Treatment of personal data
Regulation (EU) 2016/679
AXYZ design S.R.L., in the person of its legal representative pro tempore, with registered office in Melegnano (MI), via Monte Suello n.15 (hereinafter AXYZ), pursuant to art. 13 of the Personal Data Protection Code, Legislative Decree n.196 of 30.06.2003. (hereinafter "Privacy Code"), and Regulation (EU) 2016/679 (GDPR) as Data Controller, informs you that filling out and sending the account creation form on the Site involves the acquisition and processing, by the company, of your personal data.
Warning: this information notice is generally addressed to all users, natural and legal persons, to the extent and where necessary also in relation to the former, although they are not concerned pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679.
1. Data controller
The data controller is AXYZ design S.R.L. with registered office in Melegnano (MI), via Monte Suello n.15.
2. Purpose of the treatment
The personal data provided by users who fill in and send the form published on this web page will be used by the Owner to allow the user to create a personal account and, subsequently, for the conclusion and execution of purchase orders that the user will make online.
The legal basis is the consent and willingness of the person concerned to conclude the contract.
Compulsory or optional nature of the provision of data and consequences of any refusal to respond.
The provision of personal data requested is necessary to complete the registration process, and is, therefore, mandatory.
Failure to provide the requested data will, therefore, make it impossible for the person concerned to create an account and proceed with any purchases.
3. Methods of treatment
Personal data will be processed by AXYZ design by means of authorized persons and managers who will use tools and media (paper and / or computer), appropriate to ensure security and confidentiality.
Subjects or categories of subjects to whom the data may be communicated or who may become aware of it in their capacity as appointees and managers.
3.1. The data may be communicated to the following categories of recipients:
(a) consultants and accountants for the fulfillment of the law;
(b) subjects who process the data in the execution of specific legal obligations;
(c) in general, to all those public and private subjects whose communication is necessary to comply with legal obligations.
In the event that a customer of the Site spontaneously sends any works made with the use of our products, please refer to the information published in the section https://secure.axyz-design.com/gallery/user-artwork.
4. Data transfer to third country
The Holder shall not transfer data to a third country or to an international organization unless an adequacy decision is taken by the Commission.
5. Duration of treatment
The data collected will be processed by AXYZ design as long as the user's account is active and, if the user has made an online purchase, for as long as the data controller is subject to storage obligations for tax or other purposes, as provided by law or regulation, as well as for the defensive needs of the data controller (10 years from the end of the contract).
In the cases allowed, the data will be processed for sending promotional communications until the person concerned has expressed his opposition.
6. Rights of the interested parties
Pursuant to art. 7 of Legislative Decree 196/2003, the interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form.
6.1. The interested party has the right to obtain the indication:
(a) the origin of the personal data;
(b) the purposes and methods of the processing;
(c) the logic applied in case of processing carried out with the help of electronic instruments;
(d) the identification data concerning the data controller, the data processors and the representative designated in accordance with article 5, paragraph 2;
(e) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State's territory, data processor(s) or person(s) in charge of the processing.
6.2. The interested party has the right to obtain:
(a) the updating, rectification or, when interested, integration of data;
(b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
(c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
6.3. The interested party has the right to object, in whole or in part:
(a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
(b) to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys.
6.4. Pursuant to Regulation (EU) 2016/679, the interested party has the right to obtain the following information:
(a) the identity and contact details of the data controller and, where applicable, his representative;
(b) the contact details of the DPO, where applicable;
(c) the purposes of the processing for which the personal data are intended and the legal basis for the processing of the treatment;
(d) where the processing is based on Article 6(1)(f), the legitimate interests of the data subject prosecuted by the data controller or by third parties;
(e) any recipients or categories of recipients of the personal data;
(f) where applicable, the intention of the controller to transfer personal data to a third country or an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in Article 46 or 47, or in the second paragraph of Article 49, the reference to the appropriate or appropriate safeguards and the means of obtaining a copy of those data or the place where they were made available.
6.5. In addition, the data subject may exercise the following rights:
(a) right of access to his or her personal data; right to obtain rectification or erasure of such data or restriction of processing concerning him or her;
(b) right to object to the processing;
(c) right to data portability (law applicable only to data in electronic format), as governed by art. 20 of the GDPR;
(d) where the processing of data is based on Article 6(1)(a) (consent) or Article 9(2)(a) (consent) of Regulation (EU) 2016/679, the right to revoke consent at any time without prejudice to the lawfulness of processing based on consent prior to revocation;
6.6. Requests regarding these rights can be addressed to:
AXYZ design S.R.L.
support@axyz-design.com
In addition, the interested party has the right to lodge a complaint with a supervisory authority (for further information, see the institutional website of the Privacy Guarantor www.garanteprivacy.it).
7. Sending of commercial and/or promotional communications
If you have given your consent, personal data (name, surname and e-mail address) may be processed by AXYZ for the purpose of sending commercial and/or promotional communications by e-mail. We inform you that you may at any time object to such processing, easily and free of charge, by a simple written communication by e-mail to the following coordinates: support@axyz-design.com or through the appropriate link in each e-mail.
We will remind you of this right when sending any communication made for the purpose above, as required by law.