Privacy Policy

 

Information on the processing of personal data pursuant to Articles 13–14 of EU Regulation 2016/679 (GDPR)

 

Data Subjects: customers

 

Off.Mecar S.r.l, as Data Controller of your personal data pursuant to EU Regulation 2016/679 (hereinafter “GDPR”), hereby informs you that the aforementioned regulation provides for the protection of data subjects with regard to the processing of personal data. Such processing will be carried out in accordance with the principles of fairness, lawfulness, transparency, and protection of your confidentiality and rights.

 

Your personal data will be processed in compliance with the applicable legal provisions and confidentiality obligations.

 

 

Purposes of Processing

 

In particular, your data will be processed for purposes related to the fulfillment of legal or contractual obligations, including:

 

• compliance with legal obligations in tax and accounting matters;

• after-sales assistance;

• dispute management;

• customer management;

• activity planning;

• customer invoicing records.

 

The processing of data necessary for these purposes is essential for the proper management of the relationship, and providing such data is mandatory.

 

Failure to provide, or the provision of incorrect data, may result in the inability of the Data Controller to ensure proper processing.

 

With your consent, your data may also be used for the following purposes:

 

• providing information about promotional activities;

• conducting market research and statistical analysis;

• sending advertising and promotional materials.

 

Providing data for these purposes is optional, and refusal will not affect the continuation of the relationship.

 

 

Methods of Processing

 

Your personal data may be processed in the following ways:

 

• outsourcing of processing operations to third parties;

• processing by electronic means;

• manual processing using paper archives.

 

All processing is carried out in compliance with Articles 6 and 32 of the GDPR and with appropriate security measures.

 

 

Data Sharing

 

Your data will be disclosed only to duly authorized and competent parties for the proper management of the relationship, ensuring the protection of your rights.

 

Your data will be processed exclusively by personnel authorized by the Data Controller, including:

 

• Marketing department;

• Administration department;

• collaborators and developers;

• partners and directors.

 

Your data may also be communicated to third parties appointed as Data Processors, including:

 

• entities where disclosure is required by law;

• shipping agents, carriers, postal services, logistics companies;

• consultants and professionals;

• affiliated and subsidiary companies;

• banks and financial institutions.

 

 

Data Dissemination and Transfer

 

Your personal data will not be disclosed in any way.

 

Data may be transferred, solely for the purposes stated above, within EU countries.

 

 

Data Retention Period

 

In accordance with the principles of lawfulness, purpose limitation, and data minimization (Art. 5 GDPR), your personal data will be retained:

 

• for no longer than necessary to achieve the purposes for which it is collected and processed;

• for the duration of the services provided;

• in compliance with legal retention obligations.

 

In any case, data may be retained for a maximum period of 15 years from the termination of the relationship.

 

 

Data Controller

 

The Data Controller is:

 

Off.Mecar S.r.l

Tel: +39 0833 625 820

Email: info@xprofishing.com

 

 

Data Subject Rights

 

You have the right to request from the Data Controller:

 

• access to your personal data;

• rectification or updating of data;

• erasure (“right to be forgotten”);

• restriction of processing;

• data portability;

• objection to processing.

 

You may exercise all rights provided under Articles 15–22 of the GDPR.

 

 

Rights under Articles 15–22 GDPR

 

The data subject has the right to:

 

1. Obtain confirmation as to whether or not personal data concerning them exists and receive such data in an intelligible form.

2. Be informed of:

    

   • the origin of the data;

   • the purposes and methods of processing;

   • the logic applied in case of electronic processing;

   • the identity of the Data Controller and any processors;

   • the recipients or categories of recipients of the data.

3. Obtain:

    

   • updating, rectification, or integration of data;

   • erasure, anonymization, or blocking of data processed unlawfully;

   • confirmation that such operations have been notified to third parties, where applicable;

   • data portability.

4. Object, in whole or in part:

    

   • on legitimate grounds, to the processing of personal data;

   • to the processing of personal data for marketing or commercial purposes.

 

To exercise your rights, please send a written request to:

info@xprofishing.com