Privacy Policy | Cicli Martin

INFORMATION NOTICE PURSUANT SECTION 13 OF REGULATION (EU) 2016/679

Dear user, This document is provided you in compliance with section 13, EU Regulation 2016/679 (so called GDPR), that sets for, in the matter of personal data protection, the duty for the data controller that collects personal data to provide to the concerned persons – natural person – a set of information about the data processing at the moment of the obtaining of the data. For this purpose, we are giving you the following information related to the processing of the personal data that you shall provide us visiting our website, and in particular to allow your registration to our website and to use the related services, during the use of the “send an email” service, that consists of the filling of an online form, with the insert of name, surname, e-mail address, with the purpose to being contacted in order to receive further information about our services, during the use of the e-commerce section, that consists of the selling of goods to the user, according to the general terms and conditions that will be specifically accepted by the user in the last stage of the selling process.

SECTION 1 – IDENTITY AND CONTACT DATA OF THE DATA CONTROLLER (see section 13, p.1/a GDPR)
The data controller will be Officine Martin, Tax Code MRTLCU89B28F205B, Vat number 10966800962, with registered office in VIA PROCACCINI 11 20154 MILANO, whose contact data are the following:
Telephone number 02 34533031
E-mail address info@ciclimartin.it..

SECTION 2 – CONTACT DATA OF THE DATA PROTECTION OFFICER (DPO) (see section 13, p. 1/b GDPR)
The appointment of a Data Protection Officer (DPO) is not mandatory, due to the particular kind of data processing and the specific professional activity.

SECTION 3 – PURPOSES AND LEGAL BASIS OF THE DATA PROCESSING (see section 13, p. 1/c GDPR)
The data processing has the following purposes: to allow your registration to our website and to use the following services, to follow up your request of being contacted in order to receive further information on our services and to sell the goods listed on this website, according to the general terms and conditions that will be specifically accepted by the usertat the last stage of the selling process.
The data processing will be grounded on the consent of the concerned person, that shall be given by means of the declarations below; thus, the consent will make reference to this privacy disclaimer.

SECTION 4 – DATA CONTROLLER’S LEGITIMATES INTERESTS (see section 13, p. 1/d GDPR)
This data processing is not necessary for the purpose of the data controller’s legitimate interests and/or of third parties.

SECTION 5 – RECIPIENTS (OR RELEVANT CATEGORIES) OF THE PERSONAL DATA (see section 13, p.1/e GDPR)
To make payments on the website with credit cards, the user shall insert the personal credit card data (credit card number, holder account, expiry date, security codes). These data will be acquired by the payment’s service supplier, which will operate as autonomous data controller, without passing through the server of CICLI MARTIN which will not process any of such data. The user that is registered on the website shall request, throughout the website itself, the saving of such data, that will be saved and stored by the payment’s provider and will not be acquired by us.

SECTION 6 – TRANSFER OF PERSONAL DATA TO EXTRA UE COUNTRIES OR INTERNATIONAL ORGANIZATIONS (see section 13 p1/f – GDPR)
The data processing does not involve any data transfer to extra EU countries or international organizations.

SECTION 7 – PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED OR THE CRITERIA USED TO DETERMINE THE RELEVANT PERIOD (see section 13, p.2/a GDPR)
Personal data of the user will be stored only for the period needed to perform the services.
If the user shall decide to close his account on the website, his personal data will be stored for administrative purposes only, for maximum three months, with the exclusion of possible specific law provisions on the conservation of accounting data or for public security purposes. To close a personal account on the website, user shall contact the data controller to the address in the section 1. If the user shall decide to close his account on the website, his personal data will be stored for administrative purposes for maximum three months, with the exclusion of possible specific law provisions on the conservation of accounting data or for public security purposes. To close a personal account on the website, user shall contact the data controller to the address in the section 1.

SECTION 8 – RIGHTS OF THE CONCERNED PERSON (see section 13, p.2/b, GDPR)
The concerned person has the right to ask to the data controller the access to his personal data, the modification or the cancellation of such data or the restriction of the data processing, and the right to portability of such data.

SECTION 9 – RIGHT TO WITHDRAW (see section 13, p.2/c, GDPR)
The data subject has the right to withdraw consent at any time; according to section 13, paragraph 2, letter c GDPR, the withdraw of the consent will not affect the lawfulness of processing based on the consent before its withdrawal.

SECTION 10 – COMPLIANT (see section 13, p.2/d, GDPR)
The data subject has the right to pledge a complaint with a supervisory authority.

SECTION 11 – OBLIGATION OR REQUIREMENT OF DATA PROVISION (see section 13, p.2/e, GDPR)
The provision of personal data is mandatory to allow the registration on our website. The data subject is not obliged to provide these data, but this will make not possible to follow up on his request of registration and to use the relevant services.
The provision of personal data is mandatory to allow the user to be contacted in order to receive further information about our services. The data subject is not obliged to provide these data, but this will make not possible to follow up on his request to be contacted in order to receive further information on our services.
The provision of personal data is a mandatory requirement to execute the selling contract and to fulfill the relevant obligations.
The data subject is not obliged to provide these data, but this will make not possible to execute the contract.

SECTION 12 – AUTOMATED DECISION MAKING (see section 13, p.2/f, GDPR)
The data processing will not be submitted to an automated decision-makind process.

SECTION 13 – ADDITIONAL PURPOSES OF DATA PROCESSING (see section 13, p.3, GDPR)
The data processing will not be performed for other purposes than those listed under Section 3.
Sincerily, Officine Martin