Privacy Policy
Privacy Notice - pursuant to Art. 13 et seq. of EU Reg. 679/2016 - by Aglow di Roberto Normando
Privacy Notice - pursuant to Art. 13 et seq. of EU Reg. 679/2016 - by Aglow di Roberto Normando.
Aglow di Roberto Normando, VAT No. 02635030642, with registered office in 83029 Solofra AV - via Fontanelle 18 and operational and management office in 84083 Castel San Giorgio SA - Via Dott. Pietro Fimiani 147, informs that the processing of personal data provided by You or collected by third parties upon account registration on the Aglow.it website, as well as that attributable to You collected in the course of executing purchase orders placed by You from time to time on the Website and subject to the general terms and conditions of sale, will be based on the principles of fairness, lawfulness and transparency, protecting your confidentiality and your rights.
Data Controller's email address: aglowit@gmail.com
1. TYPES OF DATA COLLECTED
Personal Data provided or collected by Aglow, whether independently or through third parties, includes: Cookies; usage data; first name; surname; telephone number; VAT number; company name; address; country; state; province; email; postal code; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example).
Personal data communicated to Aglow by third parties (entities other than the data subject)
[Account Creation]
Where You register on the Aglow.it website by authenticating with your Facebook and/or Google profile, the following personal data attributable to You will be communicated to Aglow:
for Facebook:
name, profile picture and email address
for Google:
name, email address, language preference and profile picture.
[Refer a Friend]
The personal data of the invited friend, namely their email address, will be processed by Aglow only if, following the invitation, the friend actually registers on the Aglow.it website and agrees to the terms and conditions of the Offer.
2. PURPOSES AND LEGAL BASIS
Your personal data will be processed for the following purposes and on the following legal bases:
A. Aglow STORE
(Compliance with contractual obligations and/or performance of pre-contractual measures – Art. 6, par. 1, lett. b) GDPR).
Aglow allows users to purchase (online) products from the Aglow.it website, in accordance with the terms set out in its general terms and conditions of sale, following registration on the website.
We therefore inform You that:
the processing of personal data provided by You or collected from your Facebook and/or Google account during registration on the Website (i.e., account creation), as well as any additional data attributable to You - collected in the course of executing purchase orders placed by You from time to time on the Aglow.it website (subject to Aglow.it's general terms and conditions of sale) and summarized in the DASHBOARD - will be for contractual purposes, i.e., to fulfill obligations arising from the sales contract (contractual stage) or to perform pre-contractual measures (pre-contractual stage). Compliance with contractual obligations and/or performance of pre-contractual measures is the legal basis for processing.
Upon cessation of the aforementioned legal basis, your personal data will be processed for the following purpose and on the following legal basis: compliance with legal obligations (Art. 6, par. 1, lett. b) national and/or EU GDPR applicable to Aglow.
[incomplete order] We inform You that if You complete the purchase order but do not submit it, Aglow will send You communications over the following seven (7) days reminding You to complete the submission of the order; the sending of such communications does not require your specific prior consent, but we remind You that You may oppose processing at any time free of charge and Aglow will cease the related communications.
B. Aglow CLUB
(Compliance with contractual obligations and/or performance of pre-contractual measures – Art. 6, par. 1, lett. b) GDPR)
Aglow allows users who make purchases on certain third-party online websites listed on the Aglow website to receive a partial refund of the amount spent (hereinafter "Cashback") in accordance with the terms set out in its general terms and conditions of sale, following registration.
Your data will be processed for contractual purposes, i.e., to provide the Cashback service.
The legal basis for processing is the performance of obligations arising from the contract. Upon cessation of the aforementioned legal basis, personal data will be processed for the following purpose and on the following legal basis: compliance with legal obligations (Art. 6, par. 1, lett. b) national and/or EU GDPR applicable to Aglow S.r.l.
C. NEWSLETTER
(Legal basis: consent Art. 6, par. 1, lett. a) GDPR)
This is Aglow's service for sending its newsletter to users.
The processing of personal data upon account registration on the Website, limited to the email address only, or by filling in the "subscribe to the newsletter" box located at the bottom of Your DASHBOARD, will be for marketing purposes (sending the newsletter) and the legal basis for its processing is your consent (Art. 6, par. 1, lett. a) GDPR), which You may revoke at any time.
After the revocation of consent, the related personal data (email address) will no longer be processed for such marketing purposes, and You will no longer receive the newsletter. The data will therefore be deleted, unless there is a legal basis under point sub 1) and/or 3) that legitimizes its retention by Aglow or another legal basis that makes processing lawful.
D. REFER A FRIEND
(Legal basis: Compliance with contractual obligations and/or performance of pre-contractual measures – Art. 6, par. 1, lett. b) GDPR)
Aglow offers its registered users -who invite their friends to use the Aglow.it website- discount vouchers that can be used for the online purchase of products on the same website.
The invitation to a friend can be made in several ways:
Tell Them in Person
In this case, Aglow provides a link or a name that must be communicated to the friend, who, by entering them during a purchase on the Aglow STORE, will be able to use the discount. Aglow does not collect any personal data of the friend except after the friend, to make the first purchase, has followed the registration procedure on the Aglow STORE;
Share via email
In this case, a link is sent directly from Your email account to the friend, which the latter can enter during the first purchase. Aglow does not collect any personal data of the friend except after the friend, to make the first purchase, has followed the registration procedure on the Aglow STORE.
Share a link
In this case, a registered user is sent an email with the offer, which can be forwarded to the friend. Aglow does not collect any personal data of the friend except after the friend, to make the first purchase, has followed the registration procedure on the Aglow STORE.
Share with Facebook / Messenger
In this case, the registered user sends a message on the friend's Facebook page; by clicking on the message, the friend will access the Aglow website, where they will be asked to provide their email address to receive the discount voucher usable at the Aglow STORE.
The operation is managed by the company Mention Me Limited, based in London - Vox Studios 1-45 Durham Street, SE11 5JH - Great Britain, on behalf of Aglow and is subject to specific terms and conditions.
Mention Me Limited has been appointed by Aglow as an external data processor.
E. LEGAL OBLIGATIONS
(Legal basis: compliance with legal obligations - Art. 6, par. 1, lett. GDPR)
Personal data will, in any case, be processed to comply with legal obligations (Art. 6, par. 1, lett. c) GDPR) national and/or of the European Union applicable to Aglow
3. PROCESSING METHODS
The processing of the aforementioned data will be carried out by formally appointed data processors and data processors who will use tools and media –paper, magnetic, computer or telematics– suitable to ensure their security and confidentiality. Processing may also be carried out using automated tools designed to store, manage and transmit the data electronically.
4. NATURE OF PROCESSING
The nature of provision is respectively:
(Mandatory) for the pre-contractual and contractual purposes under A), B and D); therefore, any refusal to provide them, in whole or in part, or the failure to authorize their processing and/or communication to third parties involved in the execution of purchase orders placed by You from time to time on the Website (subject to Aglow.it's general terms and conditions of sale), may result in Aglow being unable to complete the registration and/or execute the purchase orders and/or allow the use of discount vouchers.
(Optional) for the promotional purpose under C); therefore, any refusal to provide them, in whole or in part, or the failure to authorize their processing and/or communication to third parties involved in the performance of marketing activities (sending the newsletter) by Aglow, may result in Aglow being unable to carry out the promotional activity.
5. DATA SUBJECT RIGHTS
5.1. Regarding your personal data, as a data subject, You may, by sending a written communication by email to the following address: aglowit@gmail.com:
ask Aglow, as the data controller, for access to your personal data, rectification or erasure thereof, or restriction of processing or to oppose processing (pursuant to Arts. 15, 16, 17, 18, 19, 21 of EU Reg. 679/2016). In particular:
regarding the rectification of personal data, taking into account the purposes of processing, You have the right to obtain the completion of incomplete personal data, even by providing a supplementary statement;
regarding the restriction of processing, You have the right to obtain it when one of the following cases occurs: a) You contest the accuracy of the personal data, for the period necessary for Aglow to verify the accuracy of such personal data; b) the processing is unlawful and You oppose the erasure of personal data and instead ask that its use be restricted; c) although Aglow no longer needs it for processing purposes, the personal data is necessary for You to establish, exercise or defend a right in judicial proceedings;
regarding the erasure of personal data without undue delay, You have the right to obtain it when one of the following reasons occurs: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) You, as a data subject, revoke the consent on which the processing is based if there is no other legal basis for processing; c) the personal data have been processed unlawfully; d) the personal data must be erased to comply with a legal obligation provided by the law of the Union or the Member State to which Aglow is subject;
receive in a structured, commonly used and machine-readable format the personal data relating to You provided to a data controller and You will have the right to transmit such data to another data controller without hindrance from Aglow (i.e., the "right to data portability" pursuant to Art. 20 of EU Reg. 679/2016);
revoke consent at any time without affecting the lawfulness of processing based on the consent given before the revocation (pursuant to Art. 8, par. 3, EU Reg. 679/2016).
5.2. Your personal data will not be disclosed and will not be transferred to third countries or international organizations.
5.3. Your personal data are stored on servers located in Frankfurt (DE).
6. CONTROLLER - EXTERNAL DATA PROCESSORS OF PERSONAL DATA
The data controller is Aglow P.I. 02635030642, with registered office in 83029 Solofra AV - via Fontanelle 18 and operational and management office in 84083 Castel San Giorgio SA - Via Dott. Pietro Fimiani 147, which can be contacted at the following address: aglowit@gmail.com. An external data processor, among others, is Mention Me Limited.
The complete list of external data processors can be viewed by writing to the email address above.
7. COMMUNICATION OF PROCESSING
Without prejudice to communications made in the course of legal obligations, your personal data may be communicated:
regarding Aglow STORE/CLUB
companies producing the goods/services for sale on the Aglow.it website;
companies specializing in the management of cashback systems;
transport/shipping/home delivery companies;
companies entrusted with payment management;
advisors and credit institutions;
IT and telematics service providers;
service and content providers;
customer support service providers
regarding the NEWSLETTER;
companies managing marketing campaigns and online communications
8. DATA RETENTION PERIOD
The personal data (common) provided by You will be stored in a form that allows Your identification, as a data subject, for the following time frame:
(pre-contractual and contractual purposes) until the termination of the contract with the user and the rights deriving therefrom; subsequently, the personal data will be stored for an additional 10 years in order to comply with any tax and contractual legal obligations;
(promotional purpose - newsletter) until the revocation of consent: subsequently, the personal data will no longer be processed for such purpose and will be deleted. There is no automated system for the deletion of personal data at the end of the retention period, since the deletion of the same occurs manually.
The Right to erasure (or "right to be forgotten") pursuant to Article 17 of the GDPR (General Data Protection Regulation) allows individuals to obtain the removal of their personal data from the data controller without undue delay, when the data are no longer necessary, consent is revoked without further grounds, the data are processed unlawfully, or legal obligations exist, etc.. Such right requires the controller to delete the data and, if they have made them public, to inform other data controllers to remove copies or links, balancing this right with freedom of information and other legitimate interests.
Grounds for erasure (Art. 17, par. 1)
The data subject may request the erasure of their data if one of the following conditions occurs:
Unnecessity of the data: They are no longer necessary for the purposes for which they were collected.
Revocation of consent: The data subject revokes consent and there is no other legal basis for processing.
Opposition to processing: The data subject opposes processing (Art. 21) and there are no overriding legitimate grounds.
Unlawful processing: The data have been processed in violation of the GDPR.
Legal obligation: They must be erased to comply with a legal obligation (EU or national).
Children's data: Processing connected to the offering of information society services to children.
9. COMPLAINT
If You believe that the processing violates EU Reg. 679/2016, You have the right to lodge a complaint with a supervisory authority, specifically in the Member State where You habitually reside or work or in the place where the alleged violation occurred.
10. COOKIE POLICY
Aglow uses Cookies. To learn more and view the detailed notice, the User can consult the Cookie Policy.