- Protecting your personal data is important to us.
- Who decides why and how your personal data is processed?
- What personal data do we collect?
- Why do we collect your personal data and on what conditions are we entitled to process it?
- Who do we share your personal data with?
- Will your data be transferred outside the EU?
- How long do we keep your data?
- What rights do you have over your personal data?
The Data Controller of your personal data is SUPERFLUID S.r.l. with registered office in Corso Italia 22, 20122, Milan (Italy), VAT no. 10887110962 ("SUPERFLUID" or the "Company").
The Company will process the data you provide to us when registering on our Site and purchasing our products, as well as the data automatically collected during your navigation.
The personal data you provide us
When you register on our site, we collect your personal data, such as name, surname, sex and date of birth, and your e-mail address, necessary for the creation of the account. To make a purchase on the Site, we can request additional information, such as contact details and the address for shipping the products and any billing, as well as data regarding the payment method. We may also collect additional personal data when you need to contact us or our Customer Care and send us requests concerning the purchase of our products or the use of our services, via e-mail or additional contact channels on the Site. If you decide to subscribe to the Newsletter service, to participate in competitions, loyalty programs, prize transactions and online and social initiatives, we may collect additional information about your account. In this case, specific information will be provided on the processing of your data dedicated to these services.
Why do we collect your personal data and on what conditions are we entitled to process it? Your data will be processed to allow you access to the services provided by our Site and guarantee a better shopping experience, through the activation of any exclusive services and the possibility of participating in loyalty programs. With your consent, we also use your data to inform you about special offers and other products and services that we believe may be of interest to you.
Allow you to browse the Site and obtain information on its use
The data collected while you are browsing will be used to allow you to correctly browse the Site, obtain anonymous statistical information on its use, to check its correct functioning. This data treatment is necessary for the execution of pre-contractual measures adopted at your request. Furthermore, with your consent, the collected data may also be used to track your browsing on the net and create profiles based on your habits and preferences, and to send you personalized promotional messages that are relevant to your interests.
Allow you to purchase products and services reserved for members of the Site
Your data will be collected for the fulfilment of purchase orders and for related activities (shipping and delivery of products, invoicing, management of payments, etc.), for the activation of any exclusive services requested by you (e.g. gift card, order tracking, Wishlist, satisfied or refunded...), as well as to manage your participation in loyalty programs, competitions, events, prize operations and online and social initiatives, with the aim of providing members with discounts and other advantages expected in their favour. This treatment is necessary for the execution of the contract of which you are a part or of pre-contractual measures taken at your request.
Direct marketing activities
Your data may be collected for direct marketing purposes, meaning sending you promotional and commercial communications relating to services/products offered by the Company or reporting of corporate events, as well as detection of the degree of customer satisfaction, carrying out market surveys and statistical analysis. For the above communications, we will use automated contact methods (such as SMS, MMS, e-mail, social networks, instant messaging apps, push notifications) and traditional (such as telephone calls with operators and postal mail) For this purpose, your specific consent is required, except in cases where there is a legitimate interest of the Company in sending e-mails for the direct sale and/or promotion of our products similar to those you have already purchased (so-called soft-spam), provided that you do not object to such use by sending an email to privacy@xxx or clicking on the appropriate link to object to the receipt of such communications contained within each e- promotional mail. Furthermore, your data may be used, with your specific consent, by other companies of the A.G. DIGITAL MEDIA Group, commercial partners or other independent parties, to send you promotional and commercial communications about their services and/or products and events through automated and traditional contact methods.
Only with your specific consent, your personal data (for example age, sex, geographical origin...) may be collected to analyse and evaluate your preferences, habits and interests in order to send you personalized commercial communications, targeted promotional actions, offers and services in line with your needs and preferences.
Processing your requests
Your data may be processed to manage and respond to your requests regarding the purchase of our products or the use of our services, received through the contact channels on the Site. This treatment is necessary for the execution of the contract of which you are a part or of pre-contractual measures taken at your request.
Defend our rights in and out of court
If necessary, your data may be processed to ascertain, exercise, or defend the Company's rights in court or for the purpose of extrajudicial debt recovery. This treatment is necessary to pursue the legitimate interest of the Company in ascertaining, exercising, or defending a right in court.
Your data will also be used for fraud prevention purposes in relation to purchases made on our Site and to ascertain responsibility in the event of computer crimes against the Site, users or third parties. This treatment is necessary to pursue the Company's legitimate interest in preventing and combating fraud and cybercrime.
Your personal data will be processed for the Company by authorized and educated people, who will operate according to the principles of correctness, loyalty and transparency and protecting the confidentiality of your data through technical and organizational security measures suitable to guarantee an adequate level of protection. In some cases, your personal data will be communicated to other subjects operating on behalf of the Company as Data Processors, to whom specific instructions have been given on the processing of data, or to independent Data Controllers for the pursuit of their own purposes.
In general, the data acquired while browsing our site may be communicated to third-party companies that provide IT assistance services to the company (for example: hosting services related to the use of the site), as data processors. In addition, the data collected for the purposes indicated above may be communicated to the following categories of recipients who will treat them as Data Processors on behalf of our Company: - Companies that provide IT and data processing services (e.g. management and maintenance of IT infrastructures and services, etc.) - Companies that provide marketing services - Companies and firms that provide consultancy and market analysis services - Companies that provide payment services, like PayPal - Companies that provide customer support services - Companies that provide set-up, transport, and shipping services for products Finally, your data may be communicated to the following categories of recipients who will process them for their own purposes as Data Controllers: - Only with your specific consent, to other companies of the A.G. DIGITAL MEDIA Group, commercial partners, or other independent parties, in order to allow these companies to carry out marketing activities relating to their products and/or services - Authorities and institutions to which the right to access them is granted by law or regulations (e.g. public security authorities and police forces)
You can request the list of data processors and further information regarding the recipients of your personal data by writing to the address email@example.com
Your personal data, by virtue of the location of the recipients to whom the data may be communicated, could be transferred outside the European Union, always ensuring compliance with any guarantee to protect your data.
The personal data collected through the Site may be transferred to some non-EU countries (including Canada and the USA) in relation to specific needs related to the location of some recipients of your personal data, with particular reference to the suppliers of IT assistance services and other services rendered on behalf of the Company. In any case, the Company undertakes to guarantee levels of protection and safeguarding, even of a contractual nature, adequate according to the applicable rules, including the stipulation of standard contractual clauses or the verification of the Privacy Shield certification of the service provider.
We keep your personal data for a period not exceeding the time it takes to achieve the purposes for which it was processed. At the end of this period, we will make sure that your data is anonymized, so that it is no longer attributable to you, or deleted.
Your personal data will be kept for the time necessary to fulfil the contractual obligations and the obligations imposed by law (e.g. taxes) in relation to the conduct of the sale of our products and/or services through the Site. The information relating to your purchases and interactions with us will be processed no later than 24 months for marketing purposes and no more than 12 months for profiling activities, starting from the date of the collection of your consent. In addition, the storage of your personal data will take place limited to the time necessary to manage your requests received by the Customer Care service and, in case of litigation, to assert our rights in court.
You will always have the right to ask the Company, at any time, to access personal data concerning you, to request their correction, deletion or to limit their treatment, to oppose their treatment, to withdraw consent, where given, and to ask for their portability to keep them or pass them on to third parties. In relation to the processing of the data referred to in this statement, in the provided cases, you can exercise the following rights:
• Receive confirmation of the existence of your personal data and access its content (right of access)
• Update, modify and/or correct your personal data (right to rectification)
• Request the elimination or limitation of the processing of data processed in violation of the law, including the data whose retention is unnecessary for the purposes for which the data was initially collected or processed (right to erasure and right to restriction of processing)
• Object to the processing (right to object) at any time when the processing is based on our legitimate interest and in the case of profiling activities
• Revoke your consent, without prejudice to the legality of the treatment based on the consent granted before the revocation
• Receive a copy of the electronic data that concerns you and request that such data be transmitted to another data controller (right to data portability)
To exercise these rights, you can send a request to the e-mail address firstname.lastname@example.org. Furthermore, if you believe that the processing of your personal data through the Site occurs in violation of the provisions of the legislation on the protection of personal data, you will always have the right to file a complaint with the Guarantor of personal data protection or appeal to the competent judicial authority.
Date of Publication: 31 May 2020