INFORMATION ON THE PROCESSING OF PERSONAL DATA / COOKYE / POLICY / ART. 13 Reg. 2016/679 EU

This information, made pursuant to art. 13 of the European Regulation 679/2016 of the European Parliament and of the Council, complies with the provisions of Legislative Decree 196/2003 of the Italian Republic, with the Provision of the Guarantor for data protection n. 229 of 8 May 2014, as well as to Directive 2002/58 / EC of the European Parliament and of the Council.

This version of the information is in force from the date of publication on the site, i.e. August 27, 2019.

WHO IS IT FOR?

This information is addressed to subjects who will use the services provided by the site https://www.amelushop.com or, in detail:

    physical persons browsing the website, even in consultation;
    natural persons registering on the site by creating a private account;
    natural persons registering on the site by creating a business account, in relation to the personal data of the subject who physically makes the registration;
    natural persons making a purchase from the site, with simultaneous registration;
    natural persons who contact the company Italian Race S.r.l. through the form "contact us".

In this information will be indicated as Interested.

WHO IS THE DATA?

The data controller for all treatments carried out as a result of the use of the site https://www.amelushop.com is the company AmelùShop di Marilù Albertario (VAT 02337920504), a company incorporated under Italian law in PISA (PI), in person of the pro tempore legal representative.

As part of the treatments covered by this information, you can contact the Data Controller at the following addresses: Via A.Meucci 6 - Ponsacco (PI), Email: This email address is being protected from spambots. You need JavaScript enabled to view it., Tel: +39 0587 731675.

The data are physically processed by employees and collaborators of the Data Controller, who have been previously instructed and authorized to process them.

In order to carry out the processing related to the registration and orders made through the website https://www.amelushop.com, the Owner uses the support and help of companies that provide IT, advertising and shipping services such as , principally and without limitation, the following companies:

* ARUBA Sr.l. with registered office in Arezzo (AR), for server and database allocation.
* Studio AC Project, for the management, programming and assistance of the website and integrated management;
* Google LLC, with registered office in Mountain View, California (United States of America), for statistical analysis of data relating to the site and profiling of data subjects;

Therefore, the aforementioned companies have been appointed as Data Processors.
The complete list of data processors can be found at the Data Controller's headquarters and will be communicated upon simple request for access, in accordance with current legislation.
The addresses and contacts of the Data Processors, for the purposes of this information, can be found on the respective company websites.

WHAT DATA ARE TREATED?

For the management of the services provided through the website https://www.amelushop.com the following data are processed:

E-mail, for registration to the newsletter;
Name, Surname, E-mail, for registration on the site;
Name, Surname, E-mail, to get in touch with AmelùShop;
Name, Surname, E-mail, Full address, Telephone number, to make a purchase.

WHERE ARE THE DATA PROCESSED?

The data collected through the website https://www.amelushop.com will be processed by the Data Controller in Italy, at its headquarters located in Ponsacco (PI) and at the Italian branches of the AmelùShop company in Marilù Albertario. 
The data will be processed by the Data Processors at its offices and branches, located in the territory of the European Union.
For some treatments, it may be necessary to communicate the data also outside the European Union, in the event that the Data Controller carries out activities and treatments outside the EU and / or if the delivery of the order is required outside EU.
In any case, the transfer of data outside the European Union will take place on the basis of the assumptions envisaged by current legislation, for transfers within companies, the application of standard contractual clauses defined by the European Commission for transfers to third-party companies or the verification of the presence of a decision on the adequacy of the personal data protection system of the country importing the data, such as the EU Implementing Decision 2016/1250 (Privacy Shield).

HOW DATA IS TREATED?

The data are collected from the interested party, through the use of cookies, or by sending by the same through online forms dedicated to registration and / or finalization of the purchase order or by sending by the same via the online form contact. Once acquired, the Data of the Data Subject is stored and stored in digital form on the computer systems of the Data Controller and / or its Data Processors.

In case of purchase, the data may also be processed in analogical form at the headquarters of the Data Controller and / or its data processors.

WHAT COOKIES COLLECT DATA?

The website https://www.amelushop.com uses technical cookies, which can be used without asking the consent of the interested party, since they are strictly necessary for the provision of the service.
Furthermore, third-party profiling cookies may be used whose use is subject to the consent directly given to such third parties by accessing the relevant information on the use of cookies.
Profiling cookies can be used by the owner of the treatment or by the owner of the cookie itself, to memorize the choices made by the interested party, to provide personalized or optimized features or to memorize his habits and preferences expressed during navigation. For example, profiling cookies can be used to offer the online services online, to send them advertising that takes into account their interests or to prevent them being offered services that they have refused in the past.

The site https://www.amelushop.com uses the following cookies:

The authorization to collect and store data through cookies can be revoked at any time: the interested party can disable the use of cookies through the specific setting options of different browsers.

Microsoft Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=it

Mozilla Firefox: https://support.mozilla.org/it/kb/Bloccare%20i%20cookie

Apple Safari: https://support.apple.com/kb/ph21411?locale=it_IT

FOR WHAT PURPOSES ARE DATA PROCESSED?

The data collected by the Data Controller are used to:

    improve the use of the site and record statistics on its use, as well as profiling the data subjects;
    register and register the interested party on the website https://www.amelushop.com
    fulfill the obligations, also by law, deriving from the purchase contract signed by the Interested party on the website https://www.amelushop.com, and inform the interested party about the progress of the order and shipment;
    send commercial communications regarding the activity carried out and the products sold by the company AmelùShop.
    The data will also be processed through automated decision-making processes, such as profiling, in order to improve navigation and offer to the customer.

ON WHICH LEGAL BASE ARE DATA PROCESSED?

The processing of data collected by the Data Controller is based on the explicit consent of the interested party, in cases of browsing the site https://www.amelushop.com, and / or registration to the site and / or registration to the newsletter service of the AmelùShop company and / or in case of contact through the website https://www.amelushop.com in case of purchase, the treatment is based on the consent provided at the time of the conclusion of the contract.
Should the Data Subject withdraw their consent to the processing, the Data Controller may continue processing for obligations deriving from the law and / or on the legal basis of its legitimate interest.

HOW ARE THE DATA PROTECTED?

The data processed by the company AmelùShop they are protected by access with password protection and encryption of navigation data.

IS IT REQUIRED TO PROVIDE THE DATA?

The conferment of data by the interested party is mandatory in order to fulfill the requests of the interested party, namely the registration, purchase or request for contact.
Any refusal to provide data will make it impossible to provide the requested service by preventing the Interested person from registering, making a purchase and / or contacting the AmelùShop.
The provision of data collected through technical cookies is mandatory to proceed with the navigation of the site, while it is optional for analytical and profiling cookies.

WHO ARE THE DATA COMMUNICATED TO?

The data collected and processed by the Data Controller will not be disclosed to subjects other than the Data Processors and the subjects authorized to process AmelùShop.

FOR HOW LONG ARE THE DATA HAS BEEN TREATED?

The data collected through the site https://www.amelushop.com are stored and processed only as long as the purposes for which they were collected remain, namely:

    in case of browsing, the data are processed for the duration specified for each cookie;
    in case of registration, until the interested party withdraws consent to the treatment or requests cancellation from the service;
    in case of purchase, the data relating to the order will be processed for a period of no more than 26 months from the date of delivery of the order while the billing data will be processed for a period not exceeding 10 years from the date of purchase;
    in case of contact request, the data will be processed until the request has been completely fulfilled, and in any case for a period of time not exceeding 6 months.

HOW ARE THE INTERESTED ARE PROTECTED?

The interested party can protect himself and his personal data by exercising the rights required by current European legislation by sending a free request to the Data Controller.
The Data Controller will respond as soon as possible, and in any case within one month from receipt of the request or, in the event that additional time is required to process the request, within a maximum of two months; in the latter case, the Data Controller will inform the interested party of the reasons for the delay.
In the event that the Data Controller does not consider having to process the request, he will communicate his refusal directly to the Data Subject within one month of receiving the request. In this case, the interested party may lodge a complaint with the Supervisory Authority of his country or have recourse to the judicial authority of his country.
The exercise of the rights of the interested party is free, unless the requests are manifestly unfounded or repetitive: in this case, the Data Controller may charge a fee or reject the request.
The interested party can exercise his right of access, pursuant to art. 15 Reg. 2016/679 UE, by making a request to the Data Controller in order to obtain confirmation that data concerning them are being processed (or not). With the same procedures it can ask to know: which data are processed and for what purpose; how long they are stored; if the data have been or will be communicated to other parties, and possibly the identity of these subjects and the country where they are located, in addition to the existence of adequate guarantees for the transfer; the existence of the right to request the rectification, limitation or cancellation of their data; the existence of the right to oppose the treatment; the existence of the right to lodge a complaint with a Supervisory Authority; the existence of an automated decision-making process, including profiling, and the consequences of such processing. Finally, the interested party has the right to receive a free copy of their personal data being processed, provided that this does not affect the rights of other subjects; any additional copies requested may be issued upon payment of an expense contribution.

The interested party can exercise his right of rectification, pursuant to art. 16 Reg. 2016/679 UE, by making a request to the Data Controller in order to correct inaccurate data concerning it. In the same way, the interested party may request that the data processed be integrated with others, providing their own declaration to that effect.
The interested party can exercise his right to cancellation, pursuant to art. 17 Reg. 2016/679 UE, by making a request to the Data Controller to delete the personal data collected and processed by the company AmelùShop in one of the following cases: if personal data are no longer necessary with respect to the purposes for which they were collected; if the interested party has revoked his consent to the processing; if the interested party has opposed the treatment; if the personal data have been unlawfully processed by the Data Controller; if the data must be deleted to fulfill a legal obligation to which the Data Controller is subject; if the interested party is under the age of 16 and the persons who exercise parental responsibility have not given their consent.
If the Data Controller has made public the personal data of the interested party and is obliged to cancel them, he will inform any other subjects who are processing the data of the Data Subject of the cancellation request, limited to the actual technical and economic possibility of this procedure.

The interested party can exercise his right to limitation, pursuant to art. 18 Reg. 2016/679 EU, by making a request to the Data Controller to ensure that the processing of data is limited solely to the retention of data, without the Data Controller being able to carry out other operations, in one of the following cases: if the Data Subject disputes the accuracy of the data, for the time necessary for the Data Controller to verify; if the processing is illegal and the interested party opposes the cancellation; if the Data Controller no longer needs to process the data but must keep them for judicial reasons; if the interested party has opposed the processing, for the time necessary to verify the balance between the rights of the interested party and the legitimate interests of the Data Controller.
The interested party can exercise his right of opposition, pursuant to art. 21 Reg. 2016/679 EU, at any time and for reasons related to its particular situation. This right can be exercised by sending a communication to the Data Controller in the event that the processing is based on the legitimate interest of the Data Controller or in the event that the data are processed for scientific research or for statistical purposes.

The interested party can exercise his / her right to the portability of personal data, pursuant to art. 20 Reg. 2016/679 UE, by making a request to the Data Controller in order to receive personal data concerning it in a structured format, in common and automatically readable by automatic device. In the same way, the interested party may request that their data be transmitted to another data controller.
However, the exercise of this right can not harm the rights and freedoms of others.
The data will be communicated in .html format.

In the event that the interested party considers that the processing of his / her personal data is carried out in violation of the 2016/679 European Regulation, he / she has the right to propose a complaint to the Supervisory Authority, pursuant to art. 77 Reg. 2016/679 EU, choosing from the Supervisory Authorities of the Member State in which he resides, of the Member State in which he works or of the Member State in which the alleged violation has occurred.
In any case, the Data Subject may take action to protect his / her rights also by recourse to the Administrative and / or Judicial Authority of his / her Country.
The Data Subject may revoke the consent to the processing of their data at any time, in the same way as consented or by sending a communication to the Data Controller. The revocation of consent will not affect the treatments already carried out, but will result in the interruption of ongoing treatments and the destruction of data of the interested party.

AmelùShop
https://www.amelushop.com