– Iconic Puzzles ES

IDON SRLS PRIVACY POLICY

IDON SRLS fully fulfills the obligations deriving from the national legislation (Legislative Decree 30 June 2003 n.196, Code regarding the protection of personal data) and community legislation (European regulation regarding the protection of personal data n. 679/2016, GDPR) and subsequent amendments, as it considers the confidentiality of its users to be of fundamental importance and guarantees that the processing of personal data is carried out in compliance with the fundamental rights and freedoms, as well as the dignity of the interested party, with particular reference to confidentiality, personal identity and right to the protection of personal data. This privacy policy applies exclusively to the online activities of this site and is valid for visitors / users of the site. It does not apply to information collected through channels other than this website.
In compliance with the aforementioned legislation, we are legally authorized to process the personal data of users of the site for the fulfillment of the contractual conditions that they accept when registering as a user and / or for the purpose of purchasing a product or using any of our services and functionality. Please note that when we ask you to provide us with personal data in order to allow you to access any functionality or service of the Platform, some fields will be marked as mandatory, as they are data we need to be able to provide the service. o the product you have requested or to allow access to the features in question, for which the data is necessary to fulfill existing contractual obligations or to comply with applicable laws and regulations. In the event that you decide not to provide us with such data, you may not be able to complete the registration as a user or to use the services or products or features requested.

In specific cases, your data may have been provided to us by third parties through the use of a function or service on the Platform, for example by sending a gift certificate or by sending an order to your address. In such cases, your data is processed only if relevant to the performance of this function or service, as indicated in this privacy and cookie policy. Depending on how you interact with our Platform or, depending on the services, products or features you wish to use, we will process your personal data for the purposes indicated below. The purpose of the privacy policy is to provide maximum transparency regarding the information that the site collects and how it uses it. This site processes data based on consent. By using or consulting this site, visitors and users explicitly approve this information
1
privacy and consent to the processing of their personal data in relation to the methods and purposes described below, including any communication to third parties if necessary for the provision of a service. In this regard, please read the following information and check it periodically carefully in order to check for any updates or revisions that may be necessary.
In particular, the EU Regulation 2016/679 imposes the obligation to inform the interested party about the various fundamental elements (specified in articles 13 and 14), with reference to the treatments concerning Personal Data concerning him, therefore, towards the undersigned informs that:

HOLDER OF THE TREATMENT
The data controller is IDON SRLS with registered office in Viale Tiziano 15, Cesenatico, 47042, Italy, e-mail address info@iconic-puzzles.com (hereinafter also "IDON") hereinafter referred to as "The data controller" or " the owner ".

PURPOSE OF THE TREATMENT
User data is processed by the Data Controller, by way of example and not limited to, for the following purposes:
- Manage registration as a user on the platform
- Protect their rights and interests;
- To identify any malicious or fraudulent activity;
- To fulfill legal obligations;
- To manage requests for information relating to the contact form service;
- To reply to emails received via the contact form;
- Verify the correct functioning of the site by specifying that no information is
referring to the natural person-User of the site, and that identification is not allowed in any way (from 25 May 2018 this information will be treated on the basis of the legitimate interests of the owner)
- For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the laws in force, in order to b lock attempts to damage to the site itself or to cause damage to other users, or in any case harmful activities or constituting a crime.These data are never used for the identification or profiling of the user, nor crossed with other data, nor provided to third parties, but used to only for the purpose of protecting the site and its users (from 25 May 2018 this information will be treated on the basis of the legitimate interests of the owner);

For the management of the payment of the purchased products: if at the time of purchasing one of our products through the Site, you decide to activate the function that allows you to save the payment card data for future purchases (if this function is available), we need to process the data indicated for the activation and provision of this functionality. The consent to the activation of this function allows you to automatically complete the payment data in subsequent purchases, so as not to have to enter them at each new operation, and such data will be considered valid and effective for future purchases. You can change or cancel your payment cards at any time through the payment information section, both on your registered user account on the Site.

LEGAL BASIS
The legal basis of this Privacy Policy is founded pursuant to art. 6 par. 1 letter a) of the GDPR.
More precisely, the aforementioned article refers to the User's express consent or to the manifestation of free, specific, informed will with which the interested party expresses his or her consent to the processing of personal data processed.

TYPES OF DATA PROCESSED
Depending on the purposes for which the data are processed from time to time, we will need:
Personal data provided voluntarily: the optional and voluntary sending of personal data relating to a natural person identified or identifiable by name, telephone number and email address, as well as the content of the message written by the user or the sending of messages and / or emails to the addresses indicated on this site or the compilation of data collection forms on this site, or economic information on transactions (for example, payment data, information relating to purchases made, orders, returns, etc.) or data connection, geolocation and / or navigation, involves the collection and processing by the owner of data provided voluntarily by users, necessary to respond to requests and are processed on the basis of consent.
By entering a comment or other information, the user expressly accepts the privacy policy. The data received will be used exclusively for the provision of the requested service and for the time strictly necessary for the provision of the service itself.
Navigation data: the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but that

by their very nature they could, through processing and association with data held by third parties, allow users to be identified.
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

WE SHARE YOUR DATA WITH THIRD PARTIES
To achieve the purposes indicated in this privacy and cookie policy, we must allow access to your personal data to third parties who provide us with support in the provision of the services we offer you, namely:
ƒ financial institutions;
ƒ companies specialized in the detection and prevention of fraud;
ƒ providers of technological and analysis services;
▪ suppliers and collaborators of services relating to logistics, transport and / or their partner plants;
▪ service providers relating to customer assistance;
▪ service providers and collaborators relating to marketing and advertising, such as social network sites, advertising agencies or advertising partners.
In such cases, we inform you that your data will be transferred with adequate guarantees and always keeping them safe.

TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY
Pursuant to Article 49 of the GDPR, the transfer or a set of transfers of personal data to a third country or an international organization is permitted only if one of the following conditions is met:
a) the interested party has expressly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the interested party, due to lack of adequacy decision and adequate guarantees;
b) the transfer is necessary for the execution of a contract concluded between the data subject and the data controller or for the execution of pre-contractual measures adopted at the request of the data subject;
c) the transfer is necessary for the conclusion or execution of a contract stipulated between the data controller and another natural or legal person in favor of the data subject;
d) the transfer is necessary for significant reasons of public interest;

METHOD OF TREATMENT
Your data will not be disseminated, with this term we intend to make it known to indeterminate subjects in any way, including by making them available or consulting. Furthermore, it is ensured that the treatments are carried out by minimizing the use of personal data and identification data, limiting their use to cases where they are strictly necessary to achieve the purposes for which they were collected.
The Data Controller also guarantees the adoption and observance of specific security measures aimed at preventing the loss of data and any illegal or incorrect use of the same. The user's data will be kept until the purposes for which they were collected are achieved or until the interested party receives a cancellation order.

STORAGE PERIOD
The Data are processed and stored for the time strictly necessary for the purposes for which they were collected. Therefore:
• The Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be kept until the execution of this contract is completed.
• Personal data collected for purposes related to the legitimate interest of the Data Controller will be kept until this interest is satisfied. When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiry of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

RIGHTS OF THE INTERESTED PARTIES
At any time, the User can exercise the right to ask the data controller for access to personal data (Article 15 of the GDPR) and the correction (Article 16 of the GDPR) or the cancellation (Article 17 of the GDPR) of the themselves. o the limitation of the processing that concerns him (art.18 GDPR), to oppose their treatment (art.21 GDPR), in addition to the right to data portability (art.20 GDPR) and to lodge a complaint with the Privacy Guarantor. You can exercise your rights with a written request sent to the addresses indicated above.

SCOPE OF
The management methods, listed below, refer to this site, in relation to the processing of personal data of users who consult it and interact with the services and web pages accessible electronically starting from the address corresponding to the initial page. . of the site. The information is provided exclusively in relation to the site in question and its parts. This cannot be extended to other sites or pages not belonging to the site itself (including those that can be consulted by the user also through direct links from this site).