REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
Dear user, this information is provided pursuant to and in accordance with article 13 of the European Reg. 679/2016 (GDPR) by SOPHISTICAUTO S.N.C. VAT number: 01297260455, with registered office in VIA DORSALE, 13 – 54100 MASSA, in the person of your legal representatives pro tempore PUCCI MANUEL AND FERRO MASSIMILIANO, C.F. PCCMNL75H06A657O / FRRMSM75E20B832G, mail: firstname.lastname@example.org, pec: email@example.com.
In accordance with current legislation, every operation concerning personal data collected will be based on principles of correctness, lawfulness and transparency. By visiting the website www.sophisticauto.com you accept the terms and conditions set out below. The Owner intends to guarantee the privacy and security of the personal data of each web user, also in relation to internet access made from abroad. This page describes how to manage the site in relation to the processing of personal data of users who consult it
Type of data collected and methods of use
The website offers informative content and access to an interactive platform for the purchase of products provided by the Owner. While browsing the site, you can then acquire information about the visitor (web user), in the following ways:
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses, browser type, operating system, domain name and website addresses from which access or exit was made (referring / exit pages), information on pages visited by users within the site, access time, stay on the single page, internal path analysis (clickstream) and other parameters relating to the operating system and the user’s computer environment, the addresses provided URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the user’s IT environment.
These technical / IT data are collected and used in an aggregate and anonymous manner for the sole purpose of improving the quality of the service and preparing anonymous statistics concerning the use of the site and to check its correct functioning.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site and / or the Owner. Without prejudice to this eventuality, the data on web contacts persist for a time not exceeding that necessary for the purposes for which they are collected and subsequently processed.
This data is not associated with users who possibly access this site.
Java Script and external services
Java Script consists of a technique used as an alternative to direct analysis of Web Server log files.
The processing of the data provided through the contact and registration form on the website https://www.sophisticauto.com/ will be carried out electronically and on paper for the following purposes:
a) processing of requests and information,
b) fulfillment of contractual obligations, of the law in tax, accounting and tax matters,
c) personalization of the website content,
d) detection of anonymous statistical information on the use of the site,
e) marketing campaigns by sending newsletters.
The legal basis that makes the processing referred to in points a) – b) legitimate is the fulfillment of contractual obligations, of the law in tax, accounting and tax matters.
The legal basis that makes the processing referred to in points c) – d) –e) legitimate is the consent freely provided by the interested party.
In carrying out the aforementioned activities, automated technologies such as profiling may be adopted.
Nature of treatment
The provision of data for the purposes referred to in points a) – b) is mandatory and any refusal will make it impossible to establish the contractual relationship.
The provision of data for the purposes referred to in points c) – d) – e) is optional and any refusal will have no effect on other contractual relationships that may exist between the data subject and the Data Controller, as it may only result in the impossibility for the Owner to send newsletters and advertising communications relating to the products sold.
Communication of personal data
The treatment will take place exclusively by the owner. The data collected, if it is necessary or instrumental for the execution of the aforementioned purposes, may be processed by third parties appointed as external Data Processors, including companies that perform services connected and instrumental to the execution of the purposes indicated above.
The updated list of external data processors is available by contacting the data controller by e-mail.
The data collected may also be transferred abroad, even outside the European Union in the forms and ways provided for by the current legislation, in any case guaranteeing an adequate level of protection.
Period of conservation
The personal data collected for the purposes referred to in points a) – b) are kept for the entire duration of the contractual relationship and subsequently for the entire period required by the tax and fiscal regulations, in any case for a maximum period of 10 years from the termination of the contract.
The processing of personal data collected for the purposes referred to in points c) – d) – e) will be carried out until the data subject has exercised his right to withdraw his consent.
Rights of the interested party
The interested party has the right to exercise the rights pursuant to articles 15-22 of the European Reg. 679/2016.
In particular, he has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to personal data concerning him, receive the personal data provided to the Data Controller and transmit them to another Data Controller without impediments (so-called portability), to obtain the updating, the limitation of the treatment, the rectification of the data and the cancellation of those treated in contrast to the current legislation.
The data subject is also entitled, for legitimate reasons, to object to the processing of personal data concerning him and to the processing for the purpose of sending advertising material, direct sales and for carrying out market research. He also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data.