HOLDER OF THE TREATMENT
Following consultation of the sites listed above, data relating to identified or identifiable natural persons may be processed.
The data controller is the company Surridi s.r.l. (VAT Number 03768810404) with headquarters in Via Manzoni, 10 / a, 47122 Forlì (FC),
DATA PROTECTION MANAGER
Surridi s.r.l. does not require the figure of the Data Protection Manager pursuant to art. 37 of the EU Regulation 679/2016.
PURPOSE, LEGAL BASE AND OBLIGATORY OR OPTIONAL NATURE OF THE TREATMENT
The Personal Data supplied through the Website will be processed by Surridi s.r.l. for the following purposes:
a) registration on the site https://www.rovshop.it;
b) provision of the online purchase service, relative provision and execution of the service
c) management of purchase orders of products, including the response to any requests for information and / or assistance regarding these orders
d) subscription to the newsletter service;
e) fulfilment of a legal obligation to which Surridi s.r.l. it is subject;
(f) to ascertain, exercise or defend a right in court or whenever the courts exercise their judicial functions;
g) statistical analysis of anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the Website, measuring traffic and evaluating usability and interest
h) sending commercial or promotional communication from Surridi s.r.l.,
i) individual or aggregate profiling activities and market requests aimed, for example, on the analysis of consumption habits and choices, on statistical processing of the same or on the assessment of the degree of satisfaction with the proposed products
The legal basis for processing your personal data is the execution of a contract (online purchase) or a service (newsletter) for the purposes referred to in points a), b) c) d) that do not require consent under of Applicable Regulations. The purpose referred to in points e) and f) represents a legitimate processing of Personal Data pursuant to the Applicable Law as the processing is actually necessary to fulfill a legal obligation to which Surridi s.r.l. is subject or to exercise his right to defense in court. The legal basis of the processing of personal data for the purposes referred to in points h) and i) is the consent of the person concerned. Consent is not, however, necessary for the processing of data in anonymous form for the purposes indicated in letter g).
The provision of your Personal Data for the purposes referred to in points a), b), c) is optional, but their eventual withdrawal to provide it could make it impossible to provide the service, make purchases online and give feedback to a request or fulfill a legal obligation to which Surridi srl could be subject.
The provision of Personal Data for the purposes referred to in point h) and i) is optional and requires express consent. The withdrawal of consent does not affect the provision of the product purchase service and to receive information on the products
DATA OF MINORS OF 16 YEARS
Children under 16 cannot provide personal data for the purposes indicated above. The holder will not be in any way responsible for any false statements that should be provided by the minor and, in any case, if he ascertains the falsity of the statements, he will immediately delete any personal data of any material acquired. The Owner will facilitate, to the merchant the parental authority or the legal guardian, the requests concerning the personal data of the minors.
TYPES OF DATA PROCESSED AND PURPOSE OF THE TREATMENT
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, addresses in URI / URL notation (Uniform Resource Identifier / Locator) of the requested resources, the time of the request, the method used in the submit the request to the server, the file size obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
This data, necessary for the use of web services, are also processed for the purpose of:
obtaining statistical information on the use of services (most visited pages, number of visitors per hour or daily time frame, geographical areas of origin, etc.);
check the correct operation of the services offered.
The navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need to establish criminal offenses by the judicial authorities).
Data communicated by the user
The optional, explicit and voluntary sending of messages to the Surridi srl contact addresses, as well as the completion and submission of the forms on the https://www.rovshop.it website, entail the acquisition of the personal data of the interested party (required to provide the product sales service, respond to requests from interested parties, provide the newsletter service, personal account registration, etc.) as well as all personal data included in communications.
Specific information will be published in the pages of the website https://www.rovshop.it. designated for the provision of certain services.
Cookies and other tracking systems
METHOD OF TREATMENT OF PERSONAL DATA
The collected data are processed with IT tools and only in a residual way with paper methods.
For the processing of data related to the services of the website, the Data Controller uses servers located within the European territory and computer systems located at the headquarters of the owner. Their transfer abroad is not expected.
Appropriate technical and organizational measures are taken to guarantee an adequate level of security and to prevent data loss, illicit or incorrect use and unauthorized access.
The data provided directly by the interested party are kept for the time strictly necessary to process the requests of the interested party and then cancelled, except for the purchase of products (against which the data may be kept for the entire duration of the relationship and according to legal obligations), subscription to the newsletter service (against which the data can be maintained until the revocation of consent) and defensive needs (which may require further conservation).
The data collected for the purposes indicated in point 3 below. h) and i) will be kept until the interested party withdraws consent to the receipt of commercial communications from Surridi s.r.l. or withdraws consent to the activity of profiling preferences, or requests the deletion of their data, except for the exceptional need to preserve data to defend the rights of Surridi s.r.l. in relation to disputes in force at the time of the request, or on the indication of the public authorities.
The navigation data do not persist for more than seven days and are deleted immediately after their aggregation, without prejudice to any need to ascertain criminal offenses by the judicial authorities.
Your data may be disclosed or communicated to the employees or collaborators of our company, expressly appointed as “appointed / authorized to process” and / or “external data controller”. By way of example and not exhaustive, the data collected following the consultation of the site https://www.rovshop.it is addressed to the manager of the development and maintenance services of the web platform appointed by Surridi srl, pursuant to Article 28 of the Rules, as the external responsible of the treatment.
RIGHTS OF THE INTERESTED
In some cases, the interested parties have the right to obtain from Surridi s.r.l. the access to their personal data, the correction, cancellation, limitation of their treatment or to withdraw the consent about processing and portability (articles 15 and following of the Regulation).
Requests should be addressed to firstname.lastname@example.org
RIGHT OF COMPLAINT
Interested parties who believe that the processing of personal data reported to them through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulations, or to take appropriate judicial offices (Article 79 of the Rules).
Policy updated in July 2018