Privacy Policy

In compliance with the obligations established by the European Privacy Regulation EU/2016/679 (GDPR) we hereby intend to inform you on the processing of personal data freely provided by you and/or by other subjects communicated to Nikkolor Italia srl, in particular through: navigation on web pages, the use of online services, filling out forms on our applications and within the sites nikkolor.net nikkolor.com

The data processing will be carried out in compliance with the privacy regulations in force and based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of relevance, completeness and non-excess.

​

Identity and contact details of the Owner

Nikkolor Italia s.r.l.

VAT number and tax code: IT01939040893

Legal and operative site

Viale Vittorio Veneto, 186 - 96014 Floridia (SR) Italy

Telephone: +39 0931 941789

E-mail: amministrazione.nikkolor@gmail.com

Company website: www.nikkolor.net

Group website: www.nikkolor.com

PEC: nikkoloritaliasrl@pec.it

Legal Representative of the Data Controller: Tiziana Ierna

Contact details of the data protection officer (DPO)

Data Protection Officer: Denise Ierna

Telephone: +39 0931 941789

E-mail: nikkoloritalia@gmail.com

Categories of personal data processed and methods of processing

During navigation and use of the Company website, some information may be collected and processed for the exclusive purposes of security and improvement of the service offered. The information collected mainly concerns interactions with the website, statistics on the pages visited by the user, date and time of access, technology used by the user. Information relating to the user's origin and destination page may also be collected. Furthermore, some information is collected automatically (in anonymous, aggregated and pseudonymized form) using cookies and similar technologies while browsing the website. You can read more about our use of cookies in our “Cookie Policy”.

If you decide to contact the Data Controller by filling out the forms in the "Contacts" section of the aforementioned websites, the information collected concerns name and surname, residence or domicile address, email address, telephone number, tax code, match number VAT as well as the text you freely entered.

If you decide to purchase products using our E-commerce Platform, you will be asked to register in the Reserved Area of the Platform and create your own account (in this regard we invite you to read the General Conditions of Use and Sale of the Platform E-commerce).

In this case the information collected will concern, by way of example and not limited to:

• simple common data (customer details, shipping address, contact data; user name, user IP sessions, any image associated with the profile); data generated by IT sessions deriving from the use of the account; Information relating to visits to the area and -commerce, to purchases and orders of products; data relating to the order also in relation to the discounts/promotions applied;

Purpose of the processing and related legal basis

The personal data requested or acquired will be processed exclusively for the purposes and on the legal bases indicated below.

1. ​Process requests for information and contact, provide assistance services and technical and commercial support, formulated by completing the form in the "Contacts" section. To carry out activities related to the establishment, management and continuation of commercial relationships and/or or contractual. To carry out the intermediation activity between customer and retailer in the purchasing phase of products on the e-commerce platform. Creation and management of the customer profile. For the correct execution, management, maintenance, security and improvement of the website, the e-commerce platform and the IT infrastructure. Carrying out direct marketing activities; sending newsletters and commercial and/or technical communications; market surveys - conducted internally or with external companies - via email or with a telephone operator. Processing of statistical data for market purposes. To fulfill any type of obligation established by laws, regulations or community legislation. For the resolution of any legal disputes that may arise during the relationship;

Legal basis at point 1,2,3:

Consent is not required as the processing is necessary for the execution of the service requested by the user or for the establishment and/or execution of the contractual relationship (art.6.1.b of the GDPR).

Legal basis in point 4:

-

Legal basis in point 5:

Consent is not required as the processing is necessary for the pursuit of the legitimate interest of the data controller, security and maintenance (art.6.1.f of the GDPR).

Legal basis in point 6:

Consent is required (art.6.1.a of the GDPR).

Legal basis in point 7:

Consent is not required as the processing is necessary for the pursuit of the legitimate interest of the data controller and the data are processed only as aggregate data and without reference to user identifiers for market study purposes (art.6.1.f GDPR).

Legal basis in point 8:

Consent is not required as the processing is necessary to fulfill legal obligations to which the Data Controller is subject (art. 6.1.c GDPR)

Legal basis in point 9:

Consent is not required as the processing is necessary for the pursuit of a legitimate interest of the Data Controller to protect himself from contractual breaches or other causes of damage (art.6.1.f GDPR);

Any refusal, even if legitimate, to provide all or part of the above data could make it difficult to access and use our web applications and online services and compromise the smooth running of the relationship with our structure. and in particular, for personal data defined as mandatory and indispensable, it could make it impossible to access and use our web applications and online services and make it impossible for us to carry out the normal performance of company operations and the regular provision of the requested products/services.

Treatment methods

The processing of your personal data is mainly carried out with the aid of computer systems, including automated ones - and may consist of the following operations: collection, recording, organization and conservation, consultation, use, processing, modification, selection, extraction, comparison, interconnection, transmission, communication, diffusion, cancellation, destruction, blocking and limitation.

In carrying out processing operations, however, all technical, IT, organizational and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed. The above-mentioned methodologies, applied for the processing, will guarantee access to the data only to the subjects specified under "Categories of recipients of personal data".

Categories of recipients of personal data

The subjects or categories of subjects who may become aware of the personal data or to whom it may be communicated are the following:

• Legal Representative of the Data Controller, then, system administrator and employees and those in charge of processing the following areas: Management, Administration and Finance, Technical Area, Production, Logistics, Information Systems, Quality, Marketing and Sales. Data controllers, for example : Nikkolor Italia srl company, consultants and IT companies and software houses, consultants and consultancy companies, freelancers, self-employed workers, agents and representative agencies, transport and logistics companies. Judicial or supervisory authorities, administrations, bodies and bodies public (national and foreign), but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation, auditors and auditing companies for the same tasks.

Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.

Storage and transfer of personal data abroad

The management and storage of personal data takes place in the cloud and on servers located within the European Union and the European Economic Area owned and/or available to the Data Controller and/or third-party companies, duly appointed as data controllers.

Personal data retention period

The data will be collected and recorded for the sole purposes described below and will be kept for a period strictly necessary for these purposes, in any case not exceeding twenty-four months from their collection for marketing purposes, ten years from their collection for administrative or law.

Exercisable rights

In compliance with the provisions of the GDPR, you can exercise the rights indicated therein and in particular:

• You can always request at any time from the Data Controller or the Data Protection Officer, a copy of your personal data, information regarding the location in which your personal data is processed and an updated list with the identification details of all the Managers of the Processing and of the System Administrators authorized to process your data. At any time, you may freely revoke the consent given, without any burden or prejudice to the lawfulness of the processing carried out up to that point, and exercise the following rights of the interested party in towards the Data Controller as provided for by the European Privacy Regulation EU/2016/679 on Access, Rectification, Cancellation, Limitation, Opposition, Portability and Complaint to the Privacy Guarantor.

The request can be made using the UNSUBSCRIBE functionality of the newsletters or by writing an email to nikkolor@gmail.com