PRIVACY POLICY pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

Premise

The information below is prepared pursuant to art. 13 of EU Regulation 2016/679 by eCommerce Outsourcing s.r.l., a company subject to management and coordination by Giglio Group s.p.a. (VAT No. 07396371002), with registered office in Piazza Generale Armando Diaz 6, 20123 Milan.

1. Name and contact details of the data controller

eCommerce Outsourcing s.r.l with registered office via Sesia 5, 20017 Rho (MI), registered in the Register of Companies of Milan under no. 2034727, fiscal code and VAT no. 08576060969 (hereafter, also "eCommerce Outsourcing" or the "Owner"), is the owner of the processing of the personal data of the users provided during access to the site www.7hype.com ("Site").

eCommerce Outsourcing can be contacted at the following addresses:

  • Address: via Sesia 5, 20017 Rho (MI)
  • Telephone number: 800002548
  • E-mail address: info@7hype.com

eCommerce Outsourcing will process personal data provided by users through the Site under the following conditions.

In this privacy policy, singular definitions include plural definitions, and vice versa.

2. Contact details of the data protection officer

Users may contact the Data Protection Officer ("Data Protection Officer" or "DPO") for all matters relating to the processing of their personal data and the exercise of their rights under the GDPR at: dpo@terashop.it

3. Purpose and legal basis of treatment. Mandatory or optional provision. Consequences of refusal to process.

eCommerce Outsourcing will process the user's personal data:

a) To respond by phone and/or email to user requests sent via the contact form on the Site ("contact us"). Providing data for this purpose is optional: that is, there is no legal and/or contractual obligation to communicate data, but the refusal of the user to provide such data will make it impossible for eCommerce Outsourcing to respond to the user's requests. The legal basis for the processing is the legitimate interest of eCommerce Outsourcing to respond to the user's requests.

eCommerce Outsourcing will retain the personal data provided by users on the Site in order to properly execute user requests no longer than is necessary to fulfill such requests.

b) To fulfill and manage requests for spontaneous applications from users sent via the form on the Site "work with us”.

The provision of data indicated with an asterisk in the "work with us" form is necessary to allow us to fulfil the purposes indicated in point b); therefore, refusal by the user to provide such data will make it impossible for eCommerce Outsourcing to consider the user's application and manage the selection process. We do not require the submission of particular data. In the event that the documentation sent (cv or other) contains more "sensitive" data than is strictly necessary, that information will not be used to evaluate applications.

The legal basis of the processing is the execution of pre-contractual measures taken at the request of the interested party (art. 6.1.lett. b GDPR)

eCommerce Outsourcing will keep the personal data provided by users on the Site in order to correctly execute the users' application requests for a period not exceeding 12 months after the end of the selection process, in case the hiring does not occur. If, on the other hand, the selection process is successful, personal data will be stored according to the time frame indicated in the information notice that will be submitted to the candidate at the time of hiring.

c) Subject to the express consent of the user, eCommerce Outsourcing will process the user's personal data in order to send him/her informative and promotional communications via e-mail, including newsletters, regarding activities, products and services promoted by the company, including invitations to training courses and other promotional initiatives.

The legal basis for this processing is the explicit consent of the user (art. 6.1.a GDPR). The user may revoke at any time the consent given and/or object, at any time, to the processing of his or her data for this purpose by contacting the Data Controller at the following address info@7hype.com and/or through the appropriate link present in every promotional communication sent by eCommerce Outsourcing by e-mail. The provision of data for the purpose of general marketing is optional: there is no legal or contractual obligation on the user to provide such data and / or consent to the processing of his/her personal data for this purpose.

eCommerce Outsourcing will keep the personal data provided by the users on the Site for general marketing purposes until the revocation of consent and/or the exercise of the right of opposition and, in any case, no longer than 24 months from the collection of the data, reserving the right, before the expiry of this period, to ask the user to renew consent and/or update the data.

In addition, the user is informed that:

  • for the purpose of general marketing eCommerce Outsourcing also uses personal data initially collected for other purposes; such further processing is allowed, as it is based on the consent of the data subject;
  • the withdrawal of consent does not affect the lawfulness of processing based on consent given before the withdrawal;
  • in the event that the user objects to the processing of his/her data for general marketing purposes and/or revokes the consent initially given for the purpose of general marketing, his/her data will no longer be processed by eCommerce Outsourcing for such purpose and will be retained by eCommerce Outsourcing only if another valid legal basis exists.

d) Subject to the user's explicit consent, eCommerce Outsourcing will process the user's personal data, in an automated way, in order to monitor and trace the user's behaviour, analyse and process such data, together with other information related to the users (such as, for example, date of birth, IP address), in order to identify correlations in the user's behaviour and insert the same in various "clusters", send, via e-mail, and/or display personalized offers on the Site, i.e. combined with the cluster in which the user has been inserted and, therefore, his or her alleged specific interest.

The legal basis for this processing is the explicit consent of the user (art. 6.1.a GDPR). The user may revoke, at any time, the consent given and/or oppose, at any time, the processing of his/her data for this purpose, by contacting eCommerce Outsourcing at the following address info@7hype.com and/or through the specific link present in each promotional communication sent by eCommerce Outsourcing by e-mail. The provision of data for profiling for marketing purposes is optional: there is no legal or contractual obligation for the user to provide such data and/or consent to the processing of his/her personal data for such purposes.

eCommerce Outsourcing will process personal data provided by users on the Site for profiling for marketing purposes until consent is revoked and/or the right to object is exercised and, in any case, no later than 12 months after collection.

In addition, the user is informed that:

  • for the purpose of profiling for marketing purposes, eCommerce Outsourcing also uses personal data initially collected for other reasons, such further processing is allowed, as it is based on the consent of the data subject;
  • the withdrawal of consent does not affect the lawfulness of processing based on consent given before the withdrawal;
  • nel caso in cui l’utente si opponga al trattamento dei sui dati per finalità di profilazione a fini marketing e/o revochi il consenso inizialmente prestato per la finalità di profilazione a fini marketing, i suoi dati non saranno più trattati da eCommerce Outsourcing per tale finalità e saranno conservati da eCommerce Outsourcing solo nel caso in cui sussista un’altra valida base giuridica.

Without prejudice to the retention periods indicated above for the related purposes, it should be noted that personal data may be retained for a longer period of time, if this is necessary to comply with legal obligations to which the Data Controller is subject, or for the defense of a right, judicial or otherwise, of the Data Controller.

4. Categories of subjects to whom the data controller communicates the user's personal data (recipients)

The personal data provided by the user may be communicated by eCommerce Outsourcing to the categories of recipients indicated below:

  • companies of the group to which eCommerce Outsourcing belongs and/or employees and/or collaborators of eCommerce Outsourcing, for the performance of administration, accounting and IT and logistic support activities;
  • to all those subjects (including Public Authorities) that have access to personal data by virtue of regulatory or administrative measures;
  • to companies, consultants or professionals in charge of the installation, maintenance, updating and, in general, of the management of the hardware and software of eCommerce Outsourcing it uses to provide its services;
  • to companies that provide software for the performance of tracking, monitoring and profiling for marketing purposes;
  • to all those public and / or private individuals and / or legal entities (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Offices of Labor, etc..), If the communication is necessary or functional to the proper fulfillment of contractual obligations assumed in relation to services on the Site, as well as obligations under the law or in case of ascertainment, exercise or defense of a right.

Data concerning users will not be disclosed.

5. Transfer to third countries

The Data Controller transfers some data to the following third countries: USA.

The transfer takes place on the basis of the adequacy decisions of the European Commission (these are the clauses approved pursuant to Article 46.2 of the GDPR) and the authorization measures of the Guarantor for the protection of personal data or on the basis of the standard contractual clauses between the Owner and / or Processor.

6. Rights of the interested party

The interested party has the right to:

  • ask the Data Controller to confirm whether or not personal data concerning him/her are being processed and, if so, to obtain access to the personal data (right of access);
  • obtain from the data controller the rectification of personal data concerning him/her without undue delay. Taking into account the purpose of the treatment, the person concerned has the right to obtain the integration of incomplete personal data, even by providing a supplementary statement (right of rectification);
  • obtain from the Data Controller the erasure of personal data concerning him/her without undue delay except in legitimate cases of exemption (right of erasure);
  • obtain from the Data Controller the limitation of the processing when one of the following hypotheses applies (right of limitation):

The data subject disputes the accuracy of the personal data for the period of time necessary for the Data Controller to verify the accuracy of such personal data;

The processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted;

Although the Data Controller no longer needs the data for processing purposes, the personal data is necessary for the data subject to ascertain, exercise or defend a right in court;

The data subject has objected to the processing in the hypothesis of processing based on legitimate interest of the Data Controller, for reasons related to his/her particular situation, pending verification of whether the legitimate reasons of the Data Controller prevail over those of the data subject;

  • receive from the Data Controller, in a structured, commonly used and machine-readable format, the personal data concerning him/her and has the right to transmit such data to another Data Controller without hindrance (right to data portability);
  • to lodge a complaint with a supervisory authority (e.g.: the Data Protection Authority) if he/she considers that the processing concerning him/her violates the GDPR.
  • object for reasons related to his/her particular situation, to the processing of personal data concerning him/her, having as legal basis the legitimate interest of the Data Controller (right to object). In the event of the exercise of the right to object, the Data Controller shall refrain from further processing the personal data, unless he/she demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment or defence of legal claims.

The rights referred to above may be exercised by making a request without formalities to the data controller at the following address: dpo@terashop.it

7. Modifications

The Data Controller reserves the right to make changes to this policy at any time, giving appropriate publicity to users of the Site and ensuring in any case an adequate and similar protection of personal data. In order to view any changes, users are invited to regularly consult this policy.

Social


Don't waste your time. Looking for support from a team of professionals?

We are always on the lookout for new talent and you could be next!

© Copyright  – 7HYPE – GIGLIO GROUP – eCommerce Outsourcing S.r.l. / P.IVA 08576060969 / Via Sesia 5, Rho (Milano)

en_GBEN