Source: https://www.uptobe.it/privacy-policy/
Timestamp: 2019-04-25 07:47:35+00:00

Document:
The protection of your personal data is very important to us. We would therefore like to inform you in the following pages about the data collected during your visit and the purposes it is used for. Should you still have any queries about the handling of your personal data, please contact our data protection officer.
The ongoing further development of technology, changes in our services or the legal situation as well as other reasons can require adjustments of our data protection notice. We therefore reserve the right to change this data protection declaration at any time and ask you to regularly inform yourself about the current status.
We fundamentally collect and use the personal data of our users only insofar as this is required for the provision of a functional website and of our contents and services as well as for the implementation of our business purpose. As a rule we collect and use the personal data of our users only after the user has given his/her consent. Exceptions apply in such cases where it was not possible to obtain prior consent for factual reasons and where the processing of the data is permitted because of statutory requirements.
We process personal data only to fulfil our contractual obligations or to preserve our overriding legitimate interests. Our legitimate interests are the implementation of our business purpose.
Insofar as we obtain consent from the data subject for processing operations of personal data, Article 6, paragraph 1, sentence 1 lit. a EU General Data Protection Regulation (EU-GDPR) serves as the legal basis for the processing of personal data.
In the processing of personal data required to perform a contract of which the contractual party is the data subject, Art. 6 paragraph 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfil a legal requirement that our company is subject to, Art. 6 paragraph 1 sentence 1 lit. c GDPR serves as the legal basis.
In the case that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 paragraph 1 sentence 1 lit. d GDPR serves as the legal basis.
If processing is required to protect a legitimate interest of our company or of a third party and the interests do not override the interests, fundamental rights and freedoms of the data subject of the first-named interest, Art. 6 paragraph 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.
We forward personal data to our business partners and service providers for the implementation of the business purpose. To implement our business purpose we use typical contact and address data of our customer and business partners. We typically receive the personal data direct from the data subject or with the consent of the data subject and also in exceptional cases from third parties.
Insofar as nothing to the contrary is stated in the following sections, no forwarding of your data to third parties takes place, unless we are legally obliged to do so, or the data transmission is required to perform the contractual relationship or you have previously given your explicit consent to the forwarding of your data. External service providers and partner companies, such as, for example, online payment providers or the shipping company tasked with the delivery, only receive your data insofar as it is necessary for the execution of your order. However, in these cases the extent of the transmitted data is restricted to the minimum required. Insofar as our service providers come into contact with your personal data, we assure that the regulations of the data protection laws are observed in the same manner. Please also observe the data protection notices of the individual providers. The individual service provider is responsible for the contents of third party services, whereby we verify as far as can be reasonably expected that the services observe statutory requirements.
Essentially we do not forward personal data to recipients in third countries (i.e. countries outside of the EU). Should data be forwarded to recipients in third countries, we assure not only that we will obtain the permission required for the forwarding, but that the third country recipient also assures an adequate level of data protection (or derogations for specific situations pursuant to Art 49 paragraph 1 GDPR applies).
In specific case we forward personal data to recipients in third countries (i.e. countries outside of the EU).
We have taken extensive technical and organisational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly checked and revised to take into account technological progress.
The personal data of the data subject is deleted or blocked, within 48 hours after we received an e-mail (oblivion@atelier-uptobe.it) requesting the deletion or modification of your data. Storage can also be effected if this was required by the European or national legislators in European Union regulations, laws or other stipulations that the person responsible is subject to. The data is also blocked or deleted if a statutory storage period prescribed by the cited standards expires, unless there is a need for continued data storage for the purposes of a conclusion or performance of a contract.
When visiting the website for purely informational purposes, i.e. when you do not register or transfer other information to us, we collect only the personal data that your browser transmits to our server.
Within the framework of the balancing of interests pursuant to Art. 6 paragraph 1 senteince1 lit. f GDPR we have taken into account and weighed up our interest in provision and your interest in the processing of your personal data in compliance with data protection requirements. As the data below is necessary for the technical provision of our service in order to be able to offer you access to our website and also to ensure stability and security, in particular to offer protection against misuse, we have come to the conclusion that this data – in conjunction with an assurance of data security based on the state of technology – can be processed, whereby your interest in processing in compliance with data protection requirements is adequately taken into account.
Whenever our internet site is visited, our system automatically records data and information from the computer system of the visiting computer.
The data is likewise stored in the logfiles of our system. Storage of this data together with other personal data of the user does not take place.
The legal basis for the temporary storage of the data and the logfiles is Art. 6, paragraph 1, sentence1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary so as to enable delivery of the website to the computer of the user. To do this the IP address of the user remains stored for the duration of the session.
Storage in logfiles is required in order to assure the functionality of the website. In addition, the data serves to optimise the website and to assure the security of our IT systems. In particular our website and our other IT system help us to adapt to the browser, operating system and end devices used.
An evaluation of the data for marketing purposes does not take place in this connection.
These purposes are also our legitimate interest in data processing pursuant to Art. 6 paragraph 1 sentence1 lit. f GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is recorded in order to provide the website, this is the case when the session in question has ended.
In the case of storage of data in logfiles, this is the case after seven days at the latest. Storage above and beyond this period is possible. In this case the IP addresses of the user are deleted or distorted so that it is no longer possible to recognise the calling client.
The recording of data for the provision of the website and the storage of the data in logfiles is absolutely essential for the operation of the internet site. As a consequence the user has no possibility to object to this.
The user is asked as part of the registration process to consent to the processing of this data. After registration has been completed you receive an e-mail and can view and manage the registration data. Registration is effected on a voluntary basis, but may be a precondition for using our services.
Assuming the user gives his or her consent, the legal basis for the processing of the data is Art. 6 paragraph 1 sentence1 lit. a GDPR.
If registration serves to perform a contract, of which the contractual partner is the user or in order to take steps prior to entering into a contract, the legal basis for the processing of the data is also Art. 6 paragraph 1 sentence1 lit. b GDPR.
User registration is necessary for the provision of certain contents and services, in particular the extended use of our web shop on our website. User registration also serves for the performance of a contract with the user or to take steps prior to entering into a contract. Registration refers in particular to the use of our web shop.
As a user you can cancel your registration at any time. You can have the data stored about you altered at any time.
You can send an email to oblivion@atelier-uptobe.it requesting the deletion or modification of your data.
If the data is required for the performance of a contract or to take steps prior to entering into a contract, a premature deletion of the data is only possible insofar as no contractual or statutory obligations contradict this.
No data is stored when the message is sent. Alternatively, contact can be established via the email address provided. In this case the personal data of the user transmitted via the email is stored. In this connection the data is not forwarded to third parties. The data is solely used for the processing of the conversation.
If the user has given his or her consent, the legal basis for the processing of the data is Art. 6 paragraph 1 sentence1 lit. a GDPR. paragraph 1 sentence1 lit. a GDPR.
Legal basis for the processing of the data that is transmitted as part of sending an email is Art. 6 paragraph 1 sentence1 lit. a GDPR. If the intention of the email contact is the conclusion of a contract, the legal basis for the processing is also Art. 6 paragraph 1 sentence1 lit. a GDPR.
The processing of personal data from the input mask is used solely for the process of establishing the contact. In the case of contact by email there is also the necessary and legitimate interest in processing the data.
The personal data otherwise processed during the sending process is used to prevent misuse of the contact form and to assure the security of our IT systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contract form and the personal data sent by email, this is the case when the conversation with the user has ended. The conversation is deemed to have ended when the circumstances suggest that the subject matter in question has been conclusively clarified.
The personal data additionally collected during the sending process is deleted at the latest seven days afterwards.
The user can revoke his or her consent to the processing of personal data at any time. If the user establishes contact with us via email, he or she can object to the storage of his or her personal data at any time. The conversation cannot be continued in such a case.
In this case all personal data stored during the establishment of the contact is deleted.
You can consent to subscribe to our newsletter which we use to notify customers about our current offers of interest.
We employ the so-called double-opt-in-procedure for our newsletter subscription process. This means that once you have supplied us with your email address we send an email confirmation to this email address asking you to confirm that you wish to have the newsletter sent to you. If we do not receive acknowledgement of this email within 72 hours, the data you have given will be automatically deleted. If you confirm the request to receive newsletters, we store your email address until you decide to unsubscribe to the newsletter. The only reason we store the data is so that we can send you the newsletter. Furthermore, we store the IP addresses you use and the times of subscribing and acknowledging so that we can prevent misuse of your personal data.
The only mandatory piece of information required for receipt of the newsletter is the email address. The providing of any other, specifically marked, details is on a purely voluntary basis and is solely used to personalise the newsletter. This data is also deleted in its entirety upon your revocation. In addition, we always store the IP addresses you use and times during subscribing and acknowledging. The purpose of the procedure is to prove that you have subscribed and, if applicable, to be able to resolve any misuse of your personal data. After receipt of your acknowledgement we store your subscription data for the purposes of sending the newsletter. Legal basis is Art. 6 paragraph 1 sentence1 lit. a GDPR.
You can revoke your consent to the sending of the newsletter at any time. You can unsubscribe all newsletters at any time and without the need to give any reasons or unsubscribe only special newsletters. The unsubscribe link can be found in every newsletter sent by us under “Unsubscribe”. You can also send your revocation by clicking on the line provided in every email link by email to support@atelier-uptobe.it. The data you have provided is not forwarded to third parties. We would like to point out that we evaluate your user behaviour when we send you the newsletter. For this evaluation the emails sent contain so-called web beacons, also called tracking pixels. These are one pixel image files that link to our website and thus enable us to evaluate your user behaviour. This is effected by collecting web beacons assigned to your email address and are linked with a unique ID. Links contained in the newsletter also have them. We use the data obtained in this way to devise a user profile in order to make available the newsletter tailored to your interests. When you read our newsletter we record which links you click on and conclude from this your personal interests. We link this data with the actions made by you on our website.
The information obtained in this way is stored on a server in the European Union.
You can object to this tracking at any time by clicking on the specific link provided in every email or by notifying us via the cited contact channels. Such tracking is also not possible if you have disabled in your standard settings the display of images in your email program. In this case, however, the newsletter is not displayed in its entirety and you may not be able to use all the functions. If you have the images displayed manually, the above-mentioned tracking is activated.
Should you have registered in our web shop and added products to your wish list, you will receive emails about rebates, re-availability as well as low stock levels concerning the products on the wish list. You can also unsubscribe from these messages at the end of the wish list by removing the tick.
If you would like to place an order in our web shop it is necessary for the purposes of concluding the contract that you provide personal data which we require to process the order. Mandatory details required for the processing of contracts are specifically marked as such, other details are voluntary. We use the data given by you to process you order. In addition, we can forward your payment details to the payment service provider selected by you. Additionally, we forward your address details to the shipping logistics service provider selected to carry out shipping.
The legal basis for this is Art. 6 paragraph 1 sentence1 lit b. GDPR.
You can also create a user account on a voluntary basis, which we can then use to store your data for additional purchases at a later date. This registration is based on Point 3 of this declaration.
We can also process the data given by you in order to notify you about additional products in our range that you may find of interest or have emails about technical information sent to you.
Commercial and fiscal stipulations require us to store your address, payment and order details for the period of ten years. Nevertheless, we restrict processing after two years; this means your data is only used to observe the statutory requirement.
You can object to the use of your data for advertising and data analysis purposes at any time. Please send your objection to support@atelier-uptobe.it.
To prevent unauthorised access to your personal data, in particular financial data, the order process is encrypted by hybrid encryption protocol for the secure data transmission “Secure Socket Layer” (SSL).
PayPal (PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal 2449 Luxemburg) is a payment method termed as a so-called E-wallet. This means the customer creates an actual payment method with PayPal and logs with us into his PayPal account during the payment process in order to confirm the payment there. The login is effected on the PayPal site and the customer must share no payment data. However, the following data is transmitted to PayPal when this payment method is used: amount, order number, name (both of the invoice as well as the delivery address), address (both of the invoice as well as the delivery address), email, telephone number. The purpose of the data processing is the execution of your payment via PayPal. We receive from PayPal a payment conformation relating to the above-mentioned data and the time of payment. Legal basis is Art. 6 paragraph 1 sentence 1 lit. b GDPR. The data transmission described is effected simultaneously also for the purposes of fraud prevention at PayPal. Therefore, the additional legal basis Art. 6 paragraph 1 sentence1 lit. f GDPR applies. Insofar as you effect payment by PayPal, a right of objection is excluded as the processing of your data is absolutely essential.
Most browsers accept cookies automatically. If you would like to prevent the acceptance of cookies, you can select the setting “accept no cookies” in the browser settings. How this works in detail can be found in the instructions of your browser manufacturer. Cookies already stored on your computer can be deleted at any time. However, we would like to point out this may restrict the functionality of our web presence.
This type of cookie is set by the website that the user visits. Only this website is permitted to read the cookie information.
Third-party cookies are set by organisations that are not the operators of the website the user visits. These cookies are used by marketing companies, for example.
The legal basis for the processing of personal data by the means of cookies is Art. 6 paragraph 1 sentence1 lit. f GDPR.
The user data collected by the technically necessary cookies is not used to generate user profiles.
We use analysis cookies to improve the quality of our website and its contents. The analysis cookies enable us to find out how the website is being used and therefore allow us to ensure an ongoing improvement of our web presence. In addition, they enable us to maintain quality assurance and constantly improve the user experience.
These purposes are also our legitimate interest in processing personal data pursuant to Art. 6 paragraph 1 sentence1 lit. f GDPR.
Our website uses transient cookies. These are automatically deleted when you close your browser. These are typically so-called session cookies. These store a so-called session ID with which various queries form your browser can be assigned to a common session. It means that your computer can be recognised again when you return to our website. These cookies are deleted when you log out or close the browser.
Our website also uses persistent cookies. These are automatically deleted after a predetermined period that can vary depending on the cookie. These cookies, too, can be deleted at any time.
Our website likewise uses flash cookies. The flash cookies used are not recorded by your browser, but by your flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your end device. These objects store the required data irrespective of the browser you are using and have no automatic expiry date. If you no longer wish flash cookie processing, you must install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe flash killer cookie for Google Chrome. You can also partially prevent the use of flash cookies by changing the settings of your flash player. You can prevent the use of HTML5 storage objects by employing the private mode in your browser. Additionally, we recommend manually deleting your cookies and the browser history on a regular basis.
In addition to the above-mentioned cookies we also employ additional tools for the purposes of usage analysis, content optimisation, marketing analysis and advertising optimisation. The explanations in section 12 do not apply to these tools. We will now inform you about each of these special functions, including the extent of data collection, the legal basis, the purposes pursued with the data collection as well as the possible ways you have at your disposal to prevent the use of these tools.
A so-called tracking pixel (also: 1×1 pixel, web beacon or pixel tag) is a 1×1 gif loaded when our website is called up. This tracking pixel allows us and our partners to record statistical data for our marketing and web analysis. By employing appropriate analysis tools we can use this data for various purposes. The different marketing instruments are explained more thoroughly in the next section. It is not possible to identify your person.
We use different tracking systems on our website, which, in part, record your data. This section provides information about the providers of the systems, the purpose for which it is used, whether and which data is collected, how you can prevent this and links to the data protection provisions of the providers.
On this website we use a plug-in MonsterInsights, LLC. MonsterInsights™. It enables statistical evaluations of the speed of the website to be recorded and is used to optimise the website.
When a user calls up a website of this offer containing such a plug-in his or her browser establishes a direct connection with MonsterInsights, LLC. MonsterInsights™. The integration of the plug-in provides MonsterInsights, LLC. MonsterInsights™ with the information that a user has called up on the corresponding page of the offer.
According to MonsterInsights, LLC. MonsterInsights™ no additional personal data is collected.
We were not informed of the storage period by MonsterInsights, LLC. MonsterInsights™. There is data transfer to the USA. Guarantees pursuant to Art. 44ff GDPR exist by means of EU standard contractual clauses. Should you wish to view the standard contractual clauses, please send us an email to support@uptobe.it.
Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the analysis of the usage and functionality of our website and goes hand in hand with the ongoing optimisation of our web presence.
If you want to object to the transfer of data, send us an email to support@uptobe.it..
For more information regarding New Relic data protection, please consult the Data Protection Notice of New Relic.
We use the following technology of Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, which is a part of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google“.
Atelier-uptobe.it uses Google AdWords and Google Analytics Remarketing Lists for Search Ads (RLSA) Users that visit mytheresa.com via are collected via a Google tag and the behaviour recorded. You appear on the list for a standard period of 30 days and for a maximum period of 540 days.
is as a rule transmitted to a Google server in the USA and stored there.
The recorded behaviour pattern such as, for example, the dwell time on the site, concluded or aborted shopping cart operations, direct abort of the visit (bounce) can be used to adapt the advertising to the Google search results page.
For those exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield which you can find here.
Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest resides in the analysis of the efficacy of our advertising and the constant improvement of our advertising efficiency that goes hand in hand with this.
If you want to object to the use of the data, please click here.
We use on our website the dynamic remarketing function of Google AdWords. The technology enables us to place automatically created, target group-orientated advertising after your visit to our website. The adverts are orientated towards the products and services that you have clicked on during your last visit to our website.
Google Cookies are used to create interest-based adverts. In the process Google normally stores information such as your web query, the IP address, the browser type, browser language, data and time of your query. This information is only used to assign the web browser to a specific computer. It cannot be used to identify a person.
If you do not want to receive user-based advertising from Google, you can deactivate the placement of advertising with the aid of the Google Advertising Setting.
For more information on how Google cookies are uses, please consult the Google Data Protection Declaration.
For those exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.
Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest here is in offering personalised advertising and the resulting increase in advertising efficiency that this brings.
We also use Bing Ads Conversion Tracking. A Bing Ads cookie is set on your computer as soon as you visit our website via a Bing search ad. Using Bing Conversion Tracking, campaigns for search machine advertising are directed to Bing on a frequency basis, i.e. ads are placed more frequently for search queries that often lead to a purchase, whereas search queries that are less relevant see fewer ads.
If you would not like this, you can unsubscribe at any time on https://account.microsoft.com/privacy/ad-settings . For more information on Bing Ads Conversion Data Protection, please consult https://privacy.microsoft.com/de-de/privacystatement.
For the exceptional cases in which personal data is transferred to the USA, Microsoft has submitted to the EU-US Privacy Shield which you can find here.
Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. We use Bing Conversion Tracking in order to optimise our search engine campaigns on Bing and thus to improve our advertising efficiency. These purposes are also our legitimate interest in the sense of Art. 6 paragraph 1 sentence 1 lit. f GDPR.
We also use Microsoft Bing Ads Remarketing Lists for Search Ads. Here, the users that visit our website are detected by means of a general website tag and optional event snippets and their behaviour recorded. The recorded behaviour pattern such as, for example, the dwell time on the site, concluded or aborted shopping cart operations, direct abort of the visit (bounce) can be used to adapt the advertising to the Bing search results page. This means that users that have a great interest in our website see more ads in a higher position, while visitors that have less interest in our website see fewer ads in the search engine or even none at all. For more information on Bing Ads Remarkting Lists for Search Ads data protection, please consult https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/richtlinien-zur-datensicherheit-und-datnschutzerklaerung.
Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest are the evaluation of the statistics obtained from the findings on user behaviour and the efficacy of our advertising. This in turn serves to continually improve our web content and our web presence.
If you would not like this, you can unsubscribe at any time on https://account.microsoft.com/privacy/ad-settings. For more information on Bing Ads Conversion Data Protection, please consult https://privacy.microsoft.com/de-de/privacystatement.
So-called social bookmarks (e.g. from Facebook, Twitter and Xing) are integrated into our website. Social bookmarks are internet bookmarks, with which the user of such a service can collect links and news messages. These are integrated into our website only as a link to the relevant services. After clicking the integrated graphic, you will be forwarded to the site of the relevant provider, i.e. only then will user information be transferred to the relevant provider. Information on dealing with your personal data in the use of these websites can be found in the relevant data protection terms and conditions of the provider.
We use the email address collected at the purchase of goods on our website for direct advertising for our own and similar products. If you no longer wish to receive any direct advertisements, you can object to the use of your email address at any time. To this end, you will find a corresponding link in each newsletter.
You can demand from the responsible person a confirmation of your personal data processed by us which affect you.
the existence of automated decision-making, especially profiling, pursuant to Art. 22, Paragraphs 1 and 4 GDPR and – at least in these cases – significant information about the logic involved and the scope and the intended effects of such processing for the affected person.
You have the right to demand information about whether the personal data affecting you are transferred to a third country or an international organisation. In this context, you can demand to be informed about the suitable guarantees in Art. 46 GDPR in connection with the transfer.
You have the right to correction and/or completion against the responsible person, if the personal data processed that affect you are incorrect or incomplete. The responsible person must make the correction without delay.
if you have appealed against the processing pursuant to Art. 21, Para. 1, GDPR and has still not been determined whether the legitimate grounds of the responsible person outweigh your grounds.
If the processing of the personal data affecting you is restricted, these data, apart from their storage, may only be processed with your consent or for asserting, exercising or defending legal rights or to protect the rights of another natural person or legal entity or on the grounds of an important public interest of the Union or a member state.
If the restriction of the processing is restricted pursuant to the abovementioned prerequisites, you will be notified by the responsible person before the restriction is lifted.
the personal data affecting you are no longer necessary for the purpose for which they were collected or processed in another way.
You withdraw your consent on which the processing under Art. 6, Para. 1, P. 1, lit. a or Art. 9, Para. 2, lit. a, GDPR is based and there is an absence of another legal basis for the processing.
Pursuant to Art. 21, Para. 1, GDPR, you appeal against the processing and there are no overriding legitimate grounds for processing or you appeal against the processing under Art. 21, Para. 2, GDPR.
The personal data affecting you has been unlawfully processed.
The deletion of the personal data affecting you is necessary for fulfilling a legal obligation under Union law or the laws of the member states to which the responsible person is subject.
The personal data affecting you were collected regarding the services offered by the information society under Art. 8, Para. 1, GDPR.
If the responsible person has disclosed the personal data affecting you and they are obligated to delete them under Art. 17, Para. 1, GDPR, they are thus to take suitable measures, taking account of the available technology and the costs of implementation, including of a technological type, to inform the person responsible for the data processing, who processes the personal data, that you, as the affected person, have demanded the deletion of all links to these personal data or of copies or replications of these personal data.
If you exercise the right of correction, deletion or restriction of the processing to the responsible person, they are obligated to notify all recipients to whom the personal data affecting you has been disclosed of this correction or deletion of the data or restriction of the processing, unless this proves to be impossible or is associated with disproportionate expenditure.
You have the right against the responsible person to be informed of these recipients.
the processing is done with the help of an automated process.
In addition, in exercising this right, you also have the right to obtain the personal data affecting you are transferred direct from a responsible person to another responsible person, if this is technically possible. Freedom and rights of other persons may not be affected by this.
The right of data portability does not apply to the processing of personal data that is necessary for performing a task which lies in the public interest or ensues in exercising public authority, which has been transferred to the responsible person.
You have the right to object at any time to the processing of the personal data affecting you ensuing from Art. 6, Para. 1, P. 1, lit. e or f, GDPR, for reasons arising from your own special situation; this also applies to profiling supported by one of these provisions.
The responsible person no longer processes the personal data affecting you, unless they can demonstrate compelling, legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal rights.
If the personal data affecting you is processed to operate direct advertising, you have the right to object at any time to the processing of the personal data affecting you for the purpose of such advertising; this also applies to profiling if it is related to such direct advertising.
If you object to the processing for the purpose of direct advertising, the personal data affecting you will no longer be processed for this purpose.
Irrespective of EU Directive 2002/58/EU, in connection with the use of the services of the information society, you can exercise your right to object by means of automated process in respect of which technical specifications are applied.
You have the right to revoke your declaration of consent under data protection law at any time. By revoking the consent, the legality of the processing undertaken up to the revocation is not affected.
takes place with your explicit consent.
However, these decisions may not be based on special categories of personal data under Art. 9, Para. 1, GDPR, insofar as Art. 9, Para. 2, lit. a applies and reasonable measures have been taken for protecting your rights and freedoms as well as your legitimate interests.
Regarding the cases cited in (1) and (3), the responsible person takes reasonable measures to safeguard your rights and freedoms and your legitimate interests, wherefore at least the right to effect the intervention of a person on behalf of the responsible person who can hear the presentation of your standpoint and the appeal against the decision.
Regardless of any other administrative or judicial remedy, you have the right to complain to a supervisory authority, especially in the member state of your place of residence, your place of work or the location of the alleged breach, if you are of the view that the processing of the personal data affecting you breaches the GDPR.
The supervisory authority to which the complaint was made informs the complainant about the state and the result of the complaint, including the opportunity of a judicial remedy under Art. 78 GDPR.
Pursuant to Art. 21, Para. 2, GDPR, you have the right to object at any time to the processing of personal data affecting you. In the event of a complaint from you against the processing of your personal data for the purpose of direct advertising, your personal data will no longer be processed for this purpose. Please note that the objection has effect only for the future. Processing carried out prior to the objection are not affected by this.
If we base the processing of your personal data on a balancing of interests, you can object to the processing. In exercising such a right to object, we request that the grounds on which we should not process your personal data as described by us are presented. In the event of your justifiable objection, we will examine the facts and will either cancel or adjust the data processing or explain our compelling, legitimate grounds to you.
Our web pages may contain links to other providers. We point out that this data protection declaration applies exclusively to the web pages of atelier-uptobe.it. We have no influence on and do not control whether the other providers adhere to the data protection provisions.
We reserve the right to change or adjust this data protection declaration at any time, taking account of the applicable data protection provisions.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art 49
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78
 Art. 21