Privacy policy
Dear Interested Party, A.M.A. S.R.L. protects the privacy of Users. The data that may be communicated by the User through the Site will be treated with the utmost attention and with all the tools aimed at guaranteeing its security, in full compliance with current legislation. We wish to inform you that the "European Regulation 2016/679 on the protection of natural persons with regard to the Processing of Personal Data, as well as on the free movement of such data" (hereinafter "GDPR") provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, therefore, we inform you that:
DATA CATEGORIES.
The following may be the object of processing:
-
Data collected automatically. The computer systems and applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses and domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system, the browser and the IT environment used by the user, the name of the internet service provider (ISP), date and time of visit, web page of origin of the visitor (referral) and exit.
-
Data provided voluntarily by the user. The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not require consent and involves the acquisition of the sender's address and data, necessary to respond to requests, as well as any other personal data included in the message. Such data is intended to be voluntarily provided by the user at the time of requesting the provision of the service. By inserting a comment or other information the user expressly accepts the privacy policy. On the contrary, specific summary information will be reported or displayed on the site pages prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.
-
Cookies. The site uses cookies. The data collected thanks to cookies can be used to access parts of the site or for statistical purposes or to make the browsing experience more pleasant and more efficient in the future, trying to evaluate user behavior and modify the content offer proposition based on their behavior. For further information, a specific cookie policy is available
PURPOSE OF DATA PROCESSING AND LEGAL BASIS:
The processing of your data has the following purposes and legal basis:
-
For data collected automatically, the legal basis is the legitimate interest of the owner and the purpose is to guarantee and improve the web browsing experience.
-
For data provided voluntarily by the user, the legal basis is specified in the individual information provided, depending on the various services requested and provided through the site.
-
For cookies: compare the specific cookie policy.
RECIPIENTS OF THE DATA
Within the limits relevant to the processing purposes indicated, your data may be communicated to partners, consultancy firms, private companies, third-party technical service providers, hosting providers, IT companies, communication agencies. The recipients are appointed Data Processors.
TRANSFER OF DATA TO THIRD COUNTRIES:
The transfer of your data to a third country is not foreseen. In the event of any processing of personal data outside the European Union, the same will take place only after the adoption of adequate guarantees, as required by mandatory legislation.
STORAGE PERIOD:
Due to the principle of limitation of conservation (art.5, GDPR), the verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically. In particular:
-
The data collected automatically are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to verify its regular functioning, also for security purposes or according to the deadlines established by law.
-
The data provided voluntarily by the user will be kept for a period of time not exceeding the achievement of the purposes for which they are processed or based on the deadlines established by law.
-
Data collected via cookies: refer to the specific cookie policy
RIGHTS OF THE INTERESTED PARTY:
As "Interested Parties" to the processing, the user has the right:
-
To access, rectification, cancellation, limitation and opposition to the processing of data
-
To obtain the data without impediments from the data controller in a structured format commonly used and readable by an automatic device to transmit them to another data controller
-
To revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation
-
Propose a complaint to the Guarantor Authority for the Protection of Personal Data.
-
In the event that it is not possible to request the deletion of the data, you may still object to the processing when this is justified by reasons inherent to your particular situation.
The exercise of the aforementioned rights can be exercised by written communication to be sent by PEC to ama1@legalmail.it registered letter with return receipt to the address Carpi (MO), Via Michelangelo Buonarroti, 2 - CAP 41012.
DATA PROCESSING METHODS:
The personal data provided by you will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the Data Controller's activity. The data will be processed both with IT tools and on paper supports and on any other type of suitable support (e.g. cloud systems, digital archiving and substitute conservation systems, ...), in compliance with adequate technical and organizational security measures required by the GDPR.
FINAL PROVISIONS:
the information is provided only for this website and not for other websites that may be consulted by the user via links contained on this site. The information may undergo changes due to the introduction of new regulations; the user is therefore invited to periodically check this page to always be updated.
AUTOMATED DECISION MAKING PROCESSES:
There are no automated decision-making processes.
INFORMATION PURSUANT TO THE REGULATION ON THE PROTECTION OF PERSONAL DATA
This page provides information on how A.M.A. S.R.L. manages the processing of personal data of users who purchase products on this website (hereinafter the "Site"). This information integrates the website navigation policy, with the aim of illustrating to the User how A.M.A. S.R.L. will specifically process the data entered during the purchase of products.
Data controller
A.M.A. S.R.L. with headquarters in Carpi (MO), Via Michelangelo Buonarroti, 2 - CAP 41012 is the data controller of personal data for marketing and profiling purposes and for all activities related to the sale of products offered on the Site, such as order processing, product delivery and management of payment, any returned products and after-sales assistance.
Data Protection Officer (DPO)
A.M.A. S.R.L. has appointed a data protection officer (DPO), who the interested party can contact by writing to the following address:
Purpose and legal basis of the processing
Your personal data will be processed by A.M.A. S.R.L. for the purposes set out below:
-
without express consent, for the conclusion and execution of the sales contract of the products offered on the Site, or the management and fulfillment of the order, the communication of any circumstances inherent to the order, the delivery of the product, the management of payments and any returned products and after-sales assistance, as well as for the execution of legal obligations, in compliance with civil, fiscal and accounting legislation. The legal basis of this processing is based on the fulfillment of the sales contract of which you are a party and legal obligations and, therefore, the related processing by A.M.A. S.R.L. does not require your express consent
-
only with specific and distinct consent, make known to the Customer, by sending advertising and information material via periodic e-mails, information regarding the products and services of A.M.A. S.R.L. as well as any further initiatives, commercial or otherwise, launched by it (hereinafter "Marketing”);
-
only with your consent, analyze your tastes, preferences, habits and behaviors in order to send you personalized commercial communications based on the commercial and behavioral profile thus created (hereinafter "Profiling"). The processing of your personal data for profiling purposes will take place on the basis of an automated decision-making process which, following the cross-referencing of data, will create your commercial and behavioral profile.
Your personal data may also be processed by A.M.A. S.R.L. to defend or enforce a right and/or for the prevention and detection of any fraud and other crimes or offences. The legal basis of this processing is based on the fulfillment of legal and/or contractual obligations and on the legitimate interest of the Data Controller.
DATA RETENTION PERIOD
Your personal data will be processed for the time strictly necessary to pursue the aforementioned purposes, after which they will be deleted or made anonymous and in particular:
-
for the purposes of selling products on the Site referred to in point A), your personal data will be processed by A.M.A. S.R.L. for the entire duration of the contractual relationship and, subsequently, for a period not exceeding 10 years from the moment of termination of the relationship in compliance with legal obligations in civil, fiscal and accounting matters;
-
for the Marketing and Profiling purposes referred to in points B) and C), your personal data will be processed by A.M.A. S.R.L. for 24 months and 12 months respectively, provided that you do not revoke your consent to the treatment beforehand.
In any case, the data collected through the Site may be stored by A.M.A. S.R.L. for longer periods of time than those indicated above to defend or assert a right and/or for the prevention and investigation of any fraud and other crimes or offenses within the terms permitted by the applicable legislation in force.
Nature of the provision of data and consequences in case of refusal
The provision of data for the purposes referred to in point A) is necessary to place purchase orders for products; failure to provide the requested data will make it impossible to obtain the conclusion and execution of the sales contract.
The provision of data for the purposes referred to in points B) is optional. You may therefore decide not to communicate any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive advertising and information material, information regarding the products and services of A.M.A. S.R.L. as well as any further initiatives, commercial or otherwise, launched by it.
The provision of data for the purposes referred to in points C) is optional. You may therefore decide not to communicate any data or to subsequently deny the possibility of processing data already provided.
Scope of data communication and categories of recipients
Exclusively for the purposes specified above, all data collected and processed may be communicated by A.M.A. S.R.L. to internal figures authorized to process due to their respective duties, as well as to the following categories of external subjects such as independent data controllers or external data processors:
-
providers of IT services, such as direct marketing, internet services and cloud computing;
-
subjects who carry out logistics, warehouse, promotion, supply, sale and delivery activities of products and services;
-
subjects who carry out customer assistance activities;
-
firms and other entities that provide assistance, consultancy and services of a nature, for example, legal, fiscal, accounting, economic-financial, technical-organisational, data processing, communication;
-
entities that provide banking, financial, insurance and debt collection services;
-
public authorities and supervisory and control bodies;
Such recipients, should they process data on behalf of A.M.A. S.R.L. are designated as data controllers, with a specific contract or other legal act. No data collected on the Site is disclosed.
Data transfer to a third country and/or an international organization
Your personal data may be transferred, for the purposes for which they were collected, to the United States of America (USA) which is a country not belonging to the European Union. The transfer of personal data to subjects located in the USA will take place exclusively by virtue of the signing between the Joint Controllers and the non-EU recipient of the standard contractual clauses adopted or approved by the European Union Commission (art. 46, paragraph II, letters c and d of the GDPR). To obtain a copy of such data you can contact the Data Controller, as indicated in the "Rights of interested parties" paragraph below.
Minors
The Site and its related services are not intended for minors and therefore A.M.A. S.R.L. does not knowingly collect personal data online from persons under 18 years of age.
Rights of interested parties
As "Interested Parties" to the processing, the user has the right:
-
To access, rectification, cancellation, limitation and opposition to the processing of data
-
To obtain the data without impediments from the data controller in a structured format commonly used and readable by an automatic device to transmit them to another data controller
-
To revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation
-
Propose a complaint to the Guarantor Authority for the Protection of Personal Data.
-
In the event that it is not possible to request the deletion of the data, you may still object to the processing when this is justified by reasons inherent to your particular situation.
The exercise of the aforementioned rights can be exercised by written communication to be sent by PEC to ama1@legalmail.it registered letter with return receipt to the address Carpi (MO), Via Michelangelo Buonarroti, 2 - CAP 41012.
This information may undergo changes: we therefore recommend that you regularly check this web page and take into consideration the date of the last revision. Any changes will take effect from the date of publication on the Site.
Having read the above information,
[ ] I express my consent
[ ] I do not give consent
to the processing of my personal data to allow A.M.A. S.R.L. to send me commercial communications containing information on their products or services, as well as promotions or invitations to events (Marketing).
[ ] I express my consent
[ ] I do not give consent
to A.M.A. S.R.L. to analyze your tastes, preferences, habits and behaviors in order to send you personalized commercial communications based on the commercial and behavioral profile thus created (Profiling).