Privacy Policy
The e-commerce website www.cactuscolo.it based in Casatenovo, LC, Italy processes the personal data provided by customers to fulfill and confirm the Terms and Conditions, to process electronic orders, shipments and for necessary communications during the period prescribed by law.
Source of personal data
1.
The Data Controller processes the personal data obtained with the
consent of the customer and obtained with the purchase contract and the
execution of the electronic order created on the e-commerce site
www.cactuscolombo.it. ;
2. The Data Controller shall process only the
contact details and identification of the customer, which are necessary
for the fulfilment of the purchase contract;
3. The Data Controller
shall process personal data for shipping and accounting purposes and for
the necessary communication between the contracting parties and for the
duration provided for by law. Personal data will not be made public and
will not be transmitted to other countries.
Purpose of the data processing
The Data Controller processes the customer's personal data for the following purposes:
1. Registration on the website www.cactuscolo.it in accordance with Chapter 4, Section 2 of the GDPR;
2. For the fulfilment of the electronic order created by the customer (name, address, e-mail, telephone number);
3.
For compliance with the laws and regulations arising from the
contractual relationship between the customer and the Data Controller;
4.
Personal data are necessary for the fulfilment of the purchase
contract. The contract cannot be concluded without personal data.
Duration of storage of personal data
1.
The Data Controller shall retain personal data for the period necessary
for the fulfilment of the rights and obligations arising from the
contractual relationship between the Data Controller and the customer
and for the duration of 3 years from the conclusion of the contractual
relationship;
2. The Data Controller shall erase all personal data after the expiry of the period required for the storage of personal data.
Recipients and Processors of personal data
Third
parties processing the customer's personal data are subcontractors of
the Data Controller. The services of these subcontractors are
indispensable for the successful conclusion of the contract for the
purchase and processing of the electronic order between the Data
Controller and the customer.
The subcontractors of the Data Controller are:
Webnode AG (e-commerce platform);
Shipping company (SDA);
Google Analytics (website analysis);
Customer rights
In accordance with the Regulations, the customer is entitled to:
1. access to personal data;
2. the rectification of personal data;
3. the deletion of personal data;
4. opposition to the processing of personal data;
5. data portability;
6. the withdrawal of consent to the processing of personal data in writing or by e-mail sent to: nonsolocactus@gmail.com;
7. the submission of a complaint to the supervisory authority in the event of a suspected breach of the Rules.
Security of personal data
1.
The Data Controller declares that it takes all technical and
organisational precautions necessary for the protection of personal
data;
2. The Data Controller has taken technical precautions to
protect data storage spaces, in particular by protecting access to the
computer with a password, using antivirus software and performing
regular maintenance of computers.
Final provisions
1.
By placing an electronic order on the website www.cactuscolombo.it, the
customer confirms that he is informed of all the conditions of
protection of personal data and accepts them to the fullest extent;
2. The customer accepts these rules by ticking the box in the order purchase form;
3. The Data Controller may update these rules at any time. The new updated version must be published on its website.
These rules enter into force on 01.01.2021