Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

DATA CONTROLLER

Agora by Anna Galli

Viale Lombardia, 40

21053 Castellanza (Va)

Phone +390331020138 gallianna@hotmail.com

www.agoraanna.it

VAT number 03329310126

SOURCE OF DATA COLLECTION

Websites, paper forms, mobile apps or other mobile devices, social networks, cookies, wifi network services, surveys and market research carried out with automated and traditional tools.

1.1 PURPOSE OF THE PROCESSING

1.1.1 - Contractual purpose: use the services made available by Agorà through the physical points (shops) or through the website www.agoraanna.it For example, sale of products subject to the general terms and conditions and/or after-sales assistance services; registration on the website or mobile app, website navigation; use of services such as the creation of the cart or the wish list or home delivery of products purchased online; gadgets or discount coupons for registered users and non-registered users; registration on the website through a link with social networks; request for information in the "contact us" section Of the Site or through instant messaging services; reviews, within the reserved area or in the dedicated sections; any other service made available to you by Agora.

Fulfil obligations provided for by regulations and applicable national and supranational legislation.

If necessary, to ascertain, exercise or defend the rights of the Data Controller in court.

1.1.2 - Marketing purposes of Agora: sending, with automated contact methods (email and instant messaging) advertising material, newsletters, promotional and commercial communications related to products and/or events.

1.1.3 - Profiling purposes: analysis of your preferences, habits, behaviours or interests in order to send you personalised commercial communications.

1.2 LEGAL BASIS OF THE PROCESSING

Fulfilment of a contract to which you are a party.

Need to fulfil legal obligations.

Legitimate interest.

Consent (optional and revocable at any time), given by subjects who have reached the age of 16.

Consent (optional and revocable at any time), given by subjects who have reached the age of 16.

1.3 RETENTION PERIOD OF PERSONAL DATA

For the entire duration of the contract and, after termination, for a maximum period of 10 years. In the case of judicial litigation, for the entire duration of the same, until the exhaustion of the terms of experience of the appeal actions.

Until the revocation of consent for this purpose and/or after three years from the last interaction with Agora.

Only data relating to the details of purchases will be stored for marketing and profiling purposes for 24 months from registration. (terms provided for by the provision of the Guarantor Authority for the protection of personal data of 24 February 2005 and 12 October 2017).

Until the revocation of consent for this purpose and/or after three years from the last interaction with Agora.

After the retention periods indicated above, your personal data will be destroyed, deleted or anonymized, compatible with the technical cancellation and backup procedures.

2.1 – CATEGORIES OF PERSONAL DATA PROCESSED FOR CONTRACTUAL AND LEGAL PURPOSES

Personal data, contact data, contractual data (e.g. customer code, product code, order number), tax data, bank data, data relating to the products purchased, data relating to the products consulted and/or placed in the cart and not purchased, registration data on the website, mobile app or other mobile devices, navigation data, data relating to the samples requested and tests carried out, requested information, images.

2.2 – CATEGORIES OF PERSONAL DATA PROCESSED FOR MARKETING PURPOSES

Personal data, contact data, contractual data (e.g. product code, total spent), data relating to products purchased, data relating to products consulted and/or placed in the cart and not purchased, registration data on the website, mobile app or other mobile devices, navigation data.

2.3 – CATEGORIES OF PERSONAL DATA PROCESSED FOR PROFILING PURPOSES

Personal data, contractual data (e.g. product code, total spent), data relating to products purchased, data relating to products consulted and/or placed in the cart and not purchased, registration data on the website, mobile app or other mobile devices, navigation data.

3 - MANDATORY PROVISION OF DATA

The provision of the personal data referred to in point 2.1 for the purposes referred to in point 1.1.1 is mandatory. The refusal to provide the aforementioned personal data does not, therefore, allow the possibility of using the services indicated. The provision of the personal data referred to in points 2.2 and 2.3 for the purposes referred to in points 1.1.2 and 1.1.3 is optional and subject to your consent.

4 - DATA RECIPIENTS

The data may be processed by external subjects acting as autonomous data controllers such as, by way of example, supervisory and control authorities and bodies and in general subjects, public or private, authorised to request the data, consulting companies and/or professional and/or professional firms, for example legal, tax and insurance companies. The data may also be processed, on behalf of the Company, by external subjects designated as responsible, to whom adequate operational instructions are given. These subjects are essentially included, by way of example, in the following categories: companies that offer maintenance and development services of the Site; shipping and transport companies; companies that provide mailing services and other marketing activities.

5 - SUBJECTS AUTHORISED TO PROCESS

Your data may be processed by employees of the Company's business functions responsible for the pursuit of the purposes indicated above, who have been expressly authorised to process and who have received adequate operational instructions.

6 - YOUR RIGHTS AS A DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company by e-mail at gallianna@hotmail.com you can ask the Company for access to the data concerning you, their cancellation, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 of the GDPR, as well as the opposition to the processing in cases of legitimate interest of the Company.

In addition, in the event that the processing is based on consent or contract and is carried out with automated tools, you have the right to receive your personal data in a structured format, commonly used and readable by automatic device, as well as, if technically feasible, to transmit them to another owner without impediment.

You have the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing. The possibility remains that you prefer to be contacted for the aforementioned purpose exclusively through traditional methods, to express your opposition only to the receipt of communications through automated methods.

You have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which you habitually reside or work or in the State in which the alleged infringement occurred.