Jesurum S.r.l. (hereinafter referred to as “Jesurum”), aware of the importance of personal data privacy, intends to use its best endeavours to respect the rules of conduct that ensure safe, controlled and restricted web surfing.
Data Controller, Data supervisor and person in charge of the processing
Data Controller of the processing pursuant to and by effect of art. 4, clause 1, lett. f) of the L. Decree 30 June 2003, no. 196 (hereinafter referred to as “Data Controller”) is Jesurum S.r.l., having its registered office in in Spilimbergo PN, Italy, Via Vittorio Emanuele II, 1.
Data Supervisor is Jesurum pro-tempore supervisor, with legal address c/o Jesurum S.r.l’s head office, with registered office in Spilimbergo PN, Italy, Via Vittorio Emanuele II, 1.
The people in charge of the processing are the collaborators employees of Jesurum who supervise the services offered via the Online Shop, as well as the person in charge of the processing. The complete and updated list of the subjects whose data are transmitted is available upon request.
Place, procedures and purposes of treatment
The data treatment connected with the services offered on the Online Shop is carried out at Jesurum operational headquarter.
Data processing carried out within the Online Shop follow mainly electronic or computer procedures, in compliance with the current safety regulations, for the time necessary to achieve the purpose for which they have been collected.
The data requested upon registration in the Online Shop are mainly used to the purposes of processing of the purchase orders transmitted by the user and the section dedicated with priority to data collection is aimed at making the registration on the Online Shop.
The form to be filled in to the purposes of registration provides for both strictly necessary data for the order processing and whose unfulfilled indication does not allow to process the user’s request, and also for data whose indication is optional and, in connection to which an eventual refusal to indication would not imply any consequence to the purposes of order processing.
Data processing is carried out to the following purposes:
(i) to process the purchase orders forwarded by users and dealing with one or more products available in the Online Shop;
(ii) upon express consent of the interested party, to carry out statistic surveys, market research and promotional activities, as well as to carry out direct promotional activities, through the periodical sending out of newsletters and other promotional tools to the e-mail address indicated by the user spontaneously, upon registration in the Online Shop.
For purposes related to the supply of the service in connection to which the user has expressed consents (online purchase of the products, newsletters sending out, etc.) or when communication is established by the law, data will be disclosed to third-party companies which offer instrumental services to meet the user’s request (for example, forwarders). The complete and updated list of the said third-party companies can be requested to Jesurum.
However, Jesurum will disclose the user’s personal data within the limits and according to the procedures specified and, in any case, in full respect of the consent expressed by the user as of the data collection, when required by the Privacy Code.
Jesurum can also disclose the information collected to customers, business partners and other parties. Such information is generally limited to anonymous information only regarding the users’ behaviour.
Any use of data regarding the user’s credit card for purposes different from the check of the payment methods existence is excluded, as well as payments charge and management and the handling of eventual claims and litigations. To this purpose, the data above-mentioned will be treated also by the bank which provides services connected with the management of online payments originating from the bank that has issued the credit card which the user will enter to validate its order.
Types of data treated
The computer systems and the software procedures designated to the functioning of the Online Shop acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (for example, IP addresses or domain names of the computers used by the users who connect with the Online Shop, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained in reply, the numeric code indicating the state of the answer given to the server, etc.). This information is not collected to be associated to identified, interested subjects, but, by virtue of their nature, through processing and association with data hold by third parties, it allows to identify the users.
These data are used only in order to obtain statistic anonymous information on the use of the Online Shop and to control its correct operation. The data are immediately cancelled after their processing but they could be used to verify the responsibilities in case of hypothetical cybercrimes to the detriment of the Online Shop.
Safety of the interested subject’s personal data
Jesurum adopts adequate and preventive safety measures aimed at safeguarding confidentiality, integrity, completeness, availability of the personal data of the person concerned. Technical, logistic and organizational precautions are implemented, aimed at preventing damages, even accidental losses, alterations, improper and non-authorized use of the data treated.
In particular, to protect the personal data of the person concerned, the Online Shop makes use of a coding system that grants protection by means of information encrypting both on the access page and on the other sections on which it is possible to disclose, view or amend personal data.
Jesurum will not be liable for untrue information directly sent from the user, as well as the information about the user which have been provided by a third party, also fraudulently.
Rights of the data subjects
Rights under art. 7, L. Decree 196/2003, which is reported below in its full version to the purposes of completeness, are granted: “A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form. A data subject shall have the right to be informed: a) of the source of the personal data; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge. A data subject shall have the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. A data subject shall have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys. Such rights can be exerted by the data subject, at any moment, by writing to Jesurum S.r.l., with registered office in Spilimbergo PN, Italy, Via Vittorio Emanuele II, 1.