PRIVACY POLICY

ELI S.r.l. (hereinafter also ELI) with headquarters in Via Gobetti, 118, 62012 - Civitanova Marche (MC) – Italy, Taxpayer - VAT number 01941830430

Controller's e-mail address: privacy@eligroup.it

Personal Data Protection Officer

Eli S.r.l. has designated a Data Protection Officer (DPO) who can be contacted at: dpo@eligroup.it.

Types of Data Collected

• Browsing Data: data collected when visiting and consulting the website. The computer systems and software procedures used to operate the website acquire, in the course of their normal operation, some personal data the transmission of which is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified.

The information that may be collected include IP addresses, the type of browser or operating system used, addresses in URI (Uniform Resource Identifier) notation, the domain name and addresses of the Web sites from which the referring or exit was made (referring/exit pages), the time the request was made to the server, the method used and information on the response obtained, further information on the user's browsing (see also the section on cookies) and other parameters relating to the user's operating system and computer environment. This same data could also be used to identify and ascertain liability in the event of any computer crimes against the website.

Information may also be collected through cookies or other tracking technologies. For more information on your data processing through such technologies, please refer to the Cookie Policy.

• Personal Data: first name, last name, date of birth.

• Contact Data: phone number, e-mail address.

• Authentication Data: e-mail address, password.

• Shipping Information: shipping address, phone number, e-mail address.

• Billing and Tax-Free Information: billing address, full name, company name, taxpayer number, VAT number, nationality.

• Information Related to Purchases Made: item, size and color, price, date on which the sale takes place.

• Data Related to the Customer's Profile and Preferences: data related to purchasing habits and interests.

• Data Related to Geographical Location: IP address.

Purposes, Legal Basis for Processing and Data Retention Time

Purpose	Legal Basis	Retention Time
To allow browsing on the website and ensure its security	Performance of a service requested by the data subject pursuant to Article 6.1. letter b)	For data retention times related to cookies, please refer to the specific cookie policy.
Registration of users to the website and use of services reserved for registered users. Such registration may take place by filling in a data collection form on the website.	Performance of a contract to which the data subject is a party or pre-contractual measures at the data subject's request, pursuant to Article 6.1 letter b) of the GDPR	Personal data collected for purposes of registration to the website will be kept until you request to revoke your registration
Finalization and implementation of sales contracts and after-sales activities, such as the management of administrative, tax and accounting requirements imposed by law, as well as support services on payments, shipments, returns and refunds.	Performance of a contract to which the data subject is a party or pre-contractual measures at the request of the data subject, pursuant to Article 6.1 letter b) of the GDPR	Data will be retained for as long as necessary for the performance of the contract, i.e., the provision of statutory or contractual guarantees, and following termination of the contract no longer than 10 years unless further retention periods are provided for by applicable legislation
	Need to fulfill obligations under national or supranational legislation to which the data controller is subject pursuant to Article 6.1 letter c) of the GDPR, such as fulfilling tax and accounting obligations.
Prevention of abuse and fraud	Legitimate interest of the data controller pursuant to Article 6.1 letter f)	Data collected through the website will be retained for no more than 180 days
Establishment, exercise or defense of a right in court and extrajudicial debt collection	Legitimate interest of the data controller in accordance with Article 6.1. letter f)	Personal data will be retained for the duration of the debt collection action and in the case of judicial litigation, for the duration of the litigation, until the time limits for appeal actions expire.
Marketing activities, such as sending communications of a commercial nature about products and services (news, new arrivals, exclusives, offers and promotions) and conducting market research and satisfaction surveys in order to improve services and the relationship with users	Free, specific, informed, unambiguous and revocable consent of the data subject pursuant to Article 6.1 letter a) of the GDPR	Personal data collected for marketing purposes will be kept until you request to revoke your registration to the website or until you revoke your consent to the processing of personal data. Personal data pertaining to purchase details processed for marketing purposes will be retained for 24 months after their registration. Upon expiration of the above retention periods, the data will be automatically deleted or permanently and irreversibly anonymized.

Data Processing Modes

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

Data processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.

Provision of Personal Data

The provision of data for the achievement of the purposes based on the conditions of lawfulness referred to in Article 6.1 letters b), c) and f) of the GDPR is necessary in order to pursue the aforementioned purposes.

The provision of data for the purposes for which the legal basis of consent is provided under Article 6.1 letter a) of the GDPR is purely optional, and failure to provide the data or to give such consent will preclude the pursuit of the related purposes of profiling, marketing and data enrichment but will not affect your ability to register on the website or to take advantage of the services rendered on a contractual basis.

Persons Authorized to Process Data

In addition to the Data Controller, in some cases, additional individuals involved in the organization of this Website (administrative, sales, marketing, legal, system administrator personnel) who are expressly authorized to process and who have received appropriate operational instructions may have access to the Personal Data.

Recipients of the Data

The Personal Data may be communicated, also in performing legal obligations, to subjects operating as autonomous Data Controllers (e.g. public authorities, Law Enforcement or professional firms) and/or processed by subjects acting on behalf of the Data Controller and who have been specifically appointed as Data Controllers pursuant to Article 28 of the GDPR (e.g. third-party technical services, postal couriers, hosting providers, IT companies, communication agencies).

The updated list of Data Processors can always be requested from the Data Controller via the e-mail address privacy@enterprise-japan.com.

Transfer of Data

The User's Personal Data may be transferred to a country other than the country in which the User is located.

Any transfers of Personal Data are made through appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses (“SCC”) approved by the European Commission or others.

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller by contacting ELI by e-mail at privacy@eligroup.it , the User may request from ELI access to the data concerning him/her, their deletion, rectification of inaccurate data, integration of incomplete data, restriction of processing in the cases provided for in Article 18 of the GDPR, as well as opposition to processing in cases of legitimate interest of the Company.

In addition, where the processing is based on consent or contract and is carried out by automated means, the user has the right to receive his or her personal data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit it to another controller without hindrance.

The user has the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing.

Finally, the User has the right to lodge a complaint with the competent supervisory authority in the Member State where he or she normally resides or works or the State where the alleged breach occurred.

The User may contact ELI's DPO by sending an email to dpo@eligroup.it .

Users in California, Virginia, Colorado, Utah, Connecticut

You can consult the information and rights granted to citizens of the following States in the specific information sections available on the website.

ELI allows you to opt-out with respect to permission to share collected data with third parties through the specific “Do Not Sell My Data” commands.

Cookie Policy

This Web Site makes use of tracking tools. To learn more, the User may consult the Cookie Policy.