Information on the processing of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). In force from 14/04/2022.

INTRODUCTION

This information notice takes into account the provisions of the GDPR and the Privacy Code (Legislative Decree No. 196 of 30 June 2003). The document has also been drafted in accordance with the Privacy Authority Guidelines (particularly the anti-spam Guidelines issued by the Privacy Authority on 4 July 2013). Data Controller: TIPS S.r.l.u. Chamber of Commerce, Industry, Crafts and Agriculture of Teramo – REA Number TE-145314 – Share Capital €10,300 Fully Paid – Via Piane, 116 – 64034 Castiglione M.R. (TE) – Tel: (+39) 085 4472025 – Email: info@3dprn.com – VAT No. 01319140420 – Tax Code and company register no.: 01319140420 Website to which this privacy policy refers: https://tipsmarketing.it/ (Website). The Data Controller has not appointed a DPO. Therefore, you may send any request for information directly to the Data Controller.

GENERAL INFORMATION

This document describes how the Data Controller processes your personal data provided on the Website. The main processing operations of your personal data are described below. In particular, the legal basis for processing, whether provision is mandatory and the consequences of failing to provide personal data are explained. To best describe your rights, where necessary, we have specified whether and when a specific processing of personal data is not carried out. On the Website you have the option to enter personal data of third parties. In this case, you guarantee that you have obtained consent from these parties for entering this personal data. Therefore, you undertake to indemnify and hold the Data Controller harmless from any liability.

Registration on the Website

The Website does not offer the possibility of registration. Therefore, the Data Controller does not process your personal data for this purpose.

Purchases on the Website

Purchases cannot be made on the Website. Therefore, your personal data will not be processed for this purpose. The Data Controller does not process user data to send “reminder” emails for purchasing products and/or services of the Controller.

Responding to your requests

Your data will be processed to respond to your requests for information. Provision is optional, but your refusal will make it impossible for the Data Controller to answer your questions. The legal basis for processing is the legitimate interest of the Data Controller in following up on user requests. This legitimate interest is equivalent to the user’s interest in receiving responses to communications sent to the Data Controller.

General Marketing

With your consent, the Data Controller may process the personal data you provide in order to send you advertising material and/or newsletters relating to its own products or those of third parties. The legal basis for this processing is your consent. Provision of personal data for this purpose is purely optional. Failure to consent to data processing for marketing purposes will prevent you from receiving advertising material relating to products/services of the Data Controller and/or third parties, as well as preventing the Data Controller from conducting market surveys, including those aimed at assessing user satisfaction levels, and from sending you newsletters. These communications will be sent to the email address and/or telephone number you provided on the Website.

Profiling

With your consent, the Data Controller may process your personal data for profiling purposes, i.e. to analyse your consumption choices through the detection of the type and frequency of purchases you make, in order to send you advertising material and/or newsletters relating to its own products or those of third parties, of specific interest to you. The legal basis for this processing is your consent. Provision of data for this purpose is purely optional. Failure to consent to the processing of your personal data for profiling purposes will prevent the Data Controller from developing your commercial profile through the detection of your purchasing choices and habits, and from sending you advertising material relating to products of the Data Controller and/or third parties, of specific interest to you. These communications will be sent to your email address and/or telephone number.

Data Transfer

For sending promotional communications, with your explicit consent, your personal data may be transferred to “third parties”. The legal basis for processing is your consent. Provision of personal data for this purpose is purely optional. Failure to consent to the transfer will prevent the transfer of your personal data to third parties for advertising purposes.

Geolocation

When accessing the Website, you may receive a notification on your device (fixed and/or mobile) that will give you the option to allow or not allow the identification of that device (so-called geo-location). You may freely consent to or refuse this setting, without this resulting in substantial changes to the functionality of the Website. You may change your geolocation settings at any time through your device settings. The legal basis for processing consists of the legitimate interest of the Data Controller in providing services relevant to the user’s location. This legitimate interest is equal to the user’s interest in receiving services as relevant as possible to their location.

Communication of personal data

In the course of its ordinary activities, the Data Controller may communicate your personal data to certain categories of parties. In Article 2 you can find the list of parties to whom the Data Controller communicates your personal data. To facilitate the protection of your rights, Article 2 may specify in some cases when your data is not communicated to third parties. “Communication” of personal data to third parties is different from “transfer” (regulated in the preceding point). In fact, in communication, the third party to whom the data is transmitted can use it only for the specific purposes described in the relationship with the Data Controller. In transfer, however, the third party becomes an autonomous Data Controller of the personal data. Furthermore, your consent is always required to transfer your personal data to third parties. Notwithstanding the foregoing, it is understood that the Data Controller may in any case use your personal data to properly comply with obligations provided for by laws in force.

SPECIFIC PRIVACY INFORMATION

Art. 1 Processing Methods

1.1 The processing of your personal data will mainly be carried out with the aid of electronic or automated means, according to methods and with tools suitable to ensure their security and confidentiality in accordance with the GDPR. If the automatic chatbot service is operational, your personal data will also be processed to enable this service, through which the user can contact and be contacted by the Data Controller, subject to consent. The legal basis is the legitimate interest of the Data Controller in responding to user requests via the chatbot service. This legitimate interest can be considered equivalent to the data subject’s interest in using the automatic chatbot service. 1.2 The information acquired and the processing methods will be relevant and not excessive in relation to the type of services provided. Your data will also be managed and protected in secure IT environments appropriate to the circumstances. 1.3 “Special categories of data” are not processed through the Website. Special categories of data are those that may reveal racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, health status and sexual life. 1.4 Judicial data is not processed through the Website.

Art. 2 Communication of personal data

The Data Controller may communicate your personal data to specific categories of parties. The following are the parties to whom the Data Controller reserves the right to communicate your data:

  • The Data Controller may communicate your personal data to all those parties (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions.
  • Your personal data may also be communicated to all public and/or private parties, natural and/or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Labour Chambers and Offices, etc.), where communication is necessary or functional for the correct fulfilment of obligations arising from the law.
  • The Data Controller makes use of employees and/or collaborators in any capacity. For the correct functioning of the Website, the Data Controller may communicate your personal data to these employees and/or collaborators.
  • In its ordinary activity of managing the Website, the Data Controller makes use of companies, consultants or professionals responsible for the installation, maintenance, updating and, in general, the management of the hardware and software of the Data Controller or which the latter uses for the provision of its services. Therefore, only with reference to these purposes, your data may also be processed by these parties.
  • For sending its communications, the Data Controller makes use of external companies responsible for sending this type of communication (CRM platforms). Your personal data (in particular email) may therefore be communicated to these companies.
  • For customer assistance purposes, the Data Controller makes use of one or more companies responsible for providing customer care services. Only for this purpose, your personal data may be communicated to these companies.

The Data Controller reserves the right to modify the above list based on its ordinary operations. Therefore, you are invited to access this information notice regularly to check to which parties the Data Controller communicates your personal data.

Art. 3 Retention of personal data

3.1 This article describes how long the Data Controller reserves the right to retain your personal data.

    • Your personal data will be retained only for the time necessary to ensure the correct provision of services offered through the Website.
    • For marketing purposes, personal data will be retained until any withdrawal of consent. For inactive users, personal data will be deleted one year after the last email was possibly viewed.
    • For customer care purposes, data will be deleted once the assistance service is completed.
  • For the purpose of executing the sales contract, data will be retained for 10 years from the date of receipt of the purchase order. This is to allow the Data Controller to exercise its right of defence and to demonstrate that it has correctly executed the contract.
  • As provided for in Article 2220 of the Civil Code, invoices, as well as all accounting records in general, are retained for a minimum period of ten years from the date of registration, so that they can be presented in the event of inspection.

3.2 Notwithstanding the provisions of Article 3.1, the Data Controller may retain your personal data for the time required by specific regulations, as amended from time to time.

Art. 4 Transfer of personal data

4.1 The Data Controller is based within the European Union. Therefore, the processing of your data is secure from a regulatory point of view as it is governed by the GDPR. Where the transfer of your personal data takes place to a non-EU country for which the European Commission has expressed an adequacy decision, the transfer is in any case considered secure from a regulatory point of view. This Article 4.1 indicates from time to time the countries to which your personal data may possibly be transferred and where the European Commission has expressed an adequacy decision. Users are therefore invited to access this article regularly to verify whether the transfer of their personal data takes place to a country with these characteristics. 4.2 Notwithstanding the provisions of Article 4.1, your data may also be transferred to non-EU countries for which the European Commission has not expressed an adequacy decision. You are therefore invited to view this Article 4.2 regularly to ascertain to which of these countries your data is possibly transferred. To allow the correct functionality of the Website, your personal data may be transferred to the U.S.A. In these cases, the Data Controller will adopt all appropriate contractual measures to ensure an adequate level of protection of personal data, including, among others, the Standard Contractual Clauses approved by the European Commission on 4 June 2021. 4.3 In this article, the Data Controller indicates the countries to which it possibly specifically directs its activities. This circumstance may imply the application of the legislation of the country concerned, together with that of the GDPR. At the user’s request, the Data Controller will apply to the processing of personal data the possibly more favourable legislation provided for by the user’s national legislation.

Art. 5. Data Subject Rights

Pursuant to Article 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:

    • request access to your personal data from the Data Controller and the rectification or erasure thereof or restriction of processing concerning you or to object to their processing, in addition to the right to data portability
    • withdraw consent at any time without prejudice to the lawfulness of processing based on consent given before the withdrawal
    • lodge a complaint with a supervisory authority (e.g.: the Data Protection Authority).

The above rights may be exercised by submitting a request without formalities to the contacts indicated in the Introduction.

Art. 6. Amendments and Miscellaneous

The Data Controller reserves the right to make changes to this information notice at any time, giving appropriate notice to users of the Website and in any case ensuring adequate and similar protection of personal data. In order to view any changes, you are invited to consult this information notice regularly. In the event of substantial changes to this privacy policy, the Data Controller may also communicate them via email.