PERSONAL DATA PROCESSING POLICY
Data privacy is very important to Elsa and we wish to be open and transparent about the procedure for processing your personal data. We have, therefore, drafted a policy that explains how your personal data are processed and protected.
The data controller is ELSA S.r.l. with registered offices in La Petrizia S.S. 106 – 88050 Sellia Marina (CZ) Italy, namely the company that collects your personal data and has prepared the following information about the processing procedure of these data.
You are, therefore, requested to carefully read the policy outlined below so that you are aware of and can express your consent, which will allow us to provide you with comprehensive information on the use of your data that will always be carried out in respect of your rights.
We hereby specify that the processing of your information will be based on the principle of correctness, lawfulness and transparency, in order to guarantee its security and confidentiality.
The data controller.
The data controller is Elsa s.r.l. Where necessary, Elsa s.r.l. may, however, appoint external data processors.
Purpose of data collection.
The data, which you provide us with by completing this form, are required to 1) send, via the periodic newsletter or other electronic communications (e.g. text messages, MMS, etc.), material aimed at ascertaining your level of satisfaction with our services, as well as material about products, services, exclusive events, competitions and new promotions offered by Elsa s.r.l.; moreover 2) your data, together with any information that you may provide us by participating in surveys aimed at ascertaining your preferences and consumption habits, may be used to send you, via the periodical newsletter or other electronic communications (e.g. SMS), material about personalised products, competitions and special offers, i.e. created specifically based on more accurate information about you and your interests (e.g. special offers and competitions based on your interests, etc.).
How do we process your data?
The data are mainly processed by IT methods. In particular, they will be organised and processed to allow us to find out about your preferences and consequently adapt our commercial offer and create personalised competitions and special offers that may be of greater interest to you.
Where do we store your data?
The data collected will be stored in special archives (available in paper and/or telematic format), deposited at the registered offices of Elsa Srl. We hereby specify that any transfer of your personal data will take place in accordance with the applicable laws.
How long will your data be stored for?
Your data will be kept for a period of time that does not exceed the time required to process them for the purpose they were collected, and, in any case, for no more than 5 years, after which, you must express your consent to processing again to allow us to continue to store them.
Who has access to your data?
We never forward, sell or exchange your data to/with third parties for commercial reasons. If the data are transmitted to third parties, their transmission is only authorised to provide you with our services. Below, you can find all the categories of third parties for each specific processing purpose.
What is the legal reason for data processing?
Every time the personal data that we collect about you is processed, you will be told whether the transmission of personal data is legal or if you need to sign a contract and whether providing personal information is an obligation, in addition to the possible consequences if you decide not to do so.
What are your rights?
You have the right to request information about the personal data we store about you at any time. You can contact Elsa s.r.l. who will provide you with your personal data via email.
Right to portability:
Whenever Elsa s.r.l. processes your personal data by automated means, based on your consent or agreement, you have the right to receive, directly or via a third party, a copy of your data, in a structured, commonly used and mechanically legible format. This only concerns the personal data you sent us.
Right to rectification:
You have the right to request the rectification of your personal data if they are incorrect, including the right to complete incomplete personal data by sending an email to firstname.lastname@example.org
Right to erasure:
You have the right to erase any personal data processed by Elsa s.r.l. at any time, except in the following situations:
- you have an open order which has not yet been shipped or only partially shipped
- you have an outstanding debt with Elsa s.r.l., regardless of the method of payment
- if we suspect or are certain that you have improperly used our services in the last four years
- your debt has been sold to third parties in the last three months or in the last year for customers who are deceased
- if you have made a purchase, we will keep the personal data concerning your transaction for accounting regulations
Right to object to processing based on a legitimate interest:
You have the right to object to the processing of your personal data based on legitimate interest by Elsa s.r.l. The latter will not continue to process personal information unless it can prove a legitimate reason for such processing that takes precedence over your interest and personal rights or due to legal claims.
Right to object to direct marketing:
You have the right to object to direct marketing, including profile analysis carried out for direct marketing purposes.
You can decline to adhere to direct marketing in the following ways:
* by following the instructions in each marketing email
* by changing your account settings (valid option if you have an account).
Right to restriction:
You have the right to ask Elsa s.r.l. To restrict the processing of your personal data in the following circumstances:
- if you object to the processing based on the legitimate interest of Elsa s.r.l., the latter will restrict the processing of your data, pending verification of legitimate interest.
- if you have submitted a complaint because your personal data are incorrect, Elsa must restrict their processing pending verification of the accuracy of your personal data.
- if the processing is illegal, you may object to the erase of personal data and request the restriction to use them instead.
- if Elsa no longer needs the personal data, but they are necessary to defend yourself against legal claims.
How can you exercise your rights?
We take data protection seriously and, therefore, we have a dedicated Customer Service that handles any requests regarding the above-mentioned rights. You can contact us at any time by writing to the email address email@example.com, entering “PERSONAL DATA PROCESSING” in the subject line.
Right to lodge a complaint with a supervisory authority:
You can contact us if you believe that Elsa s.r.l. is processing your personal data incorrectly. You also have the right to lodge a complaint with a supervisory authority.