This information describes how the site is managed with regard to the processing of personal data of users who consult it, as well as the data processing practices used through this site.
In compliance with Articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (GDPR), the following information is provided to the Users of this Website, which refers exclusively to the processing carried out through said Website and not through other websites that may be visited through links from this one, for which it is suggested to read the relevant information made by the respective Owners.
This Website and the services eventually offered through the Website are reserved to subjects who have reached the age of eighteen. The Data Controller does not process personal data relating to persons under 18 years of age. At the request of such Users, the Data Controller will promptly delete all personal data involuntarily collected.
- Owner of the treatment
The owner of the treatment is IRON. M srl
jewellery, art & design with registered office in Strada di Vagno, 15
05035 Nera Montoro P.Iva 01425610555.
The Owner reserves the right to appoint a web agency or a consultant as the person in charge of the processing of personal data managed for the purposes of technical assistance, maintenance, technical management and the like of this Site, whose details may be communicated upon request to the addresses indicated above.
The Data Protection Officer can be contacted by email: firstname.lastname@example.org
- Category of data processed and sources
We may primarily process navigation data as well as cookies.
We may also process data provided voluntarily by the user, e.g. through the contact form or by sending an e-mail communication, including common personal data (identification, personal details) and exceptionally special data pursuant to Art. 9 GDPR or criminal data pursuant to Art. 10 GDPR to the strict extent that this is made necessary by the information request received.
The data may come from automated or voluntary sources, as well as from public sources. For example, it may come from the user’s navigation, which may bring with it information relating to previous consultations of other sites, including in particular cookies and other similar technologies. Data may also be provided voluntarily by the user or by subjects related to the user. Other data may come from public sources, such as data processed in the context of research and from searches, public databases and the like.
- Purpose of the treatment
The personal data of the Users of the Website, as described above, will be processed in the manner and in the form prescribed by the GDPR, for the performance of the functions of the Website, with particular, but not exclusive, reference to navigation on its pages and the procedures described therein for data collection, contact form, any registration process / access to restricted area, subscription to the newsletter and the like.
In particular, the personal data provided to the Data Controller will be processed for the pursuit of the following purposes:
- to follow up on specific requests made to the Owner by the User through the Website and its communication tools (contact forms, information request forms, purchase procedures);
- for the possible subscription to the newsletter and the consequent sending of commercial communications and various information concerning the sector in which the Owner operates, with the specific consent given by the user;
- for communications of an informative nature relating to the services of the Data Controller, following requests for information by e-mail or by filling in the contact form and other communication tools;
- for other purposes ancillary or related to those indicated above and, in any case, falling within the scope of the Website’s activities;
- for the processing of the e-mail address, provided by the data subject in the context of the sale of a product or service, also aimed at sending, without further consent, communications for the subsequent direct sale of products or services similar to those subject of the sale itself; the data subject may in any case express his/her refusal and object to such processing, both initially and subsequently, easily and free of charge, by following the instructions given in any subsequent communication.
- Data collected through the Email platform
For complete information we specify that in sending email communications email@example.com uses a compliant platform, which, through statistical tracking systems, allows to detect the opening of a message, the clicks made on hyperlinks contained within the email, from which IP address or with which type of browser the email is opened, and other similar details. The collection of such data is functional to the use of the platform and is an integral part of the functionality of the message delivery system.
The User can also easily object to further newsletter mailings by clicking on the appropriate link for the revocation of consent, which is present in each email containing the newsletter. Once the revocation of consent has been made, the Owner will send the User a message to confirm the revocation of consent.
- Legal basis of the treatment
The processing of personal data is based on the fulfilment of contractual or pre-contractual obligations, where necessary, on consent through the free and informed completion of the appropriate information fields in the form dedicated to the collection and transfer of data and the checking of the appropriate checkbox where applicable. The processing is also based on legitimate interests, including the right to information, for which please refer to the next paragraph.
- Legitimate interest of the Owner
The processing of personal data is also based on the legitimate interests of the Data Controller, such as the exercise of one’s rights in the context of the information society, the performance of contractual services and the carrying out of direct marketing operations.
- Obligation to transfer
The provision of navigation data by Users, for the above purposes, depends on the level of privacy that Users have enabled or disabled through their browser. In some cases, disabling it may affect the navigation on this Website. For certain modules of this Website, the provision of navigation data and/or the use of technical cookies is mandatory for the proper functioning of the Website itself.
The provision of some personal data is in any case necessary for the structure of the Website and its procedures. For example, the conferment of the e-mail account is necessary for subscription to the newsletter, while the conferment of name and surname, shipping data, etc. are necessary for the purchase procedure. The compulsory data are indicated in the forms with an asterisk or in a similar form.
Any request for other optional data will be preceded by the absence of an asterisk or similar form and by an approval tick.
Failure to provide the data necessary for the requested action (for example, the e-mail account for subscribing to the newsletter or the name and surname and shipping address for the purchase procedure) makes it impossible for the Controller to process the request.
The non-submittal of other optional data has no consequences.
- Possible recipients of personal data
The data may be communicated to companies connected to, linked to or controlled by the Data Controller, as well as to consultants, or even third parties who operate, also in the name and on behalf of the Data Controller, for the performance of services connected to the purposes indicated in this information notice, both within the EU and outside the EU (in the latter case, it will be exclusively subjects adhering to the Privacy Shield protocol).
In any case, the data may be communicated to Data Processors, as well as to persons authorized to process and duly instructed, always within the scope of the purposes of processing.
- Conservation period
The data provided by the interested party will be stored until expressly revoked by the interested party, also by means of an action on his/her browser, cleaning of cookies, express request or otherwise expressed, or within the limits provided for by current regulations.
Navigation data will be stored for the technical time necessary to perform the functions for which they were collected, or within the limits provided for by current regulations.
- Rights of the interested party
Each Data Subject has the right of access, rectification, erasure (oblivion), restriction, receipt of notification in case of rectification, erasure or restriction, por-tability, objection and not to be subject to an automated individual decision, including profiling, pursuant to Articles 15 to 22 of the GDPR.
These rights may be exercised in the forms and terms provided for in Article 12 GDPR, by written communication sent to the Owner by e-mail at firstname.lastname@example.org.
The Holder will provide an adequate response as soon as possible and in any case within 1 month of receiving the request.
- Right to withdraw consent
You can withdraw your consent, if given, at any time by
- sending an email to the Holder’s address email@example.com
- express communication at the headquarters of the Owner.
Each Data Subject has the right to lodge a complaint pursuant to Articles 77 et seq. of the GDPR with a supervisory authority, which for the Italian State is identified in the Guarantor for the protection of personal data.
The forms, modalities and terms of proposing the complaint actions are provided for and regulated by the national legislation in force. The complaint is without prejudice to the administrative and judicial actions, which for the Italian State can be proposed alternatively to the same Guarantor or the competent court.
The personal data provided through navigation on this website and the eventual compilation of the forms published therein may be subject to profiling by third party providers through third party cookies.
Profiling allows these third party providers, autonomous holders of the respective processing of personal data for profiling purposes, other than the owner of this website, to evaluate certain personal aspects of the interested party relating in particular to his/her preferences, interests, tastes with reference to the pages consulted and the activities carried out, in order to allow these autonomous and different holders to offer the interested party a more specific and targeted service to his/her needs.