The website https://www.crimelondon.com/ collects some Personal Data from its Users..
This disclosure is draft pursuant personal data protection legislation, including articles 13 and 14 of European Regulation no. 2016/679 (hereinafter, GDPR).
Crimelondon (later, Owner), with registered office in Prato (PO), via Valentini, 7 – phone number +39 0574562268 - fax +39 0574757296 – email address: email@example.com
1) Types of Data collected and Purpose of processing
a) E-commerce. The Owner processes personal identifying data, (such as name, surname, company name, address, telephone number, e-mail address, bank and payment details - hereinafter "personal data" or even "data") that you have communicated on the occasion of the conclusion of contracts for the services of the Owner. Unless otherwise specified, he has the purpose of providing the service requested by the User.
a.1) Account registration
This section describes the types of data that the Owner may collect during the creation of the account on the website and how the data are processed. You can create a personal account on the Website to use the "Shop-eCommerce" feature, to order and purchase our products online. The creation of an account is not mandatory and, if you decide to create it, you can cancel it at any time by contacting the Owner.
-Source of personal data and mandatory data
When creating the account on the Website, the user provides contact details and identifiers to the Owner. You acknowledge that some of the information that you are required to provide is essential to complete the registration process and, in the absence of such information or refusal to provide it, will prevent us from following up your request. On the Website you will find clearly stated which are the essential data.
The additional information is optional and, if provided, can be used by the Owner to avoid inconveniences related to cases of homonymy.
You further acknowledge that, by using some of the services provided on the Website, the Owner collects additional information related to the ways in which you interacts with us (for example, the products included in the shopping cart and not deleted before leaving the website; the selected product added in the "Wishlist") or to your preferences regarding the use of the Website through the functionalities available on the Website itself.
Please make sure that your data are correct and, if the personal data you gave us are subject to change, please contact us as soon as possible at the email address above or directly modify the data online in the personal area, if registered. In this way we will be able to keep your personal data up-to-date.
-Mode of using personal data
The Owner will only use these data to provide services related to your account, which may include services related to online purchases, unless you have consented to the use of your personal data also to improve your online shopping experience and in our store. In the latter case, the Owner may then associate the personal data contained in your account with other information collected under other circumstances and use them in the manner described in relation to the relationship marketing activities, obviously obtained behind your specific, informed and free consent.
Your personal data will be stored and used mainly through automated processing.
- Mode of sharing personal data
Your personal data will be processed by our specifically authorized personnel and by the controllers responsible for managing your account. The Owner will not disclose your personal data to thirdparties for direct marketing purposes without your express, specific and free consent and will not sell your personal data.
b) Newsletter. The Owner, upon your informed, specific consent (through the dedicated form) will process your data for the purpose and in the manner specified in the dedicated disclosure in the specific section on the website, to which reference should be made.
c) Contacts. It is possible to contact the Owner to request information and for any request concerning our services. The purpose of processing your data is to fulfill your requests, and the legal basis of the processing lies in the implementation of pre-contractual measures.
d) Interaction on social network (Facebook, Instagram, Pinterest, Youtube). The person concerned can, by clicking on the specific icons in the footnote of this site, view the pages dedicated to the Owner. For information about the collection of your data, please refer to the privacy policies of the respective social networks.
2) Mode and place of processing the collected data
The processing is carried out through IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated and, in particular, through the adoption of appropriate security measures pursuant to EU Regulation 679/2016. In addition to the Owner, in some cases, other parties involved in the organization of this application (personnel authorized by the Owner) or external subjects (such as third party technical service providers, hosting providers, IT companies) may also have access to data if necessary and appointed as Data Controller by the Owner.
We inform you that this web page is managed remotely by the company Ikommerce, based in Pisa (ITALY) and appointed as Data Controller. Your data may therefore be viewed by authorized personnel, located there, for the sole purpose of managing this page (access, registration, use of e-commerce platform, sending newsletters), however your data will not be transferred and will be processed and stored in servers located within the European Union. For further information please contact the Owner at the contact details above.
3) Legal basis of the processing
The Owner processes Personal data relating to the User, for the purposes of:
- point 1, letter a): the processing of your data is necessary for the execution of the contract with the Owner (online trade). In this case, your data will also be processed for the fulfillment of consequent legal obligations of accounting-fiscal-administrative nature.
- point 1, lett. b): the processing of your data will only take place upon your specific consent, issued in the manner indicated in the specific disclosure on the site in the newsletter section to which you can refer.
- point 2, lett. c): the processing of your data is necessary for the execution of pre-contractual measures (request for information on the products and services provide by the Owner).
- point 2, lett. d): the processing of your data will be based on the privacy policies of the social networks mentioned, to which reference should be made.
In any case it is always possible to ask the Owner to clarify the concrete legal basis of each treatment.
4) Place and scope of communication of your data
The data are processed and stored at the registered office of the Owner and in any other place where the parties involved in the treatment are located. Personal data is stored on servers located within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the servers even outside the EU. In this case, the Owner hereby ensures that the transfer outside EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
Your data may be disclosed to third parties belonging to the following categories: subjects who provide services for the management of the information system used by the Owner and by the communication networks (including e-mail); studies or companies in the context of assistance and consultancy relationships; competent authorities for the fulfillment of legal obligations and/or provisions of public authorities, upon request.
With regard to access and processing of your data by the company Ikommerce, please refer to point 2). The subjects belonging to the aforementioned categories act as Data Controllers, or operate independently by the Owner.
The User can request information about the list, constantly updated, of the data controllers to the Owner by contacting him at the contact details mentioned above.
5) Nature of the provision of data and consequences of refusal to respond
The provision of data for the purposes referred to in point 1, lett. a) and c) is functional to benefit from services requested, therefore any refusal to provide them implies the impossibility for the Owner to perform these services. With regard to the purpose referred to in point 1, lett. b), the concerned person may decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, he will not be able to receive newsletters, commercial communications and advertising material concerning the services offered by the Owner.
6) Data retention period
The Data are processed and stored for the time required by the purposes for which they were collected.
Personal Data collected for purposes related to the execution of a contract or of pre-contractual measures between the Owner and the User will be kept until the execution of this contract is completed and, in any case, in compliance with the current legislation.vigente. The Owner may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or on the order of an authority.
The Owner will process personal data for the time necessary to fulfill the aforementioned purpose and in any case for no more than 2 years from the collection of data for the purpose of Marketing. At the end of the retention period, personal data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
7) User Rights
Users may exercise certain rights with regarding the data processed by the Owner. In particular, under the GDPR, the User has the right to:
- withdraw consent at any time;
- oppose the treatment of your own data;
- access your own data;
- verify and request rectification;
- obtain the limitation of the processing;
- obtain the cancellation or removal of your own data;
- receive your own data or transfer it to another Owner;
- to propose a complaint.
8) How to exercise your rights
To exercise his own rights, the User can send a request to the contact details of the Owner indicated in this document.
9) Specific information
10) System logs and maintenance
For needs related to operation and maintenance, this application may collect system logs, which are files that record the interactions and that may also contain personal data, such as the IP address of the User.
11) Information not contained in this policy
Further information regarding the processing of Personal Data may be requested at any time to the Owner using the contact details.