Privacy policy

 

This privacy policy is effective as of June 27, 2023.

  1. Nature of the data processed and purpose of the processing. Data Controller.

Backbonepro, with registered office in Sesto Fiorentino (FI), via del Mandorlo n. 13, and VAT number IT072849104811, in relation to personal data provided by users when accessing and / or registering on the backboneprostore.com site (Site) or purchasing products offered for sale on the latter. The Data Controller is Backbonepro, e-mail: info@backboneprostore.com.

 

  1. Purpose of the processing.

Backbonepro, will process the personal data provided by users for the following purposes:

(a) to allow registration on the Site and use the services reserved for registered users, as well as to allow compliance with the obligations deriving from the law or regulations in force, in particular, in the administrative, accounting, public security fields. The legal basis of the processing is the need for Backbonepro to perform pre-contractual measures adopted at the request of the interested party or to fulfill a legal obligation;

(b) in the case of making an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the transactions related to the same (and, if necessary according to the sector regulations, to fulfill tax obligations). The legal basis of the processing is the obligation of Backbonepro to execute the contract with the interested party or to fulfill legal obligations;

(c) subject to the express consent of the user, for the sending, by Backbonepro, of information and promotional communications (including the newsletter) relating to the products offered for sale on the Site as well as for carrying out market research also aimed at assessing the degree of user satisfaction (customer satisfaction), by email and / or postal service (so-called "marketing" purposes). The legal basis of the processing is the consent of the interested party;

 

(d) subject to the user's consent, for the analysis of his consumption choices and purchasing habits (so-called "profiling"), by Backbonepro through the detection of the type and frequency of purchases made online in order to send information and / or advertising material of specific interest to the user in the manner described in point (c) above. The legal basis of the processing is the consent of the interested party;

(e) limited to the e-mail coordinates provided by the user in the context of the purchase of a product offered on the Site, to allow the direct sale of similar products without the need for the express and prior consent of the user and provided that the user does not exercise the right of opposition in the manner described in art. 3 below (so-called "soft spamming"). The legal basis of the processing is the legitimate interest of Backbonepro to send this type of communications. This legitimate interest can be considered equivalent to the interest of the interested party to receive "soft-spam" communications;

(f) to respond to your requests. The legal basis of the processing is the legitimate interest of Backbonepro to execute user requests;

(g) in the event that the user who has not logged in to the Site abandons the purchase process without completing the order, for sending an email aimed at reminding the user of the possibility of completing the purchase. The legal basis of the processing is the execution of pre-contractual measures;

(h) to share personal data necessary to allow interaction with social network platforms, such as Facebook, Pinterest and Instagram, etc. The legal basis of the processing is the legitimate interest of Backbonepro to carry out this type of activity.

  • Sensitive data

Backbonepro does not process the sensitive or judicial data of users.

  • IP addresses and log files

Backbonepro will keep, within the terms of the law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions.

 

  1. Provision of data and consequences in case of failure to consent to processing

The provision of data for the purposes referred to in points (a) and (b) of art. 2 above is purely optional. However, since this processing is necessary to allow registration on the Site and the execution of the online purchase service, any refusal by the user to provide the data in question will make it impossible to register on the Site and conclude an online purchase.

With reference to the purposes of the processing referred to in point (c) (so-called "marketing" purposes) of art. 2 above, consent to the processing of personal data is purely optional. Failure to consent will not have any consequences on the possibility of registering with the

Site and / or to make purchases on the same but will only imply the impossibility of receiving, from Backbonepro, information and promotional communications relating to the products offered for sale on the Site (including the newsletter) in relation to its own or third parties' products and services, as well as for carrying out market research also aimed at assessing the degree of user satisfaction (customer satisfaction),  by email and postal service.

The user's consent to the processing of data for profiling purposes is purely optional. Failure to consent to the processing of personal data for the purposes referred to in art. 2, lett. (d) above (so-called "profiling" purposes) will make it impossible for Backbonepro to detect the type and frequency of purchases made online by the user in order to send the latter informative and / or advertising material of specific interest.

The provision of data for the purposes referred to in point (f) of art. 2 is purely optional, but failure to provide it will prevent Backbonepro from responding to user requests.

The provision of data for the purposes indicated in letter (h) of art. 2 is purely optional but failure to provide it will not allow the user to interact with the related social network platforms through the Site.

Without prejudice to the foregoing, it is understood that Backbonepro may still use the user's personal data for the sole purpose of correctly fulfilling the obligations established by the laws in force and the obligations deriving from the contractual relationships between the user and Backbonepro.

The user may, in any case, revoke any consent given for the purposes described in points (c) (so-called "marketing" purposes) and (d) (so-called "profiling" purposes), or oppose the processing for the purposes referred to in letter (e) ("soft spamming") as well as (g):

- by contacting Backbonepro at the addresses listed in art. 1 above;

- through a special link at the bottom of any promotional e-mail sent by Backbonepro. The objection expressed in this way also extends to the sending of communications through the postal service.

 

  1. Processing methods

The processing of the user's personal data will be mainly carried out with the aid of electronic or automated means, according to the methods and with the appropriate tools to guarantee its security and confidentiality in accordance with the GDPR.

The information acquired and the methods of processing will be relevant and not excessive with respect to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.

Scope of data communication

The personal data provided by the user, for the purposes described in art. 2 above, may be brought to the attention of or communicated to the following subjects:

- to employees and / or collaborators of Backbonepro for the performance of administration, accounting and IT and logistical support activities acting as, respectively, managers and persons in charge of processing;

- to the subjects that manage online payment transactions through the Site;

- to all those public and / or private subjects, natural and / or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional to the correct fulfillment of the contractual obligations assumed in relation to the services provided through the Site, as well as the obligations deriving from the law;

- to all those subjects (including Public Authorities) who have access to the data by virtue of regulatory or administrative provisions;

- to companies or persons in charge of printing, enveloping, shipping and / or delivery services and / or collection of products purchased through the Site;

- to the company that sends, on behalf of Backbonepro, newsletters and other information communications transmitted on behalf of the latter.

All personal data provided by users in relation to registration on the Site and / or purchase through the Site are not subject to disclosure. The updated list of data processors and persons in charge of processing can be consulted at the headquarters of the Data Controller.

 

  1. Data retention

The user's data will be kept only for the time necessary to guarantee the correct provision of the services offered and in any case not beyond the terms of the law.

Personal data will be stored according to the following logics:

  • for marketing and profiling purposes, up to the revocation of consent. For inactive users, personal data will be deleted after one year from the sending of the last email viewed;
  • for the purpose of executing the sales contract, for 10 years from the date of receipt of the purchase order;
  • for purposes of defense in court, until the final passage of the sentence;
  • for purposes of complying with the law, for the time necessary for that purpose;
  • for the purpose of performing any service requested through the Site, for the time necessary to execute the request.

In case of closure of the Site account on the initiative of the user, the data contained therein will be kept for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for public security purposes.

Right of access to personal data

You have the right to:

  1. a) obtain confirmation of the existence or not of personal data concerning him and their communication in intelligible form; as well as to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

(b) obtain information:

  • on the origin of personal data, on the purposes and methods of processing, on the logic applied in case of processing carried out with the aid of electronic instruments;
  • on the identification details of the Data Controller;
  • on the subjects or categories of subjects to whom the data may be communicated or who may become aware of the same as appointed representative on the territory of the State, managers or agents;

(c) obtain:

  • the updating, rectification or integration of data concerning him;
  • the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed;
  • the attestation of the fact that the operations referred to in the preceding points have been brought to the attention also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is impossible or involves the use of means manifestly disproportionate to the protected right;
  • data portability;

(d) object, in whole or in part:

  • for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection;
  • to the processing of personal data concerning him, provided for the purposes of commercial information or sending advertising material or direct sales or for carrying out market research or commercial communication.

The above rights may be exercised with a request to the Data Controller, at the addresses indicated in art. 1.

Changes

Backbonepro reserves the right to make changes to this information at any time, giving appropriate advertising to users of the Site and ensuring in any case an adequate and similar protection of personal data. In order to view any changes, the user is invited to consult this information regularly.

INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)