This information note (hereinafter the “Privacy Policy“) is provided by Waveflow LLP in accordance with current legislation on the subject of the protection of privacy (included the European Regulation n. 2016/679) and contains important information about personal data that is collected by visiting this Website (hereafter the “Website“) as a registered or unregistered user (hereinafter the “User“) and describes the methods of use and the purposes of processing the personal data provided by the same.
In this Privacy Policy, the term “Personal Data” is used with reference to any information that allows the Company to identify the individual User directly or indirectly, including any information related to the purchase of goods or services, or that the User chooses to communicate to the Company or to share with it while using the Website.
This Privacy Policy is provided and is valid only for this Site and not for any other websites that may be consulted by the user through links on the Site. The Company has no control over these sites or the procedures they apply for compliance of the confidentiality of the data, therefore we suggest to consult the rules on the confidentiality of all the companies with which you come into contact before communicating personal information.
The Company pays the utmost attention to the confidentiality, protection and security of personal data relating to the individuals with whom it comes into contact.
The Company may update this Policy to ensure that it is consistent with industry trends and/or any changes in legal or regulatory requirements. The Users agree to be bound by the prevailing terms of the Policy as updated from time to time. The Company will endeavour to notify the User by email or by notice on the Website of any material changes to the Policy.
The provision of Personal Data is optional. However, failure to provide the Personal Data deemed mandatory (marked with the * sign) will prevent the proper registration to the Site, as well as the possibility of using the services reserved for registered users, and, in case of purchase, acceptance by the Company of the order proposal and the execution of the related contract.
By visiting the Website, using its services or interacting with the Company, the User confirms that he/she has read and understood this Privacy Policy and accepts that the Company collects, uses, archives Personal Data collected through the Site, in accordance with present Privacy Policy. If the User does not accept the terms of this Privacy Policy, he is requested not to visit the Site, not to create an account and not to use the Website or send Personal Data, or not to give your consent when this option is offered to you in accordance with the regulations in force.
Categories of personal data being processed
- Data provided voluntarily by the User
The access to some sections of the Site and / or the use of some of the services offered by the same can entail a request to the User to provide their Personal Data (as an example and not exhaustive: name, surname, date of birth, postal address, e-mail address, telephone number). If the User provides Personal Data relating to a third party by submitting such Personal Data to the Company, the User represents to the Company that he has obtained the consent of the third party to provide to the Company with their Personal Data for the respective purposes.
- Navigation data
In connection with the Site, the computer systems and software procedures used to operate the Website itself, during their normal operation, may indirectly acquire browsing data of the User, whose transmission is implicit in the use of communication protocols of the Internet (by way of example but not limited to: “IP” addresses, domain names of the devices used by the User accessing the Website, addresses in “URL” notation of the requested resources, time of requests and other parameters related to the operating system and to the User’s IT environment). This information is not collected to be associated with identified users, but, by their very nature, could, through processing and association with data held by third parties, allow to identify them. In any case, these data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site, as well as to check its correct functioning. These data are not communicated to third parties or disseminated. Only if there are computer crimes against the Site, navigation data can be used to ascertain the related responsibilities. For further information on navigation data, the User is invited to consult the Cookie Policy.
Purpose of the treatment
The purposes of processing Personal Data may be as follows:
a) allow registration to the Site, necessary for access to particular sections of the same and for the provision of some of the services offered by it;
b) conclude purchase and sale contracts and complete the related obligations, aimed at implementing the contractual relationship established;
c) create professional profiles related to customers or suppliers;
d) fulfill contractual and legal obligations of an administrative nature (for example, accounting and tax obligations) and / or comply with requests of the Judicial Authority;
e) carry out market research, economic analyzes and statistics aimed at verifying the operation of the services offered by the Site and of its approval by the User;
f) to elaborate personalized information about the User’s consumption habits;
g) respond to requests from the User regarding the services offered by the Site;
h) subject to the User’s specific consent and until the revocation of the same, send e-mail newsletter, to inform the User of the promotional, commercial and marketing initiatives promoted by the Company;
i) subject to the User’s specific consent and until revocation of the same, proceed to analysis and profiling of customers, aimed at sending, by e-mail, promotional communications specifically dedicated to the User.
Except as specified with regard to navigation data, the provision of Personal Data collected for the purposes described is not mandatory, but failure to provide, partial or incorrect conferment of the same will make it impossible for the Company to fulfill the services requested by the User.
Personal Data may not be used for other purposes other than those for which it was given by the User.
The Company does not collect credit card details, whether to process the payment or for customer service purposes. Credit card details are collected, processed and stored directly by our third-party payment processors pursuant to their terms of use and privacy policies. None of credit card details of the User are stored with the Company.
Please take note of Cookies Policy in respect of the data collected and used by third-party cookies and trackers on our Website.
Methods of processing and storage of data
Personal Data are processed in compliance with the privacy regulations.
The treatment is therefore based on the principles of lawfulness, fairness, transparency and will be carried out in compliance with fundamental rights and freedoms, as well as the dignity of the person concerned, with particular reference to privacy, personal identity and the right to personal data protection.
Personal Data collected are processed with the aid of paper and / or computerized procedures. Appropriate security measures are observed to prevent the loss of such data, illicit or incorrect use and unauthorized access. The Personal Data provided by the User will not be disseminated.
Personal Data are kept for the time strictly necessary for the pursuit of the purposes for which they were conferred by the User, without prejudice to the need for an additional retention period imposed by law to perform contractual, administrative, tax obligations or accounting. After these terms, the data will be deleted.
Data Controller and Persons authorized to process
Personal Data are processed by the Data Controller and / or personnel properly designated by the Company, appropriately identified, instructed and formally appointed and operating under its direct authority and responsibility, for the sole purpose of satisfying the user’s request for use of the services offered by the Site.
The processing of Personal Data may also be carried out by third parties acting on behalf of the Company, appropriately instructed and appointed as Managers or Trustees of the processing, or, as the case may be, as independent Holders, who will process the data in accordance with the purpose for which they were originally collected.
These third parties may be natural or legal persons, who, on behalf of and / or in the interests of the Company, lend:
- assistance and consultancy activities for the Company itself;
- specific processing services or related activities, instrumental or support to the pursuit of the purposes indicated above (by way of example and not exhaustively, courier for the delivery of products purchased, Customer Service, analysis and market research service, management of payments by credit card, maintenance of IT systems, etc.).
User Rights
The User can exercise at any time the rights provided for by the applicable legislation. In particular, the User may:
- access personal data and confirm the existence or not of personal data concerning him/her and request their communication in an intelligible form;
- request the updating, rectification, integration, portability, deletion, limitation, transformation into anonymous form of the Personal Data processed and be certified that the above operations have been brought to the attention of those to whom the data are been communicated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
- oppose, in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection, as well as to the sending of advertising or direct sales material or for carrying out market research or advertisement communication.
The User has the right to withdraw the consent to the processing of Personal Data at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.
For all the aforementioned purposes, the User must send a written request to the Company via our customer service feedback form (available here). The Company may need to request additional information from the User to confirm his identity before providing the access or making the correction.