Privacy Policy

PRIVACY POLICY

Pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the methods of processing of personal data of users who consult the website accessible electronically at the following address: https://www.zikhome.it/

We inform the user that following the consultation of this site, data relating to identified or identifiable persons may be processed.

This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site.

Identity of the Data Controller

The data controller is Piushopping Srl , with registered office in Barletta (BT), Via Dante Alighieri n. 11 - cap 76121, (E-mail: piushoppingsrl@libero.it, PEC: piushopping@pec.it, Tel.: +39 0883950582). (hereinafter also “the Controller”)

Data source and type of data collected

  • Data provided by the User
    •

    The Owner collects personal data provided by users:

    1. when purchasing a product/service offered. The data collected by the Owner may include, by way of example and not limited to: personal data, contact data, location data, corporate and financial information; information relating to credit reliability, payment information, VAT number.
    2. when creating an account/registration on the Site. The data collected by the Data Controller may include, by way of example and not limited to: personal data, contact data.
    3. when registering for the newsletter service offered on the Website. The data collected by the Data Controller may include, by way of example and not limited to: personal data (name and surname) and contact data (e-mail address).
    4. when sending a message using the contact channels and/or contact forms on the site.

    The optional and voluntary sending of messages to the contact addresses, as well as the compilation and forwarding of the forms on the site, involves the acquisition of the sender's contact data necessary to provide feedback, as well as all personal data included in the communications.

  • Browsing data
    •

    The Owner collects data relating to the use of the website by the user.

    The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

    This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server and other parameters relating to the operating system and the user's IT environment.

    Such data, necessary for the use of web services, are also processed for the purpose of:

    • obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
    • check the correct functioning of the services offered.

    Browsing data does not persist for more than seven days and is deleted immediately after its aggregation (except in the event of the need to ascertain crimes by the judicial authorities).

  • Cookies and other tracking systems
    •

    In order to make its services as efficient and easy to use as possible, this Site uses cookies.

    Therefore, when you visit the Site, a minimum amount of information is inserted into the User's device, such as small text files called "cookies", which are saved in the User's web browser directory. There are different types of cookies, but essentially the main purpose of a cookie is to make the Site work more effectively and to enable certain features.

    For more information on the cookies used by this website, you can view the cookie policy at the following link .

    Purpose of the processing

    Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes:

    1. process and fulfill orders, manage payments, communicate with you about your order, manage any returns, provide customer support and allow you to collect your products. They will also be used to acquire pre-contractual data and information; exchange information for the purpose of executing the contractual relationship, including pre- and post-contractual activities; formulate requests or fulfill requests received; manage accounting and tax obligations;
    2. send newsletters of an informative or commercial promotional nature (e.g. invitations to events, communications relating to the offer of new services, promotional offers). This processing may take place automatically via email and may be carried out if the interested party has not revoked his/her consent for the use of the data;
    3. carry out preliminary and consequent activities following the request for registration/creation of the User Account, as well as for the fulfillment of any other obligations arising therefrom;
    4. provide feedback to any communications, requests for information and/or services from users by sending a message using the addresses and/or contact forms on the site;
    5. manage and control risks, prevent possible fraud, insolvency or default; prevent and manage possible disputes, take legal action if necessary.

    Legal basis for processing

    With reference to the purposes indicated in the previous paragraph, the legal basis of the same is, in relation to the point:

    1. the need to execute a contract to which the interested party is party or pre-contractual measures adopted at the request of the same;
    2. the consent expressed by the interested party;
    3. the need to execute a contract to which the interested party is party or pre-contractual measures adopted at the request of the same;
    4. the need to execute a contract to which the interested party is party or pre-contractual measures adopted at the request of the same;
    5. the need to pursue the legitimate interest of the data controller (in particular with regard to the prevention of fraud and insolvency).

    Data recipients

    The personal data processed by the Data Controller are not disclosed, that is, they are not disclosed to unspecified parties, in any possible form, including that of making them available or simply consulting them.

    Instead, they may be communicated to workers who work for the Data Controller as they operate under the authority of the data controller. Based on the roles and work tasks performed, these workers have been authorized to process personal data, taking into account their respective skills and in accordance with the instructions given to them by the Data Controller.

    The Owner has engaged third-party service providers in connection with the operation of the Website, such as hosting service providers, IT maintenance service providers, as well as service providers that enable the integration of other functions into the Website that the User can use at his/her discretion.

    These service providers, designated as Data Processors, are provided only with the personal data necessary to provide the corresponding services and are not allowed to use or disclose the personal data of the interested parties for other purposes, without prior authorization of the interested party.

    The data may also be communicated, to the extent strictly necessary, to subjects who, for the purpose of fulfilling orders or other requests or providing services relating to the transaction or contractual relationship with the Data Controller, must provide goods and/or perform tasks or services on behalf of the Data Controller.

    Finally, the data may be communicated to the subjects authorised to access them by virtue of provisions of law, regulations, community legislation.

    Data Transfer

    Under no circumstances does the Data Controller transfer personal data to third countries or to international organisations.

    Data retention

    The Data Controller stores and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, personal data will be stored and not further processed, for the time established by the current provisions in civil and fiscal matters. The data provided for commercial promotion purposes for services other than those already acquired by the Interested Party, for which he initially gave consent, these will be stored for 24 months, unless the consent given is revoked.

    The data collected when creating an account will be retained for the entire duration of your registration and in any case no longer than a maximum period of 12 (twelve) months of inactivity, or if, within this period, no Services are associated and/or products purchased using the registration itself.

    In the event of any dispute, the data collected will be retained for the entire duration of the dispute, until the terms for exercising appeal actions have expired.

    It should also be added that, in the event that a user provides the Owner with personal data that is not requested or not necessary for the purpose of carrying out the requested service or for the provision of a service strictly connected to it, PIUSHOPPING cannot be considered the owner of this data, and will proceed to delete it as soon as possible.

    Rights of the interested party

    In relation to the data subject to the processing referred to in this information notice, the interested party is recognized at any time the right to:

    • ask the Data Controller for access to your personal data and information relating to them (art. 15 of the GDPR); the rectification of inaccurate data or the integration of incomplete data (art. 16 of the GDPR); the deletion of personal data concerning you (if one of the conditions indicated in art. 17, par. 1 of the GDPR occurs and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (if one of the hypotheses indicated in art. 18, par. 1 of the GDPR occurs);
    • request and obtain from the Data Controller - in cases where the legal basis of the processing is the contract or consent, and the same is carried out by automated means - your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data - art. 20 of the GDPR);
    • object at any time to the processing of your personal data in the event of particular situations that concern you (art. 21 of the GDPR);
    • revoke your consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes. The processing based on consent and carried out prior to its revocation, however, retains its lawfulness (art. 7, par. 3, of the GDPR);

    The specific request is presented by contacting the Owner via PEC at piushopping@pec.it, e-mail at piushoppingsrl@libero.it or registered letter with return receipt to Barletta (BT), Via Dante Alighieri n. 11 - cap 76121.

    If the interested party believes that the processing of his/her data is in violation of the provisions of the Regulation, he/she may lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it ), as provided for by art. 77 of the GDPR, or take legal action (art. 79 of the GDPR).

    Refusal to provide data

    In the event that the interested party does not provide his/her data identified as necessary for the execution of the requested service, the Data Controller will not be able to proceed with the processing related to the management of the aforementioned service, nor with the obligations that depend on it.

    In the event that the Interested Party does not provide consent to the processing of personal data for the activities that require it, said processing will not take place for the same purposes without this having any effect on the provision of other requested services, nor for those for which he has already given his consent. In the event that the Interested Party has given consent and should subsequently revoke it or oppose the processing, his data will no longer be processed for such activities, without this having any consequences or detrimental effects for the Interested Party and for any other requested services.

    Automated decision-making processes

    The Data Controller does not carry out processing consisting of automated decision-making processes on the data of natural persons.