Privacy Policy

Information on the processing of personal data. In force since 20/06/2023

 

PREMISE

This information takes into account what is indicated by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and by the Privacy Code (Legislative Decree 30 June 2003 n. 196). The document was also drawn up on the basis of the guidelines of the Privacy Guarantor (especially the guidelines for contrasting the spam issued by Privacy Guarantor on July 4, 2013).

 

The data controller: Evilion Bikes srl

Site to which this Privacy Policy refers: https: //Evolutionbikes.com/ (Site).

The data controller did not apply a DPO (Data Protection Officer). Therefore, you can send any request for information directly to the data controller.

 

General information

This document describes how the data controller deals with his personal data awarded on the site.

The main treatments of your personal data are described below. In particular, the legal basis of the processing is explained, if the transfer is mandatory and the consequences of the failure to provide personal data. To better describe his rights, if necessary, we specified whether and when a certain processing of personal data is not carried out. On the site you have the opportunity to enter personal data of third parties. In this case, she guarantees that she has obtained the consent of these subjects to the insertion of these personal data. Therefore, she undertakes to Manlevare and keep the data controller from any responsibility unscathed.

 

Registration on the site

The information and data requested in the event of registration will be used to allow it both to access the reserved area of ​​the site and to take advantage of the online services offered by the data controller to registered users. The legal basis of the treatment is the need for the data controller to carry out pre -contractual measures adopted at the request of the interested party. The provision of data is optional. However, its possible refusal to provide data will involve the impossibility of registering on the site.

 

Purchases on the site

Your personal data will be processed to allow you to make purchases on the site. In the event of making an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the operations related to the same (and, if necessary on the basis of the sector legislation, to fulfill tax obligations). The legal basis of the treatment is the obligation of the data controller to carry out the contract with the interested party or to fulfill legal obligations. Regardless of the above (and therefore from its consent), the data controller may process its data of the so -called "Soft-Spam", governed by art. 130 of the Privacy Code. This means that limited to the email you provide in the context of a purchase through the site, the data controller will deal with the email to allow the direct offer by similar products/services, provided that you do not oppose this treatment in methods provided for by this information. The legal basis of the treatment is the legitimate interest of the data controller to send this type of communication. This legitimate interest can be considered equivalent to the interest of the interested party to receive communications of "Soft-Spam". The data controller can send emails to remind the user to complete a purchase. The legal basis of this treatment is the legitimate interest of the data controller to send this type of communications.

 

Respond to your requests

His data will be processed to respond to your requests for information. The transfer is optional, but his refusal will result in the impossibility for the owner of the treatment to answer his questions. The legal basis of the treatment is the legitimate interest of the data controller to follow up on the user's requests. This legitimate interest is equivalent to the user's interest to receive response to communications sent to the data controller.

 

Generic marketing

After you consent, the data controller may process the personal data you provide you in order to send you advertising material and/or newsletters relating to products or third parties. The legal basis of this treatment is its consent. The provision of personal data for this purpose is merely optional. Failure to process data for marketing purposes will result in the impossibility for you to receive advertising material relating to products/services of the data controller and/or third parties as well as the impossibility for the data controller to carry out market investigations, Also aimed at evaluating the degree of satisfaction of users, as well as sending them newsletters.

 

Profit

After his consent, the data controller may process his personal data for profiling purposes, that is, for the analysis of his consumer choices through the revelation of the type and frequency of purchases he made, in order to send you advertising material e /or newsletters relating to its own products or third parties, of its specific interest. The legal basis of this treatment is its consent. The provision of data for this purpose is merely optional. Failure to consent to the processing of your personal data for profiling purposes will result in impossibility for the data controller to process its commercial profile, through the detection of your choices and purchasing habits as well as to send them advertising material, relating to the owner's products of treatment and/or third parties, of its specific interest.

 

Transfer of data

To send promotional communications, after his explicit consent, his personal data may be transferred to "third". The legal basis of the treatment is its consent. The provision of personal data for this purpose is merely optional. Failure to consent to the sale will result in the impossibility of selling your personal data to third parties for advertising purposes.

 

Geolocation

The site does not implement geolocation tools of the user's IP address.

 

Curriculum vitae

Through the site it is not possible to send curriculum vitae. Therefore, your data will not be processed for these purposes.

 

Reservation of appointments

Third third party booking systems are not active on the site with the data controller. Therefore, your data will not be processed for this purpose. In any case, you can always contact the data controller to the contacts indicated in the epigraph.

 

Communication of personal data

As part of his ordinary activity, the data controller can communicate his personal data to certain categories of subjects. In article 2 You can find the list of subjects to whom the data controller communicates your personal data. To facilitate the protection of his rights, article 2 can specify in some cases when his data is not communicated to third parties.

The "communication" to third parties of the personal data is different from the "sale" (governed to the point that precedes). In fact, in the communication the third to which the data is transmitted can use it only for the specific purposes described in the relationship with the data controller. In the sale, however, the third becomes the owner of the autonomous treatment of the personal data. In addition, his consent is always requested to give in to third parties to third parties.

Without preceding the above, it is understood that the data controller will still be able to use his personal data to give correct fulfillment to the obligations provided for by the laws in force.

 

Specific privacy information

 

Art. 1 Treatment methods

1.1 The processing of your personal data will be mainly carried out with the help of electronic or automated means, according to the methods and with the tools suitable to guarantee its security and confidentiality of personal data. If the automatic chatbot service is operational, your personal data will also be processed to allow the activation of this service, through which the user can contact and be contacted by the data controller, subject to consent. The legal basis is the legitimate interest of the data controller to respond to the user's requests through the chatbot service. This legitimate interest can be considered equivalent to the interest of the interested party to use the automatic chatbot service.

1.2 The information acquired and the methods of the processing will be relevant and not excess of the type of services rendered. Your data will also be managed and protected in secure and adequate IT environments.

1.3 Through the site "special data" are not processed. The particular data are those that can reveal the racial and ethnic origin, religious, philosophical or other beliefs, political opinions, adhesion to parties, unions, associations or religious, philosophical, political or trade union organizations, the state of health and sexual life.

1.4 Through the site, no judicial data are processed.

 

Art. 2 Communication of personal data

The data controller can communicate his personal data to certain categories of subjects. Below are the subjects to whom the data controller reserves the right to communicate his data:

  • The data controller can communicate his personal data to all those subjects (including public authorities) who have access to personal data under regulatory or administrative measures.
  • Your personal data can also be communicated to all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy studies, judicial offices, chambers of commerce, chambers and job offices, etc.) , if the communication is necessary or functional to the correct fulfillment of the obligations deriving from the law.
  • The data controller makes use of employees and/or collaborators in any capacity. For the correct functioning of the site, the data controller can communicate his personal data to these employees and/or collaborators.
  • In its ordinary site management activities, the data controller makes use of companies, consultants or professionals in charge of installation, maintenance, updating and, in general, of the management of hardware and software of the data controller or of which The latter uses for the provision of its services. Therefore, only with reference to these purposes, your data can also be processed by these subjects.
  • To send its communications, the data controller makes use of external companies in charge of sending this type of communications (CRM platforms). Your personal data (in particular the email) can therefore be communicated to these companies.
  • For the purposes of customer assistance, the data controller makes use of one or more companies in charge of providing customer care services. Only for this purpose, your personal data can be communicated to these companies.
  • The buyer's personal data can be communicated to post offices, couriers or shippers in charge of the delivery of the products purchased through the site.

The owner reserves the right to change the above list on the basis of his ordinary operations. Therefore, you are invited to access this information regularly to check which subjects the data controller communicates your personal data.

 

Art. 3 Retention of personal data

 

3.1 This article describes how long the data controller reserves the right to keep his personal data.

  • For marketing purposes, personal data will be kept until any revocation of consent. For inactive users, personal data will be deleted after one year by the sending of the last email that may be viewed.

3.2 Without prejudice to the provisions of article 3.1, the data controller can keep his personal data for the time requested by specific regulations, as modified from time to time.

 

Art. 4 Transfer of personal data

4.1 The data controller is based in a country that has an adequate level of security from the regulatory point of view. If the transfer of your personal data takes place to an non-EU country and for which the European Commission has expressed a judgment of adequacy, the transfer is considered in any case safe from a regulatory point of view. This article 4.1 indicates from time to time the countries in which its personal data can possibly be transferred and where the European Commission has expressed a judgment of adequacy.

  • The user is therefore invited to regularly access this article to check whether the transfer of his personal data takes place to a country with these characteristics.

4.2 Firm what is indicated in article 4.1, its data can also be transferred to non-EU countries and for which the European Commission has not expressed a judgment of adequacy. You are therefore invited to regularly view this article 4.2 to ascertain which of these countries your data are possibly transferred.

4.3 In this article, the data controller indicates the countries where he possibly directs his business specifically. This circumstance may imply the application of the regulations of the reference country, together with that governing the relationship with the user on the basis of what is indicated in the introduction. 

  • At the request of the User, the data controller will apply to the processing of personal data the most favorable legislation provided for by the national legislation of the user himself.

 

 

Art. 5. Rights of the interested party

The data controller informs you that you have the right to:

  • Ask the data controller for access to your personal data and the correction or cancellation of the same or the limitation of the processing concerning it or to oppose their processing, in addition to the right to data portability
  • revoke consent at any time without affecting the lawfulness of the treatment based on the consent given before the revocation
  • propose a complaint to a control authority.

The aforementioned rights can be exercised with a request addressed without formalities to the contacts indicated in the introduction.

 

Art. 6. Changes and Miscellanea

The data controller reserves the right to make changes to this information at any time, giving suitable advertising to the users of the Site and in any case guaranteeing an adequate and similar protection of personal data. In order to view any changes, you are invited to consult this information regularly. In the event of substantial changes to this Privacy Policy, the Data Controller may also communicate by email.