DadArt Privacy Policy
DadArt intends to inform you and all users and/or visitors of the dadart.it website (respectively the "Users" and the "Site"), regarding how your personal data is used and the purposes of the processing.
Data Processing Subjects
Data Controller
The data controller of personal data is Eleonora Gullo (hereinafter the “Data Controller”).
via Piave 121, 98071 Capo d'Orlando Italy
You can write to us at any time at [email protected] for any request for information or to exercise your rights.
Types of data collected
Personal data, collected through the WhatsApp business application, Contact Form, Purchase Form and site registration form
- First name
- Surname
- Address
- Telephone number
- Email address
These data will be processed in order to process and respond to any requests received, or in any case to actively follow up on them.
Browsing data, collected automatically
Like all websites, our Site also uses log files, in which information collected automatically during your visits is stored. The computer systems and software procedures used to operate the Site, in fact, automatically acquire some information during use, the transmission of which is implicit in the use of Internet communication protocols.
- Technical data. Technical data refers to:
- Internet Protocol (IP) address or domain name of the device you use;
- browser type and device parameters used to connect to the Site;
- the addresses in URI (Uniform Resource Identifier) notation of the requested resources or the method used to submit the request to the server;
- name of the internet service provider (ISP);
- date and time of visit;
- web page of origin (referral) and exit of the User;
- possibly the number of clicks;
- the size of the file obtained in response;
- the numerical code indicating the status of the response given to the server (successful, error, etc.);
- other parameters relating to the operating system and IT environment of your device.
- Cookies or similar technologies. Cookies are small text files that are saved in the browser of the user's end device in most cases for the duration of the current session, until the browser is closed, but in some cases even beyond. For further information, we invite you to visit the "Cookies" section.
The information is used for the analysis and maintenance of the technical functioning of our servers and network and will be automatically deleted after 3 months.
This information is processed in an automated form and is not collected to be associated with natural persons, but by its nature, it could allow users/visitors to be identified. This data is collected only for technical purposes of proper functioning of the site and statistics and is therefore not associated with a user.
Method and place of processing of the collected data
The Owner processes the User's Personal Data with appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of the Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated in this information. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the site (personal assistance, administrative, commercial, marketing, legal, system administrators) or external subjects (such as external IT service providers, hosting provider).
Use of collected data
We collect, process and use personal data for the purposes of providing and monitoring our services.
Our Data Controller will ensure that the data provided by you will be processed by subjects specifically appointed, authorized and trained for processing pursuant to Article 30 of the Privacy Code and Articles 28 and 29 of the Privacy Regulation. We inform you that we also care about data security pursuant to articles. 5 and 32 of the Privacy Regulation to prevent data loss, illicit or incorrect use and unauthorized access.
Remember that, in any case and at any time, you can request the Data Controller to delete your data via a simple communication to be sent, without particular formalities, to the addresses indicated at the beginning of this document.
Third party services that process data
To provide the website, DadArt makes use of external services which, in a differentiated way, carry out data processing. The purposes and methods of processing by the various services are summarized below.
Mailchimp
Purpose: Data collection
Data processed: navigation data
Provider/Company: Mailchimp - Privacy Policy
Stripe
Purpose: Online payments
Data processed: Payment information, billing information
Provider/Company: Stripe - Privacy Policy
Klarna
Purpose: Online payments
Data processed: Payment information, billing information
Provider/Company: Klarna – Privacy Policy
Google Analytics
Purpose: User statistics
Data processed: Session data, navigation data
Provider/Company: Google - Privacy Policy
Google Fonts
Purpose: Fonts
Data processed: Navigation data
Provider/Company: Google - Privacy Policy
Google Maps
Purpose: Presentation of the map within the site
Data processed: Navigation data
Provider/Company: Google - Privacy Policy
Google Tag Manager
Purpose: Tag/Pixel Management
Data processed: Navigation data
Provider/Company: Google - Privacy Policy
Mandrill
Purpose: Sending transactional emails
Data processed: Email, user contact information, billing information
Provider/Company: The Rocket Science Group, LLC – Privacy Policy
Purpose: Embedding multimedia elements, analytics service provider, also for marketing purposes
Data processed: User contact data, Tracking user behavior
Provider/Company: Facebook Ireland Ltd. – Privacy Policy
PayPal
Purpose: Online payments
Data processed: Payment information, billing information
Provider/Company: PayPal (Europe) S.à rl – Privacy Policy
NewRelic
Purpose: Infrastructure monitoring
Data processed: Session data, navigation data
Provider/Company: New Relic, Inc – Privacy Policy
Cloudflare
Purpose: Content distribution
Data processed: Navigation data
Provider/Company: Cloudflare – Privacy Policy
Youtube
Purpose: Embedding multimedia elements
Data processed: Navigation data
Provider/Company: Google Inc. – Privacy Policy
Tawk.to
Purpose: Chat
Data processed: Navigation data
Provider/Company: tawk.to – Privacy Policy
TrustIndex
Purpose: Reviews
Data processed: Browsing data
Provider/Company: TrustIndex.io Privacy Policy
Data transmission
The Site uses various proprietary and third-party services, necessary for the provision of the service, marketing analysis, commercial communications, infrastructure monitoring and for the purposes of technical assistance. The data collected as part of the provision of services will in no case be sold to third parties.
To whom and in what context can we transmit your data
Your data may be communicated, within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following subjects:
- to the financial administration and/or other public authorities, where this is required by law or at their request
- to credit institutions for purposes instrumental to the online purchase of the Products
- to the structures, subjects and external companies used by the Owner to carry out activities connected, instrumental or consequent to the execution of the Website Services
- to external consultants (for example, for the management of tax obligations), if not designated in writing as Data Processors
The information collected automatically by the Site, as well as some anonymous data relating to the number and type of interactions on activities combined with loyalty purposes in the strict sense, may also be transferred to third-party cloud servers also located outside the EU, making this processing necessary for the execution of the Site Services requested by you. The legal basis of this processing is, therefore, art. 49, paragraph 1, letter. b of the Privacy Regulation and Art. 43, paragraph 1, letter. b Privacy Code.
Information, modification, copying and deletion of personal data
Rights of the interested party
The User is solely responsible for the truthfulness of the personal information entered therein. Pursuant to articles 15 to 21 of the GDPR, in addition to what is already provided for in the previous articles, you have the right to obtain:
- access to data concerning him;
- the rectification or integration of data, without unjustified delay;
- the deletion (right to be forgotten) of data, except where the processing is necessary for the exercise of the right to freedom of expression and information; for the fulfillment of a legal obligation that requires processing provided for by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority; for reasons of public interest in the field of public health; for archiving purposes in the public interest, scientific or historical research or statistical purposes; for the establishment, exercise or defense of a right in court
- the limitation of processing;
- opposition to the processing, with the right to lodge a complaint with the Guarantor Authority for the protection of personal data.
Access, export or delete
To request access, rectification, cancellation or blocking of personal data you can send a request to the email address [email protected].
Your personal data will be exported within 30 days and sent to the email with which the request was made.
In the event of a cancellation request, as part of the exercise of the right to be forgotten, the procedure will be carried out within the foreseen technical times and in compliance with the retention period declared in this document.
Duration of Treatment
Without prejudice to legal obligations, personal data will be stored in paper and/or electronic/computer form and for the time strictly necessary to satisfy the criteria based on the nature of the services provided, in compliance with your privacy and current regulations.
For analysis purposes aimed at developing and improving the service, the user's personal data may be subject to the same retention period.
Invoices, accounting documents and transaction data are kept for 11 years in accordance with the law (including tax obligations).
Security and data protection
Through our portal and the third-party services indicated in the previous paragraphs, your data is processed in compliance with the applicable law and using adequate security measures in compliance with the legislation in force also pursuant to articles. 5 and 32 of the Privacy Regulation.
We take care to guarantee appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification or unauthorized destruction of your data.
Modification of this information
This information on the protection of personal data is subject to constant updating and revision by the Data Controller. In the event of significant changes that may affect users' rights, appropriate communications and information on existing appeal options will be made in advance.
If you have any questions regarding this information and in relation to the processing of Personal Data, you can contact us at the following e-mail address: [email protected]