In compliance with the provisions of Article 13 of the EU Regulation 2016/679 on the protection of personal data (hereinafter also only "GDPR") and the subsequent national adaptation legislation, we report below the general information concerning the processing and protection of personal data of users who interact with the services accessible through the address atlanticstars.it (hereinafter also only "Site"). Therefore, each user is invited to read this information carefully.

1. Data controller

The Data Controller (hereinafter also just "Controller") is:

AS Srl, VAT02531390447, with registered office in Via dell'industria, 53, 63900 Fermo (FM) - Italy ee e-mail address: shop@atlanticstars.it

                                                                                                                   

2. Categories of personal data

What is personal data.

Personal data (hereinafter also only "Data") are all those pieces of information that, directly or indirectly, make it possible to identify you (hereinafter also only "Data Subject") as a natural person.

Data voluntarily provided by the user.

Data provided directly by the user are all personal data entered by the user on the Site (e.g., by filling out the contact form/form; sending e-mail and/or regular mail to the contact data on the Site; sending spontaneous applications using the contact data on the Site, etc.). Examples of data provided directly by the user are: first name, last name, address of residence/domicile, e-mail, telephone number, payment data, etc. etc.). The optional, explicit and voluntary sending of electronic mail to the addresses indicated on the Site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other Data included in the message.

In specific cases, Data may have been provided to us by a third party through the use of a function or service activated on the Site, such as, but not limited to, through the sending of a gift card or by reason of the shipment of an order to the address of the recipient of the purchase. In such cases, disclosed data is processed only if it is relevant to the performance of that function or service, as outlined in this Privacy and Cookie Policy.

Navigation data.

The computer systems and software procedures responsible for the operation of the Site itself acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. 

This is information that is not collected in order to be associated with identified persons, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by individual users who connect to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the Data Subject. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site, as well as to check its correct functioning and are 15 days after processing.

Browsing data could also be used to ascertain liability in case of hypothetical computer crimes to the detriment of the Site (legitimate interest of the Owner).

Cookies

The Site makes use of cookies, as further specified in the appropriate policy to which reference is made https://www.atlanticstars.it

Social Network Plugin

This site also incorporates social media plugins and/or buttons to enable easy sharing of content on your favorite social networks. Such plugins are programmed not to set any cookies when accessing the page, to safeguard the privacy of users. Eventually cookies are set, if so provided by the social networks, only when the user makes actual and voluntary use of the plugin. Keep in mind that if the user browses while being logged into the social network then he/she has already consented to the use of cookies conveyed through this site at the time of registration with the social network.

The collection and use of information obtained by means of the plugin is governed by the respective privacy policies of the social networks, to which please refer.

• Facebook 
• Instagram

- Google

3. Purpose and legal basis for processing

Except as specified in relation to browsing data and cookies, Data Subject Data is collected and processed for the purposes set out below.

A) Execution of pre-contractual measures at the request of the data subject, subsequent execution of the contract and related fulfillments.

- The Data provided by the Data Subject may be processed for purposes strictly related to the placing of purchase orders for products and/or services and the execution of related activities (such as payment management, communications about the status of orders, delivery of products, exchange of goods or returns after purchase and management of related requests, product reservations, use of other features or services available on the Site, including livechat service). The execution of pre-contractual measures and the subsequent performance of the contract (Art. 6(1)(b) GDPR) constitute the legal basis for the processing of Data.

We specify that if, when purchasing one of our products through the Site, the user decides to activate the feature that allows saving the data of a payment card for future purchases (if this feature is available), we need to process the indicated data for the activation and provision of this feature. Consenting to the activation of this feature makes it possible for payment data to be completed automatically in subsequent purchases, so that you do not have to enter it for each new transaction, and this data will be considered valid and effective for future purchases. It is possible to change or delete payment card data entered on the Site at any time, either through the payment information section or on the user's account registered on the Site.

- The data provided by the Data Subject may also be processed for the fulfillment of obligations under the law and/or national or EU regulations that the Data Controller is required to observe in providing the requested services and executing the contract. The need to fulfill a legal obligation (Art. 6(1)(c) of the GDPR), constitutes the legal basis for the processing. 

- Finally, the data provided by the Data Subject may be processed for the purpose of protecting credit positions, exercising the right of defense in court, for ordinary internal organizational-operational, management and accounting needs. The pursuit of a legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR) is the legal basis for the processing.

B) Registration for access to restricted area 

The Data provided by the Data Subject may be processed for the purpose of registration and access to the Reserved Area on the Data Controller's website, which allows the use of services reserved for registered users. The execution of the contract (art. 6, paragraph 1, letter b) of the GDPR) and the legitimate interest of the Data Controller (art. 6, paragraph 1, letter f) of the GDPR) constitute the legal basis for the processing. 

C) Job opportunities (application)

The Data provided by the data subject interested in applying for open positions in AS S.r.l. may be processed in order to evaluate the curriculum vitae sent, schedule any cognitive interviews and carry out the subsequent evaluation of the application. The processing of the Data provided by the data subject is aimed at considering his/her proposal for collaboration (Art. 6, paragraph 1, letter f) of the GDPR). Therefore, the candidate is invited to include in the curriculum vitae only the Data necessary to assess your profile and to refrain from indicating special data (such are those related to: membership in trade unions or professional organizations; trade union assignments; political opinions and membership in parties, trade unions, associations or organizations of a religious, philosophical, political nature; religious, philosophical or other beliefs; ethnic and racial origin; personal data related to revealing health status and sexual life).

D) Direct marketing

Subject to the specific consent of the user, the Data may be processed for the purpose of sending newsletters, advertising, informative, commercial and promotional material, as well as updates on initiatives, promotions and offers related to products and services of AS S.r.l., for the purpose of direct sales, market research and sending invitations to events attended/organized by the Data Controller. Express consent (Art. 6(1)(a) of the GDPR) is the legal basis for the processing.

E) Third-party marketing

Subject to the user's specific consent, Data may be disclosed to third party companies, which may process it to send commercial and/or promotional communications about products and services, as well as conduct market research.

Your consent (Art. 6(1)(a) of the GDPR) is the legal basis for the processing.

F) Profiling

Subject to the specific consent of the user, the Data may be processed for activities of analysis of purchasing choices, detection of the degree of consent on products and/or services offered, consumer habits and propensities, in order to improve the marketing and services offered by the Owner, as well as to meet specific customer needs (hereinafter also only "Profiling"). Consent (Art. 6(1)(a) GDPR) is the legal basis for the processing. 

 

4. Nature of the provision of Data and consequences of refusal 

Without prejudice to what is indicated in relation to navigation data and cookies, the conferment of Data is necessary for the purposes indicated under art. 3 letters A) and B). Failure to provide the Data will result in the impossibility of following up on the Pre-contractual/Contractual request of the Interested Party and to execute the contract, to access the reserved area, as well as to proceed with the provision of any services requested.

The provision of your Data for the purpose indicated under art. 3 letter C) is optional. Failure by the Data Subject to provide the Data may, however, result in the inability of the Data Controller to consider and evaluate your proposal for collaboration.

Consent to the processing of Data for the purposes indicated above under art. 3 lett. D), E) and F) is optional. Failure to consent to the processing for the purposes indicated under Art. 3 lett. D), E) and F) will result in the impossibility for the Data Controller to process your Data for the purposes of direct marketing, third party marketing and profiling described above, respectively. Failure to consent to the processing for the purposes set out in Articles 3(D), (E) and (F) will not, in fact, prevent the execution of pre-contractual measures and the subsequent conclusion and execution of the contract. In any case, even once consent has been given for the purposes referred to in Articles 3 lett. D), E) and F), the Data Subject may request, at any time, the interruption of processing for these purposes by sending an e-mail to shop@atlanticstars.it or by clicking on the link contained in each e-mail.

 

5. Method of treatment 

Personal data are processed by electronic, computerized, telematic and/or paper means, with logics strictly related to the very purposes indicated above, in full compliance with current legislation, as well as with the principles of lawfulness, transparency, necessity, proportionality and non-excessiveness, and in such a way as to guarantee the confidentiality of users.

Specific security measures are observed to prevent loss of Data, unlawful or incorrect use of Data, and unauthorized access.

 

6. Retention period

The Data will be kept for the purpose of the execution of pre-contractual measures and the contract and related regulatory compliance (art. 3 letter A) in accordance with the principle of proportionality and non excess and, in any case, for a period of time not exceeding that strictly necessary to achieve the purposes for which they were collected, in compliance with the terms of prescription provided by the Civil Code.The Data will, therefore, be processed for as long as necessary to manage the purchase of the products or the provision of the services requested, including any returns, complaints or disputes relating to the purchase of the product or service in question.

Regarding the purpose of registration for access to the Reserved Area of the Site (art. 3 letter B), it should be noted that the user can, at any time, request to be removed from the list of registered subjects using the "unregister" function on the Site.

With regard to the purpose of evaluating the collaboration proposal (Art. 3 letter C), the processing of Data will last no longer than necessary for the purposes for which the data were collected and, in any case, no longer than six months from the receipt of the curriculum vitae. 

Regarding the processing for marketing purposes (Art. 3 letter D) your Data will be kept by the Data Controller for a maximum period of 24 months after the collection of your consent and/or the renewal of your consent. You may, however, at any time request that the processing for marketing purposes be stopped, in which case your Data may no longer be processed for that purpose.

Regarding the processing for Profiling purposes (art. 3 letter F), Your Data will be kept by the Data Controller for a maximum period of 12 months starting from the collection of consent or its renewal. You may, however, at any time request the interruption of the processing for Profiling purposes, in which case your Data may no longer be processed for that purpose.

 

7. Recipients of the data 

For the pursuit of the purposes described in this notice, User Data may be processed by employees, assimilated personnel and/or associates, as well as partners of the Data Controller, who act, rightly appointed, as persons authorized to process personal data under Article 29 GDPR.

Personal data communicated by users, customers and suppliers may also be processed on behalf of AS S.r.l by third parties, duly appointed as Data Processors pursuant to and for the purposes of Article 28 of the GDPR, belonging, by way of example, to the following categories: 

(a) service providers for computer system management (web hosting); 

(b) individuals who take care of administrative and/or tax compliance;

(c) individuals who provide legal and/or tax advice;

d) parties that the Controller uses for the purpose of contract execution (e.g., for shipment and delivery of products), proper fulfillment of contractual obligations undertaken as well as obligations arising from the law; 

(e) advertising and marketing companies to promote the activities of AS S.r.l. and the products/services it offers; 

(f) third-party companies, in connection with the third-party marketing purpose, only if you have given specific consent;

The complete and updated list of Data Processors is available upon your request.

In addition, the Data may be communicated to judicial authorities and/or police bodies, or to subjects to whom there is an obligation to communicate under the law and/or national or EU regulations.

 

8. Data dissemination.

Personal data are not subject to dissemination.

 

9. Data transfer abroad

The Data Subject's Data will not be transferred outside the European Union. 

 

10. Rights of the data subject

The GDPR grants users, as data subjects, the exercise of specific rights.

In particular, at any time, the data subject may obtain:

a) to request and obtain access to personal data, confirmation of their existence or non-existence and their communication in intelligible form; 

b) to obtain the indication of the origin of personal data and to verify their accuracy, request their integration and/or updating, or rectification if inaccurate; 

c) to request and obtain the deletion of personal data if no longer necessary in relation to the purposes for which they were collected and processed, their transformation into anonymous form or the blocking of data processed in violation of the law; 

d) to request and obtain the restriction of processing if the personal data are inaccurate, no longer necessary in relation to the purposes for which they were collected and processed, or in case of unlawful processing of the same; 

e) to object in any case, for legitimate reasons, to the processing of such data; 

(f) to receive the data concerning him or her provided to the Controller and processed by automated means and to transmit them to another data controller without hindrance from the Controller, as well as, if technically feasible, to obtain direct transmission of the data from the Controller to whom he or she provided them to another data controller.

All these rights can be exercised by writing to the Holder's e-mail address above.

The Holder will take charge of the user's request and provide the user, without undue delay, with information regarding the action taken regarding his/her request.

Any rectification or deletion of data or limitation of processing, made at your request and unless this proves impossible or involves a disproportionate effort, will be communicated by the Controller to each of the parties to whom the Data were transmitted. 

Finally, pursuant to Article 13, paragraph 2, lett. d) of the GDPR, the data subject may exercise his or her rights by lodging a complaint with the Guarantor Authority for the Protection of Personal Data, based in 00186 - Rome, Piazza di Montecitorio, 121.

 

This Notice may be subject to periodic updates.