Etara Art, as the party responsible for the processing and protection of the personal data you provide to us, we hereby inform you that, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we will process your personal data as described in this Privacy Policy.

By accepting the terms set out in this Privacy Policy, you agree to the processing of your personal data by ETARA ART in accordance with this Privacy Policy.

CONTACT

Elisabetta Boscolo Nale

ETARA ART

Via Altair, 6 Chioggia 30015 VE

Italy

VAT number IT04641910270

The processing of the User’s personal data shall be subject to the following principles, as set out in Article 5 of the GDPR and Articles 4 et seq. of Organic Law 3/2018

–Principle of lawfulness, fairness and transparency: The User’s consent shall always be obtained following the provision of fully transparent information about the purposes for which personal data are collected.

–Principle of purpose limitation: Personal data shall be collected for specified, explicit and legitimate purposes.

–Principle of data minimisation: Only personal data that are strictly necessary in relation to the purposes for which they are processed shall be collected.

–Principle of accuracy: Personal data must be accurate and kept up to date at all times.

-Principle of storage limitation: Personal data shall be kept in a form that permits the identification of the User only for as long as is necessary for the purposes for which they are processed.

–Principle of integrity and confidentiality: Personal data shall be processed in a manner that ensures their security and confidentiality.

–Principle of accountability: The Data Controller shall be responsible for ensuring compliance with the above principles.

In accordance with the provisions of the GDPR and the LOPDGDD, you are hereby informed that the personal data collected by ETARA ART through the forms provided on its website will be entered into and processed in our records for the purpose of facilitating, expediting and fulfilling the commitments established between ETARA ART and the User, or of responding to any request or enquiry submitted by the User.

–Financial and payment information. All the information we need to process an order or that you provide when placing an order, such as debit or credit card details (cardholder’s name, card number, expiry date, etc.) or other payment methods. In all cases, we handle financial and payment information in accordance with applicable laws, regulations and security standards.

–Personal contact information. This includes any information provided by the User that enables us to contact them, such as their name, postal address, email address, social media details or telephone number.

–Customer service. We use the User’s personal data for purposes related to the provision of customer service, including responding to their enquiries. This type of service generally involves the processing of certain contact details, as well as information relating to the content of the enquiry (e.g. technical issues, product complaints or concerns, general questions, etc.).
–Order processing. We use your personal data to process and ship your orders, inform you about their status, correct addresses, and carry out identity checks and other fraud detection activities. This involves the processing of certain personal data and payment information.

Your personal data will not be disclosed to any third parties outside ETARA ART, unless we are legally required to do so.

In accordance with applicable laws, we will use and retain the User’s personal data only for as long as necessary to fulfil the purposes for which it was collected (as described above) or to comply with applicable legal requirements.

ETARA ART undertakes to implement the necessary technical and organisational measures, in accordance with the level of security appropriate to the risk associated with the data collected, in order to ensure the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorised disclosure of or access to such data.

However, as it is not possible to guarantee the security of the Internet or the complete absence of hackers or other individuals who may fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay of any personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons.

The User may exercise the following rights against the Data Controller, as recognised under the GDPR and Organic Law 3/2018:

–Right of access: The User has the right to obtain confirmation as to whether or not ETARA ART is processing their personal data and, where this is the case, to access their specific personal data and obtain information about the processing that has been or is being carried out.

–Right to rectification: The User has the right to have their personal data corrected if they are inaccurate or, taking into account the purposes of the processing, incomplete.

–Right to erasure: Unless otherwise provided by law, the User has the right to obtain the erasure of their personal data where such data are no longer necessary for the purposes for which they were collected or processed; where the User has withdrawn their consent and there is no other legal basis for the processing; where the User objects to the processing and there are no overriding legitimate grounds for continuing it; where the personal data have been unlawfully processed; where the personal data must be erased in order to comply with a legal obligation; or where the personal data have been collected in connection with the direct offering of information society services to a child under the age of 14.

In addition to erasing the data, the Data Controller shall, taking into account available technology and the cost of implementation, take reasonable steps to inform other controllers processing the personal data of the data subject’s request to erase any links to, or copies or replications of, those personal data.

–Right to restriction of processing: The User has the right to restrict the processing of their personal data. The User is entitled to obtain restriction of processing where they contest the accuracy of their personal data; where the processing is unlawful; where the Data Controller no longer needs the personal data but the User requires them for the establishment, exercise or defence of legal claims; or where the User has objected to the processing.

–Right to data portability: Where the processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used and machine-readable format and to transmit those data to another data controller. Where technically feasible, the Data Controller shall transmit the data directly to that other controller.

–Right to object: The User has the right to object, in whole or in part (i.e. for specific purposes), at any time and free of charge, to the processing of any personal data concerning them on grounds relating to their particular situation.

–Right not to be subject to a decision based solely on automated processing, including profiling: The User has the right not to be subject to an individual decision based solely on the automated processing of their personal data, unless otherwise provided by law.

The User may exercise these rights by contacting us via email: etaraart@gmail.com