PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA
Privacy Code – Legislative Decree 30.6.2003, no. 196 – Art. 13 – EU Regulation 679/2016 on the processing of personal data – Art. 13
Data Controller
ECLECTICRECORDS
Via Rosselli 21, 55049 Viareggio, Italy
Email: info@eclectic-records.com
(hereinafter, the “Controller”), as data controller, informs you pursuant to Art. 13 of Legislative Decree 30.6.2003 no. 196 (hereinafter, the “Privacy Code”) and Art. 13 of EU Regulation no. 2016/679 (hereinafter, the “GDPR”) that your data will be processed in the manner and for the purposes described below.
“Processing of personal data” means any operation or set of operations, whether or not by automated means, applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The data will be processed for the following purposes, manually and/or with the support of IT or telematic tools.
1. Subject Matter and Legal Basis of the Processing
The Controller processes personal identification data (for example: first name, last name, company name, address, telephone, e-mail, banking and payment details) – hereinafter “personal data” or “data” – provided by you when entering into contracts or when registering via the Web for the Controller’s services.
The Controller’s legitimate interest is the activity of website development and digital marketing.
2. Purposes of the Processing
Your personal data are processed:
A) Without your explicit consent (Art. 24 lett. a), b), c) Privacy Code and Art. 6 lett. b), e) GDPR), for the following Service Purposes:
-
to enter into contracts for the Controller’s services and products;
-
to enter into contracts for the Controller’s services and products;
-
to comply with obligations established by law, regulations, EU legislation or an order issued by an Authority (for example, anti-money laundering requirements);
-
to exercise the Controller’s rights, for example the right of defense in court.
B) Only with your specific and separate consent (Arts. 23 and 130 Privacy Code and Art. 7 GDPR), for the following Marketing Purposes:
to send you, by e-mail, post, SMS or telephone calls, newsletters, commercial and informational communications about services and products offered by Company Name or to assess your level of satisfaction.
Please note that if you are already our customer, we may send you commercial communications relating to services and products of the Controller similar to those you have already used, unless you object (Art. 130 para. 4 Privacy Code).
3. Processing Methods
The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data.
Your personal data are processed both on paper and electronically and/or by automated means.
The Controller will process personal data for the time necessary to fulfill the purposes indicated above and also thereafter in order to comply with legal obligations regarding the retention of accounting records. For processing for Marketing Purposes, the data will be retained in compliance with the principle of proportionality and in any case until the purposes of the processing have been achieved or until the data subject withdraws the specific consent.
4. Access to Data
Your data may be made accessible for the purposes set out in Art. 2.A) and 2.B):
-
to employees and collaborators of the Controller, in their capacity as persons authorized to process the data and/or internal processors and/or system administrators;
-
to third-party companies or other entities (by way of example: banks, professional firms, consultants, insurance companies for the provision of insurance services, companies for personal financing, Internet Service Providers, etc.) that perform outsourced activities on behalf of the Controller, in their capacity as external data processors.
5. Disclosure of Data
Without the need for explicit consent (pursuant to Art. 24 lett. a), b), d) Privacy Code and Art. 6 lett. b) and c) GDPR), the Controller may disclose your data for the purposes referred to in Art. 2.A) to third-party companies or other entities, to supervisory bodies (such as IVASS), judicial authorities, to insurance companies for the provision of insurance services, as well as to those entities to whom disclosure is mandatory by law for the performance of the said purposes.
These entities will process the data in their capacity as independent data controllers.
The Controller may also disclose your data to employees and collaborators, in their capacity as processors or authorized persons, including those temporarily assigned to use them.
Your data will not be disseminated.
6. Data Transfer
Personal data are stored on servers located at Server address, within the European Union or at Internet Service Providers appointed by us. In any case, it is understood that the Controller, if necessary, may also move the servers outside the EU. In such case, the Controller hereby ensures that any transfer of data outside the EU will take place in compliance with applicable legal provisions, subject to the execution of the standard contractual clauses provided by the European Commission.
7. Nature of Data Provision and Consequences of Refusal
Providing data for the purposes referred to in Art. 2.A) is mandatory. Without such data, we will not be able to provide you with the Services referred to in Art. 2.A).
Providing data for the purposes referred to in Art. 2.B) is optional. You may therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in such case, you will not receive newsletters, commercial communications and advertising material relating to the Services offered by the Controller. You will in any case continue to be entitled to the Services referred to in Art. 2.A).
8. Data Subject’s Rights
In your capacity as data subject, you have the rights set out in Art. 7 of the Privacy Code and Art. 15 GDPR, specifically the right to:
-
obtain confirmation as to whether or not personal data concerning you exist, even if not yet recorded, and to have them communicated in an intelligible form;
-
obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the controller, the processors and the representative designated pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1, GDPR; e) the entities or categories of entities to whom the personal data may be disclosed or who may become aware of them in their capacity as designated representative in the State territory, processors or authorized persons;
-
obtain: a) the updating, rectification or, where interested, integration of the data; b) erasure, anonymization or blocking of data processed unlawfully, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to under letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data were disclosed or disseminated, except where this proves impossible or involves a manifestly disproportionate effort with respect to the protected right;
-
object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication, by means of automated calling systems without the intervention of an operator by e-mail and/or by traditional marketing methods by telephone and/or paper mail. Please note that the right to object for direct marketing purposes by automated means extends to traditional means, and in any case the data subject may exercise the right to object even only in part. Therefore, the data subject may decide to receive only communications through traditional means, or only automated communications, or neither type of communication. Where applicable, you also have the rights set out in Arts. 16–21 GDPR (right to rectification, right to erasure/right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
9. How to Exercise Your Rights
You may exercise your rights at any time by sending:
-
a registered letter with return receipt to Company name and address
-
an e-mail to the Controller’s e-mail address
10. Controller, Processors and Authorized Persons
The data controller is Company name and address.
The updated list of processors and authorized persons is kept at the Controller’s registered office.
Cookie Policy of www.eclectic-records.com
Cookies are small portions of code installed within the browser that assist the Controller in providing the service according to the purposes described. Some Cookie installation purposes may also require the User’s consent.
Technical Cookies and Aggregated Statistics Cookies
• Activities strictly necessary for operation
This Website uses Cookies to save the User’s session and to carry out other activities strictly necessary for its operation, for example in relation to traffic distribution.
• Preference saving, optimization and statistics activities
This Website uses Cookies to save browsing preferences and optimize the User’s browsing experience. These Cookies include, for example, those used to set language and currency, or to manage statistics by the Website owner.
Other Types of Cookies or Third-Party Tools That May Be Used
Some of the services listed below collect statistics in aggregate form and may not require the User’s consent, or may be managed directly by the Controller—depending on what is described—without the assistance of third parties.
Where the tools listed below include services managed by third parties, such services may— in addition to what is specified and also without the Controller’s knowledge—carry out User tracking activities. For detailed information, it is recommended to consult the privacy policies of the listed services.
Remarketing and behavioral targeting
These services allow this Website and its partners to communicate, optimize and serve ads based on the User’s past use of this Website.
This activity is performed by tracking Usage Data and using Cookies; information is transferred to partners connected with remarketing and behavioral targeting activities.
In addition to the opt-out options offered by the services listed below, the User can opt out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.
-
Remarketing with Google Analytics for Display Advertising (Google Inc.)
Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that links the tracking activity performed by Google Analytics and its Cookies with the AdWords advertising network and the DoubleClick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out. -
AdWords Remarketing (Google Inc.)
AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that links this Website’s activity with the AdWords advertising network and the DoubleClick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out. -
Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links this Website’s activity with the Facebook advertising network.
Personal Data collected: Cookies and email.
Place of processing: USA – Privacy Policy – Opt Out. -
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that links this Website’s activity with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
Analytics
The services in this section enable the Controller to monitor and analyze traffic data and track User behavior.
-
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out. -
Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that links data from the Facebook ads network with actions performed within this Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy. -
Google Tag Manager (Google Inc.)
Google Tag Manager is a statistics service provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy. -
Google AdWords conversion tracking (Google Inc.)
Google AdWords conversion tracking is a statistics service provided by Google Inc. that links data from the Google AdWords advertising network with actions performed within this Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
Displaying content from external platforms
These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them.
If such a service is installed, it may collect traffic data relating to the pages where it is installed, even if Users do not use the service.
-
Google Fonts (Google Inc.)
Google Fonts is a font style visualization service managed by Google Inc. that allows this Website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy. -
Google Maps widget (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this Website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy. -
YouTube video widget (Google Inc.)
YouTube is a video content visualization service managed by Google Inc. that allows this Website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
How can I control the installation of Cookies?
In addition to what is indicated in this document, the User can manage Cookie preferences directly within their browser and prevent, for example, third parties from installing them. Through browser preferences, it is also possible to delete previously installed Cookies, including the Cookie that may have saved consent for the installation of Cookies by this website. It is important to note that disabling all Cookies may compromise the functioning of this website. The User can find information on how to manage Cookies in their browser at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Windows Explorer. In the case of services provided by third parties, the User can also exercise their right to object to tracking by consulting the third party’s privacy policy, using the opt-out link if explicitly provided, or by contacting the third party directly. Notwithstanding the foregoing, the Data Controller informs the User that they may use Your Online Choices. This service allows them to manage the tracking preferences of most advertising tools. The Data Controller therefore recommends that Users use this resource in addition to the information provided in this document.
Data Controller
ECLECTICRECORDS
Via Rosselli 21, 55049 Viareggio, Italy
Email: info@eclectic-records.com
Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Website cannot be technically controlled by the Data Controller, any specific references to Cookies and tracking systems installed by third parties are to be considered indicative. For complete information, please consult the privacy policy of any third-party services listed in this document. Given the objective complexity of identifying technologies based on Cookies and their very close integration with the functioning of the web, the User is invited to contact the Owner should he or she wish to receive any further information regarding the use of Cookies themselves and any possible uses of them – for example by third parties – carried out through this site.
Definitions and Legal References
Personal Data (or Data)
Personal data means any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.
Usage Data
This information is collected automatically by this Website (or by third-party applications used by this Website), including: IP addresses or domain names of the computers used by the User who connects to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal details of the visit (e.g., the time spent on each page), and the details of the path followed within the Application, with particular reference to the sequence of pages visited, and other parameters relating to the operating system and the User’s IT environment.
User
The individual using this Website, who must coincide with or be authorized by the Data Subject, and whose Personal Data is being processed.
Data Subject
The natural or legal person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public administration, or any other body, association, or organization designated by the Data Controller to process Personal Data, as set forth in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public administration, or any other body, association, or organization responsible, even jointly with another Data Controller, for decisions regarding the purposes and methods of processing Personal Data and the means used, including security measures, in relation to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website
The hardware or software tool through which Users’ Personal Data is collected.
Cookie
Small piece of data stored on the User’s device.
Legal Information
Notice to European Users: This privacy policy has been prepared in fulfillment of the obligations set forth in Art. 10 of Directive 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies. This privacy policy applies exclusively to this Website.
