Information on how we collect and use your personal data

in accordance with article 13 of Regulation (EU) 2016/679

Privacy Policy shop.mariacristinasterling.it

This website collects and uses the personal data of its users as described below.

Data controller

 

Gioielli Life Italia P.IVA: 06302380487
Via Fiorentina, 19/C, 50063 Figline e Incisa Valdarno FI

Email of Data Controller:  info@mariacristinasterling.com.

Which types of data do we collect?

This website, either autonomously or through third parties, collects the following types of data: cookies, usage data, telephone numbers, emails, names and surnames.

Details about each type of data and how and for what purposes it is collected can be found in the various sections of this Privacy Policy or in specific texts which can be visualised on our website when you are asked to provide personal data.

Personal data may be freely provided by you (the User) or, in the case of usage data, collected automatically during your use of the website.

Unless otherwise stated, all data requested are necessary for us to provide a stated service. If you refuse to provide the requested data, it may be impossible for us to provide the service. The provision of some data is indicated as optional, in these cases you are free to choose not to supply such data without there being any consequences regarding services or operation of the website.

If you are in doubt about which data are necessary for us to provide a particular service, please contact the Data Controller.

Unless otherwise stated, we or third parties used by this website, use cookies – or other means of website visitor tracking – to provide services requested by the User or for the purposes described in this document and in our Cookie Policy.

In providing, sharing or disseminating the personal data of third parties via this website, the User guarantees that permission has been granted by the third parties and absolves the Data Controller of any responsibility in this regard.    

Modalities and Location of Data Processing

Modalities of Data Processing
The Data Controller will adopt adequate measures to prevent unauthorised access to your data and to prevent it being disseminated, modified or destroyed by unauthorised parties.

We process your data using software tools and/or telematic means, in ways that are strictly connected to the purposes indicated. In some cases, besides the Data Controller, others may have access to your data (personnel employed in administration, accounting, marketing and law as well as systems administrators, for example).  These subjects may be external to our company and may include technical service providers, postal workers or couriers, hosting providers, information technology companies and advertising agencies. If necessary, the Data Controller may nominate such subjects as Data Processors. You can request an up-to-date list of Data Processors at any time.

Legal Basis of Data Processing
When you use this website, the Data Controller is entitled to process your data in the following circumstances:

  • you have given consent to your data being processed for one or more specific purposes. In some circumstances the Data Controller is authorised to process your data even if you have not given consent and there is no other legal basis for data processing. In such circumstances your data may be processed until you opt out. European legislation governing the protection of personal data does not permit this form of processing;

  • we have a contract with you or we are processing your data for pre-contractual purposes;

  • we are complying with a legal obligation;

  • we are carrying out a task in the public interest or a task regarding public administrations;

  • the Data Controller or a third party has a legitimate interest in processing your data.

If you require information or clarification about the legal basis of how we process your data, including individual cases and contracts, please contact the Data Controller.

Location
We process your data in the operational headquarters of the Data Controller and in other locations where the subjects involved in data processing are located. For further information, contact the Data Controller.

Your data may be transferred to another country. If you require further information on where we process your data, please refer to the section regarding details of personal data processing or contact the Data Controller.

You have the right to be informed about the legal basis of transferring data outside the European Union, about international organisations which uphold rights such as the United Nations, about international agreements between states and about the security measures undertaken by the Data Controller to protect your data.

If you require more information about the international transfer of data, please consult the relevant sections of this document or ask for clarification from the Data Controller using the contact details above.

Retention Time
Data will be processed and retained for as long as needed to fulfil the purposes for which it was collected.

  • Personal data collected for the purpose of executing a contract between the Data Controller and the website User will be retained until the terms of the contract are completely fulfilled.

  • Personal data collected because of a legitimate interest of the Data Controller will be retained until the purpose for which the data was collected has been fulfilled. You can obtain further information about the legitimate interests for which we process your data in the relative sections of this document or by contacting the Data Controller.

When data processing is based on the consent of the User, the Data Controller is authorised to retain data until consent is withdrawn. In some cases, the Data Controller may retain data for longer periods to satisfy a legal obligation or to comply with an order from an authority.

At the end of the retention period, your personal data will be deleted, and you will no longer be able to exercise your rights to access, delete, correct or transfer your data.

The Purposes of Data Collection and Processing
We process your personal data to provide services and for the following purposes: interaction with social networks and external platforms, contacting the User, viewing the content of external platforms, statistics, SPAM protection, contact management and sending messages, interaction with third party data collectors, registration and authentication, remarketing and behavioural targeting, traffic optimisation and distribution, interaction with live chat platforms.

If you require further information on the purposes for which we collect and process your data, including which data are used for each purpose, please refer to the relevant sections of this document or contact the Data Controller.

Your Rights
As a User of our website you have the following rights regarding the collection and processing of your data:

  • The right to withdrawal consent. If you consent to the processing of your personal data, you have the right to withdraw consent at any time.

  • The right to object. If the legal processing of your data is not based on consent, you have the right to object to your data being processed. Further details are outlined in the next section of this document.

  • The right to obtain access. You have the right to know which data have been processed by the Data Controller and to receive a copy of the data.

  • The right to correction. You have the right to verify your data and request that they be corrected or updated.

  • The right to restrict processing. In certain circumstances, you can request the restriction or the suppression of your personal data. If you exercise this right, your data will be stored but not used.

  • The right to request that your personal data is deleted (the right to be forgotten). In certain circumstances you can ask the Data Controller to erase your personal data.

  • The right to portability. You can ask for your data to be returned to you or transferred to another data controller. You have the right to obtain a copy of your data in an accessible format and, where technically possible, have your data directly transferred to another data controller. This provision is applicable to contracts of which the User is a party and contractual measures relating to such contracts when data is processed by automated means and the processing is based on the consent of the user.

  • The right to register a complaint. If you think that your data protection rights have not been respected, you can make a complaint to your National Data Protection Authority or take legal action.

Further Details on the User’s Right to Object

When your personal details are processed to carry out a task in the public interest, to fulfil the duties of a public role held by the Data Controller or because the Data Controller has a legitimate interest in processing your data, you have the right to object due to your particular situation. 

If your data are processed for purposes of direct marketing, you have the right to object without having to state a reason. If you wish to know whether we process your data for direct marketing, please refer to the relevant sections of this document or contact the Data Controller.

How to Exercise your Rights

In order to exercise your rights as a User of this website, you can contact the Data Controller in the ways indicated in this policy. The Data Controller will reply to your requests free of charge and as quickly as possible, at the most within a month. 

Cookie Policy

This website uses cookies. For further information, please consult our Cookie Policy.

Further Information on Data Processing

Legal Defence and Court Proceedings

The personal data of a website User may be used by the Data Controller in court or in the stages leading to court proceedings, to defend himself from abuse of this website or its services on the part of the User.

In using this website, you acknowledge that the Data Controller could be legally obliged to reveal your data to satisfy requests from public authorities.

Specific Information

Should you request it, this website can provide further, specific information regarding specific services or the collection and processing of personal data.

System Log and Maintenance

This website may collect system log files which register interactions and may also contain personal details such as the User’s IP address for purposes connected to the maintenance and running of the website.

Further Information

Further information about how we process your personal details can be obtained at any time from the Data Controller using the contact details in this document.

„Do Not Track” Requests

This website does not allow the enabling of “Do Not Track”.

If you require information about whether third parties used by this website, allow “Do Not Track” enabling, please consult their respective privacy policies.

Changes to this Privacy Policy.

We reserve the right to modify this Privacy Policy at any time. We will inform you of updates to this document on our website, and where technically possible, by sending you a notification using the contact details held by the Data Controller. If you wish to keep track of modifications to our Privacy Policy, we advise you to regularly check this document which will always indicate the most recent date of modification.

If we make changes regarding the processing of data which is based on consent, it may be necessary for us to ask you again to consent to your data being processed.