PROCESSING OF PERSONAL DATA
Hw style S.r.l. as the Data Controller, informs you that access to the website and/or and/or any requests for information or services require the provision of personal data that will be processed in full compliance with European Regulation 2016/679 (hereinafter “GDPR”). Through this information users will be able to know, in advance, the processing methods necessary for the use of certain areas of the website www.hw-style.it.
Pursuant to the aforementioned Law, such processing will be based on the principles of fairness, lawfulness and transparency, protecting your confidentiality and your rights.
The information is effective only for this website and does not extend to other websites that may be consulted by the user through external links.
THE DATA CONTROLLER
The data controller is HW STYLE S.R.L., with registered office in Viale Sarca, 336 F – 20126 Milan.
THE PURPOSES OF PROCESSING AND THE LEGAL BASIS
According to the needs from time to time expressed by the user who accesses the various sections of the Site (and subject to special rules and notices for individual operations involving the provision of specific personal data, published from time to time on the Site), the following are the purposes of the processing of personal data, i.e. those conferred directly by users through the completion of online forms or direct access, via links, to the e-mail address related to the requested service, or those acquired automatically through browsing (see the following section “Categories of Personal Data Subject to Processing”) (hereinafter, “Personal Data”):
Responding to inquiries received by direct request (web form “contact). Legal basis of processing: execution of pre-contractual measures (art. 6 (1)(b));
To fulfill requests for offers/information regarding the provision of services offered by Hw style S.r.l.. Legal basis of the processing: execution of pre-contractual and/or contractual measures (art. 6 (1)(b));
Subject to the user’s consent and until it is revoked, carry out marketing activities such as, purely by way of example but not limited to: market research, sending information and promotional material, marketing and advertising activities regarding the services of the undersigned company, also using the e-mail address provided to us. Legal basis for processing: consent (art. 6 (1) (a)).
Need to establish, exercise or defend a right in court. Legal basis for processing: legitimate interest (Art. 6 (1) (f)).
Management and execution of legal requirements (accounting, administrative, tax nature, etc.). Legal basis for processing: fulfillment of a legal obligation (art. 6 (1) (c)).
THE METHODS OF TREATMENT
Data processing means any operation or set of operations, carried out with or without the aid of electronic or otherwise automated means, concerning the collection, recording, organization, storage, processing, modification, extraction, comparison, use, communication, dissemination, interconnection, blocking, erasure, destruction and selection of data.
The Personal Data will be processed mainly in automated form but also in paper form, with logics strictly related to the aforementioned purposes by the Data Controller or by third parties appointed as Data Processors (for the updated list the user may contact the Data Controller at the address indicated) and/or integrated systems of an IT nature and/or websites owned by or in use by Hw style S.r.l. The Owner has adopted appropriate technical and organizational security measures to protect users against the risk of loss, misuse or alteration of the Data. In particular, it uses the protected Data transmission protocols known as HTTPS. It also stores User Data on Servers located in the European territory. The Servers are subject to an advanced, daily back up and disaster recovery system.
THE DURATION OF TREATMENT
Data disclosed shall be retained for a period of time not exceeding that necessary to achieve the purposes for which the personal data are processed, or for a longer period for purposes permitted by law, and in any case deleted without undue delay.
THE PLACE OF PROCESSING
Personal Data are mainly processed at the Controller’s premises and/or at the locations of the Data Processors. For further information, users may contact the Controller in the manner stated above.
THE NATURE AND MANNER OF PROVISION OF PERSONAL DATA OF USERS
The provision of Personal Data is optional, however, failure to provide it will not allow the request to be processed. Providing Personal Data may be done by filling in the appropriate fields in the various sections of the Site or by sending requests via e-mail where provided.
THE CATEGORIES OF PERSONAL DATA BEING PROCESSED
In addition to the Personal Data conferred directly by the users (such as name, surname, postal address, e-mail address, etc.), when connecting to the Site, the computer systems and software procedures in charge of the operation of the Site itself automatically and indirectly administer and/or acquire certain information that could constitute personal data, the transmission of which is implicit in the use of Internet communication protocols (such as, purely by way of example but not limited to, the c. d. “cookies” (as better specified below), “IP” addresses, domain names of computers used by users who connect to the Site, the addresses in “Url” notation of the requested resources, the time of the request to the server, navigation on the Site.
CATEGORIES OF INDIVIDUALS WHO MAY BECOME AWARE OF USERS’ PERSONAL DATA
The Personal Data may be brought to the attention of employees or collaborators of the Data Controller who, operating under the direct authority of the latter, process data and are appointed as data processors or authorized processors pursuant to Articles 24-29 of European Reg. 2016/679 or system administrators and who will receive adequate operating instructions in this regard from the Data Controller; the same will take place – by the Data Processors appointed by the Data Controller – with respect to the employees or collaborators of the Data Processors themselves. The Data Processors, appointed by the Data Controller, could be third party companies or other entities (by way of example but not limited to entities entrusted with assistance, communication, promotions, IT service providers, managers and/or developers of websites or applications contained therein) that carry out activities in outsourcing on behalf of Hw style S.r.l..
SCOPE OF COMMUNICATION OR DISSEMINATION OF USERS’ PERSONAL DATA
Personal Data may be brought to the attention of employees or contractors of the Data Controller who, acting under the direct authoritỳ of the Data Controller, process data and are authorized processors or system administrators and who will receive appropriate operating instructions from the Data Controller in this regard.
Personal Data may also bè brought to the attention of the Data Processors, appointed by the Data Controller, such as third party companies̀ or other entities (by way of example but not limited to entities entrusted with activities̀ of assistance, communication, promotions, IT service providers, managers and/or developers of websites or applications therein) that perform activities̀ in outsourcing on behalf of Hw style S.r.l..
EXTRA EU TRANSFER OF USERS’ PERSONAL DATA
Personal data collected by us for the purposes described in this Notice will not be transferred to companies and individuals located in countries outside the European Economic Area.
USE OF COOKIES
A full cookie policy is available that can be reached from the “Cookie Policy” link on the website.
PLUGIN SOCIAL NETWORK
This site also incorporates plugins and/or buttons in order to allow content to be shared on social networks used by the visitor. When you visit a page on our website that contains a plugin, your browser connects directly to the servers of the social network from where the plugin is loaded, which server can track your visit to our website and possibly even associate it with your social account, particularly if you are logged in at the time of your visit or if you have recently browsed one of the websites containing social plugins. If you do not want the social network to record data about your visit to our website, you should log out of your social account and it is also suggested that you delete the cookies that the social network has installed in your browser (see also the instructions in our cookie policy).
The collection and use of information by such third parties is governed by their respective privacy policies to which please refer.
USERS’ RIGHTS
Users may exercise their rights under Articles 16-21 Reg. European 2016/679 (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object). Finally, users will be able to promote complaints to the Supervisory Authority where necessary, or to contact it to request information regarding the exercise of their rights arising from the European Regulation 2016/679.
Specifically:
The right of access: to obtain confirmation or otherwise of personal data concerning him/her and to obtain access to such data and specific information (e.g. purpose of processing, categories of data concerned, recipients to whom the data will be disclosed);
The right to rectification: to obtain rectification of inaccurate data concerning him/her without undue delay. In this case, an obligation arises on the part of the data controller to communicate the rectification to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;
The right to erasure: to obtain the deletion of data relating to him without undue delay, and the data controller has an obligation to erase the data without undue delay if there are certain grounds (e.g., the personal data are no longer necessary in relation to the purposes for which they were collected; if the data subject withdraws consent; if they must be erased due to a legal obligation). In this case, an obligation arises on the part of the data controller to communicate the deletion to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;
The right to restriction of processing: a restriction on the processing of data, such as only to storage to the exclusion of any other use, may be ordered to the data controller in certain cases (e.g., if the processing is unlawful and the data subject objects to the deletion of the data; if the data subject disputes the accuracy, within the limits of the period of verification of accuracy…). In this case, an obligation arises on the part of the data controller to communicate the restriction of processing to all recipients to whom the data have been transmitted, unless this involves a disproportionate effort;
The right to data portability: to have the personal data provided returned and transmitted to others or to request transmission from one controller to another, if technically feasible;
The right to object: to object at any time to processing for purposes of public interest or legitimate interest; for marketing purposes; for scientific, historical or statistical research purposes.
Data subjects may complain to the Supervisory Authority (www.garanteprivacy.it) if necessary, or simply contact it for information pertaining to the exercise of their rights recognized by Reg. EU 2016/679.
You may, in addition, assert your rights as expressed in EU Regulation 2016/679 by contacting the Controller at the email address privacy@hw-style.it.