Privacy Policy eShop

Home Privacy Policy eShop

E-COMMERCE PRIVACY MODEL V.1.00.00

Privacy Policy effective from 19.01.2023

Index

  • DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)
  • WEB PAGE MISSION www.shop.almecogroup.com
  • PRINCIPLES
  • SOURCES OF PERSONAL DATA
  • CATEGORIES OF DATA SUBJECTS AND CATEGORIES OF PROCESSED PERSONAL DATA IN E-COMMERCE
  • PURPOSES OF PROCESSING
    • Buyer’s registration request on the website
    • Buyer’s purchase proposal, fulfillment, and execution of the contract
    • Direct marketing
    • Legal obligations
    • Defensive rights
  • CONTACT METHODS FOR MARKETING PURPOSES
  • COOKIES
  • MONITORING OF FORWARDED COMMUNICATIONS
  • DATA RECIPIENTS
  • NATURE OF DATA PROVISION
  • AUTHORIZED DATA PROCESSORS
  • TRANSFER OF PERSONAL DATA TO NON-EU COUNTRIES
  • DATA SUBJECT’S RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY

 

DATA CONTROLLER

ALMECO S.P.A.
Address: Via della Liberazione, 15 – 20098, San Giuliano Milanese (MI)
Phone: +39 02 9889631
Fax: +39 02 98896399
Email: info.it@almecogroup.com; privacy@almecogroup.com
Certified Email (PEC): almeco@registerpec.it

 

 

 

VAT and Tax Code (ITVAT): 00772590154
Share Capital: € 30,000,000 fully paid
R.E.A.: 687991
Chamber of Commerce: Milan
Websites:

DATA PROTECTION OFFICER (DPO)

MICROELL Srl (Contact Person: Francesco Traficante)
Address: Via Mazzini 19b, 21052 Busto Arsizio VA
Email: dpo@almecogroup.com

WEB PAGE MISSION – www.shop.almecogroup.com

The webpage www.shop.almecogroup.com, owned by Almeco S.p.A., is intended exclusively for professional operators, excluding consumers.

Unregistered visitors can browse our product catalog (without viewing prices and availability), explore a gallery of key projects realized using our products, and review the Site’s Terms of Use.

Registered users, on the other hand, gain full access to all Site features, including the ability to submit purchase proposals.

Visitors may have reached this webpage through an online advertisement or an informational/promotional communication, provided they have given specific consent to us or to one of our suppliers (Lead or List Provider) to be contacted for third-party commercial communications, including those related to products and/or services different from those for which consent was given.

For inquiries, you can reach us via the email and phone contacts provided in the Data Controller section.

PRINCIPLES

One of our fundamental objectives is the protection of personal data.

Data is processed lawfully, fairly, and transparently, ensuring it is adequate, relevant, and limited to what is necessary, accurate and, when needed, updated. It is collected for specified, explicit, and legitimate purposes, in accordance with Articles 5 and 6 of the EU General Data Protection Regulation (GDPR) 2016/679, with consent provided where required.

Data is processed securely, ensuring protection against unauthorized or unlawful processing, loss, destruction, or accidental damage through appropriate technical and organizational measures (integrity and confidentiality).

We will inform users in case of substantial changes to this Privacy Policy and related data processing, leaving them free to decide whether to authorize us to process their data for the purposes outlined below.

 

 

CATEGORIES OF PERSONAL DATA PROCESSED IN E-COMMERCE

COMMON DATA:

  • Data provided in the registration form:
    • Buyer’s name
    • Buyer’s tax data (VAT number, Unique Code if applicable)
    • Buyer’s registered office (Country, province, city, address, postal code, phone number)
    • User’s full name and email address
  • Other potential data collected by the website, where applicable:
    • IP address
    • Date and time of registration
    • IMEI and MAC Address
    • Any additional data associated with the device in use
  • Additional data provided by the Buyer and/or User after registration completion:
    • Data entered during the preparation and submission of purchase proposals (e.g., additional shipping addresses, shipping instructions)
    • Data communicated when requesting the deactivation of a User and the potential authorization of a new User
    • Data provided in communications exchanged after the submission of a purchase proposal
  • Interests expressed by the Visitor/User while browsing:
    • Subject to explicit consent (refer to the Cookie Policy)

PURPOSES OF PROCESSING

  1. BUYER’S REGISTRATION REQUEST ON THE WEBSITE

Purpose, Legal Basis of Processing, and Duration

Processing purposes related to managing registration requests on the Website (acceptance/non-acceptance) from professional operators:

  • Sending an email to confirm the registration request and the email address entered in the registration form (double opt-in);
  • Reviewing the Buyer’s and User’s data entered in the registration form and performing any necessary checks;
  • If the registration request is accepted, sending a confirmation email;
  • Retaining log files for the storage and historical record of the acceptance of the Website’s Terms of Use and Privacy Policy.

Legal Basis of Processing:

  • Execution of pre-contractual measures.

Processing Duration and Data Retention Period:

  • In case of non-acceptance of the registration request: Retained only for the period strictly necessary for the proper and complete management of the request; subsequently, immediate deletion.
  • In case of acceptance of the registration request: Retained until the Buyer requests the deletion of their account or until a request is made for User deactivation. Subsequently, processing is blocked, and data is deleted.
  1. BUYER’S PURCHASE PROPOSAL, CONTRACT FULFILLMENT, AND EXECUTION

Purpose, Legal Basis of Processing, and Duration

Processing purposes related to the management, acceptance/non-acceptance of individual purchase proposals submitted by the Buyer and, in case of acceptance, the subsequent fulfillment and execution of the Contract:

  1. Following the submission of the Buyer’s purchase proposal by the User:
  • Sending a summary communication of the purchase proposal;
  • Archiving and making the submitted purchase proposals available in the Buyer’s account (with updated status) along with the accepted general terms and conditions of sale;
  • Retaining log files for the storage and historical record of the acceptance of the privacy policy, general terms and conditions of sale, and related binding clauses;
  • Communications related to the purchase proposal (e.g., sending a pro forma invoice);
  • Sending reminders regarding the imminent payment deadline, if applicable;
  • Sending a communication confirming the acceptance of the purchase proposal along with the invoice;
  • Sending a communication in case of non-acceptance of the purchase proposal.
  1. Following Almeco’s acceptance of the Buyer’s purchase proposal, the contract is considered concluded:
  • Execution of contractual obligations, including necessary communication with recipients involved in the processing;
  • Sending notifications regarding merchandise preparation for collection/shipment;
  • Managing any Buyer communications regarding merchandise collection/shipment;
  • Handling any subsequent Buyer communications (inquiries, complaints, etc.);
  • Managing administrative and accounting aspects.

Legal Basis of Processing:

  • Execution of pre-contractual measures (purposes listed in point A.)
  • Execution of the contract (purposes listed in point B.)

Processing Duration and Data Retention Period:

  • If the purchase proposal is accepted and the contract is concluded: Retained for the duration of the contract. After contract termination, data will be retained for 10 years as required by law.
  • If the purchase proposal is not accepted: Retained for 90 days to allow the Buyer to consult rejected purchase proposals in the MY ACCOUNT section of the Website.
  1. DIRECT MARKETING

Purpose, Legal Basis of Processing, and Duration

Advertising campaigns (initiatives, events, notices, new products, and new offers), as well as customer satisfaction surveys and market studies.

Customized advertising campaigns may also be conducted based exclusively on the categories of products for which the Buyer has expressed an interest (e.g., by submitting a purchase proposal) and which are available in the geographical area indicated in the registration form or any subsequently added areas.

It is specified that:

  • No segmented or granular-level targeted profiling will be created.
  • No tracking activities will be carried out.

Any request to receive marketing communications submitted via the registration form is subject to Almeco’s acceptance of the Buyer’s registration request on the Website.

 

Legal Basis of Processing:

  • Consent (optional and revocable at any time).
  • Soft Spam: Email communications for the direct sale of Almeco’s own products or services similar to those of a previous contract with the Buyer (Legitimate Interest of the Data Controller (LIA) for legal entities, provided no initial objection was made, and with the right to object at any time).

 

Processing Duration and Data Retention Period:

  • Duration and retention up to 24 months from the date of consent.
  • If a User’s data is deactivated, marketing communications to the contacts provided in the registration form will also cease, followed by blocking of processing and deletion of data collected for this purpose.
  • For Soft Spam: Retention for 12 months from the conclusion of the last contract.
  • Upon expiration of these periods, a new consent request will be made; otherwise, processing will be blocked, data deleted, and only statistical data retained in an aggregated form.
  1. LEGAL OBLIGATIONS

Purpose, Legal Basis of Processing, and Duration

Compliance with specific obligations set forth by applicable EU and national regulations and laws.

Legal Basis of Processing:

  • Compliance with legal obligations.

Processing Duration and Data Retention Period:

  • Retention duration determined by legal provisions.

 

  1. DEFENSIVE RIGHTS

Purpose, Legal Basis of Processing, and Duration

Verification, exercise, or defense of the Data Controller’s rights, both in extrajudicial and judicial proceedings.

Legal Basis of Processing:

  • Legitimate interest of the Data Controller.

Processing Duration and Data Retention Period:

  • For the duration of extrajudicial and/or judicial proceedings until the expiration of the applicable statute of limitations.

 

CONTACT METHODS FOR MARKETING PURPOSES

Traditional Methods:

  • Calls to landline or mobile numbers with an operator and/or traditional postal mail (Italy: subject to verification of the Opposition Register / Outside Italy: subject to verification of the applicable regulations in the Interested Party’s country of residence).

Automated Methods:

  • Automated calls to landline or mobile numbers (Italy: subject to verification of the Opposition Register / Outside Italy: subject to verification of the applicable regulations in the Interested Party’s country of residence).
  • Fax;
  • SMS;
  • MMS;
  • Email;
  • Chat or messaging systems (WhatsApp and other comparable instant messaging solutions).
  • Web advertising: Internet advertising campaigns.

 

COOKIES

Please read the Extended Cookie Policy at Cookie Policy – ALMECO GROUP.

 

MONITORING OF FORWARDED COMMUNICATIONS

We utilize technological solutions aimed at monitoring the performance of commercial or marketing communication campaigns.

These tools allow us to simultaneously deliver the same promotional content to multiple recipients through the marketing contact methods outlined above.

Additionally, these solutions enable us to track advertising campaign performance by monitoring visitor interactions and storing anonymous and aggregated statistical data, such as:

  • The number of users who clicked on a link and opened the message,
  • The content within the message that generated the most interest,
  • The geographical location from which users opened the email, etc.

 

DATA RECIPIENTS

Personal data may be communicated to and processed by external entities acting as independent data controllers, including, but not limited to:

Italy:

  1. Supervisory and regulatory authorities;
  2. Law enforcement agencies and judicial authorities;
  3. Entities acquiring business assets, business units, or identifiable groups of legal relationships (e.g., credit assignment, contract transfers);
  4. Professional consultancy service providers, including in an associated form;
  5. Shipping and logistics providers;
  6. Credit card payment platforms.

Personal data may also be processed, on behalf of the Data Controller, by external entities designated as data processors or sub-processors, who receive appropriate operational instructions. These entities primarily belong to the following categories:

Italy:

  1. Entities providing audit, control, and certification services, including for client interests;
  2. Entities offering continuous compliance support services;
  3. Providers of IT, ICT, Cloud, Web, and Digital Marketing services;
  4. Entities providing paper, digital, and substitute archiving and storage services;
  5. Providers of traditional and automated postal services;
  6. Entities supporting market research studies;
  7. ICT service providers (Hosting/Data Centers);
  8. Various consulting firms or service providers.

European Union:

  1. Providers of IT, ICT, Cloud, Web, and Digital Marketing services.

 

NATURE OF DATA PROVISION

For the execution of pre-contractual measures requested by the User concerning the registration request on the Website, the provision of data is necessary but optional. Consequently, failure to provide, incomplete, or inaccurate data will make it impossible to process the User’s request, without affecting the ability to browse the publicly accessible sections of the Website.

For purposes related to the management, acceptance/non-acceptance of individual purchase proposals submitted by the Buyer and, if accepted, the subsequent fulfillment and execution of the Contract, the provision of data is necessary but optional. Failure to provide, incomplete, or inaccurate data will prevent Almeco from managing and processing the purchase proposals and, in case of contract conclusion, executing the contract.

For marketing purposes, the provision of data is necessary but optional. Failure to provide, incomplete, or inaccurate data will prevent the sending of marketing communications but will not affect the ability to browse the Website or request registration.

 

AUTHORIZED PERSONNEL FOR DATA PROCESSING

Personal data may be processed by employees and collaborators of the company’s departments, including the sales network, responsible for pursuing the above-mentioned purposes. These individuals are expressly authorized to process data, adequately trained, and provided with appropriate operational instructions.

 

TRANSFER OF PERSONAL DATA TO NON-EU COUNTRIES

If we transfer data to external companies located outside the EU/EEA, such transfers will comply with applicable regulations and will be carried out with appropriate security measures, such as:

  • Inclusion of the European Commission’s Standard Contractual Clauses (SCCs) in our agreements with entities accessing personal data (available on the European Commission’s website), or
  • Ensuring the presence of an adequacy decision by the European Commission.

 

DATA SUBJECT’S RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Data Controller via email at privacy@almecogroup.com, Data Subjects may request:

  • Access to their personal data,
  • Blocking of data processing and deletion,
  • Correction of inaccurate data,
  • Completion of incomplete data,
  • Restriction of processing under the cases provided by Article 18 of the GDPR,
  • Objection to processing when based on the legitimate interest of the Controller.

The Data Controller will provide information regarding the exercise of Data Subject’s rights without undue delay and no later than one month from the receipt of the request, in accordance with Article 12 of the GDPR.

Additionally, if processing is based on consent or contract and carried out through automated means, Data Subjects have the right to receive their data in a structured, commonly used, and machine-readable format and, if technically feasible, transfer it to another controller without hindrance (Right to Data Portability). They may also request permanent deletion of their data (Right to Be Forgotten).

Marketing Communication Opt-Out:

  • Data Subjects can revoke consent for marketing at any time by using the unsubscribe link in any email or by emailing privacy@almecogroup.com, specifying in the subject line:
    • “cancellami-mail” (unsubscribe from emails),
    • “cancellami-telefono” (unsubscribe from phone calls),
    • “cancellami-[other contact method]” (unsubscribe from another communication method in use).
  • If they wish to stop receiving all marketing communications, they should indicate “cancellami – marketing” in the subject line.

Targeted or Personalized Advertising on Websites, Search Engines, and Social Networks:

  • If a Data Subject sees a promotional ad, the platform may provide an option to view why they are part of a target audience and how to opt out.
  • They can object at any time by removing a “Follow” or “Like”, or by selecting “Hide Ad” or “Hide Advertiser” in the “Why am I seeing this ad?” section within the ad itself.

If processing is based on consent for one or more purposes (Article 6(1)(a) of GDPR) or involves special category data (Article 9(2)(a) of GDPR), revocation of consent does not affect the lawfulness of processing carried out before revocation.

Data Subjects have the right to file a complaint with the supervisory authority in the EU member state where they reside, work, or where the alleged violation occurred.

 

WEBPAGE FOOTER

www.shop.almecogroup.com – is owned by ALMECO S.P.A. (Parent Company) – Registered and Operational Headquarters: Via della Liberazione, 15 – 20098, San Giuliano Milanese (MI) – Phone: +39 02 9889631 – Fax: +39 02 98896399 – VAT Number, Tax Code & Business Register: 00772590154 – REA MI No.: 687991