What information do we want to communicate?
- WHO IS THE OWNER AND CONTROLLER OF USER’S DATA?
- WHAT TYPE OF PERSONAL DATA WE COLLECT?
- WHAT IS THE PURPOSE OF THE PROCESSING OF USER’S DATA?
- HOW IS USER’S DATA PROCESSED?
- LEGAL BASIS
- WHERE IS USER’S DATA KETP?
- HOW LONG WILL WE RETAIN USER’S DATA?
- RIGHTS OF THE USER
- FURTHER INFORMATION
1 - WHO IS THE OWNER AND CONTROLLER OF USER’S DATA?As regards the management of user’s data concerned with registering with the site and the sale of products, the data owner and controller is 1PHOTO VISION ADV SRL with registered office in Via Meucci, 4 – 35143 Selvazzano Dentro (PD) – Italy.
Owner contact email: firstname.lastname@example.org
2 - WHAT TYPE OF PERSONAL DATA WE COLLECT?As soon as you begin to interact with www.1photo,it we start to collect user’s data. It may be collected through a specific communication from the user and also automatically during your use of the website.
Among the types of Personal Data there are:
Identification Data: first name; last name, email, date of birth, address, company name, Tax ID, telephone number, IP address, login data, browser type and version, time zone setting, plug-in types, geopositioning information regarding user’s probable position, operating system and related versions.
Data communicated while using the service: Password, VAT Number, billing address, shipping address.
Unless specified otherwise, all Data requested by 1photo.it is mandatory and failure to provide this Data may make it impossible for 1PHOTO to provide its services. In cases where 1photo specifically states that some Data is not mandatory, User is free not to communicate this Data without consequences to the availability or the functioning of the Service. User who is uncertain about which Personal Data is mandatory are welcome to contact the Owner.
User is responsible for any third-party Personal Data obtained, published or shared through 1photo.it and confirm that they have the third party's consent to provide the Data to the Owner.
3 - WHAT IS THE PURPOSE OF THE PROCESSING OF USER’S DATA?The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its User or third-parties), detect any malicious or fraudulent activity, as well as the following:
b) Managing contacts and sendin gmessages
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
c) Handling payments
Payment processing services enable this Website to process payments by credit card, bank transfer or other means. To ensure greater security, this Website shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction. Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.
d) Interaction with live chat platforms
This type of service allows User to interact with third-party live chat platforms directly from the pages of this Website, for contacting and being contacted by 1photo support service. If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the User do not actively use the service. Moreover, live chat conversations are recorded.
e) Registration and authentication
By registering or authenticating, User allow this Website to identify them and give them access to dedicated services.
Depending on what is described below, third parties may provide registration and authentication services. In this case, this Website will be able to access some Data, stored by these third-party services, for registration or identification purposes.
Direct registration (1photo.it): The User registers by filling out the registration form and providing the Personal Data directly to this Website. Personal Data collected: first name; last name; billing address; password; shipping address; Tax ID; VAT Number.
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
4 - HOW IS USER’S DATA PROCESSED?The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.
5 - LEGAL BASISThe Owner may process Personal Data relating to User if one of the following applies:
- User have given their consent for one or more specific purposes.
- provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
- processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.
If the User decide to withdraw the consent and there are no other reasons that authorise 1PHOTO to process your personal data, 1PHOTO will stop processing it. Conversely, if another legal basis were to authorise us, we would continue to process your data, still in compliance with your rights.
6 - WHERE IS USER’S DATA KETP?User data is processed within the European Union and in the other data structures managed by the third parties identified below.
As soon as the User provide his/her personal data, he/she consents to it being transferred, stored and processed by us. If we needed to transfer and/or store these personal data outside the EU, User will be properly informed of this. Also, in this event, 1PHOTO will adopt all the appropriate measures to ensure maximum data protection.
7 - HOW LONG WILL WE RETAIN USER’S DATA?Personal Data shall be processed and stored for 12 months from the last use of the service or the closure of your account, unless there are legal obligations (e.g. sales invoices) that require us to keep your data for a longer period. As regards promotional activities targeted at you (which you may ask us to stop at any time), we will keep your data for a maximum of 24 months from the date you registered with the service.
8 - RIGHTS OF THE USERSUser may exercise certain rights regarding their Data processed by the Owner. In particular, User has the right to do the following:
- withdraw their consent at any time.
User has the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
- object to processing of their Data.
User has the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
- access their Data.
User has the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
- verify and seek rectification.
User has the right to verify the accuracy of their Data and ask for it to be updated or corrected.
- restrict the processing of their Data.
User has the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
- have their Personal Data deleted or otherwise removed.
User has the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
- receive their Data and have it transferred to another controller.
User has the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.
- lodge a complaint.
User has the right to bring a claim before their competent data protection authority.
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, User may object to such processing by providing a ground related to their particular situation to justify the objection. User must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. User can withdraw your consent to receiving promotional messages by clicking on the appropriate link you will find in all our communications or by sending an email to the following address: email@example.com
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.
b) Legal information
This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
Last modification: 28 February 2020