CHORUSTYLE SRL., according to the Article 13 of the European Regulation n.2016 / 679 (hereinafter “GDPR”), provides you with the below information on the processing of personal data entered or collected on the site www.chorustyle.it (“Website “).
Data Controller and Data Protection Officer (DPO)
The data controller is CHORUSTYLE SRL., Via Frizzoni n. 17, 24121 Bergamo BG, email firstname.lastname@example.org (hereinafter, also “Company” or “Owner”).
Personal data processed
We collect the following categories of personal data:
- Common data: name and surname, gender, e-mail address and password, browsing data, shipping address, billing information.
Purposes of the processing, legal bases and conservation terms
a. Collection of navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data. This is information that is not collected to be associated with identified interested parties, but which could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good purpose, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
This data is used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.
The legal basis that legitimates the processing of personal data is the legitimate interest of the Data Controller; the data is deleted immediately after processing.
Cookies are data created by a server that are stored in text files on your computer’s hard disk and allow the website to be aware of your behavior.
The site uses only technical cookies, divided into:
Navigation or session cookies, which guarantee the normal navigation and use of the website (allowing, for example, to keep your preferences, for example to allow you not to have to re-type your username and password at every access to the site);
Cookie analytics, used exclusively to collect information, in aggregate form, on the number of users and how they visit the site, in order to be able to evaluate and improve its functioning. For example, they let you know which pages are the most and least visited, take into account the number of visitors and the time spent on the site by users. All information collected by these cookies is anonymous and not linked to the user’s personal data;
The site does not use profiling cookies.
The site contains third-party cookies, sent from sites or web servers other than ours, on which certain elements may reside (such as, for example, images, maps, sounds, specific links to pages from other domains) present on the site that he is visiting. In particular, the site contains Google Analytics cookies. The third-party cookies on the site are exclusively technical cookies.
You can oppose the registration of cookies on your hard disk by configuring the navigation browser (Internet Explorer, Mozilla Firefox, Safari etc.) in order to disable cookies. However, after this operation, some functions of the web pages may not be performed correctly.
c. Registration to the reserved area of the site for access to the online store
Although the access and browsing of the www.chorustyle.it site are free, some online services offered by the Company are accessible only after registration in the reserved area. In particular, registration is necessary in order to access the online store to purchase the Company’s products.
Registration in the reserved area consists of filling in an online form in which the user is required to indicate his personal data (name, surname, e-mail, sex) for the activation of authentication credentials (email + password) with which the interested party will subsequently access the areas and services of the Site reserved for registered users.
The legal basis of this treatment is the need to execute a request from the interested party or to fulfill contractual obligations. The data will be kept for ten years from the date of termination of the contractual relationship (for example, closing of the account by the user);
d. Provide assistance to the person concerned
The data is processed in order to satisfy a request for contact by the interested party, made by e-mail or telephone as per instructions provided in the “contacts” section of the site. In particular, the data is processed to allow the recognition of the interested party in response to specific requests regarding products or services provided by the Company.
The legal basis of this treatment is the need to execute a request from the interested party, also for the purpose of improving the service towards the user and responding to his expectations. The data will be kept for ten years from the date of collection;
e. Legal obligations
Per adempiere ad obblighi previsti da regolamenti e dalla normativa nazionale (leggi, regolamenti, anche di settore) e sovranazionale applicabile.
The legal basis of this treatment is the execution of legal obligations to which the Company is subject. The data will be stored until the legal obligations for which they are processed are exhausted;
f. Defense in court and extrajudicial debt recovery
The processing of data by the Data Controller may be finalized, if necessary, to ascertain, exercise or defend the rights of the Data Controller in court or to recover a claim against the data subject;
The legal basis of this treatment is the legitimate interest of the Company to defend itself in court against the interested party. In the case of litigation, the data is kept for the entire duration of the same, until the terms of the possibility of appeals are exhausted.
g. Direct marketing
As an example, sending, with automated methods of contact (such as text messages, e-mails, social networks, instant messaging apps, push notifications) and traditional (such as calls with operator and traditional mail), promotional and commercial communications relating to products / services offered by the Company, including newsletters / mailing lists, or reporting of corporate events, as well as surveying the degree of customer satisfaction, carrying out market surveys and statistical analysis.
The legal basis of this treatment is the consent of the interested party. The data will be kept until the consent is revoked.
Provision of data
The provision of data for the purposes referred to in the letters:
a) is mandatory;
b) is optional; failure to provide it could result in the failure or partial execution of certain functions of the web pages;
c) it is mandatory for registration to the site and use of the services accessible only through the reserved area; failure to provide data does not affect free browsing on the pages of the site that do not require registration;
d) it is obligatory to guarantee the reply to the interested party in response to requests *;
e) mandatory to allow the holder to fulfill obligations under applicable national regulations (laws, regulations, even in the sector) and supranational obligations;
f) mandatory to guarantee the legitimate interest of the holder to defend himself in court and / or to recover a claim against the interested party *;
g) is optional. Failure to provide such data will not entail any consequence except the impossibility of receiving promotions, discounts and commercial communications.
Categories of recipients of personal data
Your Personal Data will be processed by employees and / or collaborators of the Data Controller who have received adequate operational instructions and who have been expressly authorized to process them.
Your data may be disclosed to subjects, autonomous data controllers, such as, for example:
* Authorities and Supervisory and Control Bodies and in general subjects, public or private, entitled to request data;
* Lawyers, accountants, auditors;
* Other companies for the purposes indicated above.
The data may also be processed, on behalf of the Company, by external parties designated as external processors, such as, for example:
* Companies that offer e-mail services for marketing purposes;
* Companies that maintain the website;
* Companies that offer support in carrying out market studies.
In relation to the processing of personal data carried out by the Data Controller, you can request the Data Controller access to data concerning him, their cancellation, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by the ‘art. 18 GDPR, as well as the opposition to the processing, for reasons connected to your particular situation, in the hypotheses of legitimate interest of the owner.
In the event that the processing is based on consent, you have the right to revoke the consent given at any time.
In the event that the processing is based on consent or the contract and is carried out with automated tools, you have the right to receive your data in a structured format, commonly used and readable by an automatic device, as well as, if technically feasible, of transmit them to another holder without impediment.
At any time, you may lodge a complaint with the Guarantor for the Protection of Personal Data, as well as resort to other means of protection provided for by the applicable legislation.
To exercise your rights you can contact the Data Controller by sending a written notice to the address indicated above or an e-mail to email@example.com