The data controller is Calze G.T. Srl in the person of its pro tempore legal representative.
With registered offices in Asola, 46041 (Mn), Italy
Via Cadimarco 44
Tax Code and VAT No. 01380780203
Economic and Administrative Index: MN 155014
Email: Info@relaxanshop.it 

Calze G.T. Srl is aware of the importance of protecting the right to a private life with regards to the processing of its customers’ personal data.
Calze G.T. Srl informs that the personal data of data subjects that is collected and processed as a result of subscription to the E-commerce website www.relaxsanshop.com, will be processed in compliance with the law on data protection contained in the Italian and European regulations. Minors under the age of 18 are PROHIBITED from using and subscribing to the website. 

Personal data provided on a voluntary basis by the data subject

The following data will be collected and processed upon subscription to the website:

• Master Data: Surname and First Name
• Contact data: E-mail and Telephone number
• Shipping data: Address, street number, postal code, city, province, and country
• Date of birth: Used to verify the age of the data subject and for sending special offers on the data subject’s birthday
• Tax Code: used to issue tax documents

Personal data provided on a voluntary basis by the data subject through the social login system

Subscription can also take place using Facebook log in information through a Social login system. In this case, the data controller can access and save the data subject's e-mail and name data. We invite users to carefully check Facebook's Privacy policy and service conditions before accessing the Relaxsanshop.it website through the Social login system. If needed, users should modify the settings of their accounts.

Browsing data

During their normal operations, the IT systems and software procedures needed for the functioning of the website www.relaxsanshop.com, acquire some personal data, the sending of which, is implicit in the use of Internet communication protocols. This category of data include IP addresses, the domain names of the computers used by the users who connect to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code that indicates the status of the response provided by the server (successful, error, etc.) and other parameters relating to the data subject’s operating system or IT environment. This data is used to check the correct functioning of the website and are deleted immediately after processing. The data could be used to ascertain liability in the case of possible computer crimes against Calze G. T. Srl 

The personal data provided by the data subject and collected by Calze G.T. Srl will be processed for the following purposes:

• a) Allow the data subject to order products and be contacted to receive assistance during purchases. The legal basis that legitimizes the processing for this purpose is found in the cases provided for by Article 6 paragraph 1 letter b) of EU Regulation 679/2018, or the processing is carried out as necessary to provide the user with the products purchased by the same, connected to the establishment and implementation of pre-contractual measures;
• b) Comply with the obligations provided for by the law or regulations or requests from legal authorities. The legal basis that legitimizes the processing of personal data for these purposes is to be found in the cases provided for by Article 6 paragraph 1 letter c) of EU Regulation 679/2016, or since the processing is needed to fulfil a legal obligation to which the data controller is subject
• c) Sending promotional material to the data subject through e-mails relating to products similar to those already purchased and/or requested by the interested party. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the cases provided for by Article 6 paragraph 1 letter f) of EU Regulation 679/2016, or since the processing is needed to pursue the Data Controller’s legitimate interest in pursuing its economic activity through promotional tools;
• d) Sending promotional material to the data subject through email messages, sms, mms, and instant messaging regarding the services and products offered, measuring customer satisfaction, as well as the carrying out of market studies and internal statistical analysis. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the cases provided for by Article 6 paragraph 1 letter a) of EU Regulation 679/2016, or because the data subject has given its consent;
• e) Communicate the data to third parties "Communication Agency" (Up & Up Srl - Via Caselle 4 - Bedizzole), appointed as External Data Processor, so that it can perform, on behalf of the G.T. Srl, promotional and advertising activities with automated tools such as e-mail, SMS, MMS and instant messaging. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the cases provided for by Article 6 paragraph 1 letter a) of EU Regulation 679/2016, or because the data subject has given its consent;
• f) To assert or defend a right in court. The legal basis that legitimizes the processing of personal data for this purpose is to be found in the cases provided for by Article 9 paragraph 2 letter f) of EU Regulation 679/2016, or the processing is carried out because it is needed to ascertain, exercise or defend a right in court.

Personal data collected and processed for the purposes referred to in points 3 a), 3 b), 3 c) and 3 f) will be kept for the entire service provision period. Following a period of 24 months of inactivity by the User, the system will forward a communication to the same, informing him or her that, in case of further inactivity in the following 6 months, his or her personal data will be deleted, with the exception of those needed to comply with fiscal, accounting and administrative regulations or to fulfil other legal obligations and to document the activities performed. The data processed for the purposes referred to in point 3 d) and 3 e) will be deleted at the end of 24 months.

The personal data collected will be processed, kept, and processed with electronic instruments and will be saved on IT supports as well as paper based supports that will be organised in databases.
Specific security measures are taken to prevent data loss, unlawful or improper use, and unauthorised access. The processing of personal data carried out by Calze G.T. Srl does not involve automated decision-making processes.

The dissemination and/or the provision of data for the purposes referred to in points 3 a), 3 b), 3 c) and 3 f) is a necessary requirement for the performance of the contractual relationship and therefore obligatory, the data subject's failure to disseminate and/or provide personal data, will make it impossible for G.T. Calze Srl to follow up the purchases made. The provision of data for the purposes referred to in points 3 d) and 3 e) is optional: the failure to communicate data for these purposes does not have consequences for the customer.

The personal data collected will not be disclosed and may not be communicated to individuals who are legally given the right to access the information such as the data controller's internal staff, associations or professional studios that provide services and activities on behalf of the Data Controller in their role as External Processors or to fulfil legal obligations, and for all organisational and administrative needs. The names of External Data Processors are shown in an updated list available at Calze G. T. Srl (to be requested at the addresses indicated in point 1.)
Finally, subject to specific consent, the data subjects’ may be communicated to third parties (Communication Agency) to carry out promotional and advertising activities with automated tools such as e-mail, text messages, mms, and instant messaging.

Calze G.T. Srl does not transfer the subject data’s data abroad or to international organisations.

In relation to the above-mentioned data processing, the data subject has the right to exercise at any time the rights provided for by EU Regulations 679/2016, including, for example, to obtain indications of the following:

• The origin of personal data;
• The purposes and manner of processing;
• The method applied in case of processing carried out with the aid of electronic means;
• The identity of the Data Controller and Processors.

The data subject has the right to obtain:

• Access, updating, rectification or, when interested, integration of data;
• Deletion, transformation to anonymous form, blocking of the data processed in violation of the law.
• Limitation to the processing of his or her data or to ask the Data Controller to reduce the purpose or the methods with which his or her data is processed.

The subject to whom the data refers, finally, has the right to oppose at any time and at no cost, in whole or in part:

• For legitimate reasons the processing of personal data, although pertinent to the purpose of collection;
• To the processing of personal data concerning him carried out pursuant to Article 6, paragraph 1, GDPR letters e. (the processing is necessary to fulfil a legal obligation to which the Data Controller is subject) or f. (processing is necessary to pursue the legitimate interests of the data controller or third parties) including profiling on the basis of these provisions.
• The processing of personal data for sending advertising or direct sales materials or for carrying out market research or communication (direct marketing), including profiling to the extent in which this is related.

The interested party has the right to revoke his/her consent to the processing, when this is based on the case provided for by Article 6, paragraph 1 letter a. (expression of consent by the interested party) or Article 9, paragraph 2 letter a. (the data subject has explicitly consented to the processing of such personal data for one or more specific purposes) of EU Regulation 679/2016, at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation. In particular, the subject to which the data refers, may ask for deletion at any time if he or she does not want to receive other promotional e-mails.

If the data subject feels that the processing of his or her data violates the regulation in force, the same has the right to lodging a complaint with the supervisory authority.

To exercise the rights, the data subject may send a request by sending an e-mail to the following address privacy@relaxsanshop.it

Calze G.T. Srl reserves the right to update this information policy on the processing of personal data.

Rev. 01 of the information policy relative to the Relaxsanshop Website.

Last Updating 06/12/2018