Privacy policy
Privacy Policy
Information pursuant to articles 13-14 of EU Regulation no. 679/2016
of Legislative Decree no. 196/2003
(Consent to the processing of personal data)
Dear Customer,
pursuant to EU Regulation no. 679/2016 (called “General Data Protection Regulation”, hereinafter also “Privacy Regulation”, to be considered fully referenced here) and Legislative Decree no. 196/2003 (called “Code regarding the protection of personal data”, hereinafter also “Privacy Code”) and subsequent amendments, DUDUBAGS SRL expressly informs You that all personal data You provide will be processed according to the methods established therein. In particular, we inform You that:
a) Subject of the processing
This document constitutes a notice that clarifies the methods of processing Your personal data by DUDUBAGS SRL.
The personal data subject to processing by us will exclusively be: personal/identifying data (name, surname, age (which must be at least 16 years), gender, date of birth and tax code, if the subject is a natural person; company name, tax code, VAT number as well as name, surname and tax code of the legal representative pro tempore, if the subject is other than a natural person), contacts (residence/legal address; e-mail/p.e.c. address; phone/mobile/fax number), IP address.
To offer the user Klarna payment methods, at checkout we may transmit the user's personal data in the form of contact details and order information to Klarna, so that Klarna can assess the user's eligibility for its payment methods and personalize those payment methods. The user's personal data transferred are processed in accordance with Klarna's privacy policy.
We inform you in advance that, for the correct execution of the assignment, it may be necessary to periodically update the aforementioned personal data, which will be requested from you in due time and for which you may be asked to give your consent.
We finally warn you that, if you are under 16 years old, consent to the processing of your data can only be validly given by the person who exercises parental authority over you or by their substitute. Otherwise, we will not be able to process your data and therefore provide the requested service.
b) Legal basis and purpose of processing
DUDUBAGS SRL will collect the personal data described above exclusively for the following purposes: complying with obligations imposed by Italian law or European Union law (for example, accounting and tax obligations, anti-money laundering controls, etc.); fulfilling obligations and exercising rights arising from sales contracts concluded through the website www.dudubags.com (for example, delivering purchased goods, managing product support requests, exercising the right to payment, etc.); communicating with you; improving the service provided through the website www.dudubags.com; sending you our advertising, tailored based on your interests related to products and services that may interest you.
DUDUBAGS SRL expressly informs you that providing your data is mandatory for achieving purposes arising from legal obligations and/or the conclusion of the sales contract, while it is optional for purposes other than these: nevertheless, your possible refusal to provide the requested data could result in DUDUBAGS SRL being unable (totally or partially) to provide the requested service.
c) Collection of personal data
The personal data we will collect will be those you provide when filling out the purchase order on the website www.dudubags.com and/or the subscription to the newsletter service provided through the same site.
Furthermore, we will collect some data (better specified in the section “i – Cookie policy”) through our Facebook, Instagram, Youtube, and Pinterest web pages. For any information on this, please refer to the specific information accessible here.
d) Processing methods
Your personal data will be processed both with paper tools and IT tools owned and/or available to DUDUBAGS SRL and its external collaborators.
If necessary, even for internal purposes, the storage of your personal data in our IT system or that of our external collaborators will be done, stored, and managed using appropriately protected IT supports, to ensure complete security, until the processing ceases.
e) Duration of personal data retention
The personal data collected will be kept for the time strictly necessary to achieve the purposes described above, in compliance with the provisions of art. 5.1 letter e) of the Privacy Regulation, after which they will be deleted from all archives owned and/or available to DUDUBAGS SRL and/or its external collaborators.
In any case, the personal data collected will be kept for no longer than 10 years from the moment they are provided.
With exclusive reference to data collected through cookies (better specified in the section “i – Cookie policy”), please refer to the specific information accessible here.
f) Data Controller
The Data Controller is DUDUBAGS SRL, tax code and VAT number 01214840934, located in Pordenone (33170), Via Roveredo n.1/A, Tel.: 0434 551583; Fax: 0434 361483; E-mail: info@dudubags.com; PEC: info@pec.dudubags.com, represented by its legal representative pro tempore.
g) Persons authorized to process personal data
In addition to the Data Controller, the data you provide will also be processed by the staff members of DUDUBAGS SRL, who will act as Authorized Persons for processing. We inform you that these individuals will act under the direction of the Data Controller and are bound to confidentiality regarding the personal data collected, both based on internal regulations and by virtue of legal and contractual provisions arising from the employment relationship.
h) Recipients of personal data
Your personal data (however collected) will be processed by the Data Controller, by persons appointed by them (as better defined in the previous point), as well as by the following third parties:
- carriers and shippers;
- companies providing IT services, including so-called “hosting”, “housing” and similar services;
- companies providing advertising services (newsletters, etc.);
- companies providing online advertising services (to publish ads and similar);
- other external collaborators, such as technicians and/or professionals used by DUDUBAGS SRL who will come into contact with your personal data.
With particular reference to companies providing IT services, we inform you that the processing of personal data entrusted to them may take place at facilities (for example, Data center) located in Switzerland (a country that has already obtained an adequacy decision from the European Commission – see the Commission Decision on the adequacy of the protection of personal data in Switzerland under Directive 95/46/EC - 26 July 2000), or in other European Union countries.
Except for what has just been seen, your personal data will not be communicated, transferred under any title, or otherwise shared with other third parties, and will be used solely and exclusively for the purposes indicated above.
i) Cookie policy
Our site www.dudubags.com uses profiling cookies, including Third Party ones, to improve the browsing experience and help us improve the product offering to customers.
Cookies are small text files that websites visited by users send to their devices, where they are stored to be retransmitted to the same sites on subsequent visits; they are used for various purposes and have different characteristics. At this link you will find our complete information on the use of cookies for the site www.dudubags.com, their purposes, and their characteristics.
j) Data subject rights
With regard to your personal data (however collected), you may exercise the following rights at any time towards the Data Controller (at the contacts indicated above):
- access your personal data and in particular the following information: the purposes of processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period (ex arts.13 and 15 of the Privacy Regulation);
- withdraw consent to processing given for one or more specific purposes at any time (ex arts.7 and 13 of the Privacy Regulation);
- receive information on the actions taken regarding requests made pursuant to arts. 15 to 22 of the Privacy Regulation (art.12 of the Privacy Regulation);
- request and obtain without delay the rectification of inaccurate personal data concerning you, as well as the completion of incomplete data by providing a supplementary statement (arts.13, 16 and 19 of the Privacy Regulation);
- request and obtain without delay the deletion of collected personal data in the specific cases provided for by the Privacy Regulation (arts.13, 17 and 19 of the Privacy Regulation);
- request the restriction of processing of collected personal data in the specific cases provided for by the Privacy Regulation (arts.13, 18 and 19 of the Privacy Regulation);
- exercise the portability of collected personal data, that is, to receive in a structured, commonly used and machine-readable format the personal data concerning you provided to a data controller and to transmit them to another data controller without hindrance from the one to whom you provided them (arts.13 and 20);
- object to the processing of collected personal data object at any time, for reasons related to your particular situation, to the processing of personal data concerning you pursuant to art.6, paragraph 1, letters e) or f), including profiling based on such provisions (arts.13, 21 and 22 of the Privacy Regulation);
file a complaint to a supervisory authority of the Member State where you habitually reside, work, or where the alleged violation occurred (arts.13 and 77 ff. of the Privacy Regulation).