The information below is prepared pursuant to art. 13 of EU Regulation 2016/679 by eCommerce Outsourcing s.r.l., a company subject to management and coordination by Giglio Group s.p.a. (VAT No. 07396371002), with registered office in Piazza Generale Armando Diaz 6, 20123 Milan.
1. Name and contact details of the data controller
eCommerce Outsourcing s.r.l with registered office via Sesia 5, 20017 Rho (MI), registered in the Register of Companies of Milan under no. 2034727, fiscal code and VAT no. 08576060969 (hereafter, also "eCommerce Outsourcing" or the "Owner"), is the owner of the processing of the personal data of the users provided during access to the site www.7hype.com ("Site").
eCommerce Outsourcing can be contacted at the following addresses:
eCommerce Outsourcing will process personal data provided by users through the Site under the following conditions.
2. Contact details of the data protection officer
Users may contact the Data Protection Officer ("Data Protection Officer" or "DPO") for all matters relating to the processing of their personal data and the exercise of their rights under the GDPR at: email@example.com
3. Purpose and legal basis of treatment. Mandatory or optional provision. Consequences of refusal to process.
eCommerce Outsourcing will process the user's personal data:
a) To respond by phone and/or email to user requests sent via the contact form on the Site ("contact us"). Providing data for this purpose is optional: that is, there is no legal and/or contractual obligation to communicate data, but the refusal of the user to provide such data will make it impossible for eCommerce Outsourcing to respond to the user's requests. The legal basis for the processing is the legitimate interest of eCommerce Outsourcing to respond to the user's requests.
eCommerce Outsourcing will retain the personal data provided by users on the Site in order to properly execute user requests no longer than is necessary to fulfill such requests.
b) To fulfill and manage requests for spontaneous applications from users sent via the form on the Site "work with us”.
The provision of data indicated with an asterisk in the "work with us" form is necessary to allow us to fulfil the purposes indicated in point b); therefore, refusal by the user to provide such data will make it impossible for eCommerce Outsourcing to consider the user's application and manage the selection process. We do not require the submission of particular data. In the event that the documentation sent (cv or other) contains more "sensitive" data than is strictly necessary, that information will not be used to evaluate applications.
The legal basis of the processing is the execution of pre-contractual measures taken at the request of the interested party (art. 6.1.lett. b GDPR)
eCommerce Outsourcing will keep the personal data provided by users on the Site in order to correctly execute the users' application requests for a period not exceeding 12 months after the end of the selection process, in case the hiring does not occur. If, on the other hand, the selection process is successful, personal data will be stored according to the time frame indicated in the information notice that will be submitted to the candidate at the time of hiring.
c) Subject to the express consent of the user, eCommerce Outsourcing will process the user's personal data in order to send him/her informative and promotional communications via e-mail, including newsletters, regarding activities, products and services promoted by the company, including invitations to training courses and other promotional initiatives.
The legal basis for this processing is the explicit consent of the user (art. 6.1.a GDPR). The user may revoke at any time the consent given and/or object, at any time, to the processing of his or her data for this purpose by contacting the Data Controller at the following address firstname.lastname@example.org and/or through the appropriate link present in every promotional communication sent by eCommerce Outsourcing by e-mail. The provision of data for the purpose of general marketing is optional: there is no legal or contractual obligation on the user to provide such data and / or consent to the processing of his/her personal data for this purpose.
eCommerce Outsourcing will keep the personal data provided by the users on the Site for general marketing purposes until the revocation of consent and/or the exercise of the right of opposition and, in any case, no longer than 24 months from the collection of the data, reserving the right, before the expiry of this period, to ask the user to renew consent and/or update the data.
In addition, the user is informed that:
d) Subject to the user's explicit consent, eCommerce Outsourcing will process the user's personal data, in an automated way, in order to monitor and trace the user's behaviour, analyse and process such data, together with other information related to the users (such as, for example, date of birth, IP address), in order to identify correlations in the user's behaviour and insert the same in various "clusters", send, via e-mail, and/or display personalized offers on the Site, i.e. combined with the cluster in which the user has been inserted and, therefore, his or her alleged specific interest.
The legal basis for this processing is the explicit consent of the user (art. 6.1.a GDPR). The user may revoke, at any time, the consent given and/or oppose, at any time, the processing of his/her data for this purpose, by contacting eCommerce Outsourcing at the following address email@example.com and/or through the specific link present in each promotional communication sent by eCommerce Outsourcing by e-mail. The provision of data for profiling for marketing purposes is optional: there is no legal or contractual obligation for the user to provide such data and/or consent to the processing of his/her personal data for such purposes.
eCommerce Outsourcing will process personal data provided by users on the Site for profiling for marketing purposes until consent is revoked and/or the right to object is exercised and, in any case, no later than 12 months after collection.
In addition, the user is informed that:
Without prejudice to the retention periods indicated above for the related purposes, it should be noted that personal data may be retained for a longer period of time, if this is necessary to comply with legal obligations to which the Data Controller is subject, or for the defense of a right, judicial or otherwise, of the Data Controller.
4. Categories of subjects to whom the data controller communicates the user's personal data (recipients)
The personal data provided by the user may be communicated by eCommerce Outsourcing to the categories of recipients indicated below:
Data concerning users will not be disclosed.
5. Transfer to third countries
The Data Controller transfers some data to the following third countries: USA.
The transfer takes place on the basis of the adequacy decisions of the European Commission (these are the clauses approved pursuant to Article 46.2 of the GDPR) and the authorization measures of the Guarantor for the protection of personal data or on the basis of the standard contractual clauses between the Owner and / or Processor.
6. Rights of the interested party
The interested party has the right to:
— The data subject disputes the accuracy of the personal data for the period of time necessary for the Data Controller to verify the accuracy of such personal data;
— The processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted;
— Although the Data Controller no longer needs the data for processing purposes, the personal data is necessary for the data subject to ascertain, exercise or defend a right in court;
— The data subject has objected to the processing in the hypothesis of processing based on legitimate interest of the Data Controller, for reasons related to his/her particular situation, pending verification of whether the legitimate reasons of the Data Controller prevail over those of the data subject;
The rights referred to above may be exercised by making a request without formalities to the data controller at the following address: firstname.lastname@example.org
The Data Controller reserves the right to make changes to this policy at any time, giving appropriate publicity to users of the Site and ensuring in any case an adequate and similar protection of personal data. In order to view any changes, users are invited to regularly consult this policy.