ACCOUNT

PRIVACY POLICY

The purpose of this document is to inform the natural person (hereinafter referred to as “Interested”) on the processing of your personal data (hereinafter referred to as “Personal Data”) collected by the data controller, Nextcom s.r.l., with registered office at Via Paolo Bassi 29, 20135 Milan, tax code/VAT no. 06026720968, REA MI-1865810, e-mail address privacy@starbottle.space, (hereinafter referred to as “Data Controller”), via the website starbottle.space (hereinafter referred to as “Application”).


Changes and updates will be effective as soon as they are published on the Application. In the event of non-acceptance of the changes made to the Privacy Policy, the Data Subject must discontinue use of this Application and may ask the Data Controller to delete his/her Personal Data.

CATEGORIES OF PERSONAL DATA PROCESSED

The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

  • Contact detailsname, surname, address, e-mail address, telephone number, pictures, authentication credentials, any further information sent by the data subject, etc.


The Controller processes the following types of automatically collected Personal Data:

  • Technical data: Personal Data generated by devices, applications, tools and protocols such as, for example, information about the device used, IP addresses, browser type, Internet Service Provider (ISP) type. Such Personal Data may leave traces which, when combined with unique identifiers and other information received by the servers, can be used to create profiles of individuals.
  • Usage data: such as pages visited, number of clicks, actions taken, duration of sessions, etc.


Should the Data Subject decide not to provide Personal Data for which there is a legal or contractual obligation, or should such data be a necessary requirement for the conclusion of a contract with the Controller, it will be impossible for the Controller to establish or continue any relationship with the Data Subject.


The Data Subject who communicates Personal Data of third parties to the Controller is directly and exclusively responsible for their origin, collection, processing, communication or disclosure.

COOKIES AND SIMILAR TECHNOLOGIES

The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect the Data Subject's Personal Data related to the pages and links visited and other actions performed while using the Application. This data is stored and then used the next time the Data Subject navigates the Application. The full Cookie Policy can be consulted at the following address: starbottle.space/en/cookie-policy

LEGAL BASIS AND PURPOSE OF DATA PROCESSING

The processing of Personal Data is necessary:


      • for the performance of the contract with the Data Subject and in particular:

         

          • the fulfilment of any obligation arising from the pre-contractual or contractual relationship with the data subject

         

          • registration and authentication of the data subject: to enable the Data Subject to register with the Application, to access it and to be identified therein, including through external platforms

         

        • support and contact with the data subject: to respond to your requests

     

      • for legal obligations and above all:

         

        • the fulfilment of any obligations under applicable rules, laws and regulations, particularly in tax and fiscal matters

     

      • for the legitimate interest of the data controller, for:

         

          • marketing purposes via e-mail of products and/or services of the data controller to directly sell the Controller's products or services using the e-mail provided by the Data Subject in the context of the sale of a product or service similar to the one being sold

         

        • statistics based on anonymous data: to perform statistical analysis on aggregated and anonymous data in order to analyse the behaviour of the Data Subject in order to improve the products and/or services provided by the Data Controller and better meet the Data Subject's expectations

     

    • on the basis of the consent of the person concerned, for:

       

        • profiling of the data subject for marketing purposes: provide the Data Subject with information on the Controller's products and/or services through automated processing aimed at collecting personal information to predict or assess the Data Subject's preferences or behaviour

       

        • retargeting and remarketing: to reach with personalised advertising the Data Subject who has already visited or shown interest in the products and/or services offered by the Application using his/her Personal Data. The Data Subject may opt out by visiting the page NetworkAdvertisingInitiativepage

       

      • marketing purposes of the Controller's products and/or services: for sending informative or commercial and/or promotional material, for carrying out direct sales activities of the Controller's products and/or services or for carrying out market research using automated and traditional methods


The Personal Data of the Data Subject may also be used by the Data Controller to protect itself in legal proceedings before the competent courts.

DATA PROCESSING METHODS AND RECIPIENTS OF PERSONAL DATA

The processing of Personal Data is carried out by means of paper and computer tools with organisational and logical methods strictly related to the stated purposes and by adopting appropriate security measures.
Personal Data are processed exclusively by:


    • persons authorised by the Controller to process Personal Data who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality;
    • subjects that operate autonomously as separate data controllers or by subjects designated as data processors by the Data Controller for the performance of all processing activities necessary for the pursuit of the purposes set out in this policy (e.g. business partners, consultants, IT companies, service providers, hosting providers);

 

  • parties or entities to whom Personal Data must be disclosed by law or by order of the authorities.


The persons listed above are obliged to take appropriate measures and guarantees for the protection of personal data and may only have access to the data necessary for the performance of their duties.
Personal data will not be shared indiscriminately in any way.

PLACE

Personal data will not be transferred outside the territory of the European Economic Area (EEA).

PERSONAL DATA RETENTION PERIOD

Personal data will be kept for the period of time necessary to fulfil the purposes for which they were collected. In particular:


    • for purposes related to the execution of the contract between the Data Controller and the Data Subject, will be kept for the entire duration of the contractual relationship and, after termination, for the ordinary limitation period of 10 years. In the event of legal disputes, for the duration of such disputes, until the expiry of the terms of appeal

 

    • for purposes related to legitimate interests of the data controller, will be retained until such interests are satisfied

 

    • in fulfilment of legal obligations, by order of an authority and for legal protection, shall be retained in accordance with the relevant timeframes provided for in such obligations, regulations and, in any case, until the expiry of the prescriptive period provided for in the applicable legislation

 

  • for purposes based on the consent of the data subject, will be retained until the consent is revoked.


At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.

RIGHTS OF THE DATA SUBJECT

The Data Subject may exercise specific rights in relation to the Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:


  • be informed about the processing of their Personal Data
  • withdraw consent at any time
  • limit the processing of one's Personal Data
  • object to the processing of your Personal Data
  • access their personal data
  • verify and request the rectification of their personal data
  • limit the processing of one's personal data
  • obtain the deletion of their personal data
  • transfer your personal data to another data controller
  • file a complaint with the data protection supervisory authority and/or take legal action.


To assert their rights, the data subject may send a request to the following e-mail address privacy@starbottle.space. Requests will be dealt with immediately by the data controller and processed as quickly as possible, in any case within 30 days.

DATA PROTECTION OFFICER

The Data Protection Officer is Giovanna Emanuela Bovani, Via Aurelia 78 A 16038 Santa Margherita Ligure (GE), Tax Code BVNGNN56E51G186M, e-mail amministrazione@nextcomitaly.com, .


Last update: 27/01/2023