INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) NO 2016/679 (HEREINAFTER REFERRED TO AS 'GDPR')

This page describes the Privacy Policy adopted by SOLELUNA S.R.L., based in Milan (MI), Corso Europa 13, Partita I.V.A. n. 10962390158 (hereinafter also “SOLELUNA”) and EASYREPLICA INTERNATIONAL SRL, with registered office in Via Toscana, 34 – 61122 Pesaro (PU), P. IVA/C.F. 02568220418 and registration number with the Register of Companies of Pesaro PS - 192173 (hereinafter also the "Partner" and, together with SOLELUNA SRL, the "Companies" or the "Owners"), with reference to the processing of personal data (the "Data") relating to the users ("Users") who have provided them to the Companies by registering their Data on the e-commerce portal solelunashop.com (the "Site"), assuming that the Companies have entered into a co-ownership agreement in accordance with art. 26 of the GDPR, the essential content of which is available to you at the registered offices of the Owners.

This Site is reserved for persons who are sixteen years old. The Owners therefore do not collect Personal Data relating to persons under the age of 16. Upon request of the Users, the Owners will promptly delete all Personal Data involuntarily collected and related to persons under 16 years of age

1. Purpose of the processing and legal basis

The Users' Personal Data will be lawfully processed by the Owners in accordance with art. 6 of GDPR for the following processing purposes:

a) perform/deform specific contractual and pre-contractual obligations, allow navigation of the Site or implement the Site Terms of Use, which are accepted by the User when registering on the Site and/or when using the services and comply with specific requests of the User (article 6, c.). 1, lett. (b) the GDPR). User Data collected includes: the User's first name, surname, tax code, age, address of residence/domicile, gender, e-mail address, as well as any personal information that the User may have voluntarily published. The Data will be used by the Owners for the exclusive purpose of ascertaining the identity of the User (also by validating the e-mail address), thus avoiding possible fraud or abuse, and contacting the same for service reasons only.

(b) administrative-accounting purposes, or to carry out activities of an organisational, administrative, financial and accounting nature (Article 6(c)). 1, lett. (c) GDPR);

(c) to fulfil obligations laid down by law, authority, regulation or European legislation (Article 6(c)). 1, lett. (c) GDPR).

The provision of personal data for the processing purposes indicated in letters a), b) and c) above is optional but necessary, since failure to provide the same will make it impossible for the User to navigate the Site, register on the Site and use the services. The Personal Data that are necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk in the registration form on the Site.

2. Further processing purposes: marketing (sending advertising material, direct sales and commercial communication)

With the free and optional consent of the User, some Personal Data (i.e. name, surname, email address, address of residence) may be processed for the performance of promotional activities. "marketing") and the sending of informative and promotional communications - by the Owners - about products and services by post, e-mail, telephone (fixed and/or mobile) and/or SMS and/or MMS.

If you do not give your consent, your ability to subscribe to the Site will not be affected in any way. In case of consent, the User may revoke the same at any time, requesting it in the manner indicated in paragraph 8 below.

The User may also easily object to further sending of promotional communications by e-mail by clicking on the link for the revocation of consent, which is present in each promotional e-mail. Once consent has been revoked, an e-mail message will be sent to the User to confirm that consent has been revoked. If you wish to withdraw your consent to receive promotional communications by telephone, while continuing to receive promotional communications by email, or vice versa, please send a request in the manner indicated in paragraph 8 below. Please note that, following the exercise of the right to object to the sending of promotional communications by email, it is possible that, for technical and operational reasons (eg. contact list formation already completed shortly before the Partner receives the opposition request) the User continues to receive some further promotional messages. Should the User continue to receive promotional messages after 24 hours from the exercise of the right of objection, please report the problem to the Partner, using the contacts indicated in paragraph 8 below.

3. Further processing purposes: newsletter

With the free and optional consent of the User, some Personal Data of the User (i.e. name, surname, address, e-mail address) may be processed by the Owners also for the purpose of sending the newsletter. Therefore, the User will receive a periodic newsletter that will contain information about news and promotions on the Site and/or initiatives of the Owners. If you do not give your consent, your ability to subscribe to the Site will not be affected in any way. In case of consent, the User can revoke the same at any time, by making a request to the Partner in the manner indicated in paragraph 8 below. The User may also easily object to further promotional communications by clicking on the link for the revocation of consent, which is present in each email containing the newsletter. Once consent has been revoked, an e-mail message will be sent to the User to confirm the cancellation.

4. Further processing purposes: profiling

With the free and optional consent of the User, the User's personal data (i.e. personal and contact data, information relating to services in which the User has expressed an interest) may be processed by the Owners also for profiling purposes, i.e. to reconstruct the User's tastes and consumption habits, identifying the consumer profile, in order to be able to send the User commercial offers consistent with the profile identified. If you do not give your consent, your ability to subscribe to the Site will not be affected in any way. In case of consent, the User can revoke the same at any time, by making a request to the Partner in the manner indicated in paragraph 8 below.

5. Data processing methods and storage times

The Owners will process the Personal Data of the Users by means of manual and IT tools, with logic strictly related to the purposes and, in any case, in such a way as to guarantee the security and confidentiality of the Data. Users' Personal Data will be kept for the time strictly necessary to carry out the primary purposes illustrated in paragraph 1 above, or in any case as necessary for the protection of the interests of both Users and Owners. In the cases referred to in paragraphs 2, 3 and 4 above, Users' Personal Data will be kept for the time strictly necessary to carry out the purposes illustrated in the same and, in any case, for no longer than, respectively, twenty-four (24) months in the case of marketing activities and twelve (12) months in the case of profiling.

6. Scope of data communication and dissemination

The Personal Data of the Users may become known to the employees and/or collaborators of the Owners in charge of managing the Site. Such subjects, who have been instructed to do so by the Owners, shall process the Users' Data exclusively for the purposes indicated in this notice and in compliance with the provisions of the Applicable Regulations.

The Personal Data of the Users may also be disclosed to third parties who may process Personal Data on behalf of the Data Controllers in their capacity as "External Data Processors" in accordance with the art. 28 of GDPR, such as, for example, IT and logistics service providers functional to the operation of the Site, outsourcing service providers or cloud computing,

Your Data may also be communicated by the Data Controllers, to the extent necessary and essential to fulfil contractual obligations, to independent third party data controllers, such as the managers of payment services and logistics services necessary for the delivery of goods sold through the Site, consultants and professionals.

7. Social buttons and widgets

The Site also contains social buttons/widgets. These are in particular social network icons, such as Facebook, Twitter, Pinterest, Google+, Youtube and Instagram, which allow Users to reach - through a "click" on the icon - its social networks. With the support of these tools you may, for example, share content or recommend products on the Site in social networks. Some content shared on social networks may also be shared on the dedicated page of the website. Following clicks on social buttons/widgets, the social network may collect Data relating to your visit to the Site. As mentioned in the introduction, this privacy policy does not relate to the processing of User Data by the social network for which the User must refer exclusively to the privacy policy provided by the social network. Except in cases where the User spontaneously shares his/her Data with the social networks chosen by clicking on social buttons/widgets, the Owners do not disclose or share any Personal Data of the User with social networks.

8. Rights of the interested parties

We inform you that at any time with regard to your Data, you may exercise your rights under the limits and conditions set forth in Articles 7 and 15-22 of GDPR.

Adequate acknowledgement of this request will be provided without delay within one month of its receipt.

In order to exercise these rights, which are described below, please contact the Partner at the following addresses.

- By sending a registered letter with return receipt to the registered office of the Partner in Via Toscana, 34 – 61122 Pesaro (PU);

- By sending an email to the Data Protection Officer (DPO) of the Partner at the email address: info@easyreplica.com.

Besides, you have the right to:

- obtain confirmation whether or not Personal Data concerning you is being processed;

- if processing is in progress, obtain access to Personal Data and information relating to the processing and request a copy of the Personal Data;

- obtain the rectification of inaccurate Personal Data and the integration of incomplete Personal Data;

- to obtain, where one of the conditions laid down in Article 17 of GDPR, the deletion of Personal Data concerning you;

- to obtain, in the cases provided for in art. 18 of the GDPR, the limitation of treatment;

- receive Personal Data concerning you in a structured, commonly used and machine-readable format and request their transmission to another data controller, if technically feasible.

Right of opposition

Each interested party has the right to object at any time to the processing of your Data carried out for the pursuit of a legitimate interest. In case of opposition, your Data will no longer be processed, provided that there are no legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or to ascertain, exercise or defend a right in court.

Right to object and revoke consent in relation to the processing carried out for marketing and profiling purposes

With reference to the processing of Data for marketing and profiling purposes, each interested party may revoke any consent given at any time or oppose the processing, by writing to the above addresses.

The revocation of your consent will not affect the lawfulness of the processing based on the consent given before the revocation.

Opposition to the processing carried out through these methods also extends to the sending of commercial communications by postal service or telephone calls with operator, without prejudice to the possibility of exercising this right in part, for example by opposing only processing carried out through automated communication systems.

Right to complain to the Privacy Guarantor

Finally, pursuant to Article 77 of GDPR, we remind you that you have the right to lodge a complaint with the Privacy Guarantor, if you believe that your rights under GDPR have been violated, in the manner indicated on the website of the Privacy Guarantor accessible at www.garanteprivacy.it.

9. Owners, Managers and Data Protection Officer

The Data Controllers are jointly:

-  SOLELUNA S.R.L., based in Milan (MI), Corso Europa 13, VAT n. 10962390158;

-  EASYREPLICA INTERNATIONAL SRL, with registered office in Via Toscana, 34 – 61122 Pesaro (PU), P. VAT/C.F. 02568220418 and registration number in the Register of Companies of Pesaro PS – 192173.

The relationship between the Owners shall be governed by a written agreement deposited at the respective offices.

The complete list of the respective Data Processors is available at the registered office of the Data Controllers and can be requested at the e-mail address: info@easyreplica.com.

Furthermore, the Data Protection Manager of EASYREPLICA INTERNATIONAL SRL can be contacted at the email address: info@easyreplica.com.

This information will be subject to updates. The Data Controllers therefore invite Users who wish to know how the Personal Data collected by the Companies is processed to periodically visit this page.