OHMYBLUE di ELENA RIZZI, a Sole Proprietorship Company, operates in full compliance with the provisions of Italian Personal Data Protection Act (Italian Leg. Decree No. 196/2003 and subsequent amendments) and the Reg. (UE) 679/2016, General Data Protection Regulation - GDPR.
The personal data provided by the Consumer are processed in compliance with the fundamental rights and freedoms, particularly guaranteeing the right to confidentiality, personal identity and personal data protection.
Pursuant to art. 13 of Italian Legislative Decree 196/2003, the following information is provided:
1) Data processing purposes and methods
The personal data provided by the Consumer shall only be used for:
a) Entering into and correctly executing the online sales contracts;
b) Performing marketing and customer loyalty activities by means of a system of newsletters for advertising and promotional communications.
2) Obligatory or optional nature of data submission
The submission of personal data for the purposes indicated in item no. 1, letter a), is obligatory: without such data, OHMYBLUE would not be able to accept the Purchase Order or, therefore, to enter into the sales contract.
The submission of personal data for the purposes indicated in item no. 1, letter b), is optional, and it does not impede the execution of the sales contract.
Data processing is closely linked to the above mentioned purposes, always ensuring the confidentiality and safety of the Consumer’s data.
3) Scope of communication and disclosure of data
For both of the abovementioned purposes, data may be communicated by OHMYBLUE to:
Individuals whose right to have access to such data is recognised by law;
Collaborators, employees and suppliers of OHMYBLUE, within the scope of the relative tasks and/or contractual obligations with them, regarding the business relations with the Consumer;
Post offices and couriers for sending documentation and/or material;
Natural persons and/or legal entities, public or private (such as legal, administrative and tax consulting offices, Chamber of Commerce, Labour Chambers and Offices, etc.) when the communication to them is necessary or functional for the execution of OHMYBLUE’s business activity;
Banks for the management of collections and payments deriving from the execution of sales contracts.
4- Transfer of personal data abroad
The Users' personal data can be freely transferred outside Italy to any country of the European Union or to non-EU countries (including but not limited to, USA, Australia, etc.).
If data are transferred to non-EU countries, OHMYBLUE shall adopt any measure needed to properly safeguard personal data pursuant to articles 44, 45 and 46 of Reg. (UE) 679/2016.
5) Data controller identification details
The data controller is OHMYBLUE DI ELENA RIZZI Sole Proprietorship Company with registered office in Venice, Sestriere San Polo 2865, District: Campo San Tomà, Postcode 30125, registered with the Venice Register of Companies, Small Enterprises special section, Economic and Administrative Registry (REA) number VE - 370615, Tax ID No. RZZLNE83S48C933Z, VAT ID No. 04147700274.
6) Rights pursuant to art. 7 of Italian Legislative Decree 196/2003
At any time the Consumer can, by submitting a request to OHMYBLUE via registered post with acknowledgement of receipt or to the e-mail address email@example.com, may exercise the rights pursuant to art. 7 of Italian Legislative Decree 196/2003, and specifically:
1. Data subjects are entitled to obtain confirmation as to whether or not personal data relating to them are held, even if they are not yet recorded, and the communication of the same in an intelligible form.
2. Data subjects are entitled to be informed about:
The source of the personal data;
The purposes and methods of processing;
The type of logic applied whenever data have been processed electronically;
The identification details of the data controller and, where applicable, of the controller's representative;
The recipients or categories of recipients to whom or which personal data may be disclosed and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s), or person(s) in charge of the processing.
3. Data subjects are entitled to ask and obtain:
The updating or rectification, and whenever desired, the integration of personal data;
The deletion, conversion into anonymous form, or blocking of data processed in violation of the law, including data the conservation of which is unnecessary for the purposes for which the data have been collected and subsequently processed;
Statement that the operations described under letters a) and b) and the content thereof have been reported to those to whom the data have been communicated or disclosed, except in the case that such action should prove impossible or require employment of means clearly out of proportion with the right protected.
4. Data subjects are entitled to object, in whole or in part:
On legitimate grounds, to the processing of data relating to him, even if such use is pertinent to the purpose for which said data were collected;
To the processing of personal data relating to him for the purposes of sending advertising material or direct marketing or else for market research or commercial communications."
Upon such request, the controller or the person in charge of processing shall give a suitable reply without delay.
In addition to the above-mentioned rights, the User is entitled to:
withdraw his or her consent at any time when such consent has been previously given. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
request the restriction of processing of personal data if a) the accuracy of the personal data is contested by the data subject, for a period enabling OHMYBLUE to verify the accuracy of the personal data; b) the processing is unlawful and the user opposes the erasure of his/her personal data and requests the restriction of their use instead; c) OHMYBLUE no longer needs the personal data for the purposes of the processing, but they are required by the User for the establishment, exercise or defence of legal claims; d) the User has objected to processing pending the verification whether the legitimate grounds of the controller override those of the User;
object at any time to processing of personal data concerning him or her;
request the erasure of personal data concerning him or her without undue delay;
obtain the portability of personal data concerning him or her;
lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) where the User believes his/her data has been processed in infringement of the personal data protection regulations.
Should the User have any doubts or comments about the way his/her personal data are processed by OHMYBLUE, s/he can ask for clarifications by sending an e-mail to firstname.lastname@example.org.
The website and its functions are intended only for persons aged 18 years and older. OHMYBLUE does not knowingly collect information from children.
Whenever the User believes that OHMYBLUE possesses data on children, he/she can inform this by sending an e-mail to email@example.com.