Privacy policy registration
Privacy policy for user registration
Art.13-14 of EU Regulation 2016/679 GDPR
Data controller
The data controller is Blue Transfer srl p.i./c.f 03763670928, contact email: info@elmastransfer.com
Data collected
The Data Controller requests the common personal data: Name, Surname, telephone, email, address, and other contact details, username and identification code, the data necessary to make the payment are managed by Stripe.
Purpose of processing
The processing of personal registration data is necessary to provide online services reserved for registered users, the data are used to purchase and manage services and for communications relating to orders placed. Failure to provide data will make it impossible for the Data Controller to process reservations. art. 6 lett. b) of the GDPR. Personal data are stored for 10 years from the date of termination of the contract.
Fulfilment of regulatory obligations
The processing of personal data is necessary to fulfil the obligations of laws, regulations and Community legislation, as well as by provisions issued by authorities entitled to do so and by supervisory and control bodies (e.g. invoicing, keeping accounts, etc. ). Nature of the transfer: Mandatory. Failure to provide data will prevent the Data Controller to perform the requested activity and that presupposes the fulfilment of the legal obligation by the Data Controller. Legal basis of processing: Fulfillment of a legal obligation pursuant to art. 6 lit. c) of the GDPR. Personal data retention period: The data provided are processed and stored for the period strictly necessary for the pursuit of the purposes stated above.
Exercise of rights by the Data Controller
The processing of personal data, including contact data, is necessary for the full exercise of the Data Controller’s rights, such as: debt collection, prevention of fraud and/or illegal activities, network and information security, the right of defence in court and for the protection of all those rights of the Data Controller over which the interests, rights and freedoms of the data subject do not prevail. Nature of the contribution: Mandatory. Failure to provide the data will prevent the Data Controller to carry out the activity you requested and which presupposes the fulfilment of the legal obligation by the Data Controller itself. Legal basis of processing: legitimate interest of the data controller pursuant to art. 6 lit. f) of the GDPR. Retention period: Your personal data will be stored for 10 years from the date of termination of the contract or for a longer period pursuant to a binding decision issued by a competent authority (eg court ruling) or if prescribed by the legal system.
Methods of data processing
The data provided are used only with methods and procedures strictly necessary for these purposes and are not disclosed to third parties. The owner is still required to communicate in data in case of specific request by the judicial authority. The processing of personal data is carried out by the Data Controller in compliance with the provisions of the GDPR and subsequent amendments and additions, as well as national legislation, also with the help of computer tools.
Duration of processing and retention of data
The data provided are processed and stored for the period strictly necessary for the pursuit of the purposes stated above. It is subject to retention for a longer period in relation to requests from the public authority or in relation to requirements related to the exercise of the right of defence in case of disputes.
User rights
In relation to the processing of personal data, the user has the right to ask the Data Controller:
Access to data concerning him and more clarification about the information on this Policy;
the correction or integration of the data provided where incorrect;
the cancellation of all your data: if no longer necessary to the Data Controller and if there are no objections, in case of withdrawal of consent or its opposition to processing, in case of unlawful processing, or if there is a legal obligation to cancel;
the limitation of personal data, when one of the conditions of art. 18 of the GDPR is met;
opposition to the processing of your data on the basis of a legitimate interest.
You can lodge a complaint with the Data Protection Authority.