storage is the Italian Republic

PURPOSE OF THE PROCESSING

Comply with obligations set forth by regulations and by applicable national and supranational legislation.

LEGAL BASIS FOR THE PROCESSING

Need to fulfill legal obligations

DATA RETENTION PERIOD

PERSONAL DATA PROCESSED

If necessary, to ascertain, exercise or defend the rights of the Data Controller in court

LEGAL BASIS FOR THE PROCESSING

Legitimate interest

DATA RETENTION PERIOD

PERSONAL DATA PROCESSED

Out-of-court debt collection

LEGAL BASIS FOR THE PROCESSING

Legitimate interest

DATA RETENTION PERIOD

PURPOSE OF THE PROCESSING

Marketing purposes: for example, sending - via automated contact methods (such as SMS, MMS and e-mail) and traditional methods (such as telephone calls with an operator and traditional mail) - promotional and commercial communications relating to services/products offered by the Company or reporting of company events, as well as carrying out market research and statistical analyses

LEGAL BASIS FOR THE PROCESSING

Consent (optional and revocable at any time).

DATA RETENTION PERIOD

For the entire duration of the user's registration on the STIMM site and 36 months from cancellation, unless expressly revoked in advance by the user

The place of data storage is the Italian Republic and the USA

PURPOSE OF THE PROCESSING

Profiling purposes: analysis of your preferences, habits, behaviors or interests in order to send you personalized commercial communications

LEGAL BASIS FOR THE PROCESSING

Consent (optional and revocable at any time).

DATA RETENTION PERIOD

For the entire duration of the user's registration on the STIMM site and 36 months from cancellation, unless expressly revoked in advance by the user

The place of data storage is the Italian Republic

After the above-mentioned retention periods have elapsed, the Data will be destroyed, deleted or made anonymous, consistent with the technical deletion and backup procedures.

MANDATORY DATA PROVISION

The provision of data is mandatory for the conclusion of the contract/assignment, therefore the failure, partial or incorrect provision of such Data makes it impossible to conclude the same.

DATA RECIPIENTS

The data may be processed by external parties operating as data controllers such as, for example:

a. Supervisory and control authorities and bodies;
b. Suppliers;
c. Data Controllers (accountant, labor consultant, system administrator, software house that manages data and software development);
d. Law firms.

The data may also be processed, on behalf of the Company, by external parties designated as responsible, who are given adequate operating instructions. These parties are essentially included in the following categories:

a. companies that offer email sending services;
b. companies that offer website maintenance services;
c. companies that offer support in carrying out market research.

SUBJECTS AUTHORIZED TO PROCESS

The data may be processed by employees and collaborators of the company functions responsible for pursuing the purposes indicated above, who have been expressly authorised to process them and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION

The data may be transferred abroad to non-European countries, and in particular to the USA, following the signing of the standard contractual clauses (Standard Contractual Clauses) adopted/approved by the European Commission pursuant to art. 46, 2, letter c) and d)”

RIGHTS OF THE INTERESTED PARTY - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company via email at privacy@stimm.com, interested parties may ask the owner for access to their data, their deletion, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as opposition to processing in the cases of legitimate interest of the owner.

Furthermore, the interested parties, in the event that the processing is based on consent or on the contract and is carried out with automated tools, have the right to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another owner without impediments.

Interested parties have the right to withdraw their consent at any time for marketing and/or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing. The possibility remains for the interested party who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, to express his/her opposition only to receiving communications through automated methods.

Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work or in the State in which the alleged infringement occurred.

Last updated: May 9, 2018