For Ecommerce Space S.R.L., a company entrusted with the exclusive management of the Justbob.shop site, the protection of the privacy of its users is very important. We have therefore decided to draw up a detailed document relating to the privacy measures adopted. This document describes, among other things, what personal data we collect, the purposes and methods of processing for which your personal data are intended, and the security measures adopted to protect them.
This is an information notice pursuant to art. 13 EU Regulation 2016/679 – General Data Protection Regulation (hereinafter “Regulation”) – to those who interact with our web services accessible electronically at the addresses www.justbob.shop (since these are domains with identical content, hereinafter the “Site” will be cumulatively defined). Users are hereby informed that the personal data provided to Justbob.shop may be processed, in compliance with the legislation and the obligations of confidentiality.
The information is provided only for the Site and not for other websites that may be consulted by the user via links. Furthermore, this general information does not refer to the specific data processing that may be carried out, within the Site, by different Data Controllers for specific purposes, as indicated in the specific information issued by them.
According to the rules of the Regulation, the treatments carried out by Justbob.shop will be based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity, and confidentiality.
The Data Controller and the Data Protection Officer
Following the simple consultation of this Site, data relating to identified or identifiable persons may be processed: The “Data Controller” is the company Ecommerce Space S.R.L. Sede Legale: via Monte Napoleone 8, 20121, MilanoP.IVA 11284250963, reachable at address: email@example.com.
Data processors, data controllers and data locations
The processing operations connected to the web services of the Site take place within the servers of the company NetAdmin S.r.l., located in Palazzo C – Ala Piastra – First Floor – Via Caldera 21 – 20153 Milan, which has been specifically appointed to process the data in its capacity as data processor.
As a result of browsing the Site, we inform you that the Data Controller will process personal data which may consist of an identifier such as aname, an identification number, an online identifier, one or more characteristic elements of the physical, economic, cultural, or social identity capable to make the interested party identified or identifiable.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to beidentified.
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered.
Personal data are also collected when registering on the Site and, with the consent of the user concerned, at the time of the request on the Site they will be used by Ecommerce Space S.R.L. solely for the purpose of providing the service to the user.
To access some sections of the Site, Ecommerce Space S.R.L. may request registration by creating a specific username and password. The collection of personal data marked with an asterisk, in the registration form or during the use of the services, is necessary to allow the user to access the features of the Site indicated at the time of registration. The service, by cross-referencing and processing the data provided, will be necessary to correctly identify the user. Personal data will be stored with the user’s consent to allow him to access the personal area of the portal again. The provision of these data is optional but refusing to provide them makes it impossible for the user to obtain registration on the Site and use the services reserved for registered users.
Finally, all data (provided voluntarily and navigation data) maybe processed to pursue a legitimate interest of the owner or a third party, such as, for example, protection from scams or other behaviors contrary to the User Agreement, as well as for assert and defend a right in court.
Special categories of personal data
In the use of some sections of the Site, there may be a provision of personal data falling within the class of special categories of personal data referred to in art. 9 of the Regulation, and precisely the “[…] data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to identify unique a natural person, data relating to the health or sexual life or sexual orientation of the person “. We invite the interested part to communicate such data only where necessary. We specify that in front of the transmission of categories of personal data, but in the absence of specific consent to process such data, the Data Controller cannot be held responsible in any way, nor will it be able to receive disputes of any kind, since in this case the processing will be allowed as having as its object data manifestly made public by the interested part, in accordance with art. 9.1.e) of the Regulation.
However, we specify the importance, as already indicated above, of expressing explicit consent to the processing of particular categories of personal data, where the interested party shares such information.
To object to the use of profiling tools other than cookies (such as e-mail trackers), please contact the following e-mail address of the Owner: firstname.lastname@example.org.
The use of further persistent cookies and session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the Site Session cookies used by the site avoid the use of other IT techniques that are potentially detrimental to the confidentiality of user navigation and do not allow the acquisition of the user’s personal identification data.
Purpose and legal basis of the processing
The treatment, with specific consent where necessary, is characterized by the following purposes:
allow the provision of the services requested, namely:
- i) the provision of sales services offered by Justbob;
- ii) the contact request by Justbob or by persons specifically appointed by it;
iii) access to the reserved area of the Site;
- iv) respond to requests for assistance or information;
- v) fulfill any legal, accounting and tax obligations;
The data provided may be processed, subject to explicit and specific consent, for sending promotional newsletters.
Where necessary, specific summary information on the processing of personal data and requests for consent will be progressively reported or displayed on the pages of the Site prepared for particular services.
Transmission of data to third parties
Personal data will not be passed on to third parties, except for personal data provided by users and transmitted to:
- subjects who typically act as data processors pursuant to art. 28 of the Regulation, namely: i) people, companies or professional firms that provide assistance and advice to the Data Controller in accounting, administrative, legal, tax, financial and credit recovery matters relating to the provision of the Services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers); iii) or subjects delegated to carry out technical maintenance activities (including the maintenance of network equipment and electronic communication networks); (collectively “recipients”); the list of data processors who process data, in addition to those specifically indicated above, can be requested from the Data Controller by writing to the address above.
- subjects, bodies or authorities, independent data controllers, to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;
- persons authorized by the Data Controller to process Personal Data pursuant to art. 29 of the Regulations necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality.
As already clarified above, regarding the possible purposes of the processing in the presence of specific, free and informed consent of the users concerned, released by them in specific sections of the Site, personal data may be disclosed to some partners selected by Justbob, whose categories are specified in the specific consent requests.
Personal data will be kept only for the time necessary to pursue the purposes for which they are collected, in compliance with the minimization principle referred to in Article 5.1.c) of the GDPR. As this is a periodic continuous service, the data will be processed by the Data Controller until the aforementioned service is terminated by the user (for more information see General Conditions of Use of the Site).
Rights of interested parties
Pursuant to articles 15 and following of the Regulations, the interested party has the right to request, at any time, access to personal data, the correction or cancellation of the same, the limitation of processing in the cases provided for by art. 18 of the Regulation, obtain the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art 20 of the Regulation. At any time, the interested party has the possibility to revoke, pursuant to art. 7 of the Regulation, the consent given; propose a complaint to the competent supervisory authority (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.
The interested party has the rightto formulate a request for opposition to the processing of personal data pursuant to article 21 of the Regulation in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in the event the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject.
For any request and / or communication regarding this Notice or the processing carried out, the user can contact customer support by sending an e-mail to: email@example.com.