Privacy Policy

Privacy Policy – information on the processing of personal data

In compliance with current legislation on the protection of natural persons with regard to the processing of personal data, the Data Controller informs the interested subjects (also just “interested”) on the processing of their data collected and processed during navigation and use of this website (hereinafter “site”). Detailed information on the processing of personal data is reported in the sections of this information relating to the individual services offered, with the aim of informing about the purposes and methods of data processing through each service, so that interested parties can freely express their consent and authorize, where required pursuant to current legislation, the collection of their data and their subsequent use.

Please note that this privacy policy applies to this website and not to other websites that may be consulted by the user through the navigation from the links on the site, for which you refer to the information provided by the other sites regarding their privacy management.

Owner of the treatment and contacts

Amlux Srl
Via Belgio 11/13, 46042 Castel Goffredo (MN) – Italia
Tel +39 0376 781094 - e-mail: info@amlux.it – PEC: amluxsrl@messaggipec.it
In compliance with art. 37 of GDPR the Data Controller (hereinafter “Amlux”) is not obliged to appoint the Data Protection Officer - DPO.

Definitions

Current Legislation

This means the Italian and EU legislation in force regarding the protection of natural persons regarding the processing of personal data. For more information, please consult this page on the website of the Italian Authority for the Protection of Personal data: https://www.gpdp.it/web/garante-privacy-en/home_en. Furthermore, for the specific scope of Cookie and other tracking tools used on websites, see the Provision of 10 June 2021 of the Guarantor for the Protection of Personal data “Guidelines for cookie and other tracking tools” available at the link: https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/9677876#english.

Personal Data

Constitutes personal data (hereinafter also just “data”) any information which directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

This includes the information collected automatically through this site (also by third-party applications integrated into this site), including: IP addresses or domain names of the computers used by the user who connects with this Application, the addresses in URI (Uniform Resource Identifier), the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. ) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the site, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and the user's IT environment.

Treatment
Any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or the modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, deletion or destruction.

Interested
The natural person (“interested party”) to whom the data refers.

User
The person who visits or uses this site who, if not otherwise specified, coincides with the interested party.

Service or Services

The services provided to the user through this site, generally based on the transmission of information to the user or on the collection of information from the user.

European Union (UE)

This refers to all current member states of the European Union or the European Economic Area. With the term “community” we refer to the legislation of the European Union.

Processed Data and processing purposes

With the exclusion of technical and navigation data which are collected and processed automatically for the correct functioning of the site, as well as data collected through necessary cookie for which consent is not required, users are free to voluntarily provide their data to take advantage of the features and services offered by the site or to consent optional cookie. If you don’t provide the requested data, you may be not able to obtain the requested service. In general, user data collected through the site and through the electronic commerce platform will be used with the following purposes:

• allow the correct navigation of the website through technical navigation data and those collected with necessary cookie;
• answer to request and give information and reviews on products and/or services of the holder or that you can find in the website;
• to carry out the economic activity through the sale of products and services and promptly execute the obligation arising in the pre-contractual and contractual phase;
• fulfil, execute or demand the fulfilment of specific obligations or perform specific tasks provided for by laws, regulations and/or Community regulations;
• protect all the mutual rights arising from the negotiations and from the contractual agreements;
• send communications regarding direct marketing of the owner for products and/or services which are similar to those previously contracted;
• Subject to specific consent for the cookies that require it, analyze the use and navigation of the site for statistical purposes and to improve the services offered through the site, or provide advertising and promotional content in line with the user's preferences detected through the Cookies.

Processing of technical navigation data

The computer systems and software procedures used to operate this website acquire some data whose transmission is implicit in the use of Internet communication protocols, such as: IP addresses, the type of browser used by the user, the operating system of the user’s navigation device, the domain name and the addresses of other websites from which access was made or exit, the information on the pages visited by users within the site, data/time of access to the site, internal route analysis and other parameters related to the operating system and the user's computer environment. These data are used exclusively in a collective and non-identifying manner and could be used by the site’s hosting service provider to verify responsibility in case of hypothetical IT crimes damaging the site, by the owner can be used for technical management of the services provided and anonymous statistical analysis of the traffic generated and of the pages visited.

The legal basis for the processing is the protection of the legitimate interest of the Data Controller or third parties or also the fulfilment of any legal obligations. This data will be kept for the time necessary to fulfil the specified purposes.

Processing of data through email messages, WhatsApp channel and phone calls

Customer service is provided across the following channels: phone, e-mail, WhatsApp messages to which each person can freely write or call. The communication of the requested data with the appropriate form is optional, however, if the mandatory data is not provided to us, it will not be possible for us to respond to the message and provide the requested information. The legal basis for the processing is the protection of the legitimate interest of the Data Controller for the conduct of its activities, or also the execution of pre-contractual measures at the request of the interested party. The data will be kept for the time necessary to carry out the purposes specified by the interested party.

Regarding the processing of personal data carried out by the WhatsApp manager, to use this messaging platform each user must already have voluntarily registered after accepting the conditions of use; furthermore, everyone independently manages their own account or profile and the information they intend to make visible. Pursuant to European legislation, the operator of the WhatsApp platform is the independent data controller for all data of registered persons who use this service and entered by them on this platform (all information is available on the WhatsApp website). Amlux has no responsibility for the processing of personal data carried out by the WhatsApp manager but is the Data Controller of personal data only for the management of the telephone number of the interested party and the information voluntarily transmitted by the interested party. These data will be kept for the time necessary for the processing purposes, will not be used for different purposes and will not be transmitted to other third parties.

Processing of data transmitted through contact form or for services request

On the pages of the site the user can voluntarily fill in the forms to send requests for information or other messages, only common identification and contact data are collected, together with any optional data relating to the request being transmitted, which will be used to respond to the message and provide the requested information. The legal basis for the processing is the specific consent of the interested party. The data transmitted will be kept for the time the purposes are achieved or for the processing of requests.

Processing of data transmitted with the module REGISTER/LOGIN

The creation of a user account is optional to make purchases directly on the website via the e-commerce platform, while it is mandatory if the user wants to access to its reserved area where to store information related to preferences and purchases. Only the minimum mandatory data are required for registration: name and surname, e-mail, telephone, password; it is requested to specify whether the user is a private citizen (natural person) or a company / professional (legal person).

For the issuance of the sales document only the minimum data required by law is processed; as an optional data, it is possible to enter a shipping address different from the billing address.

The communication of the requested data is optional, however, if the user does not communicate the mandatory data it will not be possible to complete the registration process and receive the requested services. The legal basis for the processing is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures at the request of the interested party, or even the fulfilment of legal obligations. The provided data will be used for the purposes of register and administer the user's account; allowing access to the reserved area of the website; manage the electronic shopping cart of the items purchased by the customer. The data will be stored for the duration of the validity of the user account, will be deleted following the request to delete the account and the user will no longer be able to access his reserved area.

Processing of data from the module BILLING AND SHIPPING

In this page are collected all necessary data to complete the online purchase and to inform Amlux where to send the purchased articles: no data or payment related to the user's payment method, credit cards, or other data or information are required or processed to electronic transactions. This data is used for the purposes of issuing mandatory sales documents, to organize shipments and returns of goods, to manage the warranty on the products purchased by the user; to fulfil legal obligations on the registration and conservation of accounting and tax documents. The legal basis for the processing is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures at the request of the interested party, or even the fulfilment of legal obligations that fall to the Data Controller. The data will be stored for the duration of the validity of the contractual relationship and in compliance with the mandatory times specified by law, for example for the storage of tax and accounting documents.

Processing of data for the subscription to the NEWSLETTER

The user can voluntarily subscribe to the periodic newsletter that Amlux sends to its subscribers with communications of technical and advertising information, updates on products and services, discounts and promotions. Registration is optional, the legal basis is the free and specific consent of the user. The link to unsubscribe is always present in the newsletter messages: the process is automatic, and the removal of the newsletter is immediate. It is also possible to revoke consent by writing a specific request to the e-mail address on the site on the Contact page, specifying the request for cancellation from the newsletter: the data will be deleted within thirty days of the cancellation request

Processing based on the consent of the interested party

In compliance with current legislation, the consent of the interested parties is requested through the initial banner for optional analysis and tracking, profiling and marketing cookies; furthermore, specific consent is requested for other ancillary and non-mandatory processing by filling in the forms on the pages of the site, where the user can consent to the processing for the purposes explained in the short information text that appears before sending and which refers to this extended information.

With your free and specific consent, we may use the data to transmit commercial and/or promotional information, send advertising material or carry out direct sales activities or interactive commercial communications on products, services and other activities of the Owner or third parties, or carry out market research. We may, for example, examine and analyse, also by automated systems, your preferences and the ways in which you interact with us, the information collected by cookies or provided when you register for the services offered by the site, your interest in the communications and newsletters we will send you, how to use our site and interest in our social channels. We may enrich the Users' profile with statistical information that we may acquire lawfully and freely from other sources, for example those published by them on their social profiles, in relation to the area of ​​residence (such as, for example, demographic information, geo-referencing data, etc.) or relating to the electronic tools used to interact with the site.

Processing of data collected through social media

On the site there are links to visit the pages of our profiles on the various social media such as Facebook, YouTube, Instagram and others, or to view images and videos or other content found in our profiles on these social media. The use of these buttons and features leads the user to interact with the web services offered by third-party sites and involves the exchange of information with such sites; the management of information and how to delete it is regulated by third parties. For example, when the link to our profile on a third-party site such as Facebook or others is visited on the site, the browser or app, as appropriate, will establish a direct link to the third-party site ("Social Plug- in") and will then transmit the data directly to the third-party domain.

For example, if the user arrives on this site by clicking on a link present in Social Media, or visits this site while logged in to his Social profile, he may have already consented to the use of cookies conveyed through Social Media and the collection and the use of information obtained from third parties through the plugin is regulated by the third parties who manage these social networks, to which please refer.

Furthermore, our site may offer you the possibility of completing the request and/or registration forms using the authentication process via Social Media; in this case, if you decide to use authentication methods via Social Media, we will be able to access some data (for example name, surname, public profile photo, e-mail) that you have entered into your account based on the conditions of use of Social Media Average and according to your specific privacy settings that you have decided for your profile.

Link to other sites

On the pages of the site there are links to visit other third-party websites, with which the user is redirected to the third-party site effectively leaving our site. The use of these buttons and features leads the user to interact with the web services offered by third-party sited and involves the exchange of information with such sites; therefore, the management of information and how to delete it is regulated by third parties. The user is invited to obtain further information from other third-party sites regarding the processing of its data.

Cookie

Cookies (hereinafter "cookie") are small files that are saved on the user's device while browsing the website, are intended to collect information on the user's navigation of the website and can be retransmitted or reused in occasion of subsequent visits.

Cookies have different characteristics and may be necessary for navigation of the site or optional for different purposes of analysis and tracking of visitors, marketing and user profiling. They can be transmitted either by the owner of this site (so-called first-party cookies) or from other sites (so-called third-party cookies) because web tools provided by third parties are incorporated into our site.

There are other technologies such as pixel tags, web bugs, web storage and other similar files and technologies that can perform the same functions as cookies, in the Cookie Policy we also use the term "cookies" for all these similar technologies.

Our Cookie Policy can be read here.

Treatment and conservation method

The processing is carried out only by authorized personnel authorized and trained by the Data Controller, through manual and IT procedures in paper and digital archives and with the protection of adequate security measures aimed at preventing the loss, destruction, alteration of data and access unauthorized to the data.

The processing may include an automated profiling decision-making process, carried out in accordance with what is indicated in the GDPR art. 22, par. 1 and 4.

To satisfy the different processing purposes, the Data Controller may communicate or transmit the personal data of interested parties to third parties in the categories listed below:

• subjects identified by law;
• companies that provide banking services for the e-commerce platform and for the management of payments;
• companies or professionals who provide services for the provision and management of the website and for the management of the Data Controller's information system;
• companies or other entities for shipping and transport services of purchased or returned goods;
• subjects who provide customer assistance activities;
• companies, professionals, consultants to support our activities.

These third parties will process the data received as independent data controllers, except in the case in which our managers have been designated for the processing of their specific competence: the information on the list of managers may be provided to the interested parties in the exercise of their rights provided for by current legislation.

The data transmitted by Users will not be disclosed in any way and will not be transferred outside Europe; with the specific consent of Users regarding their choices on optional cookies, some of the data collected by cookies may be transmitted to the United States (USA), considered an "adequate country" for the purposes of data protection according to community legislation.

In general, the data are kept for the time necessary for the processing purposes, subject to any retention times required by laws or regulations applicable to the data processed; the data processed on the basis of consent are stored until the user withdraws consent, or until our processing purposes have been exhausted.

Exercise of the rights of the data subject

Except for the limitations set by the same regulation, the interested subject could exercise at any time the following rights in accordance to articles from 15 to 22 of GDPR. To exercise their rights, the interested party must contact the Data Controller using the contact details indicated on this page. The interested party can also lodge a complaint, within the established terms and methods, with the Guarantor Authority for the protection of personal data: for further information see the website https://www.gpdp.it/web/garante-privacy-en/home_en.

Right of Access – GDPR art. 15

The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, in this case, to obtain access to the personal data and the following information:

a) purchase of treatment;

b) categories of personal data;

c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organizations and, in this case, the existence of adequate guarantees;

d) where possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;

e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing;

f) he right to lodge a complaint with a supervisory authority;

g) if the data are not collected from the interested party, all available information on their origin;

h) he existence of an automated decision-making process, including profiling, which produces legal effects concerning him or her or which significantly affects him or her in a similar way and, at least in such cases, have significant information on the logic used, as well as the importance and foreseen consequences for the interested party.

Right of rectification – GDPR art. 16

The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay.

Right of cancellation – GDPR art. 17

The interested party has the right to obtain from the data controller the deletion of personal data concerning him or her without unjustified delay, the data controller has the obligation to delete the personal data without unjustified delay, if one of the following reasons exists:

a) the personal data are no longer necessary in relation to the purposes for which they were collected or processed;
b) the interested party withdraws consent to the processing and there is no other legal basis for the processing;
c) the interested party objects to the processing, and there is no overriding legitimate reason for the processing;

d) the personal data have been processed unlawfully;

e) the personal data must be deleted to comply with a legal obligation under European Union law or the law of the Member State to which the Data Controller is subject;

Rights to limit processing – GDPR art. 18

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

a) the interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited;

c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court;

d) the interested party has objected to the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Notification Obbligation – GDPR art. 19

In the event of rectification or deletion of personal data or limitation of processing, the data controller shall communicate to each of the recipients to whom the personal data have been transmitted any rectifications or deletions or limitations of processing carried out pursuant to Article 16, of the article 17 par. 1, of article 18, unless this proves impossible or involves a disproportionate effort.

Right to data portability – GDPR art. 20

If can be done from a technical point of view and if possible in compliance with the law, the interested party has the right to request the portability of the data, to receive them in a structured, commonly used and machine-readable format, has the right to transmit such data to another data controller without impediments from the Data Controller to whom it was provided, if the processing is based on consent or a contract and is carried out by automated means.

Right of opposition – GDPR art. 21

The interested party has the right to oppose at any time to the processing of personal data concerning him/her based on the legitimate interest of the owner, including profiling. The interested party has the right to oppose at any time to the processing of personal data concerning him or her for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.

Automated decision making, including profiling – GDPR art. 22

The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, except where the decision:

a) is necessary for the conclusion or execution of a contract between the interested party and a

data controller;

b) is authorized by Union or Member State law to which the data controller is subject, which also specifies adequate measures to protect the rights, freedoms and legitimate interests of the interested party;

c) is based on the explicit consent of the interested party.

In the cases referred to in letters a), c), the Data Controller implements adequate measures to protect the rights and freedoms of the interested party, at least the right to obtain human intervention on the part of the data controller, to express one's opinion and to contest the decision.

Policy update

This information regulates the methods of processing of personal data by the Owner through this site. The possible entry into force of new sector regulations, as well as the constant examination and updating of user services, could lead to the need to change these methods.

This information may be subject to changes and updates in the event of changes to the purposes and methods of data processing. In case of modifications, the protection of your rights is always guaranteed; if changes are made with future limitation of the guarantees to protect your data or your rights, before the processing of your data begins according to the new methods you will be informed through the contacts you have provided us and you will be guaranteed the right to unsubscribe from your account or to modify your consents and preferences.

However, it is possible that our policy may changes over time and, therefore, we invite the user to periodically consult this information.

Last update: May 2024