Account creation notice
With this notice DEPECHE Srl Unipersonale (single-shareholder company managed and coordinated by Portovenere Srl Unipersonale and data controller) hereby advises you of how your data will be processed, in compliance with EU Regulation 2016/679.
Personal data processed
DEPECHE will process the following data of users who, following the creation of their own account, wish to purchase Aniye By products online: • Password; • Name, surname and e-mail; • Phone number; • Address; • Payment details; • IT data.
Purposes of the processing and legal basis
The data collected (first name, surname, email address, password) will be processed by DEPECHE to allow you, once you have created an account, to enter into a purchase agreement for Aniye By goods/products. Once you have signed up for your account, additional data will be requested to complete the purchase (address, telephone number, means of payment). The provision of personal data is necessary in order to register with the site and to purchase Aniye By products; therefore failure to provide this data will render it impossible to make online purchases. The legal basis for the processing of data in connection with the completion of this form is to take action prior to entry into an agreement and as part of an agreement and likewise to meet legal obligations (Article 6, section 1, subsections b and c of the GDPR).
Transfer of data to third countries
Data will not be transferred to countries outside the EU.
Data retention term
The data required to carry out an online sale will be retained for the following 10 years, as required by the law on the keeping of accounting records and records for evidentiary purposes.
The data will be processed exclusively by internal DEPECHE staff authorised to carry out this task and by service providers expressly appointed as data processors (for example for site maintenance needs and/or for the purposes of accounting, administrative, and legal advice). Finally, the data may be disclosed to couriers for delivery purposes, in which case such parties act in the capacity of independent data controllers or data processors. The data will not be disseminated.
Rights of the data subject
Pursuant to Chapter III of the GDPR, the data subject is always entitled to contact the data controller to obtain access to their data, and likewise to obtain the rectification or erasure thereof or the restriction of the processing, or to object to the processing, to obtain data portability, or to revoke consent to the processing (if given), exercising these and the other rights provided for by the GDPR by either by accessing their personal account or by merely writing to the data controller. Finally, the data subject may file a complaint with the data protection authority (known as the Garante per la protezione dei dati personali in Italy) if they feel that the data concerning them has been processed in a way that breaches data protection legislation in force.
The data controller is DEPECHE S.R.L Unipersonale, a company managed and coordinated by Portovenere S.r.l. Unipersonale, with head office in Italy, at Via dell’Agricoltura n. 47/49 , Carpi (MO). For further information on data processing or on exercising the rights stated in the previous section, please contact us at: [email protected].