Privacy Policy

Information pursuant to articles 12, 13 and 14 of EU Regulation 2016/679

In compliance with the provisions of EU Regulation 2016/679 "General Data Protection Regulation", general information will be provided below regarding the use, by the undersigned Company, of the personal data provided by you (hereinafter the Interested Party). The processing of personal data provided by the Interested Party is carried out in a lawful, correct, transparent manner and in compliance with the provisions of EU Regulation 2016/679.

1) DATA CONTROLLER

The Data Controller of personal data is DEVILITALY SRL

2) DATA SUBJECT TO PROCESSING

1.The object of this processing is personal data, with the exclusion of the special categories of data referred to in art. 9 of EU Regulation 2016/679, provided by the Interested Parties during registration and/or access to the website www.diavolapro.com (also the Site), as well as collected during the purchase of the products offered for sale on the aforementioned.

2.The processing of the aforementioned categories of data will take place to the minimum extent necessary to implement the purposes indicated in point 3) of this information notice.

3) LEGAL BASIS AND PURPOSE OF THE PROCESSING

1.The legal basis for the processing of personal data is the execution of the contract of which the Data Subject is a party to the legitimate interest of the Data Controller

2.The processing of personal data is aimed at:

a) The registration of the Data Subject in order to allow the same to use the services reserved for registered users, as well as to allow the conclusion of the purchase contract, of which the Data Subject is a party, and the correct execution of the operations connected to the same;

b) The fulfillment of administrative, accounting and tax obligations connected to registration on the Site;

c) To respond to the requests of the Data Subject.

4) BROWSING DATA

The computer systems and procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the Site, URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are processed for the sole purpose of obtaining statistical information on the use of the Site and to check its correct functioning. However, such data may be used to ascertain liability in the event of any unlawful act committed against the Site.

5) RECIPIENTS OF THE COMMUNICATION OF PERSONAL DATA

1. The recipients of the communication of personal data referred to in point 3) of this information notice are the Data Controller, the Data Processor and/or the Data Protection Officer if appointed, the collaborators and/or authorized employees who act under the authority of the Data Controller, the subjects who manage online payment transactions, as well as shippers and/or subjects in charge of the delivery and/or collection of the purchased products

2. The personal data may be communicated to entities, professionals, companies, public authorities and administrations and/or other structures in charge of processing related to the fulfillment of legal, administrative, accounting and management obligations related to the ordinary performance of the Company's business, carried out in execution and in compliance with the purposes referred to in point 3) of this information notice.

3.The data will be transmitted exclusively within the Italian territory and within the European Union, in breach of the obligations reported above.

4.In any case, the data collected by the Owner will not be disseminated.

6) DURATION OF TREATMENT

1. Personal data relating to the purposes referred to in point 3) of this information notice will be retained for as long as necessary to ensure the correct provision of the services offered to the Interested Party. In the event of cancellation of the Site account by the Interested Party, the data will be retained for a period not exceeding 3 (three) months. In any case, the data will still be retained, in compliance with legal obligations, for a period not exceeding 10 (ten) years. After this period of time, the data will be destroyed and/or made anonymous at the express request of the Interested Party.

7) NATURE OF COLLECTION

1. The collection and processing of the Interested Party's personal data for the purposes referred to in point 3) letters a), b), c) of this information notice is mandatory in order to access the requested services. Any refusal, total or partial, to provide such data will result in the total or partial impossibility of using the services offered by the Data Controller.

8) METHOD OF PROCESSING

1. The data will be processed and stored using a computerized system with automatic insertion into a database not accessible to the public, the same may be inserted into a suitably stored paper database to which access will be granted only to authorized persons.

2. The data stored in the relevant databases will be processed with tools suitable for guaranteeing the integrity, security and confidentiality of the same.

3. The Data Controller will adopt all appropriate technical and organizational measures to guarantee a level of data protection compliant with the provisions of EU Regulation 2016/679.

4. The processing of personal data is not carried out through an automated decision-making process and no type of profiling is performed.

9) RIGHTS OF THE INTERESTED PARTY

1. The interested party may at any time exercise the rights referred to in articles 7, par. 3, 15 et seq. of EU Regulation 2016/679, whereby the interested party may:

I) withdraw his/her consent, with the same ease with which it was granted, at any time, without this affecting the lawfulness of the processing based on consent before the withdrawal (in cases of processing based on consent);

II) obtain access to personal data, and access the following information: a) receive confirmation from the data controller as to whether or not personal data concerning him/her are being processed; b) receive all information regarding the purposes of the processing, the nature of the personal data in question, the recipients or categories of recipients to whom the personal data have been or will be disclosed (specifying whether recipients in third countries or international organizations), the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period;

III) lodge a complaint with a supervisory authority;

IV) obtain the rectification and/or erasure of the data processed;

V) obtain the restriction of the processing of personal data;

VI) obtain data portability;

VII) object to the processing;

VIII) not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

Pursuant to art. 34 of the aforementioned Regulation, the Data Subject also has the right to be informed about the breach of his or her personal data that may result in a high risk to his or her rights and freedoms. 2. The exercise of the aforementioned rights may take place by sending a communication addressed to the Data Controller of personal data is Startup srls with registered office in Via Carletto n° 15/a, 41013 Castelfranco Emilia (MO)- VAT number 03566240366, Tel.059939835 email: info@spice-electronics.com, pec: bruno.romani@pec.it.

COOKIE POLICY

During your navigation on this website we acquire some data, such as the IP address of your computer and the pages of the site visited.

This data is collected exclusively to ensure that the site is functioning and navigable correctly. For this reason we do not collect any data for commercial purposes or for the identification of the user, who therefore remains anonymous.

Information of this type is present in specific logs and can only be communicated to the judicial authority, in the cases provided for by law.

What are Cookies

Cookies are pieces of information exchanged between the server and your computer and allow statistics to be created on the areas of the site visited by users anonymously.

The data collected is then read in aggregate form to understand the efficiency of the site and the level of browsing experience.

The cookies used therefore do not contain any personal information about users.

Most browsers are able to detect new cookies and ask whether or not to accept them.

If you have set your browser not to accept cookies, interaction with the site may be difficult.

Which Cookies do we use and why

To measure browsing data, we use Google Analytics and/or Piwik cookies: their respective characteristics are listed below.

Cookie Name Default expiration Purpose Other information