TYPE OF PERSONAL DATA COLLECTED AND PROCESSED
When users visit and view the Site, Rosa Lou Shop do not generally collect personal data from them, with the exception of "browsing data". The technological platform through which the Site is made available to users automatically records some browsing data (the transmission of which is implicit in the use of internet communication protocols), such as the name of the internet access provider, the site of origin, pages visited, date and duration of the visit, etc. Such information allows users to access the Site and use certain services, and may be aggregated and used anonymously for statistical purposes and to verify that the Site is functioning properly.
Rosa Lou Shop do not collect these browsing data in order to associate them with other information about the users and subsequently identify the users. However, browsing data, by their very nature, may allow identification of the users after they have been processed and associated with other information. Browsing data may therefore be used by Rosa Lou Shop in order to ascertain any liability concerning computer crimes committed to the detriment of the Site or through the Site. With the exception of this possibility, the browsing data described above are stored only temporarily, in compliance with applicable regulations.
Data provided voluntarily by users
Rosa Lou Shop collects and processes personal data that users provide voluntarily when interacting with the functionalities and services of the Site. In the sections of the Site where users' personal data are collected, a disclosure is published pursuant to Article 13 of Legislative Decree 196/2003.
PURPOSES OF THE PROCESSING
Rosa Lou Shop process users' data for the following purposes:
· • management of browsing on the Site;
· • management of Site security;
· • compliance with legal and regulatory obligations;
· • exercise of rights in judicial proceedings.
Rosa Lou Shop process users' data for the following purposes:
· • management of sales and transactions performed in the context of the Rosa Lou Shop;
· • management of orders;
· • sale and delivery of products;
· • management of returns and guarantees, and other activities necessary for the sale of products via the Rosa Lou Shop.
NATURE OF THE PROVISION OF DATA
With the exception of browsing data (which are automatically collected by the system), the transmission of data by users for the aforementioned purposes is optional. Failure to transmit data for commercial purposes will not affect your ability to access the functionalities offered by the Site, except that it will be impossible to buy products.
Users' personal data are processed using IT and electronic tools, mainly via electronic and automated means and, in certain specific transactions, using paper documentation. In accordance with LD 196/2003, specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorised access.
PARTIES INVOLVED IN THE PROCESSING
Users' personal data are processed by parties designated as processors or tasked with processing, in accordance with the provisions of Articles 29 and 30 of LD 196/2003. In addition to the above, the data may be brought to the attention of third parties such as freelancers, consultants and, more generally, third parties that cooperate with Rosa Lou Shop to pursue the aforementioned purposes, or third parties that have been tasked with activities on an outsourcing basis.
In any case, Rosa Lou Shop undertake to provide such third parties only with the data necessary to perform the duties and activities assigned to them; it also undertakes to do everything in its power to ensure that third parties use the data received exclusively for the purposes indicated by Rosa Lou Shop and in compliance with the applicable regulations on personal data processing.
Users' personal data may also be brought to the attention of third-party companies in the event of mergers or demergers, acquisitions, disposals of companies or business units, or other extraordinary corporate transactions. Users' personal data may also be brought to the attention of legitimate recipients pursuant to law or regulations, for example in the event of a request by the competent public authorities or judicial authorities or, more generally, in the context of judicial proceedings, as well as to protect and defend the Site and the rights of Rosa Lou Shop. Such parties shall process the data as autonomous data controllers or processors, depending on the case in question.
Your data will be transferred outside of the European Union only in accordance with all the safeguards set forth by EU privacy law. In particular, personal data may be transferred to service providers located outside of the EU, with whom it has been contractually agreed that such data shall be granted the adequate level of protection required by EU law.
The Data shall not be disseminated.
CONNECTION TO THIRD-PARTY WEBSITES AND SERVICES
Rosa Lou Shop thus invite users to take care when accepting offers of services from third parties, and to read the information provided by the third party regarding its processing of personal data, which the Data Controllers have no control over, nor can be held liable for.
MODIFICATIONS TO THIS DOCUMENT
Users of the Site may exercise the rights pursuant to Article 7 of Legislative Decree 196/2003, which are reproduced in full below. These rights may be exercised informally simply by sending a request to the Data Controllers as identified above, to the email address firstname.lastname@example.org
ARTICLE 7 OF LEGISLATIVE DECREE 196/2003. THE DATA SUBJECT'S RIGHTS
1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if they are not yet recorded, and the communication of said data in an intelligible form.
2. The data subject has the right to be informed of:
a. the origin of the personal data;
b. the purposes and methods of the data processing;
c. the logic applied in the event of processing performed with the aid of electronic instruments;
d. the identification details of the data controller, the data processors and the designated representative pursuant to Article 5, paragraph 2;
e. the parties or categories of parties to which the personal data may be communicated or which may access the data in the capacity of designated representative in the territory of the state, data processor or party tasked with processing the data.
3. The data subject has the right to obtain:
a. an update, adjustment or, where they have an interest therein, supplement to the data;
b. the deletion, anonymisation or blocking of data processed unlawfully, including data that do not need to be stored for the purposes for which the data were collected or subsequently processed;
c. a certification that the operations mentioned under a) and b) have been brought to the attention, including with regard to their content, of those to whom the data were communicated or disseminated, except in cases where this is impossible or requires a use of resources that is manifestly disproportionate to the right being protected.
4. The data subject has the right to object, in full or in part:
a. for lawful reasons, to the processing of personal data concerning them, even if it is pertinent to the purpose of the data collection;
b. to the processing of personal data concerning them for the purposes of sending out advertising or direct-sales material or for the performance of market research or marketing communications.
SUBSCRIBE TO THE rosalou.COM NEWSLETTER: INFORMATION NOTICE ON PERSONAL DATA PROCESSING
Information Notice on personal data processing
According to applicable laws, Rosa Lou Shop (herein after “Data Controller”) provides you with the following information on the collection, use, disclosure or processing of your personal data.
A. The purposes of the processing
The personal data provided by you through the registration form will be collected, used, disclosed or processed to register you to Rosa Lou Shop’s newsletter. By requesting to be registered to the newsletter clicking on the button on the bottom of the registration form, you consent to the collection, usage, disclosure or processing of your personal data.
B. Data Provision
Your email is necessary to achieve the registration to the Rosa Lou Shop newsletter. If you do not provide data, you will not have the possibility to subscribe the newsletter. There exists risk of personal data leakage and misuse, however, Rosa Lou Shop has implemented a number of security measures to protect your personal data processed by means of electronic or automated tools.
C. Data processing and storage methods
The data collected will be processed and stored both on paper and automated tools. The data collected for newsletter registration purposes, will be retained until the user asks to revoke his registration to the newsletter. On expiry of the retention terms indicated above, or in case the Data Controller becomes insolvent and cannot continue processing your personal data, your data will be automatically erased.
D. International data flows, communication and dissemination.
Data will be processed by:
· • employees and associates of the Data Controller designated as data processors or persons in charge of the processing;
· • third parties members or not of the EU, designated as data processors, used by the Data Controller in particular for mailing of newsletter services and management and maintenance of IT systems.
Your data will not be disseminated in any way. Your data will be transferred outside of the country or of the European Union, in countries not providing for an adequate level of data protection, only in accordance with the safeguards set forth by applicable privacy laws.
E. Data subject’s rights
According to applicable laws, you can at any time request information on personal data collected, used, disclosed or processed by the Data Controller, as well as request for access to such personal data, ask for integration, rectification or erasure, object to their processing and withdraw your consent. In order to exercise your rights above and/or or submit any inquiries or complaints with regard to the processing of your personal data, you may send a request to the Data Controller by writing to this email address: . PMoreover, you can at any time delete your subscription to the newsletter following the link below at every communication.
Last update: March 2018