INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Premise
This information is provided for the website www.gpmodeling.shop (Platform or Site) owned by
TIMO S.R.L., with registered office in Italy, Caserta, 81100, VIA CAPITANO LUIGI LAVIANO 100, (registered with number IT04791230610)
, as Data Controller.
On the Platform and in communications with customers relating to the Platform and in this disclosure, TIMO S.R.L. acts under the banner and / or with the use of the surname "GPMODELING" or “GPMODELING.SHOP”. Therefore, when the expression and / or sign "GPMODELING" is used on the Platform and / or in communications with customers relating to the Platform or the first person plural is used, the reference is to be understood as TIMO S.R.L..
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), GOMODELING.SHOP processes your personal information under the following lawful bases:
-
Your consent;
-
The performance of the contract between you and the Platform;
-
Compliance with our legal obligations;
-
To protect your vital interests;
-
To perform a task carried out in the public interest;
-
For our legitimate interests, which do not override your fundamental rights and freedoms.
We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.
Purchases on the Platform
Upon your submission, your personal data will be processed to allow you to make purchases on the Platform.
Registration
The information and data required in case of registration will be used to allow you both to access the reserved area of the Platform and to use the online services offered by GPMODELING.SHOP to registered users.
Collecting personal information
When you visit the Platform, GPMODELING.SHOP collects certain information about your device, your interaction with the Platform, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.
Device information
-
Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
-
Purpose of collection: to load the Platform accurately for you, and to perform analytics on Platform usage to optimize our Site.
-
Source of collection: Collected automatically when you access our Platform using cookies, log files, web beacons, tags, or pixels .
-
Disclosure for a business purpose: shared with our processor Shopify.
Order information
-
Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers email address, and phone number.
-
Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
-
Source of collection: collected from you.
-
Disclosure for a business purpose: shared with our processor Shopify
Customer support information
-
Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers email address, and phone number.
-
Purpose of collection: to provide customer support.
-
Source of collection: collected from you.
The Platform is not intended for individuals under the age of 18. GPMODELING.SHOP does not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.
Marketing
With your consent, GPMODELING.SHOP may process the personal data you have provided in order to send you advertising material relating to its services.
In compliance with the Privacy Policy, we hereby intend to inform you that GPMODELING.SHOP will process your personal data under the following conditions.
-
to allow registration on the Platform/Site and access the services reserved for registered users as well as to allow compliance with the obligations deriving from the law or regulations in force, in particular, in the administrative, accounting and public security fields. The legal basis of the processing is GPMODELING legitimate interest in executing the user's request;
-
In the case of placing an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the operations connected to it (and, if necessary according to sector legislation, to fulfill tax obligations). The legal basis of the processing is the existence of a sales contract;
-
subject to your consent, for sending newsletters and sending advertising material relating to GPMODELING.SHOP services by email. The legal basis of the processing is your consent to receive this type of communication;
-
if the chat service is operational, allow the activation of the service, through which you can contact and be contacted by GPMODELING.SHOP, with your consent, while browsing the Platform. The provision is optional, but your refusal to process your personal data will make it impossible for GPMODELING.SHOP to contact you via chat. The legal basis of the processing is GPMODELING's legitimate interest in following up on the user's requests or in contacting them while browsing the Platform;
-
to respond to your requests through the customer care service. Your refusal will make it impossible for GPMODELING.SHOP to answer your questions through this service. The legal basis of the processing is GPMODELING's legitimate interest in following up on the user's requests;
-
to respond by phone or email to your requests. The provision is optional, but your refusal will make it impossible for GPMODELING.SHOP to respond to your requests. The legal basis of the processing is GPMODELING's legitimate interest in responding to user requests;
-
to allow your participation in the webinars organized by GPMODELING, also together with its partners. The provision is optional, but your refusal will make it impossible for GPMODELING to allow your participation in the webinar.
The provision of data for the purposes referred to in points 1) and 2) is purely optional. However, since this processing is necessary to allow registration on the Platform as well as to make a purchase on the Platform, your refusal to provide the data in question will make it impossible to register on the Platform and make such a purchase through the Platform.
The consent to the processing of your data for marketing purposes is purely optional. Failure to consent will make it impossible for you to receive advertising material relating to GPMODELING's services and to receive the latter's newsletter.
Without prejudice to the foregoing, it is understood that GPMODELING,SHOP may still use your personal data for the sole purpose of giving proper fulfillment to the obligations established by the laws in force and the obligations deriving from the contractual relations established between you and GPMODELING.SHOP.
If you have registered on the Platform, you may in any case change your consent for the purposes described above by contacting GPMODELING.SHOP at the addresses indicated in art. 4.
We remind you that you can oppose the processing of your personal data also through the appropriate link at the bottom of any email with promotional content sent by GPMODELING.SHOP.
Data relating to payment instruments
To make a payment through one of the payment cards offered on the Platform, the user must enter the confidential data of the payment card directly on a page that will communicate through a secure encryption protocol with the payment service provider (who will act as independent data controller), without passing through the GPMODELING.SHOP server which, therefore, will not process such data in any way. The data will be acquired in encrypted format.
With reference to the payment card data, it is specified that the processing of your personal data is necessary to allow the conclusion of the online purchase contract with GPMODELING. Failure to provide these data, therefore, will not allow you to complete the online purchase process.
Sensitive / judicial data
GPMODELING.SHOP does not process sensitive or judicial data.
Art. 2. Processing methods
The processing of your personal data will mainly be carried out with the aid of electronic or automated means, in the manner and with the appropriate tools to ensure the security and confidentiality of the data in accordance with the Privacy Policy. In particular, all the technical, IT, organizational, logistical and procedural security measures necessary to ensure the minimum level of data protection required by law will be adopted, allowing access only to the persons in charge of processing by the Data Controller or Managers designated by the Data Controller.
The information acquired and the methods of processing will be relevant and not excessive in relation to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.
Art. 3. Communication and dissemination of data
Your data may be disclosed:
- to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions;
- to banking institutions and companies that manage the national or international payment circuits through which online payments are made for products purchased through the Platform;
- to companies, consultants or professionals who may be in charge of installation, maintenance, updating and, in general, the management of GPMODELING.SHOP hardware and software or which GPMODELING uses for the provision of its services;
- to employees and / or collaborators of GPMODELING.SHOP;
- to the company in charge of carrying out the customer care activity;
- to subjects who manage online payment transactions;
- to all those public and / or private subjects, natural and / or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional to the correct fulfilment of the contractual obligations assumed, as well as the obligations deriving from the law.
The data concerning you will not be disclosed, except in anonymous and aggregate form, for statistical or research purposes.
Art. 4. Data Controller; Data Protection Officer
TIMO S.R.L., as Data Controller of personal data, can be contacted at the following addresses:
Telephone number: +39 388 108 2601
Email: info@gpmodeling.shop
Using the contact form reachable on the "Contact us" page on the Platform.
Art. 5. Retention of personal data
GPMODELING.SHOP will keep your personal data no longer than the time necessary to fulfil the purpose for which they were collected. GPMODELING.SHOP will keep your personal data for marketing purposes for 24 months from the last transfer. After this period of time, GPMODELING.SHOP will proceed to delete your personal data, or to request the renewal of consent.
In any case, GPMODELING.SHOP will keep your personal data for 10 years from the last transfer for defence purposes in court.
Art. 6. Rights of the interested party
Pursuant to art. 13 of the Privacy Policy, GPMODELING.SHOP informs you that If you are a resident of the EEA, you have the right to:
- ask GPMODELING for access to personal data and the correction or cancellation of the same or the limitation of the processing concerning you or to oppose their processing, in addition to the right to data portability;
- withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
- propose a complaint to a supervisory authority (eg: the Guarantor for the protection of personal data).
The above rights may be exercised with a request addressed without formalities to GPMODELING to the contacts indicated in art. 4 above
Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information indicated in art 4 above.
If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address above.
Art.7 Automatic decision - making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
GPMODELING.SHOP DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
-
Temporary deny list of IP addresses associated with repeated failed transactions. This deny list persists for a small number of hours.
-
Temporary deny list of credit cards associated with denylisted IP addresses. This deny list persists for a small number of days.
Art. 8. Amendments
GPMODELING.SHOP reserves the right to make changes to this information at any time, giving appropriate publicity to the users of the Platform and guaranteeing in any case an adequate and similar protection of personal data. In order to view any changes, you are invited to regularly consult this information.