INFORMATION ON PERSONAL AREA
According to article 13 of EU Regulation 679/2016

EUROSETS S.R.L. (hereinafter, “Controller“), as Data Controller, according to Article 13 of EU Regulation 679/2016 (hereafter, the “Privacy Regulation“), and subsequent amendments and additions, collects and subsequently processes personal data of users / customers requesting access credentials to the customer portal of their website (hereinafter, the “Data Subject“).

1. Type of processed data

The subject of the treatment for registration in the customer area will be the so-called ”common” personal data (such as, for example, name, surname, e-mail and social security number).

2. Purposes and methods of treatment.

The personal data of the interested party are processed within the normal activity of the controller, for the pursuit of the following purposes:

– Provide the requested services and allow access to the private area, through the account, to consult the made available documentation and make purchases.

administrative and accounting obligations strictly connected to the service such as the purchase of products; fulfillment of specific obligations established by law, by regulation or by community legislation.

The processing of personal data takes place, under the authority of the Controller, by subjects specifically appointed, authorized and instructed to the process according to art. 29 of the Privacy Regulation, using IT or telematic tools, with logic strictly related to the purposes and in any case capable to guarantee the confidentiality and security of personal data.

3. Legal basis of the processing, nature of the provision and consequences of any refusal

With reference to the purposes referred to in paragraph 1 above, the provision of personal data is optional and constitutes a necessary requirement for the provision of the service; in fact, failure to provide makes impossible to receive the access credentials to the reserved area. The legal basis is the execution of a contract (art. 6 paragraph 1, letter b, Privacy Regulation)

4. Data retention period

Personal data will be kept for the entire Contract Duration and, after termination, for the ordinary limitation period of 10 years.
In the event of a legal dispute, for its entire duration, up to the exhaustion of the terms of availability of the appeal actions.
Once the aforementioned storage terms have elapsed, Data will be destroyed, deleted or anonymized, compatibly with the technical cancellation and backup procedures.

5. Subjects or categories of subjects to whom the personal data may be communicated and the sphere of communication.

In relation to the purposes of the processing indicated above, and within the limits strictly pertinent to them, personal data of the data subject will or may be disclosed to the following categories of subjects:

a. external subjects operating as controller such as, for example, authorities and supervisory control bodies and in general to subjects, public or private, entitled to request data.
b.Credit institutions responsible for managing payments.

Data of the data subject will not be disclosed

6. Data transferring outside EU

Personal data will not be transferred to non-EU countries; unless for reasons arising from the execution of the contract, or the fulfillment of legal obligations, a transfer to non-EU countries and / or organizations is necessary, that transfer will take place in compliance with applicable legislation. Transfers will be made through adequate guarantees, such as adequacy decisions, standard contractual clauses approved by the European Commission or other legal instruments.

7. Rights of the data subject

Articles 15 and following of the Privacy Regulation give the interested party the right to obtain:

• a. confirmation of the existence or not of personal data concerning him, even if not registered yet, and their communication in an intelligible form;
• b. the indication of the origin of personal data, of the purposes and methods of treatment, of the logic applied in case of treatment carried out with the aid of electronic tools, of the identity of the owner;
• c. updating, rectification, integration, cancellation, transformation into anonymous form or the block of data processed in violation of the law (including those whose retention is unnecessary for the purposes for which the data are collected or subsequently processed). The attestation that these operations have been brought to the attention of those to whom the data have been communicated or disseminated (also as regards their content), except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate with respect to the protected right.

The interested party also has the right:

• To object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• To lodge a complaint with the Guarantor for the protection of personal data in the cases provided by the Privacy Regulation;

To know the detailed and constantly updated list of subjects to whom the personal data of the data subject can be communicated and to exercise the rights referred to in articles 15 and following of the Privacy Regulation, please contact the Data Controller at the email address: privacy@eurosets.com