Terms & Conditions / Privacy policy
As provided in the European Union Regulation no. 679/2016 (hereinafter "GDPR") and in particular in art. 13, below we provide you with the information required by law relating to the processing of your personal data. Note for minors: We do not knowingly process data from minors under 14, however if you are 14 or under, please obtain parental / guardian permission before providing your personal information. The website www.southbeachsalento.com (hereinafter the "Site") complies with applicable data protection laws and constantly strives to improve the protection of its customers. This privacy policy informs you about the processing of your personal data in connection with the website www.southbeachsalento.com , on the methods of management of the same and on how the services are made available through the Site.
- HOLDER OF THE TREATMENT
South Beach Salento,
- WHAT ARE PERSONAL DATA?
Personal data is information that refers to an identified or identifiable natural person, such as name, surname, gender, e-mail address, telephone number, date of birth, postal address.
- WHAT PERSONAL DATA ARE PROCESSED?
3.1 If you create your personal user account, fill in the registration fields on the Site or give us your consent, we process the personal data provided in this way, in particular the data as defined in section 2.
3.2 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes the IP addresses or domain names of the computers used by the Users, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data will be recorded in anonymous and aggregate form and will be used, always in aggregate form, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted, always in aggregate form, immediately after the processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
- WHEN DO WE PROCESS YOUR DATA?
We process your personal data when you create your personal user account, when you order products via our website or when you subscribe to our newsletter. Unless otherwise specified in the following provisions, the legal basis for this data processing is Article 6 paragraph 1 b) and a) GDPR (execution of a contract and consent).
- PURPOSE OF DATA PROCESSING
5.1 Account
To make purchases on our site you need to create a personal account (hereinafter "user account"). You can store your personal information in your user account, and facilitate shopping in our online store. To create a personal user account we need your personal details, name and surname and, as appropriate, address and telephone number. Additionally, users must provide their email address and a password of their choice. The e-mail address provided by the users also serves as the login data for the user account. In addition, users can store their personal data within the user account and then shop comfortably in the online store. The information can be updated at any time in the personal area of the user account ("User Profile"). At the time of registration, the User will be asked to enter personal data, some of which - from time to time expressly identified as such - it will be mandatory and essential to provide for the purposes of registration (eg the e-mail address at which receive newsletters). The other data may or may not be provided, at the discretion of the User, and failure to provide them is in no way prejudicial to the purpose of registration, but may allow only partial use of the Services. Of course, the user can cancel their user account at any time and without giving reasons. The easiest way to do this is to send an email to info@southbeachsalento.com . The legal basis for this data processing is Article 6 paragraph 1 b) GDPR (performance of a contract).
5.2. With regard to the order of products in our online shop, the processing of your personal data is aimed at enabling and optimizing the fulfillment of the order, including payment and delivery. When payment is made by credit card, we receive the payment ID and the last four digits of the credit card number from our payment service provider. We need this for the authentication and allocation of your order and therefore for your security. The personal data required for payment are collected directly by the payment service provider. The legal basis for the aforementioned data processing is the article. 6 paragraph 1 b) GDPR (execution of a contract) and Art. 6 paragraph 1 f) GDPR (legitimate interest, based on our interest in offering you a secure payment option by credit card). Among other things, we also check all previous orders placed from your customer account. The system also checks whether the delivery address is different from the billing address, whether it is a new delivery address or whether the order is to be delivered to an intermediate center. After choosing the payment service provider, you will be asked for the data necessary to use this service. This payment information is forwarded directly to the respective payment service provider and is not stored by Capri. We save billing and delivery address details in your user account so that you no longer need to enter them the next time you make a purchase. This data can be changed at any time in the future. If you do not agree to the payment method (s) offered, you can inform us in writing by letter or email to the address info@southbeachsalento.com . We will then review the decision in light of your recommendations. The personal data processed in the context of the orders are deleted at the latest after the expiry of the statutory warranty terms, unless this conflicts with the statutory retention obligations.
5.3 Newsletter
We offer all users of our community (www.southbeachsalento.com users) the opportunity to receive our newsletter. To activate it, the user can register with his e-mail address on the appropriate page. The user can revoke his consent at any time and without indicating the reasons. The easiest way to do this is to click on the "Unsubscribe" link, which can be found in every newsletter. The Newsletter may also contain advertising banners, advertisements and advertising offers from both the Company and third parties. The legal basis of this process is Article 6, paragraph 1 a) GDPR (consent).
5.4 Contact via contact form
If you send us inquiries using the contact form, we will process the information you provide, including your contact details, in order to process your request. In the event of subsequent requests, this additional data will also be stored. The legal basis is Article 6.1 b) GDPR (fulfillment of the contract - the processing of user data is necessary for the fulfillment of the contract to answer questions or requests) as well as Article 6 paragraph 1 f) GDPR (balancing interests - based on our interest in processing requests from users of our website). As Data Controller, South Beach Salento informs that Users' personal data, subject to their consent, may be processed for the following purposes: a) sending information, promotional and advertising material relating to the brand (by way of example but not exhaustive: sending newsletters, promotions, etc.); b) elaborate studies and statistical research; c) collect data and information in general and in particular on the orientations and preferences of consumers and process them through electronic tools in order to identify the products that may be of greatest interest to them, in such a way as to send them promotional communications expressly addressed to them products (so-called profiling).
- METHOD AND PLACE OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. The database is accessible only by authorized parties through methods that guarantee its protection and confidentiality, thanks to the adoption of security measures designed to prevent the loss of data, illicit or incorrect use and unauthorized access. Despite all the measures taken to safeguard your information, we cannot guarantee, in the current state of technology, that unauthorized access or abuse of services by third parties can be excluded. PLACE OF DATA PROCESSING The processing related to the Services of this Site takes place at the headquarters of the Data Controller and is only handled by the Data Controller's technical staff appointed for this purpose as a person in charge, or by any persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided by Users who submit requests to join the Services are used only to perform the service or provision requested and are disclosed to third parties only if this is necessary for this purpose. In its capacity as data controller, South Beach Salento may proceed, directly or through any external data processors indicated on the Site, to save the personal data of Users in special servers and to carry out all other processing operations through the staff. - of the owner and manager - appointed for this purpose in the capacity of appointee, or through any external appointees during maintenance operations.
- RESPONSIBLE FOR THE TREATMENT
For the operation of our website, we commission external providers of data processing services (e.g. order dispatch, software newsletters, data centers). If necessary, these service providers also process personal data. Service providers are carefully selected and monitored by us. The data is processed exclusively in accordance with our instructions and is also bound by this data protection declaration. Only in the presence of an express authorization from the User, South Beach Salento proceeds to use your data for the same activities referred to in the previous point with the aid of automated tools without the intervention of an operator and / or for other purposes authorized by the User from time to time. The updated list of all data processors is available at each headquarters of the Data Controller and can be requested at the following e-mail address: info@southbeachsalento.com . This list can be subsequently integrated and / or updated as needed.
- STORAGE PERIOD
Personal data will be kept only for the time necessary to achieve the purposes indicated here or as required by law (civil, fiscal and tax obligations in force). The data entered by you pursuant to section 3.1 will therefore be deleted at the latest after 10 years from the expiry of any retention periods provided for by commercial and tax law. The automatically recorded data, as defined in section 3.2, will therefore be deleted or made anonymous after 24 months.
- YOUR RIGHTS
As an interested party, pursuant to articles 15-21 of the GDPR you have the right to: a) obtain confirmation of the processing of your personal data; b) access your personal data and know its origin (when the data are not obtained from you directly), the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the retention period of your data or useful criteria to determine it; c) obtain the updating and correction of your personal data so that they are always exact and accurate; d) obtain cancellation, in the cases provided for by art. 17 of the GDPR, of your personal data or request the limitation of processing; e) obtain a copy of your personal data. You can therefore know what your personal data are in our possession, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by the provisions in force, cancellation, limitation of treatment or oppose to their treatment. If you wish, you can request to receive the personal data we hold about you in a format that can be read by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you. Any requests will be processed at the latest within one month of receipt, except for the possibility of extending this deadline for a further two months, if necessary, taking into account the complexity and number of requests received by the Data Controller.
- CHANGES TO THE PRIVACY POLICY
We reserve the right to change this Privacy Policy at any time. We will notify you of material changes to this Privacy Policy by sending an email to the address you have indicated to us. Such material changes will take effect seven (7) days after such notice is provided.