This information is provided pursuant to EU Regulation 679/2016 and the subsequent national adaptation legislation (hereinafter collectively referred to as “GDPR”) and describes how the company SPRECH SRL (“Data Controller”) collects and processes the personal data of its customers through its website, www.sprech.com.
The term “personal data” refers to any information concerning an identified or identifiable natural person. For example, name, identification number, location data and online identifiers are all personal data. The data collected is treated in accordance with the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Data processing is done manually, using telecommunications and information technology; and safety measures are taken to avoid the risks of unauthorized access, destruction or loss, unauthorized processing or processing that does not comply with the purposes of collection. The provision of personal data is only mandatory for data strictly necessary to establish the relationship for the supply of products and services provided by Sprech Srl.
Sprech Srl may modify, supplement or update this Notice periodically, also in consideration of any changes to the applicable legislation or provisions of the Data Protection Authority. Substantial changes and updates to the Privacy Policy will be applied and brought to the attention of interested parties as soon as they are adopted by updating the link to the Privacy Policy in the footer of the Site and by email communication to registered users. In the event of changes that significantly affect the rights of registered users, the communication will be made with reasonable notice.
1. CATEGORIES OF PERSONAL DATA PROCESSED
1.1 The following is a description of the categories of data we deal with:
Data provided directly by the interested party: these are all personal data entered on the Site by registering on the relevant page: https://sprech.com/area-riservata.html (to proceed with online purchases or to register), or however they are supplied to Sprech so that it can fulfill its obligations.
Examples of data provided directly by potential customers are: their name; address and phone number. More generally, any data provided to allow the execution of a purchase order and the delivery of newsletters, or of products with the communication of data relating to numbers or contact addresses (eg telephone, email, addresses), participation in events, etc.
Data provided by third parties: these are all the personal data that Sprech collects from other sources (eg postal services, couriers), to perform its services.
Automatically collected data: these are navigation data and/or data collected through the use of cookies.
2. PURPOSE AND LEGAL BASIS OF PROCESSING
2.1 The data provided are processed for the following purposes:
the fulfillment of legal obligations;
sending information and promotional communications concerning the outdoor world, with prior consent;
the sending by Sprech Srl of commercial communications relating to its products and services;
The legal basis for processing is the act of registration on the website and/or the newsletter. This then allows for the establishment of the commercial relationship between Sprech and the user.
2.2 For the execution of the contract and the fulfillment of legal obligations, Sprech Srl may communicate personal data to the following categories of subjects:
parties who perform technical and organisational services on behalf of Sprech Srl;
studios, consultants and companies providing assistance and consultancy;
public authorities, where the circumstances warrant such communication.
These parties will process the data as Joint Data Controllers or Data Processors on behalf of Sprech Srl.
3. DURATION OF DATA PROCESSING AND STORAGE PERIOD
The data will be processed only for the time necessary for the purposes listed.
The following are the periods of use and storage of personal data with reference to the different processing purposes:
data processed for the fulfillment of legal obligations will be kept by Sprech Srl within the limits established by law;
the data will be processed to send information, institutional and promotional communications until the possible withdrawal of the consent given for this purpose;
data entered in the “Work with Us” section will be kept for a maximum period of 12 months, in order to allow the profile to be evaluated with company needs.
4. RIGHTS OF ACCESS, CANCELLATION, RESTRICTION AND PORTABILITY
Data subjects are entitled to the rights set forth in articles 15 to 20 of the GDPR. By way of example, every data subject may:
obtain confirmation that their personal data is being processed;
if processing is in progress, obtain access to personal data and information relating to processing, and request a copy of their personal data;
obtain the correction of inaccurate personal data and the completion of incomplete personal data;
obtain, if one of the conditions envisaged by article 17 of the GDPR exists, the cancellation of personal data concerning him/her;
to obtain, in cases provided for by article 18 of the GDPR, a restriction on processing;
to receive personal data concerning him/her in a structured, commonly used and machine-readable format and request their transmission to another owner, if technically feasible.
5. RIGHT TO OBJECT
The data subject has the right to object to the processing of his/her personal data at any time in order to pursue a legitimate interest of the Data Controller. In the event of objection, your personal data will no longer be processed, provided that there are no legitimate grounds for processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, operation or defense of a right in court.
6. RIGHT TO WITHDRAW CONSENT
6.1 In the event that consent is required for the processing of personal data, the data subject may also revoke consent given at any time. Consent can be revoked by writing an email to the address indicated in the “Privacy” section of the website.
6.2 Right to object and withdrawal of consent in relation to processing carried out for marketing purposes
6.3 With reference to the processing of data for the marketing purposes referred to in the paragraph “Purpose and legal basis of processing”, the data subject may revoke any consent given at any time or oppose their processing, through a specific request by email to privacy@sprech.com
7. RIGHT TO LODGE A COMPLAINT WITH THE DATA PROTECTION AUTHORITY
7.1 In addition, the data subject may lodge a complaint with the Italian Data Protection Authority in the event that he/she believes that their rights under the GDPR have been violated, according to the methods indicated on the Data Protection Authority’s website, accessible at www.garanteprivacy.it. The rights of the data subject are exercised free of charge.
7.2 If the person providing the data is under the age of 18, this processing is lawful only if and to the extent that such consent is given or authorized by at least one parent/guardian, for whom identification data and copy of the relevant identification document is acquired.
8. IDENTIFICATION DETAILS OF THE DATA CONTROLLER
Under article 4 of the EU 679/2016 it is specified that the Data Controller is SPRECH SRL with registered offices in 73025 MARTANO, KM 1.5 Strada Prov.le MARTANO_SOLETO, in the person of its pro-tempore legal representative. The Data Processor, who can be contacted to exercise the rights pursuant to article 12 and/or for any clarification regarding the protection of personal data, can be reached at: privacy@sprech.it.
9. MODIFICATIONS
This information may be subject to modifications. If substantial changes are made to the use of data relating to the user by sprech.com, the user will be alerted as clearly as possible by way of publication on the relevant pages.
