To execute the functional activities for the sale of products through this website, TD, in quality of joint Data Controller, processes the users' data such as name and surname, home address and information concerning the credit card used by the same (e.g. name and surname of the card holder, number, expiry date, security code).
Conferral of your data is not mandatory but required to conclude the registration process to the Site or make the purchase. We will not be able to provide the requested services, should you refuse to confer the afore-cited data.
TD processes the data of Site users and buyers aimed at managing, completing and executing commercial transactions concerning the purchase of products through the same Site. Therefore, SHOOZ LTD is the exclusive Data Controller with regards to any further activities not related to the sale of products through this website (such as for example and not limitedly to, transmission of advertising material, sales communications, promotions).
Each joint Data Controller decides the scopes and processing methods to be implemented and the tools to be used for security measures. For purely organisational and functional needs, external Data Processors were appointed for processing the personal data of Site users. These Data Processors have been chosen based on their skills, experience and reliability, through compliance with applicable laws on personal data processing, as also related to security matters.
SHOOZ LTD can also use your data to transmit advertising emails on its products and services, in line with your previous purchases, unless you deny said use by exercising your objection right according to the procedures illustrated further on (art. 130, paragraph 4, Legislative Decree 196/2003).
Your personal data will not be transferred outside the European Union. Should the above be required, the Data Controller will request your specific consent.
Moreover, prior specific consent, your personal data will be processed by SHOOZ LTD also for marketing purposes, such as transmission via email at the address provided by you, of promotional material concerning products and services other than those already purchased, news, promotions, market and/or statistic researches and customer satisfaction surveys.
Any use of your credit card details for scopes other than verifying the existence of payment methods, charge and management of payments, and also to handle any claims and litigations, is excluded. For said scope, the aforementioned data will also be processed by the bank that provides services related to the management of online payments, and by the institute that issued the credit card that you will enter to confirm your order.
One of the Data Processors is currently Arcese Logistic S.r.l., which processes the data required to perform logistic activities aimed at shipping and potentially return the purchased products. For a complete list of Data Processors, please contact the Customer Service or send an email at the following email addresses: firstname.lastname@example.org for SHOOZ LTD, and email@example.com for Triboo Digitale.
The categories of Designated Officers who will process data for the abovementioned scopes are those subjects who mange the site, accounting, customer service, marketing activities (when consent is granted), computer systems and also third companies that process data on our behalf (such as for example, maintenance of computer services, shippers and couriers, legal counsels, companies that realise and/or manage promotional campaigns, etc.); lastly, data can be disclosed to authorities entitled to receive it, by law.
Pursuant to art. 7 of the Code that is transcribed in full for clarity purposes at the end of this document, you are entitled to obtain data updating, correction, integration, deletion and transformation in anonymous form. Moreover, you can object to the processing of your data for marketing scopes or for the transmission of sale communications, by contacting SHOOZ LTD, at the post addresses indicated above or by sending an email at firstname.lastname@example.org. Using same procedure, you can request the complete and updated list of Data Processors.
Art. 7 Legislative Decree no. 196/2003 - Right to access personal data and other rights
1. The concerned party is entitled to obtain confirmation about the existence of his/her personal data, even if not registered yet, and its disclosure in intelligible form.
2. The concerned party has the right to obtain indication on:
a) the source of the personal data;
b) processing scopes and procedures;
c) logic applied in case of processing executed with electronic tools;
d) identification details of the Data Controller, Data processors and Designated Officers in accordance to art. 5, paragraph 2;
e) subjects or categories of subjects to whom personal data may be disclosed or who may become aware of such data in their quality of Designated Officers for the Country or Data Processors.
3. The concerned party has the right to obtain:
a) data updating, correction or integration, if necessary;
b) deletion, transformation in anonymous form or blocking of data that has been processed unlawfully, including data whose storage is not required according to the scopes for which it was collected or subsequently processed;
c) confirmation that the transactions indicated in letters a) and b) were disclosed, also with regards to their content, to those subjects to whom data was notified or disclosed, except in case notification proves impossible or requires the use of means clearly disproportionate to the right being protected.
4. The concerned party is entitled to oppose, totally or partially:
a) for legitimate reasons, to the processing of personal data, even if related to the collection scope;
b) processing of personal data for the transmission of advertising material or direct sales, or for market researches or business communications.