In compliance with the obligations deriving from national (Privacy Code) and EU (European General Regulation No. 679/2016) regulations regarding the protection of personal data, ELEN srl respects and protects the privacy of visitors and users.
1 - Legal basis for the processing of personal data
Providing data and, therefore, consenting to the collection and processing of the same, is optional. The User can deny consent and may revoke at any time a consent already given. However, denying consent may make it impossible to provide certain services and the browsing experience on the site would be compromised.
The data of registered customers is processed in accordance with the existing agreement with ELEN srl from the time the agreement is executed.
2 – Purposes of processing personal data
Processing of personal data means: recording, storage, organization, consultation, selection, retrieval, comparison, processing, use, modification, interconnection, blocking, transmission, erasure and destruction, transfer or release, or the combination of two or more such operations.
The processing of data collected by the website, in addition to the purposes related, instrumental and required for the supply of the service, is aimed at:
Collection of data and information in an exclusively aggregate and anonymous form in order to verify the proper functioning of the website and to improve the online store and the platform.
None of said information is related to the individual-User of the site, and do not in any manner allow the identification of the same.
Collection of data and information in order to protect the safety of the website and of its users (spam filters, firewalls, virus detection) and to prevent or expose frauds or violations which would be detrimental to the website.
The data is recorded automatically and may possibly also include personal data (IP address) that could be used, in accordance with applicable laws, in order to block attempts to damage the website itself or to harm other users, or in any event harmful activities or activities constituting a crime. Said data is never used for the identification or profiling of the User and is periodically deleted.
Collection of data in order to manage orders, supply products and services, process payments, communicate with users regarding orders, products, services and promotional offers, update logs and, in general, manage user accounts, show contents such as customer wish-lists and reviews and recommend products and services that may be of interest to users.
Transmit the data to third parties who perform activities necessary or instrumental to the operation of the service, and to allow third parties to carry out technical, logistic and other activities on our behalf.
This website uses suppliers for carrying out certain activities, such as processing orders, delivering parcels, sending traditional mail, analyzing data, providing marketing assistance, making credit card payments and providing services to customers.
Suppliers only have access to the personal data which is necessary in order to perform their tasks, undertake not to use said data for other purposes and are held to process personal data in accordance with applicable laws. This type of data is retained only for the period of time required for the supply of the service.
Execute newsletters for customers who registered by means of the website to a specific web page containing the registration form and the consent for the processing of mandatory data. Said page, or the user section (in addition to a specific link at the bottom of the newsletter), allows automatic cancellation from the newsletter. Registrations through written consent issued directly to the Data Controller can be requested to ELEN srl
3 – Collected data
This site collects user data in two ways.
While users are browsing, the following information, which is stored in the site log files, can be collected:
This information is used to analyze user trends and collect data in aggregate form, to manage and guarantee the safety of the website, and in no way identifies the User.
The website can collect other data in case of voluntary use of the services by users, such as comments, communications (chat, contact forms and email), purchases (cart) sections:
This information is provided voluntarily by the User at the time of requesting the service or by adding comments and will be used exclusively for the supply of the service requested and processed only for the time required to provide said service.
Fiscal data is necessary in order to make use of the purchased services and for billing purposes.
The data collected by the site is not shared with third parties, unless lawfully requested by judicial authorities and only if required by law. The data, however, may be provided to third parties if this is necessary for the supply of a specific service requested by the User, or for tax purposes or for the implementation of security checks or optimization of the site.
4 – Location of processing
The information collected by the website is processed at the head office of the Data Controller and at the data centers located within the European Economic Area (EEA), and are handled only by personnel in charge of processing. Personal data is processed using automatic and non-automatic tools for the time required in order to achieve the purposes for which they were collected.
5 – Data retention period
The information collected is processed for the time required for the purposes for which it was collected, and in any event no later than the time prescribed by law.
The information required for tax purposes is kept until the assessments relating to the corresponding tax period are established, i.e. for at least 10 years or more if the annuity related thereto is not yet prescribed for tax purposes.
At the expiration date, the information will be deleted or made anonymous, unless there are additional purposes for the storage of the same (for example warranty delivery obligations, tax obligations).
6 - Transfer of collected data to third parties and non-EU countries
The personal data of users/customers is an essential component of our work and the assignment to third parties is not part of our activities. However, this site, in the performance of its activities and in the performance of the services requested by users, may have to transfer some data to third parties who perform specific tasks which are instrumental and linked to those of the site, including: order fulfillments (eg. purchase of domains) , mail delivery, data analysis, marketing assistance, credit card payments, etc. Suppliers have access to the data required for the performance of their specific task and are held to process the same in accordance with this Policy.
In the event of transfer of the company or of the production units, the personal information of Clients is part of the transferred company assets but remain subject to the commitments undertaken with this Policy, except for requests for new consent.
In the event that data is transferred to companies located outside the European Union (for example Google, Facebook and Microsoft - for LinkedIn and Skype), we make sure that said data is transferred in compliance with applicable regulations and, more specifically, with the regulations provided for by the General Regulations for the protection of personal data. The transfer is authorized by specific decisions of the European Union and the Data Protection Authorityhttp://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi, more specifically ruling no. 1250/2016 (Privacy Shieldhttp://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016D1250– please see the information page of the Italian Data Protection Authorityhttp://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5306161), therefore no further consent is required.
The user, by consenting to the contract, expressly agrees to the transfer of data in the events indicated above.
7 – Cookies
This website utilizes the following cookies categories:
Cookies in this category include both persistent and session cookies. They allow us to differentiate connected users, preventing a service from being supplied to the wrong User and are therefore a result of an express request by the user, and are also used for website and users’ security purposes. In the absence of such cookies, the site or some parts of the same may not work properly. Cookies in this category are always sent from our domain, and no consent is required for them.
Cookies in this category are used to gather information on the correct use of the site and on the behavior of users for statistical analysis purposes, to improve the site and simplify its use. These types of cookies collect anonymous information on the activity of users on the website and the way in which they arrived to the same and the pages visited. Cookies in this category are sent from the website itself or from third-party domains.
This website also acts as an intermediary for third-party cookies which are used to provide additional services and features to visitors and improve the use of the website (such as social media buttons). Some of these cookies are profiling, i.e. used by third parties to collect information on the behavior and interests of users in order to provide personalized advertising.
DISABLING COOKIES COULD PREVENT THE CORRECT USE OF SOME FUNCTIONS OF THE WEBSITE ITSELF, in particular services provided by third parties may not be accessible and therefore may not be viewable: YouTube videos or other video-sharing services; social buttons on social networks; Google maps.
Instructions for disabling cookies from the browser, and for deleting cookies already present on the User's device, can be found on the following web pages:
Windows Internet Explorer
Additional information about cookies and how to manage the same can be found onwww.aboutcookies.org.
As a rule, the tracking of users does not imply identification of the same, unless the User is already registered to the service and is already logged in, in which case it is understood that the User has already expressed consent directly to the third party at the time of subscription to the relevant service (eg. Facebook).
- Google Analytics: web analysis tool used in order to allow us to review the use of the site by users, prepare reports on site activities and user behavior, verify how often users visit the site, how the site is traced, and which pages are visited most frequently. The information is combined by Google with information collected from other sites in order to create a comparative picture of the use of the site compared to other same-category sites.
Collected data: browser identification, date and time of interaction with the site, page of origin, IP.
Data processing location: USA.
The data collected does not allow the personal identification of users and is not intersected with other information relating to said individual. Said data is treated in an aggregate and anonymous manner (truncated to the last octet). Under a specific agreement, Google Inc. is prohibited from crossing this data with data obtained from other services.
- Google Maps: a Google service that offers road maps and localization for urban businesses. It sets cookies on map pages.
Collected data:number and behavior of individuals using the maps, information related to the page displayed, viewing preferences (zoom level, etc.).
Data processing location: USA.
- Youtube: a platform, owned by Google, for video sharing. Cookies are set at the access of the page containing the embed, and at the video launch, and do not allow identification of the User unless the same is already logged in the Google profile, in which case it is understood that the User has already expressed consent directly to Google.
For some videos, the "advanced privacyhttps://support.google.com/youtube/answer/171780?expand=PrivacyEnhancedMode#privacy (no cookie)" option has been activated, which does not contemplated the storing of visitor information unless they voluntarily reproduce the video.
Collected data: number and behavior of users, IP address, information linking site visits to the Google Account for users already logged in, preferences on videos viewed.
Data processing location: USA.
Disabling Google Inc. cookies
Data transmitted to Google is stored on Google's servers in the United States. For more information on the use of data and its processing by Google, please refer to Google's policy at the following web address:https://www.google.com/intl/it/policies/privacy/.
Additional information on Google Analytics’ cookies can be found on the following page:https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
The User can selectively disable Google Analytics by installing the appropriate component provided for by Google on its browser (opt out). To disable the collection of data by Google Analytics, please refer to the following link:https://tools.google.com/dlpage/gaoptout.
The User can selectively disable the DoubleClick DART Cookie by blocking the connection with its browser, on the following web page:https://adssettings.google.it/authenticated?hl=it#display_optout.
Data processing location: USA.
For additional information on the use and purpose of cookies by Facebook, please refer to the following web page:https://www.facebook.com/help/cookies/update.
The User can selectively disable the Facebook Remarketing action on the web page of the Digital Advertising Alliance:http://optout.aboutads.info/.
Collected data: user behavior, IP address, browser data, device data, location data, operating system, provider, date and time, first and last name, credit card number and/or bank account details; email address.
Data processing location: USA.
For additional information on the use and purposes of cookies by PayPal, please refer to the following web page:https://www.paypal.com/it/webapps/mpp/ua/privacy-full.
DISABLING PAYPAL COOKIES CAN INCREASE THE IMPOSSIBILITY OF PROCESSING PAYMENTS AND THEREFORE THE SUPPLY OF SERVICES
This website also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins do not set cookies, but if they are already present on the visitor's device said plugins are able to read them and use them according to their settings. The collection and use of information by these third parties is governed by the privacy policies of the same, as follows:
8 – Safety measures
The Data Controller treats the data of visitors/users in a lawful and proper manner, adopting the appropriate safety measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data, as well as illicit use of data. The processing is carried out through IT tools and/or telematic systems, with organizational methods and with logic strictly related to specific purposes, and the data is stored in secured facilities with personnel verification and access limits. Access to information is strictly limited to authorized personnel.
The website is constantly monitored to check for security breaches and to ensure that information is secure.
In some cases, in addition to the Data Controller, a certain category of individuals involved in the organization of the website (system administrators and administrative, commercial, marketing and legal personnel) or external individuals (such as third-party suppliers of technical services, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.
It is important that you take appropriate safety measures against unauthorized access to your password and your computer. Always make sure you are disconnected when using a computer shared with others.
9 – User’s rights
In compliance with the obligations deriving from national (Privacy Code) and EU (European General Regulation No. 679/2016) regulations, the User can, according to the terms and within the limits established by applicable laws:
Requests should be addressed to the Data Controller.
10 – Processing entities