Privacy Policy (english UK, english USA)

The e-commerce website www.cactuscolo.it based in Casatenovo, LC, Italy processes the personal data provided by customers to fulfill and confirm the Terms and Conditions, to process electronic orders, shipments and for necessary communications during the period prescribed by law.

Source of personal data

1. The Data Controller processes the personal data obtained with the consent of the customer and obtained with the purchase contract and the execution of the electronic order created on the e-commerce site www.cactuscolombo.it. ;
2. The Data Controller shall process only the contact details and identification of the customer, which are necessary for the fulfilment of the purchase contract;
3. The Data Controller shall process personal data for shipping and accounting purposes and for the necessary communication between the contracting parties and for the duration provided for by law. Personal data will not be made public and will not be transmitted to other countries.

Purpose of the data processing

The Data Controller processes the customer's personal data for the following purposes:
1. Registration on the website www.cactuscolo.it in accordance with Chapter 4, Section 2 of the GDPR;
2. For the fulfilment of the electronic order created by the customer (name, address, e-mail, telephone number);
3. For compliance with the laws and regulations arising from the contractual relationship between the customer and the Data Controller;
4. Personal data are necessary for the fulfilment of the purchase contract. The contract cannot be concluded without personal data.

Duration of storage of personal data

1. The Data Controller shall retain personal data for the period necessary for the fulfilment of the rights and obligations arising from the contractual relationship between the Data Controller and the customer and for the duration of 3 years from the conclusion of the contractual relationship;
2. The Data Controller shall erase all personal data after the expiry of the period required for the storage of personal data.
Recipients and Processors of personal data
Third parties processing the customer's personal data are subcontractors of the Data Controller. The services of these subcontractors are indispensable for the successful conclusion of the contract for the purchase and processing of the electronic order between the Data Controller and the customer.
The subcontractors of the Data Controller are:
Webnode AG (e-commerce platform);
Shipping company (SDA);
Google Analytics (website analysis);

Further services:

• Webnode AG (piattaforma e-commerce);
• Compagnia di spedizione (SDA);
• Google Analytics (analisi del sito web);

• Google Fonts

• Google LLC
  

• Google Tag Manager

• Google Analytics 4

Customer rights

In accordance with the Regulations, the customer is entitled to:
1. access to personal data;
2. the rectification of personal data;
3. the deletion of personal data;
4. opposition to the processing of personal data;
5. data portability;
6. the withdrawal of consent to the processing of personal data in writing or by e-mail sent to: nonsolocactus@gmail.com;
7. the submission of a complaint to the supervisory authority in the event of a suspected breach of the Rules.
Security of personal data
1. The Data Controller declares that it takes all technical and organisational precautions necessary for the protection of personal data;
2. The Data Controller has taken technical precautions to protect data storage spaces, in particular by protecting access to the computer with a password, using antivirus software and performing regular maintenance of computers.

Final provisions

1. By placing an electronic order on the website www.cactuscolombo.it, the customer confirms that he is informed of all the conditions of protection of personal data and accepts them to the fullest extent;
2. The customer accepts these rules by ticking the box in the order purchase form;
3. The Data Controller may update these rules at any time. The new updated version must be published on its website.

These rules enter into force on 01.01.2021