Privacy Policy

INFORMATION DOCUMENT PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ARTICLE 13 AND ARTICLE 14 OF THE EU REGULATION 2016/679

Our company Aslan Tech srl with its registered office in via Antonio Salieri 32, Vallese di Oppeano (VR), 37050, Verona, C.F. P. IVA 04670900234, n. REA VR – 439507, registered in the Verona Company Register n 04670900234, is the owner of the processing of data collected through the site www.hardskin.it

Personal data will be processed in compliance with the European Privacy Regulation 2016/679 of 27.04.2016 and dlgs 196/2003 coordinated with dlgs 101/2018.

The person interested in the treatment benefiting from the site www.hardskin.it must be of age.

1-DATA AND PURPOSE OF THE PROCESSING

Aslan Tech srl processes the following data:

a- personal data provided by the interested party: name and surname, tax code, home address, email, telephone number, credit card data;

b- the data provided by the interested party is finalized for the sale and shipment of the goods to the address indicated by the customer;

c- navigation data: the computer systems and software procedures responsible for the functioning of the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identity interests, but which, because it is similar, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by the users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment.

The purpose of the processing of your data is as follows

1-following the pre-contractual phase, fulfilling the contractual, accounting and fiscal obligations during the contract, performing the assistance service. The lack of consent blocks the fulfilment of what has been indicated above; click to give consent.

2-to carry out the promotional activity including the sending of advertising material through the newsletter service, to which the opt-out may object. The treatment will take place on condition of having his specific consent. click to give consent.

3-carry out statistical activities, with specific prior consent, click to give consent.

4-create a database, with its specific consensus; click to give consensus.

5-create a profile with the collected data base, click to give consensus.

6-request of the judicial authority and for the protection of the rights of the holder, among others the right of defence in court.

7-navigation data are necessary and are processed for the sole purpose of obtaining statistical information on the use of the site and to control its correct operation. However, such data could be used to confirm liability in case of any offence committed against the Site.

3- LEGAL BASIS OF THE ATTRIBUTION

The legal basis for the allocation of data for the purpose, under point num.1 of clause num.2, is the need to follow the pre-contractual phase and to comply with the obligations of law and/or contract and of the assistance service.

Refusal on the part of the interested party will entail the impossibility of following the pre-contractual phase and of complying with the contract.

The legal basis for the allocation of data with purpose under points 2-3-4-5-6-7 of clause n.2 and the consent of the interested party is optional.

The legal basis for the purpose, under point 8 of clause no. 2, is the fulfilment of a legal obligation and the pursuit of the legitimate interest of the data controller, who exercises his rights. The consent of the person concerned is not required.

The legal basis for the purpose, according to point 9 of clause n.2, is related to the correct functioning of the site and its use, the refusal of which could compromise the functioning of the site.

4-METHOD OF PROCESSING

The processing is carried out through operations or sets of operations consisting of: collection, registration, organisation, structuring, conservation, consultation, elaboration, adjustment or modification, selection, extraction, comparison, use, interconnection, communication through transmission, blocking, communication, limitation, cancellation and distribution of data.

The processing operations are carried out with the help of electronic and/or automated and/or computerised instruments.

The processing is carried out by persons expressly authorised for the processing in compliance with the instructions received by the holder of the processing.

The data is processed in a lawful, correct, transparent, safe, collected and processed for specific, explicit and legitimate purposes; appropriate, relevant and limited as necessary in respect of the purposes determined, accurate and, if necessary, updated; relevant and complete and not exceeding the purpose of the processing.

5-COMMUNICATION OF DATA

The personal data processed for the purpose, in accordance with point 1 of clause num.2, may be communicated to the following persons, each of them according to their own specific competences:

– to the personnel authorised for processing; – to the chartered accountant and his collaborators and employees; – to the tax authorities and financial agencies;- to insurance companies;- to credit institutes;- to lawyers and consultants and their collaborators, to delivery agents, to banking institutes; – to the Holder’s staff dealing with marketing, data storage and databases, profiling and customer management, to the Holder’s staff dealing with the maintenance and management of the site;- to the persons to whom the communication of their personal data is required by the European and Italian law;- to public and judicial authorities.

The personal data processed for the purpose, according to point 3-4-5 of clause num.2, may be communicated:

– to the Holder’s personnel authorised to process, to personnel dealing with marketing, archiving, databases, profiling, customer management.

The personal data processed for the purpose, according to point 6 of clause num.2, may be communicated: – to the personnel of the Holder authorised to process; to lawyers and consultants and their collaborators, to the requesting authority, to the judicial authority.

The personal data, according to point 7 of clause num.2, can be communicated to the and/or to the companies in charge of the management and development of the site and to the judicial authority, to consultants, to lawyers.

The data subject to processing as indicated above are not subject to dissemination.

These personal data will be managed and stored on servers located in the European Union and belonging to the Holder and/or third party companies nominated and duly identified, such as the data processors. This data will not be transferred outside the European Union. In any case, it is agreed that the Holder will have the right to modify the location of the servers in Italy and/or the European Union and/or countries outside the EU, if necessary. In this case, the Holder will have to guarantee immediately that the transfer of the extra-EU data will be done in compliance with the provisions of the applicable law, stipulating, if necessary, agreements that guarantee an appropriate level of protection and/or adopting the standard contractual clauses foreseen by the European Commission.

6- DURATION OF PROCESSING

The data relating to the purpose, in accordance with point 1-8 of clause num.2, will be processed for the entire duration of the pre-contractual and contractual phase and for a period not exceeding the period provided for by the regulations in force in the fields of accounting, tax, civil and procedural rights.

The data relating to the purposes, pursuant to points 2-3-4-5-6-7 of clause no. 2, will be processed for the entire duration of the pre-contractual and/or contractual marketing phase for a period not exceeding ten years.

The data related to the purposes, according to point 9 of clause no. 2, will be processed for seven days, with the exception of requests from the judicial authority.

7- RIGHT OF THE INTERESTED PARTY

The interested party has the right: to know if his/her data are processed; to access his/her own data; to rectification, integration, deferment, deletion, limitation of processing, to object to processing, to data portability; to submit a challenge to the supervisory authority.

We remind you that in case the processing is based on Article 6, paragraph 1, letter a), or on Article 9, paragraph 2, letter a) EU Regulation 976/2016, you will have the right to revoke the consensus at any time without affecting the lawfulness of the processing based on the consensus made before the cancellation.

8- DATA CONTROLLER

The holder of the processing is ASLAN TECH SRL, with registered office in Via Antonio Salieri 32, Vallese di Oppeano (VR), 37050, Verona, C.F. P. IVA 04670900234, n. REA VR – 439507, registered in the Company Register of VERONA (Verona) n 04670900234, email: aslantechsr@legalmail.it, tel: +39 045 4550101 fax+39 045 4550102.

The interested party may exercise his/her rights by giving written notice by registered letter with acknowledgement of receipt to the Holder’s registered office.

Or via PEC to the following email address: aslantechsrl@legalmail.it