Information for wwWhite srls e-commerce services pursuant to art. 13 of EU Regulation 2016/679 regarding the protection of personal data (hereinafter also GDPR).

1. Purpose of the processing

Subject to your consent, your personal data will be processed for the following purposes:

a) Make purchases through the wwWhite srls e-commerce portal and related services

Your data will be processed to allow you access to the wwWhite srls e-commerce portal dedicated to purchases from the wwWhite srls online catalogue, as well as for all related services (communications, requests for information, returns management, order monitoring, etc... ). Your personal profile will be created on the Portal through which you can carry out all purchase operations. Finally, your data may be processed for the purpose of carrying out all administrative, accounting and tax activities related to this purpose and for the fulfillment of obligations imposed by laws or regulations.

b) Study of your consumption choices (profiling).
The qualitative and quantitative data relating to the purchases made by you may be processed by the Data Controller for analysis of purchases and sums spent, as well as to model the commercial offer as much as possible on your profile and your needs.

c) Direct marketing.
Your personal and contact data may be processed by the Data Controller for sending information on purchasing opportunities and active promotions via postal mail, e-mail and SMS. They can also be used for market research, including by telephone. If you have given your consent to the processing for the purpose of profiling, for the purpose of Profiled Direct Marketing the qualitative and quantitative data relating to the purchases you have made may also be processed, in order to send you commercial offers more targeted to your needs.

2. Legal basis of the processing

The legal basis of the processing for the above purposes is based on your consent to the processing of your personal data.
Nonetheless, processing may also be carried out to the extent necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted at your request, to fulfill legal obligations to which the Data Controller is subject or in cases where in which the conditions of lawfulness of the processing determined by the art. 6 of the GDPR and subsequent amendments and additions, also introduced by the State.

3. Information to guarantee correct and transparent processing

Pursuant to art. 13 paragraph II of the GDPR, we inform you that:
a) In order to help you keep track of your orders, your wishlists and any other operation recorded on your personal profile that may be useful to you in the future (also for returns and guarantees), your personal data will be retained until you will not decide to delete or remove your e-commerce profile;
In any case, the data relating to the details of purchases will be kept for profiling or direct marketing purposes for a period not exceeding, respectively, twelve and twenty-four months from their registration (except for transformation into anonymous form);
b) You have the right to ask the Data Controller to access your personal data and to rectify or delete them or limit the processing that concerns you or to oppose their processing, in addition to the right to data portability;
c) You have the right to withdraw consent for the aforementioned processing purposes at any time, without this affecting the lawfulness of the processing based on the consent given before the revocation;
d) You have the right to lodge a complaint with the supervisory authority pursuant to art. 77 GDPR (the Guarantor for the Protection of Personal Data, in Italy);
e) The provision of your data is optional, however failure to provide your personal data requested when registering on the Portal will make it impossible to access it to make purchases and use the related services;
f) The data processing for all the purposes indicated above will take place both with manual tools and using dedicated hardware and software.
In this regard, we inform you that there are automated decision-making processes for recording your activities on the wwWhite srls e-commerce portal, to follow up on your purchases and requests.

If you consent to the processing of data also for the aforementioned purposes of studying your consumption choices (profiling) and direct marketing, as described above in the art. 1 respectively in letters b) and c), further automated decision-making processes will be used limited to the purpose of modeling the commercial offer as much as possible on your profile and your needs.

4. The Data Controller

The Data Controller is wwWhite srls l (VAT number: 08443920726) with registered office in Triggiano, Vico Nuovo 11, 70019 BA, and you can also contact him by writing an email to the address gestionalenorthone25 @gmail.com or by telephone at customer assistance service at number 3935690361. The Data Protection Officer (DPO) designated pursuant to art. 37 et seq. GDPR

The Data Protection Officer (DPO) is wwWhite srls (VAT number: 08443920726 ) and you can contact him at the following addresses: e-mail: gestionalenorthone25 @gmail.com .

In case of changes, you will be able to find the name of the DPO and his updated contact details on the site

6. Scope of dissemination and communication of your data

None of the personal data provided will be disclosed. Your personal data may be communicated to the following recipients and categories of recipients to the extent that this is strictly necessary to pursue the purposes specified above:
- third parties whose work the Owner uses for the provision of services, in any case connected to the pursuit of the purposes referred to in this information, including the sending of promotional communications and shipments of goods;
- shippers and transport companies, who process the data necessary to organize and carry out the shipment, delivery and return of the products purchased on our Site;
- specialized operators who process the data necessary to manage and maintain the applications and web servers; to complete, manage and track purchase orders for products sold on our Site; to carry out updates and improvements to the Site, evaluate the use and make improvements to the functioning of the Site and other services necessary for the management of the sales portal and provision of related services;
- specialized operators who process the data necessary to provide call center and customer care services for our users;
- service providers for warranty services for products purchased on the Site;
- to third parties who own the software used by the Portal for the execution of some of its functions, such as electronic payments (eg: SETEFI, Paypal, and other external gateways);
- suppliers of technical assistance services on the goods you have purchased.

7. Your rights governed by articles 15 and following of the GDPR

At any time you can contact the Data Controller and his Data Protection Officer (DPO) to confirm whether or not personal data concerning you is being processed and, if so, obtain access, copy and exercise the rights provided for by the art. 15 GDPR. Furthermore, you will be able to integrate and rectify them pursuant to art. 16 GDPR, obtain its cancellation pursuant to art. 17 GDPR, obtain the limitation of processing pursuant to art. 18 GDPR, obtain your personal data in a structured, commonly used and machine-readable format according to the methods of art. 20 GDPR.

8. The right to object to processing for direct marketing purposes

Without prejudice to your right to withdraw consent at any time pursuant to articles. 7 and 13 paragraph II letter. c) GDPR, you have the right pursuant to art. 21 paragraph 2 GDPR to object at any time and free of charge to the processing of personal data concerning you carried out for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.
In particular, for promotional emails, you can stop sending them at any time using the "UNSUBSCRIBE" option present in each email.

9. Right to obtain human intervention in automated decision-making processes

Although the consequences of the automated decision-making processes employed by the Data Controller as described in the art. 3 letter f) above are limited, we inform you that pursuant to art. 22 paragraph 3 of the GDPR, you have the right to obtain human intervention from the Data Controller, to express your opinion and to contest any decision, by contacting the Data Controller or, pursuant to art. 38 paragraph IV GDPR, to the Data Protection Officer designated at the respective contacts indicated in this information.

11. Age requirement

This information is aimed exclusively at individuals who have reached the age of majority. Therefore, if you are a minor, please refrain from providing your data and giving consent to the processing, as in any case your data will not be collected, stored or processed by the Data Controller for any of the aforementioned purposes.

10. How to exercise your rights

INFORMATION PURSUANT TO ART. 13 OF LEGISLATIVE DECREE 30 JUNE 2003 n.196 (CODE REGARDING THE PROTECTION OF PERSONAL DATA)

1. Introduction

Pursuant to and for the purposes of Legislative Decree 30 June 2003, n. 196 (Code regarding the protection of personal data), we inform you that the personal data you have made available to wwWhite srls , a company with registered office in via Triggiano, Vico Nuovo 11, 70019 BA (hereinafter also wwWhite or the Company), REA Bari P.IVA 08443920726 , will be processed in compliance with current legislation on the protection of personal data as well as the principles of confidentiality which inspire the Company's activity.

2. Purpose of the processing

The personal data you have made available to wwWhite srls may be used for the following purposes:

a) to allow and manage your possible registration or registration on the site (hereinafter the Site for brevity); to manage and execute your orders or purchase proposals; to carry out activities related to the provision of services by the Company in your favor as well as, in general, to carry out activities related to the execution of a contractual relationship with wwWhite srls or to deal with, before the conclusion of the contract, your specific requests;

b) to send informative and promotional communications, including of a commercial nature, advertising material and/or offers of goods and services;

c) to send our newsletter.

The activity under (b) may be carried out by any means, including, by way of example and not limited to, post, Internet, telephone, e-mail, MMS, SMS, from Italy or from abroad (even from non-EU countries). belonging to the European Community), by wwWhite srls , by parent companies, controlled and/or participated by it, as well as by third parties with whom wwWhite srls has contractual relationships in place connected to the performance of the aforementioned activity.

3. Data processing methods

In relation to the purposes described in the previous paragraph, the processing of personal data will be carried out using paper and/or electronic tools with logic strictly related to the purposes highlighted above and, in any case, in such a way as to guarantee the security, secrecy and confidentiality of the data themselves. (with particular regard to the case of use of distance communication techniques).

4. Provision of data and consequences of any refusal

The provision of your personal data is optional. Any refusal or the provision of inaccurate and/or incomplete information may make it impossible:

(i) your possible registration or registration on the Site, as well as the management and execution of your orders or purchase proposals;

(ii) the sending of informative and promotional communications (including the sending of the newsletter), including of a commercial nature, advertising material and/or offers of goods and services, by any means, pursuant to the previous art. 2(b).

5. Data communication

Your personal data may become known to data controllers or persons in charge of personal data processing designated by wwWhite srls in the exercise of their functions.

Your personal data may be communicated to: (a) any subjects who provide wwWhite srls with services or services instrumental to the purposes indicated above such as, by way of example, parent companies, subsidiaries, subsidiaries and/or affiliates, subjects, bodies and/or or companies that manage and/or participate in the management and/or maintenance of the websites and electronic and/or telematic tools used by wwWhite ; (b) suppliers, contractors, subcontractors, banking and/or insurance institutions or, more generally, other subjects and/or bodies that provide (on behalf of wwWhite or independently) to provide the activities referred to in the previous paragraph. 2 or activities connected or instrumental to them; (c) consultants who assist the Company in various capacities with particular reference to legal, tax, social security, accounting and organizational aspects; (d) any other person to whom the data must be communicated based on legal provisions.

Your personal data may possibly be transferred abroad, both within countries belonging to the European Community and in third countries, in compliance with the provisions of current legislation.

6. Dissemination of data

We inform you that your personal data will not be disclosed.

7. Rights of the interested party

In relation to the aforementioned treatments, the interested party will be able to exercise the rights provided for by the art. 7 of Legislative Decree 30 June 2003, n. 196 which, for convenience, we transcribe in full:

Legislative Decree 30 June 2003, n. 196

ART. 7 ? RIGHT TO ACCESS PERSONAL DATA AND OTHER RIGHTS

1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

2. The interested party has the right to obtain the indication:

a) the origin of the personal data;
b) the purposes and methods of processing;
c) of the logic applied in case of processing carried out with the aid of electronic instruments;
d) the identification details of the owner, managers and representative designated pursuant to article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents.

3. The interested party has the right to obtain:
a) the updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves the use of means that are manifestly disproportionate to the protected right.

4. The interested party has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.

8. Data Controller and Data Processors

The data controller is wwWhite srls , with registered office in via Triggiano, Vico Nuovo 11, 70019 BA.

The person appointed by the Company as responsible for replying to the interested party, in case of exercise of the rights referred to in article 7 of Legislative Decree no. 30 June 2003. 196, can be contacted at the email address gestionalenorthone25@gmail.com

Therefore, any request relating to the data processed by wwWhite srls , to the processing activities carried out by the latter or in any case connected to the exercise of the rights referred to in article 7 of Legislative Decree 30 June 2003, n. 196 can be sent to the manager indicated above at the Company's headquarters or by writing to the email address amzwebsrls@gmail.com

The constantly updated list of Data Processors is available at the headquarters of wwWhite srls and knowable through a specific request formulated in the manner indicated above.

9. Cookies

While browsing, text strings called cookies may be stored on your PC which collect information capable of identifying your PC or browser.