This Policy also informs you on how you can access and update your personal information and make some decisions on how your personal information will be used.
This Policy governs our data collection activities, including data collected through our various channels such as Internet web sites, applications, social networking sites, centres for customer relations management, points of sale and events. Please note that the personal details we collect using one method (e.g. an Internet web site) are combined with personal data we collect with another method (e.g. an offline Enervit event). As a result of the above we can combine personal data originally collected by different entities. Please read Section 8 for more information on how to block that action.
1. SOURCES OF PERSONAL INFORMATION
e-mails, texts or other electronic messages; E-communication between you and Enervit;
Enervit Customer Service; calls to our Centres for the management of customer relations (“Customer Service”); stores; stores managed by Enervit;
offline registration forms; registration or other similar printed forms that we collect through ordinary correspondence, exhibition stands in stores, competitions and other promotions or events; points of sale; the assistants in Enervit stores or third party stores, to help you with ordering our products; data from other sources; social networking sites, information available to the public.
2. PERSONAL DATA WE COLLECT ABOUT YOU AND COLLECTION METHODS
Depending on how you interact with Enervit, we collect various kinds of information from you in the ways described below.
Personal contact information. This kind of information includes all the information you supply us with and that allows us to contact you, such as your name, address, e-mail address, social networking details or telephone number. Information for account access. Any information needed to supply you with access to your specific account profile, e.g. access identification/e-mail address, username, irretrievable password and/or security questions and answers.
Personal information. Any (non contact) information that describes yourself and your behaviour, e.g. date of birth, age or age range, gender, geographical location (e.g. post code), preferred products, hobbies and interests, household information or information related to life style.
Technical information on your computer/mobile device. Any information on the IT system or other technological device you use to access one of our Internet web sites or applications, such as the IP address used to connect your computer or device to the Internet, the kind of operative system, the type and version of web browser. If you access an Enervit web site or application through a mobile device such as a smartphone, the collected information will also include (where permitted) your mobile phone unique identification, the advertising ID, geolocalisation and similar data related to your mobile device.
Information on the use of Internet web sites/communications. When you browse and interact on our Internet web sites or newsletter, we use automatic data collection technologies to collect certain information on your actions. This includes information related to the links you have clicked on, displayed pages or contents and how long they were displayed for and other similar information and statistics regarding your interactions, response times to contents, downloading errors and the duration of your visits to certain pages. This information is collected using automated technologies such as cookies (browser cookies, flash cookies) and web beacons. It is also collected by using third party monitoring services.
Consumer feedback. This data includes information on your experience regarding the use of our products and services that you willingly share with us.
Consumer-generated content. This refers to any contents you create and then share with us on a social networking site or by uploading them onto one of our Internet web sites or applications, including the use of networking applications such as Facebook. This includes photos, videos, personal stories or other media or similar contents. Where permitted, we collect and publish contents generated by customers and related to a variety of activities (including competitions and other promotions), by the shared functions of Internet web sites, events that users have participated in and third party social events.
Information from social networking sites. This refers to any information you publicly share on a social networking site or information that is part of your profile on a third party social networking site (such as Facebook) and that you allow the third party social networking site to share with us. Examples include basic account-related information (such as name, e-mail address, gender, date of birth, city/town of residence, profile photos, user identification, list of friends, etc.) and all the other information or activities that you allow the third party social networking site to share. We receive your social networking profile information (or part of the information) every time you download or interact with an Internet Enervit application on a social networking site such as Facebook, every time you use a function integrated with an Internet Enervit site (such as Facebook Connect) or every time you interact with us through a social networking site. To learn more about how information on you is obtained by Enervit from third party social networking sites, or to stop sharing such social networking information, please visit the pages of the social networking site in question.
Payments and financial information. All the information we need to process an order, or that you use to make a purchase, e.g. the details of your debit or credit card (card holder’s name, card number, expiry date, etc.) or other types of payment (if available). In all cases we manage payment and financial information in compliance with all the applicable laws, regulations and safety standards, such as, for example, the data protection standards of the payment card sector.
Phone calls to Customer Services. Communications with Customer Services may be recorded, in compliance with applicable laws, for local operating needs (e.g. for quality or training purposes) and, in some cases, to obtain proof of consent to direct marketing or profiling. Payment card details are not recorded. If required by the law, you will be informed of call recording at the beginning of your call and you will be able to oppose such action.
3. COOKIES/SIMILAR TECHNOLOGIES, LOG FILES AND WEB BEACONS
A cookie is a small file sent by a web site and memorised in the user’s browser while the user visits an Internet web site. Cookies can be stored just for the time a given web site is used (session cookies) or for a longer period that is session-independent (persistent cookies). Cookies work with the contents of the Internet web site and normally their function is to improve the usability and the browsing experience on the web. They allow Enervit to learn about the displayed contents, the selected choices and every use of the web site by the user. This function also allows Enervit to offer more useful advertising, targeted to individual users. Enervit may also work with third parties (that use tracing technologies) to advertise on the Internet. These companies can collect anonymous information on the visits to our web site.
To pursue the aims listed above or other aims, cookies collect and record browsing information, although Enervit’s policy is to leave users to decide whether they want cookies to be used or not. As a result, if users block or stop cookies being used, some functions of the web site could be blocked, slower or inefficient.
4. PURPOSES FOR THE PROCESSING OF PERSONAL DATA
The paragraphs below describe the various purposes for which we collect and use your personal data and the various kinds of personal data collected for each purpose.
Sale of Enervit products and customer service. Sales and customer services require the use of the personal and contact details of Enervit customers (name, surname, e-mail address, phone number, delivery address, invoicing data, order history). Order processing. We use your personal data to process and deliver your orders, to inform you on order status, to correct addresses, to verify identity and for other fraud identification activities. This requires the use of certain personal details and information related to payment methods. Compliance with tax-related and accounting obligations. Promotions and marketing communications. With your specific consent, we use your personal data to send you marketing communications on goods or services and to offer you exclusive promotions. This can be done via e-mails, advertisements, text messages, phone calls or snail mail in the way it is allowed by the applicable laws. Some of our promotion campaigns may appear on third party social networking sites and/or Internet web sites. This use of your personal details is not mandatory, which means you can oppose the processing of your data for this purpose. We use your personal details when you interact with the functions of third party social networking sites, such as by clicking on the “Like” functions, to offer you advertisements. By reading the privacy policies of the third party social networking sites you use, you will be able to learn more about how these networking sites work, the profile data we obtain about you, and you will learn how to exercise your rights with regard to those sites.
Customisation (offline and online). With your explicit consent, we use your personal data (i) to analyse your preferences and habits, (ii) to anticipate your needs according to our analyses of your profile, (iii) to improve and customise your experience on our Internet web sites and applications; to ensure the content of our Internet web sites/applications is optimised to suit you and your computer or device; (iv) to allow you to take part in interactive functions when you decide to participate in them. We remember, for example, your access identification/e-mail address or user name so that you can complete access immediately the next time you visit our web site or to allow you to retrieve the products you had previously added to your shopping basket. Based on this type of information and with your consent, we display specific Enervit contents or promotions we think you may be interested in. This use of your personal details is not mandatory, which means you can oppose the processing of your data for this purpose. Other general purposes (e.g internal and analytical research, security). In compliance with applicable laws, we use your personal details for other purposes of a general nature, such as carrying out internal marketing studies, population-related studies and measuring the effectiveness of advertising campaigns. We also use your personal details to ensure our security.
5. RECIPIENTS OF YOUR PERSONAL DATA
We share your personal data with the following categories of recipients: companies in the Enervit Group, suppliers of logistics services, suppliers of legal, accounting and tax-related services. We use external companies to help us manage our activity (e.g. order processing, payment processing, identification of fraud and identity checking, debt collection, functioning of the Internet site, support services, promotions, development of the Internet web site, data analysis, Customer Service, etc.). The suppliers of services (and the staff selected by them) are only allowed to access and use your data on our behalf and according to our instructions. These recipients are required by law to ensure the safety and confidentiality of your personal data.
6. STORAGE OF YOUR PERSONAL DATA
We store your personal data for the time required to satisfy the needs connected to its processing and, in all cases, to comply with the accounting and tax-related obligations established by the current laws.
7. RIGHTS OF THE PARTY CONCERNED
At any time you have the right to request access to your personal data; to have that data changed or deleted; you have the right to limit the processing of data regarding you and to oppose to its processing; you also have the right to data portability and the right to submit a complaint to the competent authority.
You can exercise these rights by writing (via registered letter) to: Enervit S.p.A. Viale Achille Papa n. 30, 20149 Milano (MI), attaching a copy of your identification document. If the request is submitted by someone other than you, the request will not be granted unless that person proves that the request is legitimately made on your behalf. Please note that any identification information supplied to us will only be processed in compliance with and in the measure permitted by the law. To comply with some legal obligations, we may have to store some of your personal data even after you have requested its deletion.
8. YOUR CHOICES ON HOW WE USE AND DISCLOSE YOUR PERSONAL DATA
We endeavour as much as possible to offer you choices regarding the personal data you supply us with. The mechanisms listed below offer you some types of control over your personal data:
Cookies/similar technologies. You can adjust your browser’s settings so that you can refuse some or all cookie browsers, or are warned when cookies are being used. Please read section 3 above.
Advertising, marketing and promotions. If you do not want Enervit to use your personal data to promote its products or services, you can state your wish by ticking the relevant box(es) in the registration form or answering the question(s) made by our sales staff, Customer Service or our representatives in stores. If you no longer wish to receive such communications, you can at any time unsubscribe from receiving marketing communications, following the instructions supplied in each of those communications and, in all cases, by writing to Enervit S.p.A., Viale Achille Papa, 30, 20149 Milano (IT) or to: firstname.lastname@example.org. To opt out of marketing communications sent in any way, including through third party social networking sites, you can unsubscribe at any time by accessing the Internet web sites/applications and modifying your user settings in your account profile, unticking the relevant boxes or calling our Customer Service. Please note that, even if you opt out from receiving marketing communications, you may continue receiving from us communications of administrative nature, as well confirmation of orders or other transactions, notifications related to activities with your account (account confirmation, password modification, etc.) and other important announcements.
11. DATA CONTROLLER – JOINT CONTROLLER
12. DATA PROTECTION OFFICER
You can contact us by e-mailing the Data Protection Officer (email@example.com) or write to us by sending a letter to the attention of the Data Protection Officer of Enervit S.p.A. Viale Achille Papa 30 – 20149 Milan (IT)
13. REGULATORY FRAMEWORK