The provision of personal data for the purposes of processing indicated above is optional but necessary, as failure to provide them will make it impossible for the User to browse the Website, register with the Website and use its Services.
The personal data that are necessary to pursue the processing purposes described in paragraph 1 herein are indicated with an asterisk on the Website registration form.
2. Other purposes of processing: newsletter
With the free and optional consent of the User, certain personal data of the User (i.e. name, surname, address, email address, date and month of birth) may be processed by the Partner for the purpose of sending newsletters. Therefore, the User will receive a periodic newsletter from the Partner that will contain information in relation to news and promotions on the Website and / or initiatives organised by the Partner.
Failure to grant consent shall not in any way comprise the possibility to register with the Website.
In case of consent, the User may at any time withdraw the same, submitting a request to the Partner as indicated in paragraph 5 below.
The User can also easily object to receiving further promotional material by clicking on the withdrawal of consent link, which is provided in each email containing the newsletter. After withdrawing consent, the User shall receive an email from the Partner confirming the withdrawal of consent.
3. Data processing procedures and retention times
The Data Controllers shall process the personal data of Users using manual and electronic instruments, with logics which are strictly related to the aforementioned purposes, in a way which guarantees the security and confidentiality of such data.
The personal data of the Users shall be retained for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or however as necessary for the protection in civil law of the interests of both the Users and Triboo.
In the cases referred to in paragraph 2 above, the personal data of Users shall be retained for the time strictly necessary to carry out the purposes described therein and, in any case, for no more than twenty-four (24) months.
4. Disclosure and dissemination of data
The personal data of the Users may be disclosed to the employees and / or collaborators of the Data Controllers in charge of managing the Website and all aspects of the delivery of Services. Such subjects, who have been duly informed by the Data Controllers under art. 29 of the Regulation, will process the User's data exclusively for the purposes indicated in this privacy notice and in compliance with the provisions of the Data Protection Law.
The personal data of Users may also be disclosed to third parties who may process personal data on behalf of the Data Controllers as "External Data Processors", such as, for example, IT and logistic service providers functional to the operations of the Website and/or the Services, outsourcing or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of any data processors appointed respectively by each Data Controller, submitting a request to the relative Data Controller as indicated in paragraph 5 below.
Furthermore, the personal data of the Users may be disclosed by Triboo, to the extent where the same is necessary and essential in order to execute the contractual obligations, to third parties who are independent data controllers, such as providers of payment services and logistics services necessary for delivery of the goods sold through the Website. These autonomous Data Controllers shall process the User's data exclusively for the purpose of fulfilling the processing of the orders relating to the Services in a correct manner.
5. Rights of Data Subjects
Users may exercise their rights granted by the Applicable Regulations by contacting the Data Controllers in the following ways:
By sending a registered letter with advice of receipt to the registered office of the Data Controllers