Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of Regulation (EU) 2016/679 ("Privacy Policy")
This information is provided pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation” or “GDPR”) and describes the methods of processing personal data of users who consult and use this e-commerce site, accessible at https://alloritools.com/ (hereinafter also “Site”), or who use the services offered through the Site. According to the current European Regulation, the collection and processing will always follow principles of legality, correctness, and transparency. Following the consultation of the e-commerce site, data related to the user benefiting from the services offered (defined as “data subject” as an identified or identifiable natural person) may be processed.
A. DATA CONTROLLER
The Data Controller is Alloritools S.r.l. with registered office at Via Minganti n. 8, 40138 Bologna (BO), VAT number 02543590372, contactable at the following details: Tel: (+39) 0516030511; email: info@alloritools.com.
B. TYPES OF DATA COLLECTED, PURPOSES, LEGAL BASIS, AND STORAGE TIMES.
a) Browsing Data
Personal Data may be collected autonomously by the Data Controller or through third parties. In this case, the IT systems and software procedures responsible for the functioning of this Site acquire some Personal Data of the Users, of a technical-informatic nature (e.g., IP address, type of browser used, operating system, domain name, and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet.
Purpose: Such Data may be processed solely for the purpose of deriving anonymous statistical information on the use of the site and/or to check its correct functioning.
Storage: Such Data will be deleted immediately after processing.
Legal Basis: The processing is carried out based on the legitimate interest of the Data Controller to make the Site usable and ensure safe navigation on it (art. 6, par. 1 lett. f). Exclusively for the specific profiling activity, the express consent of the data subject (art. 6, par. 1 lett. a).
b) User Contacts via Email, Phone, or Form Submission.
The optional, explicit, and voluntary sending of: i) communications by email to the addresses indicated on this site; ii) completion of the form in the contacts section https://alloritools.com/contacts; iii) sending emails to the addresses present on the website results in the subsequent acquisition of the data communicated by the user, including their email address, and consent to receive any response messages to their requests. In this case, providing the email address and any other indicated data is optional but essential to access the service and receive a response to your request; in their absence, we cannot proceed with processing.
Purpose: The personal data provided in this way are used solely to satisfy or respond to the transmitted requests and are communicated to third parties only if necessary for this purpose. The form does not request information related to particular data, and attachments containing drawings will be processed in compliance with confidentiality in accordance with copyright law.
Storage: Data is retained for the time necessary to fulfill the request and in compliance with current regulations. The data collected may be stored for statistical purposes in anonymous format even beyond the stated term.
Legal Basis: The processing is carried out for the fulfillment of a contractual and pre-contractual obligation assumed by the Data Controller with the service (art. 6, par. 1 lett. b) and for the legitimate interest of the Data Controller for statistical purposes (art. 6, par. 1 lett. f).
c) Marketing Activities, Newsletters, and Commercial/Promotional Communications from the Data Controller and Any Partner Companies
If explicitly requested by the user, it is possible to provide contact data to receive commercial and/or informational communications regarding the activities of the Data Controller, market research, purchasing opportunities, and active promotions as well as promotions on services provided by the Data Controller or by companies with which partnerships may be activated. Providing such data for these purposes is entirely optional but essential to proceed with the provision of the above-mentioned promotional information service. For sending newsletters, the Data Controller uses Mailchimp, whose privacy policy can be consulted at the following link: https://mailchimp.com/it/legal/terms/.
Purpose: The personal data provided are used to send communications related to new services and products offered by the Data Controller, including activities, events, initiatives, and services provided by partner companies.
Communication to Third Parties: This information may be transmitted and communicated to third parties only if necessary for this purpose and only after explicit consent has been obtained from the data subject.
Storage: Data is retained for the time necessary to fulfill the activity for which it was provided and, specifically for the above-mentioned purposes, no longer than two years as expressly provided by law (unless renewed consent by the data subject for use for other purposes as provided by current regulations).
Legal Basis: The processing is based on the explicit consent of the data subject (art. 6, par. 1 lett. a).
d) Soft Spam by the Data Controller on Similar or Identical Products/Services to Purchases Made
The Data Controller may send the User promotional communications by email regarding products and/or services similar to those already purchased or re-propose the same without the need for the express and prior consent of the User pursuant to art. 130, 4th paragraph, Privacy Code, provided that the user does not exercise the right to object.
Legal Basis: This processing is based on art. 130, 4th paragraph, of the Privacy Code as amended by Legislative Decree no. 101 of 2018.
Storage: The data used for sending soft spam communications are retained for the time necessary to fulfill the activity for which they were provided (unless renewed consent by the data subject for use for other purposes as provided by current regulations). The right to object to the aforementioned processing is guaranteed at any time in an easy and free manner.
e) Links to Other Websites
The Website may include hyperlinks to other websites. By clicking on one of these links, the user may be redirected to another website or another Internet source that may collect information about the user through cookies or other technologies. The Data Controller has no responsibility or control over these other websites or Internet resources, nor over their collection, use, and disclosure of the user's personal data. It is necessary to check the privacy statements of these other websites and Internet sources to assess whether they operate in compliance with privacy legislation.
F) Integration of Social Media Plugins
We have integrated social media plugins (Instagram, LinkedIn) on the site. This means that when you click or touch one of the buttons (for example, the “Like” button on Instagram), some information is shared with the social media service providers. If you are logged into your social media account when you click or touch one of these buttons, the social media provider may link this information to your social media account. Depending on your settings, they may also display these actions on your social media profile, which will then be visible to other users in your network.
g) This site uses cookies. For details, please refer to the specific cookie policy
C. RECIPIENTS OF THE DATA
The personal data collected are processed by the staff of the Data Controller, who acts upon specific authorization based on specific instructions provided regarding the purposes and methods of processing. In addition, the subjects designated as data processors pursuant to art. 28 of the GDPR or sub-processors, which the Data Controller uses for the provision of services and for the performance of its activities, may be recipients of the data collected following the consultation of the Site or the use of the services within the limits of their respective assignments. The relevant list can be requested from the Data Controller using the contact details provided in section A. If, through the services offered by the site, a data processor is designated pursuant to art. 28 of the GDPR or a sub-processor, the data will be communicated to its Data Controller and/or its data processor.
D. DATA TRANSFER
There is no provision for the transfer of personal data provided abroad. The data are stored through Amazon Web Services, and the server is located in the “Eu_Central_1a Region, Frankfurt, Zone A.”
E. RIGHTS OF THE DATA SUBJECTS
Data subjects – identified or identifiable natural persons to whom the data refer – can exercise specific rights regarding data protection, listed in the following list:
a) Right of access: the right to obtain from the Data Controller confirmation of whether or not personal data processing is underway and, in that case, to obtain access to the personal data and detailed information regarding the origin, purposes, categories of processed data, recipients of communication and/or data transfer, and more;
b) Right of rectification: the right to obtain from the Data Controller the rectification of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, including by providing a supplementary statement;
c) Right to cancellation (“right to be forgotten”): the right to obtain from the Data Controller the cancellation of personal data without unjustified delay in the event that:
i. the data are no longer necessary for the purposes of the processing;
ii. the consent on which the processing is based is revoked and there is no other legal basis for the processing;
iii. the personal data have been unlawfully processed;
iv. the personal data must be deleted to comply with a legal obligation;
d) Right to object to processing: the right to object at any time to the processing of personal data that is based on a legitimate interest of the Data Controller;
e) Right to restriction: the right to obtain from the Data Controller the restriction of processing in the event that the accuracy of the personal data is contested (for the period necessary for the Data Controller to verify the accuracy of such personal data), if the processing is unlawful and/or the data subject has objected to the processing;
f) Right to data portability: the right to receive in a structured, commonly used, and machine-readable format the personal data and to transmit such data to another Data Controller, if technically feasible, only for cases where the processing is based on consent or contract and only for data processed through electronic means;
g) Right to lodge a complaint with the supervisory authority: without prejudice to any other administrative or judicial remedy, the data subject who believes that the processing concerning them violates the Regulation has the right to lodge a complaint with the supervisory authority of the Member State in which they reside or work habitually, or of the State in which the alleged violation occurred. The rights can be exercised by contacting the Data Controller using the contact details indicated in section A.