Informativa Privacy – Contacts

Privacy Information Notice

Contacts section

 

Triboo S.p.A. with registered office in Viale Sarca 336, 20126 Milan, Italy, tax code, VAT No, and Milan-Monza-Brianza-Lodi Business Registry Enrolment No. IT02387250307 (hereinafter, “Data Controller“), owner of the website www.triboo.com (hereinafter, the “Site“), in its capacity as Data Controller of the personal data of users of the Site (hereinafter, the “Users“) hereby provides its Privacy Notice pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter the “Privacy Code”) and pursuant to art. 13 of Regulation (EU) 2016/679 of 27 April 2016 (hereinafter “Regulation” the Regulation and Privacy Code are defined together as the “Applicable Regulations”).

This Site and any services offered through the Site are reserved to individuals who are eighteen years of age and over. The Data Controller does not collect personal data relating to persons under 18 years of age. At the request of Users, the Data Controller will promptly erase all personal data involuntarily collected and related to persons under 18 years of age.

The Data Controller is committed to ensuring the right to privacy and protection of personal data of its Users. For any further information related to this privacy notice, Users may contact the Data Controller at any time, using the following methods:

  • By sending a registered letter with advice of receipt to the registered office of the Data Controller (viale Sarca 336, Edificio 16, 20126 Milan);
  • By sending an e-mail to the address triboospa@legalmail.it
  • By sending a fax to the number 02/64741491
  • Users can also contact the Data Protection Officer (DPO) of the Data Controller, whose e-mail contact is provided below: lapo.curinigalletti@triboo.it.
  1. Purpose of the Processing

The personal data of Users will be processed lawfully by the Data Controller pursuant to art. 6 of the Regulation for the following processing purpose:

  1. to process the User’s request: The personal data of Users are collected and processed by the Data Controller for the sole purpose of processing their request. The data of the User collected by the Data Controller for this purpose include: their name, surname, email address, telephone number, and any personal information of the User that may be voluntarily provided in the “Message” section. No other processing will be carried out by the Data Controller in relation to the personal data of Users. Notwithstanding the provisions elsewhere in this privacy notice, under no circumstances shall the Data Controller allow access to the personal data of the Users by other Users and/or third parties.
  1. administrative-accounting purposes, or to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and functional activities required to fulfil contractual and pre-contractual obligations;
  1. legal obligations, i.e. to comply with obligations imposed by a law, authority, regulation or Community legislation;

The provision of personal data for the above indicated processing purposes is optional but necessary, since failure to provide them will make it impossible for the User to submit the request to the Data Controller.

The personal data that are necessary to pursue the processing purposes described in paragraph 1 herein, are indicated with an asterisk on the request form.

 

  1. 2. Data processing procedures and retention times

The Data Controller shall process the personal data of Users using manual and electronic instruments, with logics which are strictly related to the aforementioned purposes, in a way which guarantees the security and confidentiality of such data.

The personal data of the Users shall be retained for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or however as necessary for the protection in civil law of the interests of both the Users and the Data Controller.

 

  1. Methods of communication and dissemination of data

The personal data of the Users may be disclosed to the employees and / or collaborators of the Data Controller in charge of managing the Site and the requests of the Users. Such subjects, who have been duly informed by the Data Controller under art. 29 of the Regulation, will process the User’s data exclusively for the purposes indicated in this privacy notice and in compliance with the provisions of the Applicable Regulations.

The personal data of the Users may also be disclosed to third parties who may process personal data on behalf of the Data Controller as “External Data Processors“, such as, for example, IT and logistic service providers functional to the operations of the Website, outsourcing or cloud computing service providers, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Data Controller, submitting a request to the Data Controller as indicated in paragraph 4 below.

 

  1. Rights of Data Subjects

Users may exercise their rights granted by the Applicable Regulations by contacting the Data Controller in the following ways:

  • By sending a registered letter with advice of receipt to the registered office of the Data Controller (viale Sarca 336, Edificio 16, 20126 Milan);
  • By sending an e-mail to the address triboospa@legalmail.it
  • By sending a fax to the number 02/64741491

 

In accordance with the Applicable Regulations, the Data Controller hereby declares that Users are entitled to obtain information (i) on the origin of the personal data; (ii) the purpose and processing methods; (iii) the logic used in the case where the data is processed using electronic equipment; (iv) the personal data of the Data Controller and data processors; (v) the persons in charge and the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data.

Users are always entitled to obtain:

  1. a) access, updating, rectification or, where interested therein, integration of the data;
  2. b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
  3. c) certification to the effect that the operations as per items a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected.

Furthermore, Users have:

  1. a) the right to withdraw consent at any time, if the processing is based on their consent;
  2. b) the right to data portability (right to receive all personal data concerning them in a structured format, commonly used and readable by automatic devices), the right to limit the processing of personal data and the right to be forgotten);
  3. c) the right to oppose:
  4. partially or completely, for legitimate reasons, the processing of personal data, despite them being relevant to the purpose of the collection;
  5. d) if they believe that the processing that concerns them violates the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the one in which they work or in the one in which the alleged violation has occurred).The Italian Supervisory Authority is the Guarantor for the protection of personal data, with headquarters in Piazza di Monte Citorio no.121, 00186 – Rome (http: //www.garanteprivacy.it/).

The Data Controller is not responsible for updating all the links that can be viewed in this Privacy Notice, therefore whenever a link is not functional and/ or updated, Users hereby acknowledge and accept that they must always refer to the document and/or section of the websites referred to by this link.