For the services offered by Power-Supply.it srl and those available on our portals Power-Supply.it, AlimentatoriShop.com and ArredoLED.it, your privacy and the management of your data are the responsibility of:
Power-Supply.it srl
Via Brianza, 1
20835 Muggiò (MB)
Phone nr. +39 039.8946236
Mail: info@power-supply.it
1. General information on data processing
1.1. Volume of personal data processing
We generally collect and use personal data of our users only if necessary for our website, for our content and for our services. The collection and use of personal data of our users always takes place with the consent of the user, except in cases where it was not possible to obtain consent for factual reasons, but where the law allows the processing of data.
The collection of personal data takes place only with your express consent during the registration phase. Your data will be used without your consent only and exclusively to complete the order. When the contract is completed and after the purchase price has been paid in full, the processing of your data will be blocked and they will be deleted after the expiration of the storage period under commercial and tax law, unless you have accepted further use of your data.
1.2. Transmission of personal data
Your data is transmitted to the transport company only if necessary for the delivery of the goods. For payment, we provide your payment data to the credit institution responsible for payment or to the selected payment service during the order.
1.3. Use of personal data having selected PayPlug as the payment method
If you have decided to use the credit card payment service through PayPlug, we transmit your payment data to PayPlug SAS, société par actions simplifiée., 23-25 rue Jean-Jacques Rousseau, 75001 Paris (hereinafter "PayPlug"). PayPlug will handle the data related to your card and other information such as name, surname, address, date of birth, email address, and phone number, useful for verifying the identity of the payment method holder or for the correct management of the credit and the related order. For more information consult the PayPlug documentation.
1.4. Payment via PayPal.
For payments with PayPal, credit card via PayPal, payment by credit card debit with PayPal or, if available, "purchase with invoice" with PayPal, we transmit your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal reserves the right to conduct a financial soundness examination for payments with PayPal, credit card via PayPal, payment by credit card debit with PayPal or, if available, "purchase with invoice" with PayPal. PayPal uses the result of the financial soundness examination in relation to the possibility of non-payment to decide whether to make the respective payment method available. The financial soundness examination may contain probability values (so-called scores). If the scores fall within the result of the examination, it means that they are based on a recognized mathematical-statistical procedure. The address data are also included in the calculation of the scores. For further information on data protection, please refer to the PayPal's data protection statement.
1.5. Legal basis for the processing of personal data
If the data subject has given consent for the processing of personal data, Article 6(1)(a) of the General Data Protection Regulation serves as the legal basis.
For the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the General Data Protection Regulation serves as the legal basis. This also applies to processing necessary for the performance of pre-contractual measures. If the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the General Data Protection Regulation serves as the legal basis. In the event that the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the General Data Protection Regulation serves as the legal basis. If the processing is necessary for the legitimate interests pursued by our company or by a third party, and if the interests or fundamental rights and freedoms of the data subject do not override the first-mentioned interest, then Article 6(1)(f) of the General Data Protection Regulation serves as the legal basis.
1.6. Deletion and storage period of data
The personal data of the data subject is deleted or blocked as soon as the purpose of storage is no longer applicable. The data may be stored further if provided for by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. Furthermore, data is blocked or deleted when the storage period expires as provided for by the aforementioned regulations, unless further storage of the data is necessary for the conclusion or performance of a contract.
2. Display of the website and logs.
2.1. Description and volume of data processing.
Whenever you visit our website, our system automatically collects data and information from the computer system of the user.
The following data is collected:
1. information about the type of browser and version used
2. the user's operating system
3. the user's internet service provider
4. the user's IP address
5. the date and time of access
6. the sites from which the user's system accessed our website
7. the sites to which the user's system can access from our website
The logs contain IP addresses and additional data that allow attribution to a specific user. This may happen, for example, when the link from which the user accessed the website or the link to the website that the user subsequently visits contains personal data.
The data is stored in the logs of our system. These data do not include data such as the user's IP address or other data that allow attribution to a specific user. However, these data are not saved together with other personal data of the user.
2.2. Legal basis for data processing
Article 6, paragraph 1, letter f) of the General Data Protection Regulation serves as the legal basis for the temporary storage of data and logs.
3. Purpose of data processing
Temporary storage of the IP address through the system is necessary to allow the user's computer to view the site. For this purpose, the user's IP address is saved for the duration of the session.
Logs are saved to ensure that the site functions. Furthermore, the data is used to optimize the site and ensure the security of our computer systems. Here, the data is not analyzed for marketing purposes.
Our legitimate interest refers to this purpose, in accordance with Article 6, paragraph 1, letter f) of the General Data Protection Regulation.
3.1. Duration of storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case where the data was collected to view the site, it is deleted as soon as the session is concluded.
In the case of data storage in logs, this occurs no later than seven days later. It is not possible to store the data for longer. In this case, the user's IP addresses are deleted or anonymized to prevent the accessing client from being identified.
3.2. Possibility of opposition and revocation
The collection of data for website display and data storage in logs is necessary for website display. Therefore, the user does not have the possibility to object.
4. Use of cookies
4.1.1. Description and volume of data processing (user navigation analysis)
Cookies are small text files sent and stored on your computer by the websites you visit. Cookies are stored by the browser, allowing the website to remember, for example, user preferences or products in their cart, the next time they visit the site. Your browser will read the cookie and transmit the information back to the website or entity that originally created it.
Through pseudonymization, it is no longer possible to attribute the collected data to a specific user. This data is not stored together with additional personal user data.
4.1.2. User consent
Visiting our portals Power-Supply.it, AlimentatoriShop.com and ArredoLed.it, the user will see a brief information about the use of cookies. By confirming the view by pressing the appropriate button on the banner, or continuing with the navigation, the user consents to the use of our cookies. Most browsers automatically accept cookies. In the security settings, it is possible to enable and disable temporary and permanent cookies independently of each other. If you disable cookies, some functions on our site may not be available to the user and some sites may not be displayed correctly. To use the cart function, it will be necessary to enable temporary cookies. The data saved in our cookies is not linked to your personal data (name, address, etc.). Without your explicit consent, the data saved in our cookies is not linked to your personal data (name, address, etc.).
4.2. Navigation or session cookies
Cookies of this type are necessary for the proper functioning of our sites, they allow you to keep a browsing session open or access any reserved areas. They can also temporarily remember the texts entered when filling out a form, when you return to a previous page during the same session.
4.3. Functionality cookies
These cookies allow, for a limited period, to remember for example the language of the site display, or any products entered in the cart during guest navigation.
4.4. Google-Analytics cookies
Our website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses "cookies", which are text files that are stored on your computer to analyze how users use the website. The information collected includes the operating system, browser, your IP address, the previously visited web page (referrer-URL), the date and time of your access to our site. The information generated by the cookies about your use of our website will be transmitted to and stored by Google on servers in the United States. Google will use this information to analyze your use of our website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The usage is done through anonymization or pseudonymization. Further information is available directly from Google by clicking here.
4.5. Legal basis for data processing
Article 6, paragraph 1, letter f) of the General Data Protection Regulation serves as the legal basis for the processing of personal data using cookies.
4.6. Purpose of data processing
Analysis cookies are used to improve the quality and content of our website. Analysis cookies allow us to analyze how our website is used in order to continuously optimize our offering.
Our legitimate interest in the processing of personal data refers to this purpose, in accordance with Article 6, paragraph 1, letter f) of the General Data Protection Regulation.
4.7. Storage duration, possibility of objection and revocation.
Cookies are saved on the user's computer and transferred to our page. Therefore, you users have control over the use of cookies. By changing the settings in your internet browser, you can disable or limit cookies. Previously saved cookies can be deleted at any time, even automatically. If you disable cookies for our site, some functions may not be available.
You can disable the transmission of flash cookies by changing the settings of Flash Player, not the browser settings.
5. Newsletter
5.1. Description and volume of data processing
On our site, you can subscribe to the free newsletter. By subscribing to the newsletter, the data entered in the input form is transmitted to us. In addition, the following data is also collected:
1. the IP address of the user's computer
2. the date and time of registration
Your consent is necessary for the processing of data during newsletter subscription and reference is made to this privacy policy. With the processing of data for the newsletter, your data is not transferred to third parties, but used only for sending the newsletter.
5.2. Legal basis for data processing
Article 6, paragraph 1, letter a) of the General Data Protection Regulation serves as the legal basis for data processing for newsletter subscription, with the user's consent.
5.3. Purpose of data processing
The user's email address is used to deliver the newsletter.
The collection of additional personal data during newsletter subscription is intended to prevent abuse of services or the email address used.
5.4. Storage duration
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address is saved for the entire duration of the newsletter subscription.
5.5. Possibility of opposition and revocation
The user can unsubscribe from the newsletter at any time by clicking the link at the bottom of each email "newsletter".
6. Registration
6.1. Description and volume of data processing
On our website, we offer users the possibility to register by entering some personal data. The data is entered in an encrypted input mask and subsequently stored in our database. The following data is collected during registration:
1. Gender
2. First name, Last name or company name
3. Date of birth
4. Email address
5. Password (stored with irreversible encryption)
The following data is also saved at the time of registration:
1. User's IP address
2. the date and time of registration
During registration, users are required to give consent to the processing of this data.
6.2. Registration via Single Sign-on technology (Facebook and Google Account)
On our website it is possible to register quickly thanks to the APIs provided by Facebook and Google. No more than one registration is allowed. For registration, you will be redirected to the desired page by the Single Sign-on technology provider, where you can access using your data related to the specific service. In this way, the profile data will be automatically filled in with those of the selected service. With this procedure, it will be possible to automatically receive the following information from the respective service provider: name, surname, email, date of birth, and gender. This information is necessary during the contract signing to be able to identify users.
Facebook-Connect
Further information about Facebook-Connect and privacy settings is available by consulting privacy information and terms of use of Facebook Inc.
Google Sign in
Further information about Google Sign in and privacy settings is available by consulting privacy information and terms of use of Google Inc.
7. Legal basis for data processing
Article 6, paragraph 1, letter a) of the General Data Protection Regulation serves as the legal basis for data processing, with the user's consent.
Article 6, paragraph 1, letter b) of the General Data Protection Regulation serves as an additional legal basis for data processing, if registration is necessary for the performance of a contract to which the user is a party or for the performance of pre-contractual measures.
7.1. Purpose of data processing
User registration is necessary for the performance of a contract with the user or for the performance of pre-contractual measures.
Registration data is essential to complete the order on our online shop.
7.2. Duration of storage
Data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
After the conclusion of the contract, it may be necessary to store and retain some personal data of the contractual partner, in order to fulfill a contractual or legal obligation, such as for the maintenance of tax information.
8. Right to object and withdraw consent
Users always have the option to withdraw their registration. Furthermore, it is possible to modify the saved data at any time.
Please communicate objections or withdrawals by email to:
Power-Supply.it srl
Via Brianza, 1
20835 Muggiò (MB)
Phone nr. +39 039.8946236
Mail: info@power-supply.it
If the data is necessary for the performance of a contract with the user or for the performance of pre-contractual measures, it can only be deleted in advance if contractual or legal obligations do not prevent its deletion.
9. Contact form and email contact
9.1. Description and scope of data processing
On our website, there is a form that can be used to contact us electronically. If a user is interested, they enter the following data in the input mask, which will be transmitted to us and then saved:
1. order number
2. phone number
3. first and last name
4. VIN
5. reference number
When the user sends the message, the following data is also saved:
1. user's IP address
2. date and time of registration
Consent for data processing is also required in this step and reference is made to this privacy policy.
Alternatively, you can contact us via the previously provided email address. In this case, the user's personal data that is transmitted with the email is saved.
Your data is not transferred to third parties, but is only used to process the conversation.
9.2. Legal basis for data processing
Article 6, paragraph 1, letter a) of the General Data Protection Regulation serves as the legal basis for data processing, with the user's consent.
Article 6, paragraph 1, letter f) of the General Data Protection Regulation serves as the legal basis for the processing of data transmitted by sending an email.
Article 6, paragraph 1, letter b) of the General Data Protection Regulation serves as an additional legal basis for data processing if the purpose of the email is to conclude a contract.
9.3. Purpose of data processing
The processing of personal data acquired from an input mask is solely for the purpose of processing the contact request. Our legitimate interest in processing the data also exists if the user contacts us by email.
Additional personal data collected during newsletter registration is used to prevent abuse of the contact form and to ensure the security of our computer systems.
9.4. Duration of storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Personal data processed from the input mask of the contact form and data sent by email are deleted immediately after the conversation with the user is concluded. The conversation is considered concluded when the matter in question is clarified.
Any personal data additionally saved during the sending phase will be deleted at the latest seven days later.
9.5. Right to object and withdraw consent
Users always have the possibility to revoke their consent to the processing of personal data unless there is a legal obligation to retain the data (e.g. warranty, tax reasons). If a user contacts us by email, they can object to the storage of their personal data at any time. In these cases, it is not possible to continue the conversation.
Please communicate objections or revocations by email or by mail to:
Power-Supply.it srl
Via Brianza, 1
20835 Muggiò (MB)
Phone nr. +39 039.8946236
Mail: info@power-supply.it
In this case, all personal data that has been saved when the user contacted us will be deleted.
10. Data Subject Rights
The following list includes all the data subject rights under the General Data Protection Regulation. Rights that are not relevant to our website are not mentioned, hence the list is shorter.
When your personal data is processed, you have the following rights against the controller, under the General Data Protection Regulation.
10.1. Right of access
You can request the manager to confirm whether or not a processing of personal data concerning you is taking place and, in that case, obtain access to the following information:
1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the duration for which the personal data concerning you will be stored. If it is not possible to provide concrete statements, it is sufficient to communicate the criteria used to determine the retention period;
5. the existence of a right to rectification or erasure of personal data concerning you, the existence of a right to restriction of processing by the controller or the existence of a right to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. all available information about the origin of the data when the personal data have not been collected directly from the data subject;
8. the existence of an automated decision-making process, including profiling under Article 22, paragraphs 1 and 4 of the General Data Protection Regulation and, at least in these cases, meaningful information about the logic used, the scope and the expected consequences of such processing for the data subject.
You have the right to ask whether personal data concerning you have been transferred to a third country or to an international organization. In this case, you can request information about the appropriate safeguards under Article 46 of the General Data Protection Regulation in the context of the transfer.
10.2. Right to rectification
You have the right to obtain from the controller the rectification or integration of data if the personal data processed concerning you are inaccurate or incomplete. The controller is obliged to rectify the data immediately.
10.3. Right to restriction of processing
You have the right to obtain from the controller the restriction of processing where one of the following applies:
1. contest the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and you oppose the erasure of personal data and instead request that its use be limited;
3. although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to establish, exercise or defend a legal claim;
4. you have objected to the processing pursuant to Article 21(1) of the General Data Protection Regulation, pending the verification of whether the legitimate grounds of the data controller override your interests.
If the processing of personal data concerning you is restricted, such data shall only be processed, except for storage, with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained the restriction of processing in accordance with the above conditions, you shall be informed by the controller before the restriction is lifted.
11. Right to erasure
11.1. Obligation to erase
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay if one of the following grounds applies:
1. the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
2. revoke the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation, and if there is no other legal basis for the processing;
3. you object to the processing pursuant to Article 21(1) of the General Data Protection Regulation and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the General Data Protection Regulation;
4. the personal data concerning you have been unlawfully processed;
5. the personal data concerning you must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject;
6. the personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) of the General Data Protection Regulation.
11.2. Information to third parties
If the data controller has made your personal data public, he/she is obliged, pursuant to Article 17(1) of the General Data Protection Regulation, to delete them, taking into account the available technology and the costs of implementation, and to take reasonable measures, including technical measures, to inform the data controllers, that you as data subjects, have requested them to delete any links, copies or reproductions of your personal data.
11.3. Exceptions
The right to erasure does not apply if the processing is necessary:
1. for the exercise of the right to freedom of expression and information;
2. for compliance with a legal obligation requiring processing under Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
3. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) of the General Data Protection Regulation;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the General Data Protection Regulation, to the extent that the right referred to in section (3) is likely to render impossible or seriously impair the achievement of the objectives of that processing;
5. for the establishment, exercise or defense of legal claims.
11.4. Right to education
If you have exercised your rights of rectification, erasure or restriction of processing against the controller, he is obliged to communicate to each recipient to whom the personal data concerning you have been disclosed any rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to receive information regarding such recipients from the controller.
11.5. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
1. the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the General Data Protection Regulation; and
2. the processing is carried out by automated means.
In exercising this right, you are authorized to obtain the direct transmission of personal data concerning you from one controller to another, where technically feasible. The right described here must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
11.6. Right to object
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, pursuant to Article 6, paragraph 1, letters e) or f) of the General Data Protection Regulation; this also applies to profiling based on these provisions.
The data controller refrains from further processing the personal data concerning you, unless he demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services and without prejudice to Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
11.7. Right to withdraw consent to privacy statement
At any time, you have the right to withdraw your consent to the privacy statement. The revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.
11.8. Automated individual decision-making, including profiling, relating to natural persons
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects your person. This does not apply if the decision:
1. is necessary for the conclusion or performance of a contract between you and the data controller;
2. is authorized by Union or Member State law to which the data controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests;
3. is based on your explicit consent.
However, these decisions are not based on the special categories of personal data referred to in Article 9(1) of the General Data Protection Regulation, unless Article 9(2)(a) or (g) of the General Data Protection Regulation applies and suitable measures to safeguard your rights, freedoms and legitimate interests are in place.
In cases referred to in paragraphs 1 and 3, the data controller shall take appropriate measures to protect your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the data controller, to express your opinion and to contest the decision.
11.9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data concerning you infringes the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the General Data Protection Regulation.