INFORMATION ON THE PROCESSING OF PERSONAL DATA

IDENTITY OF THE DATA CONTROLLER

Hiro s.r.l.

+ informations

PURPOSE

  1. Contractual purposes;
  2. Direct marketing purpose;
+ informations

LEGAL BASIS

  1. Data processing for complying with contractual obligations;
  2. Legitimate interest and legislation;
+ informations

RECIPIENTS OR CATEGORIES OF RECIPIENTS

  1. Hosting service providers;
  2. Providers of marketing and advertising services;
+ informations

TRANSFER OF DATA TO THIRD COUNTRIES

  • Ireland
  • USA
+ informations

RIGHTS OF THE DATA SUBJECT

Access, rectification, cancellation of data and other rights set out in detail in the informative extended

+ informations

EXTENDED INFORMATION

You can consult the extended information with detailed information at the following link:

click here

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

Identity: Hiro S.r.l.
Address: Badia Calavena (VR) Italy, Via dell'artigianato 6/8
Telephone: 0457810719
E-mail address: info@hiro.design

PURPOSE OF THE PROCESSING

  1. a. The Data Controller will process personal data for contractual purposes. Data collection through the contact and registration forms will be used for:
    • creating an account;
    • enabling the purchase and supply of goods and managing the orders;
    • answering assistance requests from users;
  2. The Data Controller will process personal data for direct marketing purposes by sending electronic communications, solely by using the e-mail addresses collected through the online forms and limited to the direct marketing of its own products or of services similar to those purchased or subscribed to.

LEGAL BASIS OF THE PROCESSING

  1. Data processing for complying with contractual obligations.
    Users' data will be processed for the purposes of implementing the contract which governs the use of the Telematics Platform or marketplace www.hiro.design and for the purchase of goods and services published thereon. The data will be processed for the time strictly necessary for providing the services and will be deleted at the end of the contract and in any case when the data subject removes his/her account. Transmission in this sense is necessary in order to perform the contract and failure to supply these data will make it impossible for the Data Controller to provide the services..
  2. b.
  3. Legitimate interest and legislation.
    In accordance with article 13 paragraph 2 of Directive 2009/136/EC, as well as with reference to Recital (27) of REGULATION 2016/679, the Data Controller may send electronic communications, including newsletters, concerning the direct marketing of products or services similar to those purchased, solely through the use of e-mail addresses collected through the online forms. The data subject  has the right, at any time and free of charge,  to oppose this processing for direct marketing purposes, as specified in the DATA SUBJECT RIGHTS section..

RECIPIENTS OR CATEGORIES OF RECIPIENTS

Recipient: Serverplan s.r.l. - - Communication necessary for contractual purposes

The site hosting service is managed by Serverplan  srl,  Via  G.Leopardi,  22  -  03043  Cassino  (FR)  Italy,  P.IVA  02495250603.  The aforementioned company will process the data of the data subjects in its capacity as data processor, in compliance with the agreement signed between the parties on 26/03/2018.  To find out the methods with which the data processor handles the processing, please visit the privacy policy at the following link: ServerPlan Privacy

Recipient: Hiro s.r.l. - - direct marketing purposes

Marketing services are managed by Hiro srl, p. Iva , Via dell'Artigiato n. 5, Badia Calavena (VR). The aforementioned company will process the data of the data subjects in its capacity as data processor, in compliance with the agreement signed between the parties on 11/09/2017. To find out the methods with which the data processor handles the processing, please visit the privacy policy at the following link: Link privacy.

TRANSFER OF DATA TO THIRD COUNTRIES

The personal data of the data subjects may be transferred to the following country: Ireland, USA.

IThe transfer is authorised by the following adequacy decision approved by the European Commission: "Privacy Shield".

RIGHTS OF THE DATA SUBJECT

As data subject, you have the right:

  1. to be informed of the existence or not of personal data concerning you;
  2. to access the personal data being processed;
  3. to ask for correction should the data we have collected be inaccurate;
  4. to request the integration of your data should they be incomplete;
  5. to ask the Data Controller to delete your data in the cases provided for by Article 17 of Regulation 2016/679, including in case of revocation of consent or if the personal data processed are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  6. to obtain the limitation of the processing pursuant to Article 18 of Regulation 2016/679;
  7. to request the portability of your personal data from the Data Controller and to receive this in a structured format, for common and legible use, or to obtain the direct transmission of your personal data to another controller;
  8. to object at any time to the processing of your data;
  9. to not be subjected to a decision based solely on automated processing, including profiling, which produces legal effects which may affect you or which may significantly affect your person;
  10. to lodge a complaint to the Data Protection Authority.

HOW CAN YOU EXERCISE YOUR RIGHTS?

You can exercise your rights at any time by sending an e-mail to the following address: info@hiro.design.

We have a duty to answer your requests within one month of receiving them. This deadline may be extended by two months if necessary, taking into account the complexity and the number of requests received. In case of an extension, you will be informed of the delay and of the reasons.

Should we think we cannot comply with your requests, we will notify you of the reasons for our refusal. In this case you will in any case have the possibility to lodge a complaint with the Data Protection Authority. 

Ultimo aggiornamento: 03/12/2018