INFORMATION ON THE PROCESSING OF PERSONAL DATA EX ART. 13 OF REGULATION (EU) 679/2016
(General Data Protection Regulation - GDPR)
This information describes the methods of processing the personal data of users who consult the website www.logan4x4.com (hereafter referred to as the "site") or who use the services made available through the same by Logan4x4 by Anna Lefons' Logan.
In compliance with the principles recognized by the European Regulation 679/2016 (hereafter "Regulation"), this information provides the user, as an interested party in the treatment, with all the necessary information that allow to ensure the maximum correctness and transparency of the processing operations of your personal data.
This information does not concern other sites, pages or online services accessible through links that may be published on this site, such as redirects to social pages (facebook, youtube, etc.).
1. Data controller
The data controller is Anna Lefons Logan, with registered office in Via V. Veneto, 49 - 73020 - Martignano (LE), VAT number: 05020940754.
The contact details of the Data Protection Officer are: info@logan4x4.com.
2. Types of data processed, purpose and legal basis of the processing
Following consultation of this site or use of the services made available through it, the following types of users' personal data may be processed:
a) Navigation data
The computer systems and software procedures used to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties: except for this eventuality, at present the data on web contacts do not persist for more than seven days
b) For the logan4x4.com site, the personal data voluntarily provided by the user
The personal data freely and voluntarily provided by users of this site concern respectively:
1. necessary for the conclusion of e-commerce transactions, in the context of online purchases. The payment management services allow this site to process payments by credit card, bank transfer and PayPal. The data used for payment are acquired directly by the payment service manager requested without being processed in any way by Logan4x4 (e.g. PayPal is a payment service provided by PayPal Inc., which allows the user to make payments online using the own PayPal credentials).
2. those included in the forms present in some sections of the site (eg: the "Contacts" or "Write to us" section), or sent by e-mail to the e-mail addresses indicated on the Site, or the data entered for the purposes registration on the website or for sending the newsletter, to the extent necessary to provide feedback to user requests.
Personal data provided freely and voluntarily by users are collected and processed for the following purposes:
• supply of the products requested by the user and management of the related payments;
• registration on the site;
• subscription and sending via newsletter mail;
• response to requests for information;
• statistical purposes;
b1) for the logan4x4.com website, the data voluntarily provided by users concern:
- those included in the "Contacts" section to request information;
The legal basis of the processing for the aforementioned purposes is represented not only by the need to execute the contract of which the user is a party or for responding to its requests, also by the need to fulfill the legal obligations to which Logan4x4 is subject.
For the treatments carried out for the purpose of direct sending of its advertising material or commercial communications in relation to products or services similar to those already requested by users, Logan4x4 can use the e-mail and paper mail addresses pursuant to and within the limits permitted by provision of the Guarantor Authority for the protection of personal data of 19 June 2008, as the legal basis of this treatment is represented by the pursuit of its own legitimate interest. In any case, pursuant to art. 21 of the Regulation, the user has the possibility to oppose this treatment at any time, initially or on the occasion of subsequent communications, easily and free of charge also by writing to the Data Controller or the Data Protection Officer at the addresses indicated above, as well as to obtain immediate feedback confirming the interruption of this treatment.
With regard to statistical purposes, the data will be processed anonymously and in aggregate form.
3. Mandatory or optional nature of providing users' personal data
The provision of personal data to the Data Controller, in particular personal data, e-mail address, postal address for the shipment of products and telephone number is necessary with regard to the conclusion of the contract for the purchase of products on the site or registration phase.
Any refusal to indicate personal data marked with an asterisk could make it impossible to complete the registration phase or to execute the purchase contract for the products on the site, or to take advantage of the services available on it.
4. Recipients of users' personal data
The personal data of users who consult this site or use the services made available through it will be communicated:
• to Logan4x4 staff specifically authorized to process pursuant to art. 29 of the Regulation as part of their respective duties and to the extent necessary to allow the performance of activities strictly related to the provision of the requested services;
• to Amazon AWS as responsible for the provision of hosting services for attachments uploaded by the user on the ticketing platform;
• to Aruba S.p.A. as responsible for the provision of hosting services for the logan4x4.com website;
• to Aruba Business S.r.l. as responsible for the provision of hosting services for the logan4x4.com website;
• to Ormag s.r.l.s. as responsible for the provision of hosting services for the logan4x4.de website;
• to couriers for the management of product delivery;
• to subjects, authorities or bodies to whom it is mandatory to communicate personal data pursuant to legal provisions or orders from the competent authorities;
Users' personal data will not be transferred abroad, to countries or international organizations not belonging to the European Union that do not guarantee an adequate, recognized level of protection, pursuant to art. 45 of the Regulation, based on an adequacy decision of the EU Commission. In the event that it becomes necessary for the provision of services, the transfer of personal data to non-EU countries or international organizations will be carried out in compliance with articles 45-49 of the Regulation.
5. Retention of users' personal data
Personal data provided voluntarily by users will be stored in a form that allows identification of the data subjects for the time strictly necessary to pursue the purposes for which the data were collected and subsequently processed and, in any case, within the limits of the law.
Personal data related to the purchase of products online will be kept for 10 years.
6. Rights of the interested party
Articles 15-22 of the Regulation give the interested party the exercise of the following rights:
• request confirmation of the existence or otherwise of your personal data (art. 15 par 1);
• obtain information about the purposes of the processing, the categories of personal data, the recipients or the categories of recipients to whom the personal data have been or will be communicated, and when possible, the retention period (art.15 par.1 lett a, c);
• obtain the correction and deletion of data (articles 16 and 17);
• obtain the limitation of the treatment (art.18);
• obtain from the Data Controller information on the recipients to whom the personal data have been transmitted and any corrections or cancellations or limitations of the processing; (art.19)
• obtain the portability of the data, ie receive them from a Data Controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance (art.20)
• oppose an automated decision-making process relating to natural persons, including profiling (articles 21 and 22);
• If the treatment is based on consent, be able to withdraw it at any time (art.7 par.3);
• When the violation of personal data is likely to present a high risk for the rights and freedoms of natural persons, the data controller communicates the violation to the interested party without undue delay (art. 34);
Data subjects can contact the data protection officer for all matters relating to the processing of their personal data and the exercise of their rights deriving from this regulation by sending an email to the following address: info@logan4x4.com.
Users who believe that the processing of their personal data, carried out through this site, occurs in violation of the provisions of the current legislation on the protection of personal data have the right to lodge a complaint with the Supervisory Authority pursuant to art. 77 of the Regulation, or to apply to the appropriate judicial offices.
7. Changes and updates to this Privacy Policy
Changes and updates to this Privacy Policy will be notified to users on the home page of the website or by e-mail (for registered users) as soon as they are adopted and will be binding as soon as they are published on the website in this section.