EGO EIMI SRL (the Data Controller) has always considered the protection of your personal data to be of fundamental importance and ensures that such data will be processed in full compliance with the European Regulation on the protection of personal data no. 2016/679 (General Data Protection Regulation, hereinafter “GDPR”) and any other applicable rules on the protection of personal data.

The term “personal data”, pursuant to Art. 4(1) of the GDPR, refers to “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (hereinafter the “Personal Data”).

The GDPR provides that, before proceeding with the “processing” of Personal Data – meaning, pursuant to Art. 4(2) GDPR, “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” (hereinafter the “Processing”) – the Data Controller adequately informs the person to whom such Personal Data belongs, i.e. the “Data Subject”, of the reasons why such data is requested, how it will be used and to whom it will be disclosed.

For this reason, this privacy notice (“the Notice”) is intended to provide you, in a simple and transparent manner, with all the useful and necessary information so that you can provide your Personal Data in an informed manner, requesting and obtaining, at any time, clarifications and/or corrections of the Processing. In particular, in compliance with Art. 13 GDPR, we provide below the information relating to the Processing of your Personal Data, with a precise indication of the use made of it, the parties with whom it is shared, as well as your rights.

This Notice relates exclusively to the processing of data communicated by you or otherwise obtained through the use of the website with URL http://www.egoeimisrl.it

The Notice is provided only for this Site and not for any third-party websites that you may consult via links from the Site itself. To find out how these sites process your personal data, we strongly recommend that you consult the privacy notices of all third-party sites visited.

Below you will find the contact details of the Data Controller, which you may use in order to exercise your “rights of control” over the Processing of your Personal Data, pursuant to Arts. 15-22 GDPR, as further specified in paragraph 8) below:

EGO EIMI SRL

Tax Code/VAT No.: 03461730123

Registered office: Via Fratelli d’Italia n. 5 – 21052 Busto Arsizio (VA)

Telephone / Fax: 0331 1691954

E-mail: [email protected]

Certified e-mail (PEC): [email protected]

The Controller collects the data voluntarily provided by you, including:

1. a) personal and contact details provided when creating an account on the Site, via e-mail and/or during calls made to the Controller’s contacts, including on the related social media pages (including: first name, surname, address, telephone, e-mail, place of business, tax code/VAT no.);
2. b) data relating to purchases made through the Site and payment information (bank account number, payment card details, PayPal details or other information provided at the time of purchase);
3. c) data provided in the event of requests for information and assistance, management of returns and warranty of purchased products;
4. d) data provided for participation in any promotions launched through the Site;
5. e) information that you may have disclosed or published on our social media pages or on this Site and any information acquired via the chat available on the Site and/or on our social media pages;
6. f) browsing data relating to the use of the services offered through the Site, collected through cookies in accordance with the notice available at the following link Cookies Policy.

Data relating to minors will be processed in accordance with paragraph 11 below.

The data indicated above is processed only to the extent necessary to achieve the purposes described in paragraph 4 of this notice.

The Controller will process your personal data for:

1. a) “Contractual purposes”: responding to requests received, enabling registration on the Site by creating a personal account, carrying out all the activities governed by the Site’s Conditions of Sale, including purchases on the Site, using the services made available through the Site, including customer support services (i.e. warranty and returns, customer support and technical assistance during or after registration on the Site) – 6(1)(b) GDPR;
2. b) “Legal purposes”: complying with legal and regulatory obligations. In particular, in the event of the purchase of products/services through the Site, the personal data provided for the sale and any invoice request by Users/Customers (name, place of business, tax code/VAT no.) will be processed to fulfil legal obligations in tax matters, i.e. for the subsequent recording of sales and invoices and the necessary formalities – 6(1)(c) GDPR;

Only with prior consent (Art. 6(1)(a) GDPR), which you may freely express in the appropriate sections of the Site, the Controller may request, in addition to the Personal Data referred to above, further personal data for the following additional purposes:

1. c) “Marketing purposes“: sending commercial communications, via electronic means (e.g. e-mail, mobile phone, social networks and applications) or on paper, relating to the products and services offered by the Controller, for participation in events and for conducting market and statistical analyses;
2. d) “Profiling purposes“: analysing habits, interests and preferences in order to better focus the marketing activities indicated above on your needs.

Your personal data may be disclosed, in order to correctly carry out all the Processing activities necessary to pursue the purposes set out in this Notice, to:

1. employees and/or collaborators of the Data Controller, expressly authorised;
2. consultants and providers of professional and technical services, who may also carry out Processing activities on behalf of the Controller (by way of example only: consultants and professionals, IT service providers, management service providers, Site maintenance service providers, banks and payment intermediaries, shipping and delivery providers);
3. where required by law or by the Authorities, the data may be disclosed to public bodies and entities or to the Judicial Authority.

Your Personal Data is not otherwise disclosed to other third parties, except as required by law, in connection with legal action or legal proceedings, or when otherwise necessary to protect the rights or interests of the Controller.

Your Personal Data will not be disseminated.

The Controller will process your Personal Data for the period necessary to fulfil the purposes for which it was collected pursuant to paragraph 4. In particular:

– for the “contractual purposes” referred to in paragraph 4(a) above, with specific reference to potential customers (mere requests for information), the data will be kept for 6 months from when the requested information was provided, unless further retention of the data is necessary to fulfil contractual or legal obligations; with specific reference to registration on the Site not followed by purchases, the data will be kept for as long as the account remains active, unless retention of the data is necessary for other legal purposes, and in any case for a maximum period of three years from the User’s registration and/or other interaction;

– for the further “contractual purposes” referred to in paragraph 4(a) above, the data will be kept for the entire duration of the contract and to fulfil legal obligations in tax matters for up to 10 years from its conclusion and in any case from the tax return to which the documents containing the personal data refer; in the event of legal disputes (in or out of court), the data will be kept for up to 10 years from their conclusion by final judgment, in any case, without prejudice to any legitimate grounds for suspension and/or interruption of the statutory limitation periods;

– for the “legal purposes” referred to in paragraph 4(b), the data will be kept for a period equal to the duration prescribed by law for each type of data;

In the event of express consent for the purposes referred to in paragraph 4(c) and (d),

– for “marketing” and “profiling” purposes, the data is kept until you withdraw your consent and, in any case, for a maximum period of 3 years from the date of the last contact (e.g. last purchase, last request for information, etc.);

Pursuant to Art. 7(3) GDPR, you have the right to withdraw, at any time, any consent given for one or more specific purposes, without prejudice to the lawfulness of processing based on consent given before its withdrawal. Withdrawing consent is very simple: just contact the Data Controller using the contact channels indicated in this Notice.

You have the right to ask the Data Controller, at any time and free of charge, pursuant to Arts. 15-22 GDPR, for access to your personal data, its rectification, its erasure (right to be forgotten), the restriction of processing, to object to its processing, and its portability, in addition to the right not to be subject to a decision based solely on automated processing, including profiling. The relevant requests, as well as any other question relating to this Notice, may be sent to the Controller’s contacts indicated above, attaching an identity document of the requesting party for identification purposes. Without prejudice to the right to appeal to any other administrative or judicial body, you have the right to lodge a complaint with the Garante, the Supervisory Authority for the protection of Personal Data, if you believe that the Processing of your Personal Data has taken place in violation of the GDPR and/or applicable law (see https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali),

Your Personal Data may be freely transferred outside the national territory to countries located in the European Union, but may also be transferred outside the European Union. Any transfer of your Data to countries outside the European Union will take place, in any case, in compliance with the appropriate safeguards required for the transfer under applicable law and in particular pursuant to Arts. 46, 47 and 49 GDPR.

Your Personal Data will not be subject to fully automated decision-making processes.

The processing of Personal Data will be carried out using automated and non-automated tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data.

In order to ensure the security of users’ personal data, the Controller will adopt adequate and appropriate technical and organisational measures, in accordance with Art. 32 GDPR.

You must necessarily provide your Personal Data for the “Contractual purposes” referred to in paragraph 4(a), as it is necessary to receive the requested information, for registration purposes, for carrying out the activities set out in the Site’s Conditions of Sale and for purchasing products through the Site. If you do not want your personal data to be processed for this purpose, you will not be able to use the Site and the services made available through it.

You must also necessarily provide your Personal Data for the “Legal purposes” referred to in paragraph 4(b), as required under applicable laws. If you do not want your personal data to be processed for this purpose, you will not be able to use the Site and the services made available through it.

The provision of your Personal Data for the additional purposes referred to in paragraph 4(c) and (d) is always optional. However, failure to provide data and/or consent may make it impossible for the Controller to establish and/or continue the relationship for the purposes not consented to.

Our Site is not intended for minors. Without the consent of a parent or guardian, pursuant to Art. 8 GDPR, except in cases permitted by applicable law, we will not knowingly collect personal data of minors. You must be at least 16 years old to provide us with personal data and 18 years old to carry out transactions on the Site. By carrying out transactions with us, you automatically declare that you are at least eighteen years old and have full capacity to carry out such transactions and to be legally bound by them. If we are informed and/or become aware that a minor has provided us with their personal data through our contact channels, we will delete it immediately.

Please note that this Notice may be subject to changes due to the introduction of new rules on the protection of personal data; we therefore invite you to check this page periodically.