• PrismaNero is a registered trademark and property of the company Studioresetproject srl, with registered office in via Litoranea, 129 – 61037 - Mondolfo - (Pesaro - Urbino)  E-Mail: info@prismanero.net     (VAT number IT02366340418) (hereinafter, “Data Controller”), as Data Controller of personal data pursuant to articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data (hereinafter, "Regulation") informs pursuant to art. 13 of the Regulation which will proceed with the processing of personal data relating to users of the site.

 

​

1. OBJECT OF THE TREATMENT

​

• REGISTRATION: at the time of purchase the User can decide to use the billing and shipping details entered on the site on the checkout page also to create an account. Alternatively, you can register via social networks, importing your name, surname and email address, or save your credit card number so you don't have to re-enter it later.

 

• PURCHASE: by making a purchase on the site, data such as name, surname, address, telephone, e-mail and payment data are collected. If the Customer is the holder of a VAT number, the VAT number, company name and PEC address or recipient code will also be requested and collected.

 

• BLOG: by leaving a comment on the blog, your name (or nickname) and e-mail address are collected.

​

• ASK A QUESTION: by filling out and sending the form, your name and email address are collected.

 

• WRAPPING PAPER: we will ask for the recipient's email address, their name and the message addressed to them (optional) in order to send the gift card; subsequently we will ask for the recipient's data to finalize the shipment, as better specified in the "Purchase" paragraph.

 

• NEWSLETTER: by subscribing to the newsletter, your email address is collected.

 

• REVIEW: when reviewing a product, data such as name and surname (or nickname) and email address are collected.

 

2. LEGAL BASIS AND PURPOSE OF PROCESSING

​

The data processing is carried out to allow the carrying out of activities related to the establishment and management of the service requested from the Data Controller. The data will be processed lawfully, correctly and with the utmost confidentiality, in compliance with adequate security measures as required by the Code and the Regulations.

The processing will be carried out using analogue and digital means. However, the data will not be publicly disclosed. In particular:

​

• REGISTRATION: the purpose is to allow direct access to the site, allowing a faster and more immediate purchase. The legal basis is consent.

 

• PURCHASE: the purpose is to allow you to complete the purchase of PrismaNero products and allow them to be sent. The legal basis is the execution of a purchase contract and the fulfillment of legal obligations (including those of an accounting and tax nature). The data is communicated to the relevant courier who takes care of the shipment, duly appointed as data controller. With the purchase, the data is exported to a CRM for sending commercial information for which, pursuant to art. 130 c. 4 d. lgs. n. 196/03, consent is not necessary; without prejudice to the possibility of opting out at any time via a dedicated link.

 

• BLOG: the legal basis is consent and the data is processed to allow the publication of the comment.

​

• ASK A QUESTION: The legal basis is consent and the data is processed to allow  PrismaNero  to answer Users' questions.

 

• WRAPPING PAPER: We will process the data to execute the contract resulting from the purchase of the gift card as better specified in the "Purchase" paragraph. We will also process the email address of the beneficiary of the gift card (i.e. the person who will receive it as a gift) in order to deliver it. The beneficiary's data are processed, initially, pursuant to art. 14 of the GDPR and will not be further processed for any purpose until the moment of use. With the first purchase by the beneficiary, he can be identified as a Customer and his data will be processed in accordance with this privacy policy for the purposes of purchase and/or registration as better specified in the dedicated paragraphs.

 

• NEWSLETTER: The purpose is to inform the User with news and promotions and the legal basis is consent.

 

• REVIEW: The legal basis is consent and the data is processed to allow the publication of the review on the site.

 

• In the event that the purchase is not completed (abandoned cart, pending order awaiting payment, failed payment) or in the event that an order is concluded by bank transfer, but without ever receiving payment, PrismaNero  yes reserves the right to send two messages via email 24/48 hours apart to give the User the right to pick up where he left off. The purpose of the processing is, in the first case, the legitimate interest of the Data Controller, while in the second the exercise of pre-contractual measures carried out at the request of the interested party. Subsequently, after the purchase, always on the basis of the legitimate interest of the Owner, a request for a review of the product is sent with any relative confirmation of publication.

​

3. DATA PROCESSING METHODS AND STORAGE PERIOD

​

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case:

​

• REGISTRATION: until the User decides to unsubscribe from the site;  www.PrismaNero  will delete each account 7 years after the User's last login. Before this, the Data Controller will always send an Email to find out if the User wants to keep the account active.

 

• PURCHASE: the data entered will be kept for no longer than 10 years from purchase.

 

• BLOG: comments will be kept online as long as the site is active.

 

• WRAPPING PAPER: The gift card does not contain personal data, it is virtual and can only be used by the recipient. The buyer's data will remain saved and will be processed in accordance with what is established in the "Purchase" section. The recipient's data necessary for sending the card (e-mail address and name) will be kept to allow the use of the card. itself which is linked to the beneficiary's e-mail address. With the first purchase by the beneficiary, he can be identified as a Customer and his data will be processed in accordance with this privacy policy for the purposes of purchase and/or registration as better specified in the dedicated paragraphs.

 

• ASK A QUESTION: the Data Controller will check the obsolescence of the data every 5 years and will proceed with its cancellation if necessary.

 

• NEWSLETTER: 5 years from the last email sent.

 

• REVIEW: Reviews will be kept online as long as the site is active.

 

• ABANDONED CART: the Data Controller will check the obsolescence of the data every 5 years and will proceed with its deletion if necessary.

​

4. DATA COMMUNICATION

​

The Data Controller may communicate the data for the purposes referred to in the art. 2 to all subjects to whom communication is mandatory for the fulfillment of the purposes established by law. However, the data will not be publicly disclosed.

​

5. PLACE OF DATA STORAGE AND TRANSFER

​

The management and storage of personal data takes place on servers located within the European Union (currently the servers are located in Italy) of third-party companies appointed and duly appointed as data controllers.

To allow payment via third-party circuits (e.g. PayPal), sending commercial information (newsletter) or use of visit and sales reporting systems on the site, the Owner also uses one or more suppliers based in the USA and transfers the data necessary in non-EU countries. The Data Controller also ensures that the transfer of data outside the EU takes place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission. The list of data controllers can be found on site.

​

6. RIGHTS OF THE INTERESTED PARTY

​

The User, in his capacity as an interested party, has the rights referred to in the art. 15 of the Regulation and precisely:

• The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form;

• The interested party has the right to obtain information:

 

1. Of the origin of the personal data;

 

1. The purposes and methods of processing;

 

1. Of the logic applied in case of processing carried out with the aid of electronic instruments;

 

1. The identification details of the Owner, managers and representative;

 

1. Of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or appointees.

​

• The interested party has the right to obtain:

 

1. The updating, rectification or, when interested, integration of the data;

 

1. The cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

 

1. The certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right.

 

• The interested party has the right to object, in whole or in part:

 

1. For legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;

 

1. To the processing of personal data concerning him for the pursuit of purposes not contemplated by the art. 2.

​

Also pursuant to art. 15 and following of the GDPR, the User has the right to request at any time access to his personal data, rectification or cancellation of the same, limitation of processing in the cases provided for by the art. 18 of the GDPR, obtain the data concerning him in a structured, commonly used and automatically readable format, in the cases provided for by the art. 20 of the GDPR.

At any time, the User can revoke pursuant to art. 7 of the GDPR the consent given; lodge a complaint with the competent supervisory authority pursuant to art. 77 of the GDPR if you believe that the processing of your data is contrary to the legislation in force. The User can formulate a request to object to the processing of his personal data pursuant to art. 21 of the GDPR in which to highlight the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in the event of the existence of binding legitimate reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the 'User. The interested party can exercise the rights referred to in the previous article at any time by sending:

​

• Registered mail with return receipt to:  Studioresetproject s.r.l, via Litoranea 129/A  – 60037 (Pesaro/Urbino) Italy

• Email to info@prismanero.net

​

​