The present Information to Data Subjects presents to the users the most important informations regarding the website http://www.sparco-official.com (hereinafter, the “Site”) with respect to the processing of their Personal Data. The browsing of the Site might in fact include the processing of data and informations related to idenfied or identifiable persons (hereinafter, the “Personal Data”).
- Data processor and data controllers
Data processor is Sparco S.p.A., with legal seat in Volpiano (TO), via Leinì 524, VAT number 13122640157. The full list of the appointed data controllers is available by sending an e-mail to the address firstname.lastname@example.org, inserting the following subject: “Website www.sparco-official.com – request for the list of data controllers pursuant to § 7 L.D. 196/2003”.
- Data processed
(a) Navigation data
During the browsing of the Site, Personal Data might be acquired and processed based on the necessary protocols that govern Internet. Such Personal Data, although not gathered in order to identify any person, based on their nature might allow to identify the user through elaborations with other third-party data. Between the Personal Data that might be processed during the web browsing of the Site there are (for example) the IP addresses or the domain names of the computer used by the users, the URI addresses (Uniform Resource Identifier) of the resources required, the timestamps, the dimensions of files received, the numeric code and other parameters related to the user and his/her device.
For further informations regarding the processing of Personal Data in connection with cookie files, please consult the related paragraph hereinafter.
(b) Data processed by e-mail
The Data Controller shall process Personal Data transmitted voluntarily by the user by sending an e-mail to the address email@example.com, as well as to other publicly available addresses. Such data include (but are not limited to) the e-mail addressess of the sender(s) and any other information that might be transmitted inside the e-mail message.
(c) Personal Data connected to the Site account and the orders placed through the eCommerce
The Data Controller shall process a set of Personal Data with respect to the possiblity, as offered to the user, to create and manage an own profile (or “Account”). Through the Account, Sparco allows the user to access the Site’s eCommerce, the product catalogue, informations related to events and meeting as well as other fidelity programs. The Data Controller will request and process uniquely data necessary to the related purposes, for the time strictly necessary and on the basis of freely and autonomous requests of the user.
In particular, the user shall submit the following Personal Data:
- Name and surname
- E-mail address
- Full date of birth
Inside his/her Account, the user shall be able to also insert:
- Residence address
- Shipping address
- Country of residence, citizenship or provenience
- Billing data
All or part of such Personal Data may also be submitted by a user not registered to the Site with an Account, for order placement: in such case, the Data Controller shall process such data only to fulfill the obligations connected to the contract arising from the use of the eCommerce and for the time strictly necessary to conclude the purchase of goods or services.
(d) Personal data for marketing purposes
The Data Controller shall require the user to process a number of Personal Data, such as the e-mail address, in order to send newsletter, promotional offers and other marketing initiatives. The Data Controller will request and process uniquely data necessary to the related purposes, for the time strictly necessary and on the basis of freely and autonomous requests of the user.
- Purpose of the processing
Personal Data based on § 2(a) shall be processed for the purposes of consenting and verifying the correct maintenance and functioning of the Site, as well as to obtain statistical and non-personal informations over its use.
Personal Data based on § 2(b) shall be processed for the purposes of answering the requests of the concerned users.
Personal Data based on § 2(c) and 2(d) shall be processed exclusively for the purposes set out above.
- Nature and modalities of processing, consent
The processing of Personal Data shall be carried out with transparency and correctness, with technological meanings without excluding also the use of paper meanings, always respecting the privacy and rights of each user.
Personal Data shall not be processed beyond the necessary timeframe, nor will they be used for different purposes, save in case the user shall explicitly consent to that.
Personal Data shall be processed exclusively by authorized subjects, acting as data processors or persons in charge of the processing for the Data Controller, or by third-party data controllers whenever the conditions require or allow it.
Personal Data processed based on § 2(a) and 2(b) do not require explicit consent by the user, pursuant to § 24 L. D. 196/2003.
Personal Data processed based on § 2(c) and 2(d) shall be processed based on an explicit, freely given and informed consent by the user, gathered by clicking on a dedicated web-button, check-box or other equivalent meaning on the Site.
- Communication and dissemination, transfer of Data outside EU
Personal Data might be at disposal and/or be communicated to third parties that act as Sparco’s suppliers of services, to the sole reason of reaching the purposes set out by this Information to Data Subjects. Such suppliers might be from time to time act as autonomous data controllers or as data processors of Sparco, in this latter case being expressly appointed in writing.
Personal Data shall not be disseminated, except for the “Review” section of the Site and only minimizing such activity to the necessary to assure other users of the autenticity of the published review. Any other dissemination activity will be carried out under the explicity consent of the user.
Personal Data shall not be transferred outside the European Union, save for technical requirements stemming from the instruments included in the Site. In any case, the Data Controller share reassure the compliance to the current legislation for transferring data to third-party countries.
The Data Controller, in that regard, explicitly declares to have inserted the following technologies:
- Amazon Web Services Inc.’ hosting services;
- log-in systems managed and offered to the user by Facebook Inc.;
- electronic payment methods offered by the following third parties, that act in any case as autonomous data controllers:
- Mercury Payment Services S.p.A., for “Monetaweb” credit-card services;
- Paypal Inc.;
- Preta s.a.s., for “MyBank” services;
- Biverbanca S.p.A., for bank-wire accounts;
- Google Inc.’s website analysis software, named “Google Analytics”.
- Cookie implementation and use
Cookies are small files transmitted by the Site to the user’s device subsequently retransmitted to the Site, for example in case of further visits. They may have different forms and features and be used for different purposes, by the Data Controller as well as by third parties.
This website uses cookie such as:
- technical cookies that do not require user’s consent;
- different kinds of cookies, the the user might be required to consent to. Such consent can be expressed one-time, by selecting the related options reported to the user with the homepage banner (as well as carrying on the browsing of the Site), or be denied selectively, based on the presented options.
Whenever the user might want to deny selectively its consent to cookies, the selected browser allows that by general settings such as:
- selecting the “Option” or “Preferences” menu, then “Instruments” or “Visualize” or “Modify” in relation to cookies;
- selecting the “Privacy” or “Protection” or “Download files” menu, and then choosing the preferred settings.
- Data Subjects’ rights
The user has generally the right to Access his/her Personal Data, as well as other right as set out in § 7 of L.D. 196/2003.
A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
A data subject shall also have the right to be informed:
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) of the identification data concerning data controller, data processors and the representative designated in the territory;
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
A data subject shall also have the right to obtain:
a) updating, rectification or, where interested therein, integration of the data;
b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
A data subject shall have the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection, and to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
Those rights can be exercised in writing, for free, by sending an e-mail to the Data Controller to the following address: firstname.lastname@example.org.