Privacy Policy

User privacy is very important to Elah-Dufour. For this reason, Elah Dufour, in her capacity as Data Controller of personal data, undertakes to strictly comply with the current legislation on the subject, starting with EU Regulation 2016/679 and Legislative Decree n. 101/2018.

Our company policy on the protection of personal data is outlined below with regard to the use of this website.

1. PURPOSE OF THE TREATMENT
Personal data is collected and used for the following purposes:

(a) for registration on the website and for the purposes related to the use of the website, as well as for the use of the services reserved for registered users including, by way of example and not limited to, the possibility of receiving a Newsletter that communicates commercial initiatives and / or prize competitions, or to take advantage of customer assistance services.
The legal basis for this processing is the will of the user which manifests itself through browsing the website or with reference to more specific functions with specific consent expressed at the time of registration aimed at receiving the Newsletter and / or customer service.

(b) marketing purposes including sending advertising material, commercial communication by post, by phone calls with operator, e-mail, text message, calls without an operator (if the mobile number has been provided), through the website (possibly customized), platforms social media or to participate in surveys.
The legal basis for this treatment is the consent given by the user, optional and revocable at any time. In relation to this purpose, your data will be kept until the consent is revoked and, in any case, for no more than two years from their release.

2. MODALITIES AND DURATION OF TREATMENT
The processing of personal data is carried out mainly using electronic procedures and media for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, no later than five years (two if used for marketing purposes) and, always , in compliance with the principles of lawfulness, correctness, non-excess and pertinence provided for by current privacy legislation.

3. TYPE OF DATA PROCESSED
The personal data that will be processed are:

• data collected when registering on the website;
• data collected at the time of registration in specific areas of the website instrumental to the use of specific functions and to be able to benefit from the advantages and/or services reserved for registered users.

As regards the cookies on this website, please refer to the specific information on the website.

4. COMPULSORY OR OPTIONAL NATURE OF DATA PROVISION
The personal data required for registration on the website identified with an asterisk in the registration forms are necessary to allow registration, the others can be optionally communicated. The mobile phone number, if communicated, may be used for certain specific purposes such as, by way of example but not limited to, for contact via SMS and / or other instant messaging systems in the context of prize events, competitions, games, surveys.

5. SUBJECTS WHO MAY BECOME AWARE OF THE DATA
Personal data may be processed by our specifically appointed internal staff. Furthermore, for certain treatments instrumental to the pursuit of certain purposes, the data may be processed by external companies as data processors. Personal data will in no case be disclosed.

6. RIGHTS OF THE INTERESTED PARTY
The interested party can ask the owner for access to data concerning him/her, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as opposition to processing or cancellation, for reasons related to his/her particular situation, in the hypothesis of legitimate interest of the owner. Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the interested party has the right to receive the data in a structured format, as well as, if technically feasible, to transmit them to another holder without impediments. The interested party has the right to revoke the consent given at any time in relation to the processing for marketing purposes.

7. DATA CONTROLLER AND DATA PROCESSORS
Data Controller is: Elah Dufour with head office in Strada Serravalle 73.Novi Ligure (AL) 15067. It is possible to request from the Data Controller a list of the persons appointed as Data Processors.
Any communication or request for information can be sent to the following e-mail address: privacy@elah-dufour.it