Privacy Policy

In compliance with the obligations set forth in the European Privacy Regulation EU/2016/679 (GDPR), we hereby intend to inform you about the processing of personal data freely provided by you and/or by other subjects communicated to Nikkolor Italia s.r.l., in particular through: browsing web pages, using online services, filling out forms on our applications and within the sites nikkolor.net nikkolor.com

The data processing will be carried out in compliance with the privacy regulations in force and based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of relevance, completeness and non-excess.

Identity and contact details of the Owner

Nikkolor Italia s.r.l.

VAT number and Tax Code IT01939040893

Registered and operational headquarters

Viale Vittorio Veneto, 186 - 96014 Floridia (SR) Italy

Phone: +39 0931 941789

E-mail: amministrazione.nikkolor@gmail.com

Company website: www.nikkolor.net

Group website: www.nikkolor.com

PEC: nikkoloritaliasrl@pec.it

Legal Representative of the Data Controller: Tiziana Ierna

Contact details of the Data Protection Officer (DPO)

Data Protection Officer: Denise Ierna

Phone: +39 0931 941789

E-mail: nikkoloritalia@gmail.com

Categories of personal data processed and methods of processing

During navigation and use of the Company Website, some information may be collected and processed for the sole purpose of security and improvement of the service offered. The information collected mainly concerns interactions with the website, statistics on the pages visited by the user, date and time of access, technology used by the user. Information relating to the user's origin and destination page may also be collected. Furthermore, some information is collected automatically (in anonymous, aggregate and pseudonymized form) using cookies and similar technologies while browsing the website. You can read more about our use of cookies in our "Cookie Policy".

If you decide to contact the Data Controller by filling out the forms in the "Contacts" section of the aforementioned websites, the information collected concerns your name and surname, address of residence or domicile, email address, telephone number, tax code, VAT number as well as the text freely entered by you.

If you decide to purchase products using our E-commerce Platform, you will be asked to register in the Reserved Area of ​​the Platform and create your own account (in this regard, we invite you to read the General Conditions of Use and Sale of the E-commerce Platform).

In this case, the information collected will concern, by way of example and not limited to:

simple common data (customer details, shipping address, contact details; username, user IP sessions, any image associated with the profile);

data generated by computer sessions resulting from the use of the account;

Information relating to visits to the e-commerce area, purchases and orders of products; data relating to the order also in relation to discounts/promotions applied;

Purpose of the processing and related legal basis

The personal data requested or acquired will be processed exclusively for the purposes and on the legal bases indicated below.

​Processing requests for information and contact, providing technical and commercial assistance and support services, formulated by filling in the form in the "Contacts" section.

To carry out activities related to the establishment, management and continuation of commercial and/or contractual relationships.

To carry out the intermediation activity between customer and retailer in the phase of purchasing products on the e-commerce platform.

Creation and management of the customer profile.

For the correct execution, management, maintenance, security and improvement of the website, the e-commerce platform and the IT infrastructure.

Carrying out direct marketing activities; sending newsletters and commercial and/or technical communications; market surveys - conducted internally or with external companies - via email or with a telephone operator.

Processing of statistical data for market purposes.

To fulfill any type of obligation required by laws, regulations or community legislation.

To resolve any legal disputes that may arise during the relationship;

Legal basis at point 1,2,3:

Consent is not required as the processing is necessary for the execution of the service requested by the user or for the establishment and/or execution of the contractual relationship (art.6.1.b of the GDPR).

Legal basis for point 4:

-

Legal basis for point 5:

Consent is not required as the processing is necessary for the pursuit of the legitimate interest of the data controller, security and maintenance (art.6.1.f of the GDPR).

Legal basis for point 6:

Consent is required (art.6.1.a of the GDPR).

Legal basis for point 7:

Consent is not required as the processing is necessary for the pursuit of the legitimate interest of the data controller and the data is processed only as aggregate data and without reference to user identifiers for market research purposes (art.6.1.f GDPR).

Legal basis for point 8:

Consent is not required as the processing is necessary to fulfill legal obligations to which the Data Controller is subject (art. 6.1.c GDPR)

Legal basis at point 9:

Consent is not required as the processing is necessary for the pursuit of a legitimate interest of the Data Controller to protect itself from contractual breaches or other causes of damage (art.6.1.f GDPR);

Any refusal, even if legitimate, to provide all or part of the above data, could make it difficult to access and use our web applications and online services and compromise the regular performance of the relationship with our structure and in particular, for personal data defined as mandatory and indispensable, could make it impossible to access and use our web applications and online services and result in the impossibility for us to carry out the normal performance of business operations and the regular provision of the requested products/services.

Processing methods

The processing of your personal data is mainly carried out with the aid of computer systems, including automated ones - and may consist of the following operations: collection, recording, organization and storage, consultation, use, processing, modification, selection, extraction, comparison, interconnection, transmission, communication, dissemination, cancellation, destruction, blocking and limitation.

In carrying out the processing operations, all technical, computer, organizational and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed. The aforementioned methodologies, applied for processing, will guarantee access to the data only to the subjects specified under "Categories of recipients of personal data".

Categories of recipients of personal data

The subjects or categories of subjects who may become aware of the personal data or to whom they may be communicated are the following:

Legal Representative of the Data Controller, then, system administrator and employees and persons in charge of processing the following areas: Management, Administration and Finance, Technical Area, Production, Logistics, Information Systems, Quality, Marketing and Sales.

Data controllers, for example: companies of Nikkolor Italia s.r.l., consultants and IT companies and software houses, consultants and consulting companies, freelancers, self-employed workers, agents and representative agencies, transport and logistics companies.

Judicial or supervisory authorities, administrations, public bodies and organizations (national and foreign), but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation, auditors and auditing companies incumbent on the same.

Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.

Storage and transfer of personal data abroad

The management and storage of personal data takes place in the cloud and on servers located within the European Union and the European Economic Area owned and/or available to the Data Controller and/or third-party companies, duly appointed as data controllers.

Period of storage of personal data

The data will be collected and recorded for the sole purposes described below and will be stored for a period strictly necessary for these purposes, in any case not exceeding twenty-four months from their collection for marketing purposes, ten years from their collection for administrative or legal purposes.

Exercisable rights

In accordance with the provisions of the GDPR, you can exercise the rights indicated therein and in particular:

You may always request at any time from the Data Controller or the Data Protection Officer, a copy of your personal data, information regarding the location in which your personal data is processed and an updated list with the identification details of all Data Processors and System Administrators authorized to process your data.

At any time, you may freely revoke the consent given, without any burden or prejudice to the lawfulness of the processing carried out up to that point, and exercise the following rights of the interested party towards the Data Controller as provided for by the European Privacy Regulation EU/2016/679 of Access, Rectification, Cancellation, Limitation, Opposition, Portability and Complaint to the Privacy Guarantor.

The request can be made using the UNSUBSCRIBE functionality of the newsletters or by writing an email to nikkolor@gmail.com