Privacy Policy
Data Protection policy
In implementation of EU regulation 2016/679 and current regulations, we are pleased to provide you with the following information relating to the processing and protection of your personal data.
1 - DATA CONTROLLER
The data controller is SELOR GROUP S.R.L., Strada Vignolese n. 1136, Modena 41125 (Italy), VAT number03098130366 , which can also be reached by calling +39 059252620 or by e-mail at info@drapenn.com
2 - Object of the Treatment
The Data Controller processes personal, identifying data (for example, name, surname, address, telephone, e-mail) - hereinafter, "personal data" or even "data", communicated by you when concluding contracts for services provided by the Data Controller or for the other purposes indicated in Article 3 of this Information.
3 - PURPOSE
Personal data may be processed, pursuant to Article 4 of the GDPR, for the following purposes:
| Purpose | Storage period |
| A - Respond to requests for information according to the contacts info on the website www.drapenn.com through the messaging system of the pages/profiles of the social network highlighted on the homepage of the website. | The data is kept for the period necessary to respond to requests and manage any problems reported by the interested parties, unless they are part of the after-sales activities (e.g. complaints about products or services) referred to in point D of the present purposes |
| B - For marketing communications, sending newsletters and other advertising communication activities; or to provide you with subsequent information and/or offers on products, services or initiatives offered or promoted bySelor Group and/or by affiliated and/or controlled companies, as well as by commercial partners and outsourcers, without this determining the transfer of personal data to third parties. | The data are kept for a period not exceeding two years unless the interested party exercises the right to cancel or modify the data |
| C - In the case of purchasing the products on the Selor Group e-commerce platform for purposes of execution of the sales contract, including shipping and management of after-sales communications | The data is kept for ten years, period indicated by the Law for the documents fiscal-accounting. |
| D - For profiling purposes in order to offer personalized services to subscribers to the website. | The data are kept for a period not exceeding two years unless the interested party exercises the right to cancel or modify the data |
However, the company policy provides for the use of the information in order to guarantee the satisfaction of users/customers and to meet their expectations, following the principle of necessity and minimization of treatments.
4 - NATURE OF THE CONSENT
The consent of data is optional but necessary for the implementation of the purposes indicated in Article 3. Any refusal by the interested party will make it impossible for the owner to follow up on the establishment of the relationship and its punctual execution.
The legal basis of the processing is the legitimate interest pursuant to article 6, par.1, lett. f for the purpose of point A; the legal basis of the processing is the consent of the interested parties pursuant to article 6, par.1, lett. a for the purposes of points B and C; the legal basis is the execution of the sales contract (ecommerce) pursuant to art.6, par.1, lett. b for the purposes indicated in point D.
5 - PROCESSING OF DATA
The processing of your personal data will be consistent with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the aid of IT systems or paper supported by specially authorized and trained personnel. The Data Controller has implemented technical and organizational security measures appropriate to its level of risk and undertakes to keep them updated and functional over time.
6 - COMMUNICATION TO CATEGORIES OF RECIPIENTS
The data being processed by the company may be communicated to the following categories of recipients:
- subjects who can access the data under the provisions of the law, regulation or community legislation, within the limits set by these rules;
- subjects (companies Partners/Suppliers) that they perform technical support activities for which data extracted from the customer's information tools may be communicated for the resolution of specific problems;
- individuals who, as informants, carry out their duties in their offices (e.g.: Legal and Commercial Offices) for accounting management and contractual relationship purposes;
- carriers, couriers, other subjects appointed by us to transport products/materials;
- information service providers for purposes related to the assistance contract with Selor Group
In any case, the data collected will not be disseminated without the written consent of the interested party.
7 - CONSERVATION TIMES
The retention times are indicated in the art. 3 of this Information.
8 - TRANSFER OF DATA ABROAD
The personal data of the interested party will not be transmitted to third countries or outside the European Union, except the data stored in the e-commerce platform Shopify, based in Canada.
The Data Controller of personal data has verified that with the decision "2002/2/EC: Commission decision, of 20 December 2001, in compliance with directive 95/46/EC of the European Parliament and of the Council and concerning the adequacy of the protection provided by the Canadian Personal Information Protection and Electronic Documents Act [notified under number C(2001) 4539], Official Gazette no. L 002 of 04/01/2002 p. 0013 - 0016” the European Commission stated that Canada “provides an adequate level of protection to personal data transferred from the Community to recipients subject to the law on the protection of personal information and electronic documents ("the Canadian Act")."
The adequacy decisions pursuant to art. 45 of the GDPR are listed on the page of the Privacy Guarantor https://www.garanteprivacy.it/temi/trasmissioni-di-dati-all-estero.
In the event that in the future personal data should be transferred to third countries or international organizations other than those indicated, all the provisions of Chapter V (EU Regulation 2016/679) will be respected in order to ensure an adequate level of protection.
9 – AUTOMATED PROCESS
Selor Group does not use decision-making processes based on automatic processing, any profiling activities of the interested parties for the purposes indicated in the art. 3 of this Information can only take place with the consent of the interested party.
10 - RIGHTS OF THE INTERESTED PARTY
Pursuant to articles 13, paragraph 2, letters b) and d); 14, paragraph 2, letters c) and e), 15, 16, 17, 18, 19, 20 and 21 GDPR, the interested party is informed that he has the right to:
a) obtain confirmation of the existence or not of personal data concerning him and their communication in form intelligible;
b) obtain information on the origin of personal data, on the purposes and methods of treatment, on the logic applied in case of treatment carried out with the aid of electronic instruments;
c) obtain access, rectification, limitation or integration of data concerning him;
d) obtain the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed;
e) the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
f) achieve data portability;
g) oppose, in whole or in part:
- for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection;
- to the processing of personal data concerning him, provided for the purposes of commercial information or the sending of advertising material or direct sales or for carrying out market research or commercial communication.
The above rights may be exercised with a request to the Data Controller, at the addresses indicated in art. 1.
h) propose a complaint to the Data Protection Guarantor in the capacity of natural person concerned personal data, following the procedures and indications published on the official website of the Authority at www.garanteprivacy.it.
Data: March 7, 2023