Source: https://www.interphone.com/en-gb/privacy
Timestamp: 2019-09-17 09:12:26
Document Index: 378636594

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art 46']

Privacy | Interphone Site UK
1.INTRODUCTION: THE ROLE OF CELLULARLINE SPA AND DATAEXPERT SRL IN THE PROCESSING OF PERSONAL DATA COLLECTED THROUGH THE CELLULARLINE AND INTERPHONE WEBSITES
2. IDENTITY AND CONTACT DETAILS OF DATAEXPERT AS THE INDEPENDENT DATA CONTROLLER
3. PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF CONCLUDING AND PERFORMING THE PURCHASE AGREEMENT
4. PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF CUSTOMER CARE/SERVICE
5. PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF PREVENTING FRAUD IN THE EVENT OF PAYMENT BY CREDIT CARD
6. PROCESSING OF DATA BY DATAEXPERT FOR ADMINISTRATION/ACCOUNTING AND TAX PURPOSES
7. PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF ALLOWING THE USER TO EXERCISE THEIR RIGHTS
8. PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS
9. CATEGORIES OF SUBJECTS TO WHOM DATAEXPERT DISCLOSES THE USER’S PERSONAL DATA (RECIPIENTS)
1. INTRODUCTION: THE ROLE OF CELLULARLINE SPA AND DATAEXPERT SRL IN THE PROCESSING OF PERSONAL DATA COLLECTED THROUGH THE CELLULARLINE AND INTERPHONE WEBSITES
The websites are the property of CELLULAR LINE SPA (“CELLULAR LINE”) which is also the owner of the domain names and trade marks “Cellularline” and “Interphone”. As appointed by CELLULAR LINE the websites are managed by DATAEXPERT s.r.l. (“DATAEXPERT”) which sells the products with the trademarks “Cellularline” and “Interphone” promoted on the websites.
DATAEXPERT manages the sales and transactions performed through the Websites (e.g.: management of orders, sale and delivery of products, management of returns and the legal guarantee and other activities necessary for the sale of the products through the Websites). CELLULAR LINE provides the services that enable access, browsing and registration on the Websites.
CELLULAR LINE and DATAEXPERT will process the personal data you provide for registration on the Websites and respectively, for the conclusion of the purchase agreement through the Websites as independent data controllers (individually, an "Independent Data Controller" and collectively "Independent Data Controllers"), in compliance with the provisions of EU 679/2016 (the “Regulation”) and Italian Legislative Decree No. 196 of 30 June 2003 (the "Privacy Code").
- DATAEXPERT will process your personal data, as Independent Data Controller, in order to enable the conclusion of the purchase agreement, fulfil the obligations deriving from the agreement, to comply with all the legal obligations, including tax and administrative obligations, connected thereto and for all other purposes connected with such agreement and/or the performance of pre-contractual measures, as described herein;
This information notice is therefore provided with exclusive reference to the processing performed by DATAEXPERT as the Independent Data Controller.
2.IDENTITY AND CONTACT DETAILS OF DATAEXPERT AS THE INDEPENDENT DATA CONTROLLER
DATAEXPERT S.R.L. is the Independent Data Controller of the processing of the data provided by you for the conclusion of a purchase agreement through the Websites, for the purposes as per sections 4, 5, 6, 7, 8 and 9 of this information notice. The identification and contact details of DATAEXPERT are as follows: DATAEXPERT s.r.l. with registered office in Rome, via Ovidio 32, tax code and VAT No. 04352260964 and registration number with the Rome Companies Register 1557667;
-email address: info@dataexpert.it
3.PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF CONCLUDING AND PERFORMING THE PURCHASE AGREEMENT
DATAEXPERT, as the Independent Data Controller, will process your personal data: -to enable the conclusion of the purchase agreement through the Websites (e.g.: loading of products into the basket and choice of the payment method); -to fulfil the obligations undertaken by DATAEXPERT as a result of such agreement such as, by way of example, the delivery of the products sold;
For this purpose, DATAEXPERT will process your data for the time strictly necessary for the performance of the individual processing activities (e.g. the data necessary for the performance of the purchase agreement, until the delivery of the product or, in the event of unsuccessful delivery, until the termination of the agreement), notwithstanding the fact that, after such date, DATAEXPERT may retain the data for the purposes and maximum storage periods specified in sections 4, 5, 6, 7, 8 and 9 of this information notice and/or however, in the cases established by the Regulation and/or by law.
4.PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF CUSTOMER CARE/SERVICE
DATAEXPERT, as the Independent Data Controller, will process the users’ data for general customer care and service activities and therefore to provide a response to requests for information from users, i.e. to respond to complaints, reports and objections.
The lawful basis for this processing is the performance of pre-contractual measures adopted on request by the data subject (Art. 6.1.b, last paragraph, of the Regulation) or, according to the case, the legitimate interest of DATAEXPERT (Art. 6.1.f) of the Regulation).
A legitimate interest of DATAEXPERT is to respond to requests for information and/or reports and/or objections and/or complaints from users of the Websites (to whom DATAEXPERT is obliged to respond, also on the basis of the legislation set out in the Consumer Code). Such legitimate interest of DATAEXPERT also coincides with the legitimate interest of the users of the Websites who make the requests and/or reports and/or objections and/or complaints in question and who, therefore, within the context of the relationship with DATAEXPERT, can be considered to reasonably expect their data to be used by DATAEXPERT in order to provide them with a response.
The legitimate interest of DATAEXPERT, thus identified, can therefore be considered to prevail over the fundamental rights and freedoms of the data subject, also because of such reasonable expectations and the relationship existing between the data subject and DATAEXPERT and considering the nature of the processed data and the coinciding interest of the data subjects themselves.
To exercise such right, you can contact DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
In the event of exercising the right to object to the processing of data for customer care/service purposes, DATAEXPERT abstains from any further processing of users’ personal data for such purpose, unless it can demonstrate the existence of compulsory legitimate reasons for proceeding with processing that prevail over the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
For these purposes, DATAEXPERT shall process the user’s data for the amount of time necessary for performing the requested activities and, therefore, in particular, for the amount of time necessary for providing the information requested by the user or for responding to complaints and/or reports and/or objections put forward by the user.
5.PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF PREVENTING FRAUD IN THE EVENT OF PAYMENT BY CREDIT CARD
DATAEXPERT, as the Independent Data Controller, shall process users’ personal data for the purpose of managing and possibly blocking payment transactions in relation to fraudulent orders, in the event of payment by credit card of the purchases made on the Websites. The data undergoing processing are data related to the order and data of the holder of the credit card used for payment, in the event in which DATAEXPERT requests a copy thereof in order to guarantee secure payment, as indicated in the general conditions of sale that regulate the purchase. The processing in question does not relate to confidential credit card data (card number, expiry date and security code) which, together with the name of the card holder, are acquired directly by the provider of the payment services.
The lawful basis for this processing is the legitimate interest of DATAEXPERT (Art. 6.1.f) of the Regulation).
For the purposes in question, DATAEXPERT shall process users’ personal data for [24 months from collection].
In relation to the legitimate interest of DATAEXPERT, the user is informed of the following:
- a legitimate interest of DATAEXPERT consists of the performance of an activity, for fraud prevention purposes, in the event of online payment by credit card, to protect its own entrepreneurial interest, including the purpose of respecting the parameters defined by the international circuits in relation to the number of fraudulent payment attempts recorded on e-commerce websites. Such legitimate interest of DATAEXPERT further coincides with the legitimate interest of the users of the Websites, as potential victims of fraud, such as the general public, who, in turn, have a legitimate interest in guaranteeing that fraudulent activities are discouraged and identified when they occur; it can therefore be considered that, within the context of relations with DATAEXPERT, they reasonably expect their data to be processed also for the purpose of fraud prevention, for their protection and guarantee.
- for the purposes in question, DATAEXPERT also uses data initially collected for different purposes (and, notably, to enable the conclusion of the purchase agreement and the performance thereof) the processing of which for the purpose of preventing credit card fraud, is permitted, being based on the legitimate interest of DATAEXPERT, considering the compatibility of the purposes in question with the purpose for which the data were initially collected;
- in the event of exercising the right to object, DATAEXPERT abstains from any further processing of users’ personal data for such purpose, unless it can demonstrate the existence of compulsory legitimate reasons for proceeding with processing that prevail over the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
6.PROCESSING OF DATA BY DATAEXPERT FOR ADMINISTRATION/ACCOUNTING AND TAX PURPOSES
DATAEXPERT, as the Independent Data Controller, will process users’ data for the purpose of fulfilling administrative and/or accounting and/or tax obligations, connected with the purchase agreement concluded through the Websites such as, by way of example, book-keeping and issuing sales invoices.
The lawful basis for this processing is compliance with the legal obligations to which DATAEXPERT is subject (Art. 6.1.c) of the Regulation).
The provision of data for the purposes in question is compulsory as the processing thereof is necessary to enable DATAEXPERT to fulfil the legal obligations to which it is subject. Any refusal to provide data for this purpose shall imply the impossibility for the user to conclude the purchase agreement through the Websites.
For this purpose, DATAEXPERT shall process the user’s data until the expiry of the legal time limits envisaged for the performance of all the administrative/accounting and tax requirements and/or for the storage times envisaged by law for the storage of the related documentation.
7.PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF ALLOWING THE USER TO EXERCISE THEIR RIGHTS
DATAEXPERT, as the Independent Data Controller, shall process users’ data in order to:
The provision of data for the purposes in question is compulsory as the processing thereof is necessary to enable DATAEXPERT to fulfil the legal obligations and the user to exercise the rights attributed thereto by law or by the agreement. Any refusal to provide data for this purpose shall imply the impossibility for the user to exercise such rights.
For this purpose, DATAEXPERT shall process the data until the expiry of the legal time limits envisaged for the exercise of the right (limitation period and/or time limit) i.e., in the event of exercising such rights, for the amount of time necessary for the handling and closure of the case; in the event of exercising the rights envisaged by the Regulation, the data shall be processed until the certification, from the Data Controller, that the request has been fulfilled or until the fulfilment itself, according to which of the two events takes place last.
8.PROCESSING OF DATA BY DATAEXPERT FOR THE PURPOSE OF THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS
DATAEXPERT, as the Independent Data Controller, shall process users’ data for the establishment, exercise or defence of legal claims in all the relevant contexts.
To exercise such right, the user can contact DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
It is hereby specified that, in particular, DATAEXPERT shall store and possibly use the data:
The personal data provided by the user may be disclosed by DATAEXPERT to the categories of recipients indicated below.
The subjects to which DATAEXPERT discloses the data act as external data processors appointed by DATAEXPERT through a relevant contract (“Data Processors”) or persons authorised to process personal data under the direct authority of DATAEXPERT (“Appointed Persons”) or in the event of third parties called upon by the Data Controller, as “Sub-Processors”, according to Art. 28.4 of the Regulation, except in cases in which the recipient acts as the independent data controller such as, for example, in the case of the Payment Service Provider or couriers.
Users’ personal data may be disclosed by DATAEXPERT to the following categories of recipients:
- companies in the group to which DATAEXPERT belongs and/or to employees and/or collaborators of DATAEXPERT, for the performance of administration, accounting and IT and logistic support activities;
- companies, consultants or professionals that may have been appointed for the installation, maintenance, updating and, in general, management of the DATAEXPERT hardware and software, including providers of cloud computing and chat services, and the third parties of which they make use;
The list of recipients is available at the DATAEXPERT registered office.
User’s personal data are transferred by DATAEXPERT to the following third countries: India.
• the transfer of data to India by DATAEXPERT takes place on the basis of the typical contractual clauses set out in "Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council" [notified under document C(2010)87/EU] and therefore on the basis of the consequent "Authorisation for transfers to third countries through the standard contractual clauses set out in Commission Decision 2010/87/EU in case of an importer established in a third country" issued by the personal data protection supervisory authority on 27 May 2010 and 15 November 2012, still in force on the basis of Art 46.5 of the Regulation.
The data subject can exercise the right to object by contacting DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
The data subject has the right to obtain from the data controller (and therefore from DATAEXPERT) confirmation that processing of data relating to him or her is taking place and, in that case, to obtain access to the personal data and information indicated below.
The data subject can exercise the right of access by contacting DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
The data subject has the right to obtain from the data controller (and therefore DATAEXPERT) the rectification of personal data concerning him or her without undue delay. Considering the purposes of processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
The data subject can exercise the right to rectification by contacting DATAEXPERT in the following ways [●].
The data subject shall have the right to obtain from the controller (and therefore from DATAEXPERT) the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
The data subject can exercise the right to erasure by contacting DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
The data subject shall have the right to obtain from the controller (and therefore from DATAEXPERT) restriction of processing where one of the following applies:
The data subject can exercise the right to restriction by contacting DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).
The data subject can therefore exercise the right in question in relation to the purposes according to the following sections of this information notice: 3. The data subject can exercise the right to data portability by contacting DATAEXPERT in the following ways: by email to info@dataexpert.it, or by writing to the headquarters of Dataexpert Srl Via Pomini 92, 21050 Marnate (VA).