Privacy

Privacy policy

Information pursuant to art. 13 of Regulation (EU) no. 679/2016 (“GDPR”)

PREMISE:

The following information is drawn up pursuant to art. 13 of the Privacy Code, from Arti&Inventive, in relation to the personal data provided by users when accessing and/or registering on the site www.artieinventive.it ("Site“) or making a purchase on the Site itself. Arti&Inventive is the owner of the Site on which it operates as a provider of the registration and sales service.

1. Data controller

The data controller of personal data is Arti&Inventive., with registered office in Via Ercole Patti 13, Aci sant'Antonio, VAT number/tax code 05070120877 e-mail info@artieinventive.it

2. Purpose of the processing

Arti&Inventive will process the personal data provided by users for the following purposes:

(a) to allow registration on the Site and to use the services reserved for registered users, including the possibility of making an online purchase.

(b) to allow the conclusion of the purchase contract and the correct execution of the operations connected to it, including post-sales assistance activities. Furthermore, users, even if not registered, will be able to send requests for information or clarifications on the products on sale on the Site and, to process such a request, Arti&Inventive will require the provision of some personal data (e.g. name, surname and e-mail address). email);

(c) for administrative-accounting purposes as well as to fulfill legal obligations;

(d) subject to the user's express consent, for the sending of informative and promotional communications (including the "newsletter"), discount coupons and special offers, by Arti&Inventive, in relation to products and services of Arti&Inventive srl or third parties , as well as for carrying out market research, via email and the postal service (so-called purposes of "marketing“).

(e) limited to the email details provided by the user in the context of the purchase of a product or service offered and sold on the Site directly by Arti&Inventive, to allow the direct sale of similar products or services without the need for the express and prior consent of the interested party (as provided for in art. 130, paragraph 4 of the Privacy Code) and provided that the user does not exercise the right of opposition in ways described in point 3 below (so-called "soft spamming“).

(f) subject to the express consent of the user, for the processing of his consumption choices and purchasing habits by Arti&Inventive through the detection of the type and frequency of purchases made on the Site, for the purpose of sending informative material and/or advertising of specific interest to the user via e-mail and the improvement of the proposals sent by Arti&Inventive (so-called "profiling“).

It is also specified that:

Authentication credentials 

Arti&Inventive will process the registration data to allow the user registered on the Site, if he wishes, the possibility of registering on one of the following sites: www.1nventive.it, www.artieinventive.it, on which Arti&Inventive operates as a provider of the registration and sales as well as as data controller of the personal data of registered users, using the same credentials as for registration on the Site (so-called "Sites powered by Inventive"). The user will be informed of this possibility before accessing each of the Sites powered by Arti&Inventive and, in any case, only after having been invited to read the privacy policy of the Site powered by Arti&Inventive which he intends to access with the same credentials as registration used for the Site. In the event that the user has given consent to the sending of promotional communications upon registration and/or purchase on the Site and has subsequently logged in to another of the Sites powered by Arti&Inventive with the same authentication credentials as the Site, he will not receive promotional communications relating to Sites powered by Arti&Inventive other than the Site, unless he expressly requests to receive such communications by selecting the appropriate option present in the personal account of each of the other Sites powered by Arti&Inventive.

Credit card data

To make a payment on the Site by credit card, the user must enter the confidential credit card data (card number, holder, expiration date, security codes). Such data will be acquired by the payment service provider who will act as an independent data controller, without passing through the Arti&Inventive server which, therefore, will not process such data in any way. The data will be acquired in encrypted format and according to the security requirements established by the PCI certification. The payment service uses the SSL (Secure Sockets Layer) protocol. The user may request, through the Site, the saving of such data but the data will be saved directly by the payment service provider and will not be acquired by Arti&Inventive which will only keep track of the last four digits that make up the credit card number only and exclusively to prevent any fraud in online payments. It is specified that even if the payment concerns the purchase of a product from a Third Party Seller, within the MarketPlace, the credit card data will not be communicated to the Seller.

Data provided as part of the “say it via e-mail” service

When browsing the Site, registered users and non-registered users will be able to report one or more products to their friends/contacts by entering their name and email address as well as their name and email address. of the friend. Users must be aware that Arti&Inventive will not retain such data after sending the e-mail, except for the time strictly necessary to document that the user's request has been processed. To use this service, interested parties must be able to legitimately use the data of their friends/contacts.

Sensitive data

To register on the Site and to make a purchase through the Site, the provision of sensitive data is never required. The user could, however, be asked to provide documentation proving the existence of a disability, and therefore the provision of sensitive data, in the event that he intends to take advantage of the reduced VAT rate in relation to the purchase of a product that allows the application of this regime, as provided for by Law 28 February 1997, n. 30. The data thus provided will be processed by the seller of the product, be it Arti&Inventive or a Third Party Seller, for the sole purpose of allowing the seller of the product to comply with the provisions of law 28 February 1997, n. 30 relating to the application of the reduced VAT rate.

Browsing data

It is possible to access the Site and view the products offered for sale without requiring the provision of any personal data. However, the computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.

This information is not collected to be associated with identified interested parties, but, also by its very nature, could, through processing or association, allow the identification of the user.

This category includes the IP addresses or domain names of the computers used by users who access the Site, the addresses in URL notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, etc. This data is used to obtain anonymous statistical information on the use of the Site (such as, in particular, the number of accesses) and to check its correct functioning. This process does not involve the processing of directly identifying information.

The navigation data will be acquired, in the manner indicated above, only by Arti&Inventive

3. Provision of data and consequences in case of failure to consent to processing

The provision of data for the purposes referred to in letters (a) (b) and (c) of point 2 above is optional. However, since this processing is necessary to allow registration on the Site and the provision of reserved services, including the online purchase service, any refusal to provide the data in question will make it impossible to register on the Site and/or conclude an online purchase.

With reference to the purposes of the processing referred to in letters (d) ("marketing") and (f) ("profiling") of point 2 above, consent to the processing of personal data is purely optional and may be expressed through the selection of a specific box, for each distinct purpose, present at the bottom of the registration form on the Site. Failure to consent will not have any consequences on the possibility of registering on the Site and/or making purchases on the same and will exclusively imply the consequences described below :

– failure to consent to the processing of personal data for the purposes referred to in point 2, letter. (d) ("marketing") above, will make it impossible to receive informative and promotional communications (including the "newsletter"), discount coupons and special offers from Arti&Inventive, in relation to products and services of Arti&Inventive or third parties, as well as for carrying out market research, via email and the postal service;

– failure to consent to the processing of personal data for the purposes referred to in point 2, letter. (f) ("profiling") above will make it impossible for Arti&Inventive to carry out the analysis of the user's consumption choices by detecting the type and frequency of purchases made on the Site for the purpose of sending informative material and /or advertising of specific interest to the user.

The user may, in any case, revoke any consent given for the purposes described in letters (d) ("marketing") and (f) ("profiling") of point 2, or oppose the processing for the purposes referred to under letter (e) (“soft spamming”) by contacting Arti&Inventive at the address indicated in point 1 above.

Furthermore, limited to the purposes described in letters (d) ("marketing") and (e) ("soft spamming") of point 2 above, the user may object to the processing of data concerning him also via the specific link present in bottom of any email with promotional content sent by Arti&Inventive. The opposition expressed in these ways also extends to the sending of communications via the postal service.

4. Data processing methods

The data processing will mainly be carried out with the aid of electronic or automated tools, according to methods and with suitable means to guarantee the security and confidentiality of the data themselves, in compliance with the provisions of the Privacy Code. In particular, all technical, IT, organisational, logistical and procedural security measures will be adopted, so that the minimum level of data protection required by law is guaranteed, allowing access only to the people in charge of processing by the Data Controller. or the managers designated by the same.

5. Scope of data communication

The personal data provided by the user, for the purposes described in point 2 above, may be brought to the attention of or communicated to the following subjects:

(i) to companies of the Banzai group, to which Arti&Inventive belongs, and/or employees and/or collaborators of Arti&Inventive and/or of the Banzai group, for the performance of administration, accounting and IT and logistical support activities acting in the capacity, of data controllers and data processors respectively;

(ii) to companies or consultants in charge of the installation, maintenance, updating and, in general, management of the Arti&Inventive hardware and software (including the Platform);

(iii) to companies appointed by Arti&Inventive to send online communications;

(iv) to the parties responsible for repairing the products purchased in compliance with the legal guarantee of conformity in the event that Arti&Inventive acts as seller of the purchased product;

(v) to all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional for the correct fulfillment of the contractual obligations undertaken in relation to the services provided through the Site, as well as the obligations deriving from the law

(vi) to shippers and persons responsible for the delivery and/or collection of the purchased products;

(vii) to all those subjects (including Public Authorities) who have access to the data pursuant to regulatory or administrative provisions;

(viii) to subjects, other than those listed above, appointed as responsible or in charge of the processing of personal data by the Seller, for the execution of activities connected to the conclusion of the purchase contract in all cases in which the user purchases a product sold by a Third Party Seller on MarketPlace.

All personal data provided by users in relation to registration on the Site and/or purchase via the Site are not subject to disclosure. The updated list of data controllers and persons in charge of processing can be consulted at the headquarters of the Data Controllers.

6. Data retention 

Personal data will be kept only for the time necessary to guarantee the correct provision of the services offered.

In the event of closure of the Site account on the user's initiative, the data contained therein will be retained for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for reporting purposes. public security.

In any case, it is understood that personal data will be stored and processed for the purposes referred to in letters (d) "marketing" and (f) "profiling", referred to in point 2 above, for the period of time permitted by the law and the provisions of the Guarantor for the Protection of Personal Data. At the end of this period Arti&Inventive may ask the user to renew their consent to the processing of their data for these purposes or to make them anonymous and keep them solely for statistical purposes.

With reference to the processing carried out by each Third Party Seller, as identified from time to time in the presentation sheet of the product selected by the user, in relation to the activities described in point 2 letter (b) – conclusion of the contract and after-sales assistance – and (c ) – administrative-accounting activities, which precedes, it is specified that the personal data will be kept for the time established by the provisions on the conservation of contractual and accounting documentation and, in any case, for the time allowed and for public safety purposes.

7. Right to access personal data

Pursuant to art. 7 of the Privacy Code, the user has the right to:

a) obtain confirmation of the existence or otherwise of personal data concerning him and their communication in an intelligible form;

b) obtain, from each of the Data Controllers:

– information on the origin of the personal data, on the purposes and methods of processing, on the logic applied in case of processing carried out with the aid of electronic instruments;

– indication of the identification details of each of the data controllers;

– indications regarding the subjects or categories of subjects to whom the data can be communicated or who can become aware of the same in their capacity as designated representative on the territory of the state, managers or appointees;

c) obtain:

– the updating, rectification or integration of data concerning him;

– the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose conservation is necessary in relation to the purposes for which the data were collected or subsequently processed;

– certification of the fact that the operations referred to in the previous points have been brought to the attention of those to whom the data have been communicated or disseminated, also with regards to their content, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right;

d) oppose, in whole or in part:

– for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection;

– to the processing of personal data concerning him/her for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication.

The above rights may be exercised by request to the Data Controller, at the contact details indicated in the point 1 of this information.

The interested party's right to object to the processing of his/her personal data for the purposes referred to in point 2, letter. (d) (marketing) carried out through automated contact methods (email) also extends to traditional ones (mail), without prejudice to the possibility for the interested party to exercise this right in part, pursuant to art. 7, paragraph 4, letter. b) of the Privacy Code, i.e. opposing, for example, the sole sending of promotional communications carried out via automated tools.