Privacy Policy

INTRODUCTION

This notice takes into account the provisions of the GDPR and of the Italian Privacy Code (Legislative Decree no. 196 of 30 June 2003). The document has also been drafted in line with the Guidelines of the Italian Data Protection Authority (in particular the anti-spam Guidelines issued on 4 July 2013).

Data Controller: OTTICA MODERNA S.N.C, via Kennedy 2 – 29017 Fiorenzuola d’Arda (PC), Italy, VAT no. 01154730194, Email: info@duovision.it

Website to which this privacy policy refers: https://4eyes.it/ (the Site).

The Data Controller has not appointed a DPO. You may therefore send any request for information directly to the Data Controller.

GENERAL INFORMATION

This document describes how the Data Controller processes the personal data you provide on the Site.

The main processing operations carried out on your personal data are described below. In particular, we explain the legal basis for the processing, whether providing the data is mandatory and the consequences of not providing it. To describe your rights as clearly as possible, where necessary we have specified if and when a given processing operation is not carried out.

Registration on the Site

The information and data requested at registration will be used to allow you both to access the restricted area of the Site and to use the online services offered by the Data Controller to registered users. The legal basis for the processing is the Data Controller's need to carry out pre-contractual measures taken at the data subject's request. Providing the data is optional. However, refusing to provide it will make it impossible to register on the Site.

Purchases on the Site

Your personal data will be processed to allow you to make purchases on the Site. Where an online purchase order is placed, the data is processed to allow the purchase contract to be concluded and the related operations to be carried out correctly (and, where required by sector legislation, to fulfil tax obligations). The legal basis for the processing is the Data Controller's obligation to perform the contract with the data subject or to comply with legal obligations.

Irrespective of the above (and therefore of your consent), the Data Controller may process your data for so-called “soft spam” purposes, governed by art. 130 of the Italian Privacy Code. This means that, limited to the email address you provide in the context of a purchase through the Site, the Data Controller will process that email address to offer similar products/services directly, unless you object to such processing in the ways set out in this notice. The legal basis for the processing is the Data Controller's legitimate interest in sending this type of communication. The Data Controller does not process user data to send purchase “reminder” emails for its own products and/or services.

Responding to your requests

Your data will be processed in order to respond to your requests for information. Providing the data is optional, but refusing to do so will make it impossible for the Data Controller to answer your questions. The legal basis for the processing is the Data Controller's legitimate interest in following up on user requests.

General marketing

Subject to your consent, the Data Controller may process the personal data you provide in order to send you advertising material and/or newsletters relating to its own products or those of third parties. The legal basis for this processing is your consent. Providing personal data for this purpose is entirely optional.

Profiling

The Data Controller does not carry out “profiling” with your personal data. It will therefore not send you advertising material and/or newsletters relating to its own products or those of third parties based on your specific interests.

Transfer of data to third parties

The Data Controller does not sell or otherwise transfer your personal data to third parties.

Geolocation

The Site does not implement any tools for geolocating the user's IP address.

Disclosure of personal data

In the course of its ordinary business, the Data Controller may disclose your personal data to certain categories of recipients. The “disclosure” of personal data to a third party is different from its “transfer”. In a disclosure, the third party receiving the data may use it only for the specific purposes described in its relationship with the Data Controller.

SPECIFIC PRIVACY NOTICE

Art. 1 Processing methods

1.1 The processing of your personal data will mainly be carried out using electronic or in any case automated means, in ways and with tools suitable to guarantee its security and confidentiality in compliance with the GDPR.

1.2 The information acquired and the processing methods will be relevant and not excessive in relation to the type of services provided. Your data will also be managed and protected in secure IT environments appropriate to the circumstances.

1.3 No “special categories of data” (racial or ethnic origin, religious beliefs, health, etc.) are processed through the Site.

1.4 No judicial data is processed through the Site.

Art. 2 Disclosure of personal data

The Data Controller may disclose your personal data to specific categories of recipients:

• Parties (including Public Authorities) who have access to personal data by virtue of legislative or administrative measures.
• Public and/or private parties (legal, administrative and tax advisers, Judicial Offices, Chambers of Commerce, etc.) where the disclosure is necessary or functional to the correct fulfilment of legal obligations.
• Employees and/or collaborators of any kind, for the correct operation of the Site.

Art. 3 Retention of personal data

3.1 Your personal data will be retained only for as long as is necessary to guarantee the correct provision of the services offered through the Site.

3.2 Without prejudice to article 3.1, the Data Controller may retain your personal data for the period required by specific legislation.

Art. 4 Transfer of personal data

4.1 The Data Controller is established within the European Union. The processing of your data is therefore secure from a regulatory standpoint, as it is governed by the GDPR.

Art. 5 Rights of the data subject

Pursuant to art. 13 of the GDPR, the Data Controller informs you that you have the right to:

• Request access to your personal data, its rectification, erasure or the restriction of processing, as well as the right to data portability.
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Lodge a complaint with a supervisory authority (e.g. the Italian Data Protection Authority).

Art. 6 Amendments and miscellaneous

The Data Controller reserves the right to amend this notice at any time, giving appropriate notice to users of the Site.