INFORMATION ON THE PROCESSING OF PERSONAL DATA
customers - Vers. 18/10/2021
Oscar Boscarol SRL processes your data in accordance with the EU Data Protection Regulation 2016/679 ("GDPR") and other applicable regulations. Please read the following information carefully. In the following text, the word "data subject" refers to you. The data controller is available to you for any clarification.
Data source - interested party
Interested parties - physical customers (who purchase from the owner in physical stores or through direct contact or by traditional means), customers of the owner's online sales platform, other people who on their own initiative create an account on the owner's online sales platform (without making purchases)
Types of data processed - identification and contact data, tax identification data, bank data, payment and collection data, data relating to products purchased
Purpose - to receive customers' orders and execute contracts, manage complaints and reports, manage accounting records (e.g. invoices and receipts with tax code), collections and payments, protect the rights of the owner and the interested party also in court, comply with any legal obligation
Data controller - Oscar Boscarol SRLvia Enzo Ferrari 29 - 39100 Bolzano raq@boscarol.it
Data Protection Officer (DPO) - not appointed
Representative in the EU - not appointed
Legitimacy of processing - art. 6 § 1 lett b) GDPR (need to perform a contract or pre-contractual measures) art. 6 § 1 lett c) GDPR (need to comply with a legal obligation)
Legitimate interest - not foreseen
Data retention - 10 years from last purchase (equal to the legal obligation to retain accounting records)
Possible recipients of the data - commercialists, auditors, suppliers (e.g. couriers), suppliers of computer programs (e.g. manager of the e-commerce platform), suppliers of technical assistance services, accounting and tax authorities (any recipients may process the data only in the interest of the owner and for the purposes indicated above)
Extra EU data transfer - data remains within the European Union
Your rights - Your rights (available at the link below) can be exercised by contacting the owner, the representative or the DPO by mail or e-mail
Complaints - for any violation of your rights you can complain to the Garante per la Protezione dei Dati Personali in Rome or, alternatively, to the supervisory authority of the place where you are established within the EU
Communication of data - necessary: failure to provide data prevents the person concerned from purchasing goods from the owner
Consent - not required