Purpose of the Privacy Policy
Arron srl, having its registered office at Via Donat Cattin, 59, 52100 Arezzo (AR), Italy, as autonomous data controller and can be contacted by email: info@arron.it
intends to inform you, through this information on the processing of personal data ( the “Privacy Policy”), about the ways in which the Company processes the information collected through the website at www.arron.it, as provided for by Legislative Decree No. 196/2003 (the “Privacy Code”) and the new European Regulation No. 679/2016 on the protection of personal data (the “European Privacy Regulation”), applicable as of May 25, 2018.
Type of data processed
The Company collects, below, the data you provide (the “Data” ) including:
- a) Data related to purchases made through the Site;
- b) browsing data related to the use of services offered through the Site collected through cookies in accordance with cookie policy available at the following Cookies Policy link;
- c) data provided in case of inquiries and requests for assistance;
- d) data provided for participation in contests, online surveys and/or promotions launched through the Site.
Health data and in general special categories of personal data within the meaning of Article 9 of the European Privacy Regulation are not processed.
Data of minors will be processed in the manner set forth in Section 8 below.
The above data are processed only to the extent necessary to achieve the purposes described in Section 4 of this policy.
Methods of data processing
Your personal data are processed with the support of computer and/or paper means and are protected through appropriate security measures suitable to ensure the confidentiality and security of personal data. In particular, the Company takes appropriate organizational and technical measures to protect the personal data in its possession against loss, theft, as well as unauthorized use, disclosure or modification of personal data.
Arron srl shall proceed to anonymization of personal data and removal of identifying data if there is no need to process the personal data in identifiable form for the purposes of processing and upon expiration of the retention period specified in paragraph 10 below.
How your data is used
Arron srl processes Data for:
- To comply with any legal and regulatory obligations (hereinafter referred to as “Legal Purposes”);
- To carry out activities functional to business and business unit disposals, acquisitions, mergers, demergers or other transformations and for the execution of such transactions (“Purposes of Legitimate Business Interest”).
Arron srl processes the Data, with your prior consent, to:
- The sending of commercial communications, via electronic means (e.g., via e-mail, sms, mms, regular mail, mobile, social networks and applications) or paper, related to its brands, services and/or products, for participation in events and conducting market and statistical analysis (“Marketing Purposes”)
- Analyze your habits, interests and preferences in order to better focus the above marketing activities on your needs (“Profiling Purposes”).
In addition, data related to the volume of spending, product category, store where the purchase took place, and date of birth may be used with effect from May 25, 2018 on the basis of Arron srl’s legitimate interest in providing a service that is more in line with the needs of data subjects, appropriately balanced with the needs to protect the rights of data subjects (“Legitimate Marketing Interest Purposes”).
Legal basis for processing
The processing of personal data for the Contractual Purposes is mandatory as it is necessary for the purposes of registration, the performance of the activities referred to in the Terms of Sale of the Site, the purchase of products online and for the use of specific services offered through the Site. The provision of personal data for the Purpose of Law is mandatory as it is required under applicable laws. In the event that you do not want your personal data to be processed for these purposes, you will not be able to take advantage of the Site and the services made available through it.
The processing for the Purposes of Legitimate Interest of Business is carried out pursuant to Article 24, paragraph 1, letter d) of the Privacy Code and for the pursuit of the legitimate interest of Arron srl and its counterparties in the performance of the economic operations indicated therein pursuant to Article 6, letter f) of the Privacy Regulations, adequately balanced with the interests of users in that the processing is carried out to the extent strictly necessary for the performance of such operations.
The processing of personal data for Marketing and Profiling Purposes is optional and subject to your prior consent. Failure to provide consent will result in the inability of Arron srl to keep you updated on new products or services, promotions, personalized offers, as well as to conduct market surveys and send you communications or other informational material that may be in line with your interests.
The processing for the Purposes of Legitimate Marketing Interest is functional to the pursuit of a legitimate interest of Arron srl adequately reconciled with the interests of users in light of the limits imposed on such processing illustrated in paragraph 4) and will be carried out with effect from May 25, 2018, the date on which the Privacy Regulation became effective.
Data disclosure and sharing
Data provided by users will be processed by data processors and data processors of Arron srl as indicated in this policy and will not be disseminated under any circumstances
The Company contracts with selected third parties that provide services for Site maintenance, customer communication management, and other services. Services provided by third parties are: Site hosting, fraud checks, payment processing, shipping and delivery, correspondence, web marketing. Data collected through the Site may be accessed by the aforementioned third parties, exclusively on behalf of the Company. In any case by legal provisions such service providers are not allowed to use your Personal Data for other purposes. The Company may also disclose Data to financial institutions or other third parties in connection with payment transactions performed. User Data are not otherwise disclosed to other third parties, except as required by law, in connection with a lawsuit or legal proceeding, or when otherwise necessary to protect the rights or interests of the Company.
Transfer of data abroad
The Data may be freely transferred outside the national territory to countries located in the European Union. Any transfer of your Data to countries located outside the European Union will take place, in any c a s e , in compliance with the appropriate and suitable safeguards for the purposes of the transfer itself in accordance with t h e applicable legislation and in particular article 44 of the Privacy Code and articles 45 and 46 of the Privacy Regulations.
You shall have the right to obtain a copy of the data held abroad and to obtain information about the place where such data is stored by making an express request respectively to Arron srl at the address in paragraph 9 of this policy.
Under 18 years of age
The Site is not aimed at individuals under the age of 18 years, however, some services offered may also be usable by individuals under the age of 18 years. In these cases, Arron srl collects and processes the personal data of minors exclusively for the purposes and in the manner set forth in this notice in compliance with the rules on the processing of personal data of minors under Article 8 of the Privacy Regulations with the prior consent of the parent and / or guardian and / or person acting on their behalf whose data may be collected only to obtain such consent in the manner provided by the Site.
Your rights
You may, at any time and free of charge (a) obtain confirmation of the existence or otherwise of data concerning you and be informed of the same; (b) know the origin of the data, the purposes of the processing and its methods, as well as the logic applied to the processing carried out by electronic means; (c) request the updating, rectification or – if you are interested – the integration of the data; (d) to obtain the cancellation, transformation into anonymous form or blocking of any data processed in violation of the law, as well as to oppose, for legitimate reasons, the processing; (e) to oppose, in whole or in part, the processing of data concerning him/her for direct marketing purposes carried out through automated and/or traditional means; (f) to revoke, at any time, consent to the processing of data, without in any way affecting the lawfulness of the processing based on the consent given before revocation.
In addition to the rights listed above, you may benefit with effect from May 25, 2018 from the rights set forth in paragraph 10(b) of this policy.
At any time you may exercise the above rights, change your contact details, notify the Company of any updates to your data, request the removal of your personal data disclosed by third parties, or to obtain further information about the Company’s use of your personal data, by contacting the Company at: info@arron.it