ORDER INFORMATION AND ACCOUNT CREATION
Janhe S.r.l.s., with Registered Office: Via Michele Di Lando 10 – 00162, Rome (RM), mail: firstname.lastname@example.org, Data Controller (or “Owner”) informs that, in accordance with the regulations in force, any operation concerning the same will be based on the principles of correctness, lawfulness and transparency.
Pursuant to and for the purposes of art.13 of the European Reg. 679/2016 (GDPR), the following information is provided.
PURPOSE OF THE PROCESSING
The processing will relate to the data identifying the interested party provided by the same when registering the account and/or when purchasing the product, and will be carried out by electronic and paper methods for the following purposes:
(a) Creation and management of the account, where the interested party has proceeded to complete the appropriate section on the creation of a new account
- b) Processing of orders and payments, and communication with the data subject regarding the status of orders concerning the products and services covered by the transaction
- c) Measurement of the vendor’s performance by issuing appropriate feedback from the data subject both on the website www.janhe.it and on third party websites, which will be processed by the Owner in order to improve the service provided;
- d) Compliance with tax, accounting and tax obligations
LEGAL BASIS FOR PROCESSING
The legal basis that makes the processing referred to in point a) legitimate is the request made by the data subject by filling out the special section on the creation of a new account on the website
The legal basis that makes the processing referred to in point b) legitimate is the contractual relationship established between the Data Controller and the data subject.
The legal basis that makes the processing referred to in point c) legitimate is the legitimate interest of the Data Controller consisting in taking cognizance of the customers’ opinions on the service offered in order to increase their level of satisfaction. Such processing, however, will be carried out only where the customer freely decides to give feedback regarding the service provided.
The legal basis that makes the processing referred to in point d) legitimate is the fulfillment of legal obligations regarding tax, accounting and fiscal matters.
NATURE OF PROCESSING
The provision of data for the purposes referred to in point a) is optional but necessary for the creation, maintenance and management of a user account, and any refusal to provide data for the creation of the account will not preclude the user from being able to purchase products on the website.
The provision of data for the purposes of point b) is mandatory as it is necessary for the proper processing of the order, and any refusal to provide such data will result in the impossibility of establishing the contractual relationship.
The provision of data for the purposes referred to in point c) is optional and any refusal will have no effect on other contractual relationships that may exist between the interested party and the Owner.
COMMUNICATION OF PERSONAL DATA
The processing will be carried out exclusively by personnel appointed by the Data Controller and specially trained. The data collected, if it is necessary or instrumental to the execution of the indicated purposes, may be processed by third parties appointed as external data processors, including companies that perform services related and instrumental to the execution of the purposes indicated above.
The data collected may be communicated to banking and financial institutions, insurance companies, or more generally to companies operating in the credit sector, as well as to public entities in fulfillment of legal obligations.
Data may also be disclosed to companies operating in the field of reviews and/or price comparison.
Customer data may also be disclosed to companies operating in the service of transportation and logistics.
The updated list of external data processors can be consulted by contacting the data controller by e-mail at email@example.com. The data collected may also be transferred abroad, including outside the European Union in the forms and ways provided for by current legislation, guaranteeing in all cases an adequate level of protection.
Personal data collected for the purposes referred to in points a) -b) – c) will be retained until the pursuit of the purposes indicated above.
Personal data processed for the purposes referred to in point d) shall be retained for as long as required by tax and fiscal regulations.
RIGHTS OF THE DATA SUBJECT
The data subject has the right to exercise the rights set forth in Articles 15-22 of European Reg. 679/2016.
In particular, for processing based on consent, he/she has the right to revoke his/her consent at any time and, upon simple request to the Data Controller to be made by email to firstname.lastname@example.org, he/she may request access to personal data concerning him/her and transmit them to another Data Controller without hindrance (so-called portability), obtain the updating, restriction of processing, rectification of data and the deletion of data processed in breach of the regulations in force.
The interested party also has the right, for legitimate reasons, to object to the processing of personal data concerning him or her and to the processing for the purpose of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the “Garante della Privacy” as the data protection supervisory authority.
The Data Protection Officer of Janhe S.r.l.s. can be contacted at the following address email@example.com