Welcome to our website hitsicily.com (the Website).
Your privacy and the security of your personal data are very important to Hitsicily, represented by A&D SRL; that is why we collect and manage your personal data with the utmost care and adopt specific measures to keep them secure.
Who is the Data Controller?
The key information regarding the processing of your personal data by A&D SRL with registered office in Via Telamone, 5 - 90151 Palermo, VAT.NO. 05882830820 in its capacity as Data Controller, is set out below.
For any clarification, question or need connected with your privacy and the processing of your personal data you can contact us at any time by sending a request to the e-mail address email@example.com.
Which data do we process and why?
The personal data which VAT NO. 05882830820 processes are those which you provide to us when you conclude an order and purchase goods, and those which we collect while you navigate or use the services offered on yoox.com. A&D SRL can collect data on you such as, for example, personal details like name and surname, shipping address and invoicing address, navigation data and purchasing habits.
Your personal data are processed for the following reasons:
- conclude and perform the contract for purchasing goods offered on hitsicily.com;
- provide you with the services of hitsicily.com such as subscription to the newsletter;
- allow you to register to the Site and use the services dedicated to registered users;
- handle your requests forwarded to our Customer Services.
In the aforementioned cases, the processing of your personal data is legitimate as it is required to perform a contract which you are party to or provide you with the services you have specifically requested.
We also carry out statistical surveys and analyses with data in aggregate form to understand how the users interact and use the Site, to improve our offer and our services.
Who processes your data?
Your personal data are processed by appropriately trained staff of A&D SRL in its capacity as Data Controller, for organisational and functional needs regarding the provision of the services on hitsicily.com.
How long are your data retained for?
We retain your personal data for a limited period of time, which depends on the purpose for which they were collected, at the end of which they will be cancelled or in any case made irreversibly anonymous. This retention period differs according to the purpose of the processing activity; for example, the data collected during the purchase of goods on hitsicily.com are processed until the conclusion of all the administrative and accounting formalities and then filed in accordance with the local tax regulation (10/ten years); those used to send you our newsletters are retained until you ask us to stop sending them.
What are your rights?
At any time, according to the specific processing activity, you can: withdraw your consent to the processing activity, know which of your personal data is in our possession, their origin and how they are used, request them to be updated, corrected or integrated, as well as, in the case envisaged by the provisions in force, cancelled, limitation of processing or oppose their processing. If you wish, you can request receipt of the personal data in the possession of A&D SRL which relate to you in a legible format from electronic devices.
If you believe that your personal data have been processed illegitimately, you can lodge a complaint with one of the competent control authorities that ensure respect of the personal data protection regulations. In Italy, the complaint can be lodged with the Personal Data Protection Authority (http://www.garanteprivacy.it/).
1. General information
Who is the Data Controller?
A&D SRL with registered office in via Telamone, 5 - 90151 Palermo, VAT NO. 05882830820, is the Data Controller, the subject who decides how and why to process your personal data.
You can contact A&D SRL by writing to the aforementioned address, or by sending an e-mail to firstname.lastname@example.org
Who is the Personal Data Protection Officer?
A&D SRL has appointed a Personal Data Protection Officer.
If you wish, for any request on personal data protection and on the exercise of your rights you can contact our Data Protection Officer (DPO), by writing to "Data Protection Officer" at the address of the Controller, or via e-mail to the address email@example.com
2. Which personal data do we collect?
The categories of personal data which A&D SRL collect and process when you navigate or purchase on hitsicily.com, are the following:
a) we collect the personal data necessary to conclude and perform your purchase on hitsicily.com, i.e. name and surname, e-mail address, shipping address, invoicing address, telephone and payment data;
b) we collect your e-mail address when you subscribe to our information service;
c) we process your personal data which you provide to us when you contact our Customer Service to provide you with the assistance requested;
d) upon your consent, we collect and use your personal data for marketing purposes;
e) to register your account, we collect your name and surname and e-mail address. If you are a registered user, we collect information on your access to the reserved area of the Site. Upon your specific consent, by analysing your personal data we can elaborate information on your interests and preferences with respect to our products and services so that we can present you with proposals and offers that meet your tastes. In case of account authentication by means of external social networks, from these third parties we collect the data necessary for the registration/authentication via Facebook and Google. This information includes the following categories of data: e-mail address.
f) we collect information on your navigation on hitsicily.com, such as, for example, the pages you visit and how you interact with the single page and we save this information on our servers.
g) if you were to provide A&D SRL with personal data of third subjects, for example if you decide to register in the name of a user who is part of your travel group, A&D SRL will send the information on the registration to the third party subject. We remind you that the use of personal data of third subjects is subject to the personal data protection regulation.
A&D SRL does not process the personal data of minors. If you access hitsicily.com and use the services offered by A&D SRL you declare to have reached majority age.
3. How do we use the personal data collected?
A&D SRL collects and processes your personal data for the following purposes:
a) conclude and perform the contract for purchasing products offered on hitsicily.com. When you conclude your purchase we ask you for the personal data necessary for the activities to perform the contract, such as payment, anti-fraud controls if you had chosen to pay by credit or debit card, invoicing. b) registration to the Site and use of the services offered to registered users. It is possible to register to the site by entering some personal information, necessary to guarantee your identification and to carry out the services offered to the registered users.
c) provide services proposed on hitsicily.com. To this end, A&D SRL needs to collect the personal data required to carry out the service requested by you, in relation to each service and its characteristics.
d) handling the requests made to our Customer Service, which uses the personal data to satisfy your requests for information and assistance.
e) analyses and statistical surveys. We use some information on your use of the Site to carry out analyses and statistical surveys to improve our offer and our services;
f) send commercial and promotional communications following the purchase of one of our products so-called soft-spam. Following the purchase of a product on the Site, we will send you communications containing our commercial proposals on similar products and services to the e-mail address you provided to us.
g) upon your specific consent, we can use the contacts which you have provided to us for commercial communications on our products and services, to update you on novelties, new arrivals, exclusive products, our offers and promotions. With your consent, we can also use your contact details within the scope of market research and satisfaction surveys to improve our services and the relationship with our users. These communications will be made exclusively via e-mail, text message, telephone, paper mail, Whatsapp.
h) A&D SRL can only personalise your experience as user registered on hitsicily.com with your consent, proposing anticipations and offers in line with your tastes and sending you personalised commercial communications according to your interests. These communications will be sent exclusively via e-mail, text message, phone, paper mail, Whatsapp. The personalisation is done by analysing your purchase preferences and other information described in the preceding paragraph "Which personal data do we collect?”.
If you want to authorise the activities at points g) and h) and subsequently no longer wish to receive further communications from A&D SRL or you want to limit the methods with which to be contacted, you can at any time interrupt these communications by simply clicking on the link “unsubscribe” at the bottom of each e-mail communication containing advertising or promotional information, or by contacting A&D SRL by phone or e-mail at firstname.lastname@example.org.
We inform you that you could receive further communications from us even after having forwarded your request to unsubscribe, since some mailings could already have been scheduled and our systems take some time to carry out your request.
In relation to all the activities set out above, we will process your personal data using primarily IT and electronic tools; the tools we use guarantee high levels of security, in full respect of the regulation in force on the matter.
4. Your hitsicily profile
Upon the creation of your hitsicily profile we offer you the possibility to use the following services:
• My orders: your orders, change or add and see the history of the orders
• My data: handle your registration data
• My addresses: save or modify your addresses
5. Legal basis of the processing activity
We process your personal data only in the presence of one of the conditions required by the regulation in force, and specifically:
a) to conclude and perform the contract which you are party to.
When we process your data to conclude the purchasing contract you are party to we take care to use only the least information necessary to do so. This basis legitimates the processing of personal data which occurs in the following activities:
- conclusion and performance of a contract for purchasing products offered on hitsicily.com;
- registration to the Site and use of the services dedicated to registered users;
- provision of any services offered on hitsicily.com;
- handle your requests by our Customer Service.
The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but failure to provide the data requested will make it impossible for us to conclude or perform the contract and your requests. This means that you cannot purchase the products and you cannot use the services of hitsicily and hitsicily cannot handle your requests;
b) to perform a legal obligation.
In the case of conclusion of a contract for purchasing goods on hitsicily.com, the data of the User will be processed to perform the legal obligations to which A&D SRL is held in compliance with the tax regulations and other regulations which A&D SRL is subject to. You are free to decide whether to conclude a contract and whether to communicate your data or not, but if you conclude it your data will be necessary and processed to perform the aforementioned legal obligations to which A&D SRL is held.
c) for our legitimate interest.
When you purchase products on hitsicily.com by credit card, some of your personal data can be processed to carry out anti-fraud activities: we have a legitimate interest in carrying out these activities to prevent and prosecute any fraudulent activity. For internal administrative purposes, the data could be handled by third companies which are part of A&D SRL d) on the basis of your consent.
We will carry out the following processing activities only if you give us your specific consent:
• marketing activities, opinion surveys and market research;
• analysis of your navigation and consumption habits within the scope of the use of your hitsicily profile, to personalise your experience on our Site.
The provision of your personal data for such activities is totally voluntary. You are free to provide us with your data or not for such purposes, but failure to do so will make it impossible for A&D SRL to carry out marketing activities, opinion surveys and market research, and analysis of your habits.
6. Who processes your data?
Your data will be processed by internal staff of A&D SRL specifically trained and authorised to process them.
Your data can be transmitted to the police forces and to judicial and administrative authorities, in compliance with the law, to prove and prosecute crimes, prevent and protect threats to public safety, to allow A&D SRL to establish, exercise or defend a right in court as well as for other reasons connected to the protection of the rights and the freedom of others.
7. How long do we retain the data for?
We retain your personal data for a limited period of time; this varies depending on the type of activity which envisages the processing of your personal data.
Once this period has expired, your data will be definitively cancelled or made irreversibly anonymous.
Your personal data are retained with respect to the terms and criteria specified below:
a) data collected to conclude and perform contracts for purchasing goods on hitsicily.com: until the conclusion of the administrative-accounting formalities. The invoicing data will be retained for ten years from the invoicing date;
b) data of the registered user: the data will be retained until you request the cancellation of your hitsicily profile;
c) payment data: until certification of payment and conclusion of the relevant administrative-accounting formalities; d) data collected within the context of the use of services offered on hitsicily.com: these data are retained until the service ceases or the User cancels his subscription to it;
e) data connected to requests of the users to our Customer Service: the data useful to assist you will be retained until your request is satisfied;
f) CV: for six months from receipt;
g) data used for commercial communications to users who purchase products on hitsicily.com (soft spam): these data are retained until the service ceases or the user exercises his opposition by cancelling his subscription;
h) data provided for commercial communications, opinion surveys and market research: until the request of the user to interrupt the activity and in any case within 2 years from the last interaction of any kind of the user with A&D SRL;
i) data used to personalise the Site and to show personalised commercial offers: until the user does not ask for the activity to cease and in any case within two years since the last interaction of any kind of the user with A&D SRL;
j) data used to carry out market research and satisfaction surveys; until the user asks for the activity to cease.
In any case, for technical reasons, ceasing of the data processing activity and consequent definitive cancellation or their transformation into irreversible anonymous will be definitive within thirty days (30 days) from the terms set out above.
11. Your rights
You are entitled to exercise your rights at any time with reference to the specific processing of your personal data by A&D SRL. Below is a general description and methods for exercising them.
a) Access your data and modify them: you have the right to access your personal data and ask for them to be corrected, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.
b) Withdraw your consent: you may, at any time, withdraw the consent you have given to process your personal data in relation to any activity with marketing purposes. In this regard, we remind you that sending commercial and promotional materials, market research and satisfaction surveys to personalise the website and commercial offers based on your interests are considered marketing activities. Having received your request we will do our best to promptly cease the processing of your personal data which is based on this consent, while other processing activities or activities based on other preconditions will continue to be carried out in full respect of the regulations in force.
c) Oppose the treatment of your data: you have the right, at any time, to oppose the processing of your personal data carried out on the basis of a legitimate interest, explaining the reasons that justify your request; before acting on it, A&D SRL must assess the reasons of your request.
d) Cancel your data: in the cases envisaged by the regulation in force you can ask for the cancellation of your personal data. Having received your request and acted on it, if legitimate we will promptly cease to process your personal data.
e) Ask that the treatment of your personal data is temporarily limited: in this hypothesis, A&D SRL will continue to retain your personal data but not to process them, without any prejudice to a different request made by you and the exceptions envisaged by the law. You can obtain limitation of the processing activity when you dispute the accuracy of your personal data, when the processing activity is illegitimate but you oppose the cancellation of your data, when we no longer require your data but you need them to exercise your right in court and when you oppose their processing, in the period in which we assess the reasons for your request.
f) Request your data or transfer them to a subject other than A&D SRL (“right to data portability”). You can ask to receive your data which we process according to your consent or according to a contract which you are party to in a standard format. If you wish, where technically possible, we can, on your request, transfer your data directly to a third party indicated by you
In order to exercise any of your rights set out above you can login or alternatively contact us via e-mail at email@example.com or phone one of our telephone numbers published on the site.
To guarantee that the data of our users are not violated or illegitimately used by third parties, before accepting your request to exercise one of the rights indicated, we will ask you for some information to be sure of your identity.
12. Security measures
We protect your personal data with specific technical and organisational security measures, geared to preventing that your personal data can be used illegitimately or fraudulently. In particular, we use security measures that guarantee: encryption of your data; confidentiality, integrity, availability of your data like the resilience of the systems and of the services which elaborate them; the ability to recover the data in case of data breach. A&D SRL also undertakes to test, verify, and regularly assess the efficacy of the technical and organisational measures to guarantee continuous improvement in the security of the processing activities.
If you believe that your personal data has been illegitimately processed, you can lodge a complaint with one of the competent control authorities to respect personal data protection regulations.
In Italy, the complaint can be lodged with the Personal Data Protection Agency.
Further information on the methods of presentation is available on the site of the Agency, at the address http://www.garanteprivacy.it.
We invite you to periodically check the contents: where possible, we will try to promptly inform you of the changes made and their consequences
15. Legislative references and useful links
The processing of your personal data is carried out by A&D SRL in full respect of EU Regulation 2016/679 general data protection regulation, of the Italian regulations on personal data protection and the provisions of the Italian Control Agency (http://www.garanteprivacy.it).