Informativa privacy
Privacy Policy in accordance with article 13 of Regulation EU 2016/679
Dear User,
We inform you that browsing this Platform may involve the processing of personal data, that will be processed according to Regulation EU 2016/679, and in particular in compliance with the principles of fairness, lawfulness and transparency.
In accordance with article 13 of Regulation EU 2016/679, we provide you with the following information.
The Data Controller is CIAKIT SRL, tax code and VAT number 05619970287, having its registered office in Via Cavour 35/A, Este (PD) 35042. Contact: info@ciakit.com.
Security
The Platform uses appropriate security tools and all necessary measures to protect your personal data. However, please note that no transmission via the internet can be absolutely protected against access by unauthorized third parties and the Data Controller cannot be held responsible for any data-breach, which is not due to his own neglect.
Subject of processing, purposes, and legal basis
The following data is collected through the Platform:
Browsing data
The computing systems collect some personal data whose transmission is an integral part of Internet communication protocols, for example: IP address, URI (Uniform Resource Identifier), time and date of interaction with the Platform, operating system, browser used, screen resolution and other technical information about your device.
Data collected for the creation of your personal account
The first time the user accesses the Platform, he is asked to fill in a specific form to create a personal account, necessary for browsing the Platform. The Data Controller collects the following personal data: name, surname, nickname, e-mail address, date of birth and password. The Data Controller processes this personal data to allow the user to access, browse and use the Platform’s services, as well as for the management of any disputes. The legal basis of the processing is the performance of the contract to which the data subject is party. We inform you that the provision of the personal data is optional, but failure to provide it could hinder the Data Controller from executing the contractual obligations. Therefore, the user will not be able to access and navigate the Platform. Finally, we inform you that all the personal data which is related with your account are public on the Platform and can be viewed by all users.
Data collected through the Platform Shop
Through this section, any user can sell and buy several products, such as VHS, DVDs, original posters, authorized reprints, etc. When a product is put on sale, the Data Controller collects the following personal data of the seller: name, surname, nickname and any data relating to the product location. These personal data are public on the Platform and, therefore, they can be viewed by all users.
Likewise, when a User purchases a product, the Data Controller collects the following personal data: name, surname, nickname, shipping and billing address.
In both cases, the Data Controller processes this personal data for the execution of the contract, as well as for the management of any disputes. The legal basis of the processing is the performance of the contract to which the data subject is party. We inform you that the provision of the personal data is optional, but failure to provide it could hinder the Data Controller from executing the contractual obligations. Therefore, the users could be unable to sell or purchase products throughout the Platform. The payment personal data is collected directly by the payment agencies, without being processed by the Data Controller.
Data provided on a voluntarily basis
If the user sends e-mails to the email addresses on the Platform, the Data Controller collects and processes all personal data contained in the aforementioned communications. The Data Controller processes this personal data just to respond to your requests. The legal basis of the processing is the execution of pre-contractual measures. We inform you that the provision of data is optional but failure to provide it could hinder the Data Controller from responding correctly to your request.
Data collected via cookies
In order to make navigation as efficient and simple as possible, this site uses cookies. We invite you to consult our Cookie Policy.
Processing methods
The Data Controller processes your personal data in compliance with the article 4, no. 2) of Regulation UE 2016/679. The processing options include collection, recording, organisation, structuring, conservation, adaptation, modification, extraction, consultation, use, communication, comparison, interconnection, limitation, cancellation and destruction. Your personal data is subjected to electronic and/or digital processing, with organization and processing logic strictly related to the purposes and appropriate for guaranteeing security, integrity and confidentiality of the personal data.
Access and disclosure of personal data
Your personal data may be disclosed, in close relation to the purposes specified above, only to:
- subjects authorised by the Data Controller to process personal data, that are committed to, or under, an appropriate statutory obligation of confidentiality;
- subjects in charge of the maintenance of the Platform;
- third parties, carrying out activities on behalf of the Data Controller, who will act as data processors or data controllers. At any time, you can request the Data Controller to give you the updated list of data processors.
Transfer of personal data
Your personal data will be processed and stored in the servers of the Data Controller or provided by third parties, who will act as data processors. If necessary, the Data Controller reserves the right to transfer personal data to extra-EU countries. In this case, the transfer will take place in compliance with the provisions of Regulation UE 2016/679.
Data Retention
- Browsing data will be stored for a maximum of 6 months from the date of receipt.
- Data collected for the creation of your personal account will be stored until the user decides to delete his/her account, and in any case for 90 days after the deletion. You can delete your account at any time. In this way, your personal data will be automatically deleted or made permanently and non-reversibly anonymous after 90 days from the deletion. Anyway, the user can create a new account at any time.
- Data collected through the Platform Shop will be stored for the time strictly necessary for the performance of the contract, and in any case for no more than 10 years after the termination of the contractual relationship.
- Data provided on a voluntarily basis will be stored for the time necessary to respond to your request.
- Data collected via cookies will be stored till the end of each session or until the end of the retention period established for each type of cookies, unless consent is revoked.
Data subject’s rights
You will always keep control on your personal data. More specifically, you have the right:
- to request information about the personal data processed by the Data Controller and to receive in a structured, commonly used and machine-readable format the personal data concerning you;
- to ask the Data Controller the rectification or the erasure of your personal data or the restriction of their use only for certain purposes;
- to change your idea and ask us to stop processing your data, for example by deleting your account;
- to obtain data portability in presence of automated processing based on consent, pre-contractual negotiations or the performance of a contract.
The Data Controller reserves the right to communicate the data collected to the competent authorities (including judicial authorities) in the cases imposed by law or upon request of the authority involved, without the need for express consent.
In any case, you have the right to lodge a complaint with the relevant supervisory authority (Data protection Authority) if you believe that the processing of your personal data is against the applicable law.
Requests to exercise your rights must be sent to the Data Controller at the references indicated in this privacy policy (in particular at info@ciakit.com). Requests are made free of charge and processed by the Data Controller as soon as possible and, in any case, within one month.
The Data Controller reserves the right to update this privacy policy. Updates will be published on this web page, which we advise you to consult periodically.