The company Ligyes S.r.l. with registered office in Genoa, Piazza delle Vigne ⅜ VAT number: 02893200994 in the person of the legal representative. (hereinafter, “Data Controller”), as Data Controller of personal data pursuant to articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data (hereinafter, “Regulation”) informs pursuant to art. 13 of the Regulation which will proceed with the processing of personal data relating to users of the site.

1. Object of the processing (which data we process)

REGISTRATION: When registering we will only collect your email address. Subsequently you can also provide us with your name and surname and save the shipping and billing address, you can also save your credit card number.

PURCHASE: If you make a purchase we will collect your name, surname, address, telephone and email address and payment information. If you have a VAT number, you will also provide us with your VAT number, company name and certified e-mail address.

NEWSLETTER: If you sign up for the newsletter you will provide us with your name and surname and email address. If you wish, you can also provide us with the following information: City, date of birth, gender, profession and interests.

CONTACT FORM: if you fill out the contact form we will collect your name and surname, email address, (optionally your telephone number).

WORK WITH US: If you send your CV, we will collect your first and last name, email address, (optionally your telephone number).

In any case, the IP address and navigation logs will be saved.

2. Legal basis and purpose of the processing

The data processing will be carried out to allow the carrying out of activities related to the establishment and management of the service requested from the owner.
The data will be processed lawfully, correctly and with the utmost confidentiality, in compliance with adequate security measures as required by the Code and the Regulations.
The processing will be carried out using analogue/digital means. However, the data will not be publicly disclosed.

In particular:

REGISTRATION: the purpose is to allow you to enter our site and make purchases more easily. The legal basis is consent.

PURCHASE: the purpose is to allow you to complete the purchase of our products and allow us to send them. The legal basis is the execution of a contract and the fulfillment of legal obligations (including those of an accounting and tax nature). Your data will be communicated to the courier who will take care of the shipment, duly appointed as data controller. With the purchase, your data will be exported to a CRM for sending commercial information. Pursuant to art. 130 c.4 legislative decree no. 196/03 your consent is not necessary; you can still exercise the optout at any time.

CONTACT FORM: The legal basis is consent and your data will be processed to allow us to respond to your requests.

DIRECT MARKETING, BUSINESS PARTNERS AND PROFILING: with your explicit consent we will process your personal data also for direct marketing and profiling purposes.
Direct marketing: through the sending – also via e-mail, SMS and MMS – of advertising and communication material with informative and/or promotional content in relation to products and services provided and/or promoted by the Owner or by its commercial partners.
Commercial partner marketing: through the sending – also via e-mail, SMS and MMS – of advertising and communication material with informative and/or promotional content in relation to products and services provided and/or promoted by Ligyes commercial partners who will process your data as independent data controllers.
Profiling: individual or aggregate and market research aimed, for example, at the analysis of consumption habits and choices, at the development of statistics on them or at the evaluation of the degree of satisfaction with respect to the values and services offered.

In any case: the IP address associated with the navigation log is collected for security purposes, in relation to access to systems and the legal basis is the legitimate interest of the owner.

3. Treatment methods

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from purchase. The registration data will be processed until you decide to unsubscribe. For newslettering, direct marketing and profiling activities, the data will be deleted 24 months after the last communication sent or use of the site for profiling activities. The navigation logs will be kept for a maximum of 24 months.
I log di navigazione verranno conservati per un tempo massimo di 24 mesi.

4. Data communication

The Data Controller may communicate the data for the purposes referred to in the art. 2 to all subjects to whom communication is mandatory by law for the fulfillment of the purposes established by law. However, the data will not be publicly disclosed.

5. Data Storage and Transfer

The management and storage of personal data will take place on servers located within the European Union of the Data Controller and/or third-party companies appointed and duly appointed as Data Processors. Currently the servers are located in -Italy-.

The Data Controller hereby ensures that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses envisaged by the European Commission. In particular, the supplier uses the US – EU privacy shield. The list of data controllers can be found on site.

6. Rights of the interested party

The customer, in his capacity as interested party, has the rights referred to in the art. 15 of the Regulation and precisely:

1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

2. The interested party has the right to obtain the indication:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) of the logic applied in case of processing carried out with the aid of electronic instruments;
d) the identification details of the owner, managers and representative;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or appointees.

3. The interested party has the right to obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) the certification that the operations referred to in the letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right .

4. The interested party has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning him for the pursuit of purposes not contemplated by the art. 2.

Also pursuant to articles 15 and following of the GDPR, the user has the right to request at any time access to his personal data, rectification or cancellation of the same, limitation of processing in the cases provided for by the art. 18 of the GDPR, obtain the data concerning him in a structured, commonly used and automatically readable format, in the cases provided for by the art. 20 of GDPR. At any time, the user can revoke pursuant to art. 7 of the GDPR the consent given; lodge a complaint with the competent supervisory authority pursuant to article 77 of the GDPR if you believe that the processing of your data is contrary to the legislation in force.

The user can formulate a request to object to the processing of his personal data pursuant to article 21 of the GDPR in which to highlight the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted if it existed of compelling legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the user.
The interested party can exercise the rights referred to in the previous article at any time by sending:
– an email to the PEO address: amministrazione@ligyes.com

COOKIE

In relation to the cookies that are installed on your machine, we inform you that the provision of data is optional. However, some cookies are necessary to allow correct navigation on the website and therefore, in the absence of consent, the website may not work.