INFORMATION ON THE PROCESSING OF PERSONAL DATA

customers - Vers. 18/10/2021

 

Oscar Boscarol SRL processes your data in accordance with the EU Data Protection Regulation 2016/679 ("GDPR") and other applicable regulations. Please read the following information carefully. In the following text, the word "data subject" refers to you. The data controller is available to you for any clarification.

Data source - interested party

 

Interested parties - physical customers (who purchase from the owner in physical stores or through direct contact or by traditional means), customers of the owner's online sales platform, other people who on their own initiative create an account on the owner's online sales platform (without making purchases)

 

Types of data processed - identification and contact data, tax identification data, bank data, payment and collection data, data relating to products purchased

 

Purpose - to receive customers' orders and execute contracts, manage complaints and reports, manage accounting records (e.g. invoices and receipts with tax code), collections and payments, protect the rights of the owner and the interested party also in court, comply with any legal obligation

 

Data controller - Oscar Boscarol SRLvia Enzo Ferrari 29 - 39100 Bolzano raq@boscarol.it

 

Data Protection Officer (DPO) - not appointed

 

Representative in the EU - not appointed

 

Legitimacy of processing - art. 6 § 1 lett b) GDPR (need to perform a contract or pre-contractual measures) art. 6 § 1 lett c) GDPR (need to comply with a legal obligation)

 

Legitimate interest - not foreseen

 

Data retention - 10 years from last purchase (equal to the legal obligation to retain accounting records)

 

Possible recipients of the data - commercialists, auditors, suppliers (e.g. couriers), suppliers of computer programs (e.g. manager of the e-commerce platform), suppliers of technical assistance services, accounting and tax authorities (any recipients may process the data only in the interest of the owner and for the purposes indicated above)

 

Extra EU data transfer - data remains within the European Union

 

Your rights - Your rights (available at the link below) can be exercised by contacting the owner, the representative or the DPO by mail or e-mail

https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/my-rights/what-are-my-rights_it

 

Complaints - for any violation of your rights you can complain to the Garante per la Protezione dei Dati Personali in Rome or, alternatively, to the supervisory authority of the place where you are established within the EU

 

Communication of data - necessary: failure to provide data prevents the person concerned from purchasing goods from the owner

 

Consent - not required