PRIVACY POLICY
Preamble Pursuant to EU Regulation No. 679/2016 (so-called GDPR), the following information is provided regarding the processing of personal data of visitors/users who consult the website of the Company Vexpa innovative vapes s.l CALLE ANETO 708105 SAN FOST DE CAMPCENTELLES BARCELONA in the person of its legal representative pro tempore, accessible electronically at the following address: https://vexpashop.com/.
This information does not concern other sites, pages or online services that can be reached through hypertext links that may be published in the sites but refer to resources outside the domain of the Company Vexpa innovative vapes s.l Data Controller The Data Controller is the Company Vexpa innovative vapes s.l with registered office in CALLE ANETO 708105 SAN FOST DE CAMPCENTELLES BARCELONA , in the person of its legal representative pro tempore.
Type of personal data processed and those concerned Navigation data The computer systems and software procedures responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
These data, necessary for the use of web services, are also processed in order to: obtain statistical information on the use of services (most visited pages, number of visitors per time slot or daily, geographical areas of origin, etc.); check the proper functioning of the services offered.
Browsing data do not persist for more than seven days (except for any need to ascertain crimes by the judicial authorities).
Data communicated by the user The optional, explicit and voluntary sending of messages to the entity's contact addresses, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided for), as well as the completion and submission of forms on the site (by way of example, but not limited to purchase forms), entail the acquisition of the sender's contact data necessary to respond, as well as all personal data included in the communications (including residence address, IBAN code, credit card identifiers, etc.).
The aforementioned data will be kept for a period of time not exceeding that necessary for the purpose for which they were collected and processed. Cookies and other tracking systems Technical and user profiling cookies are used.
For more information about cookies, please refer to the appropriate section that will open by clicking on the following link https://vexpashop.com/it/content/cookies-policy.
Instead, use is made of session (non-persistent) cookies in a manner strictly limited to what is necessary for the safe and efficient navigation of the sites.
The storage of cookies (both technical and profiling) is under the control of the user who may or may not consent to them by checking the relevant box and clicking on the "ok" button. In addition, you can revoke or consent to the different categories of cookies used by the Data Controller by clicking the link https://vexpashop.com/it/content/cookies-policy . The cookies are stored for a period of time of No. 6 months from the expression of your will (consent/disagreement), after which the relevant banner will be displayed again.
Newsletter
Users who wish to remain updated regarding the availability of out-of-stock products or commercial news may subscribe to the newsletter by entering their e-mail address in the appropriate box and clicking the "subscribe" button.
Subscription will be deemed completed upon receipt of the confirmation e-mail at the e-mail address provided during registration.
The user can always opt out of the newsletter by sending an e-mail to info@vexpa.org. Therefore, the data processing will continue until the free expression of will to the contrary by the user.
The personal data being processed refer to users of the website https://vexpashop.com/. Purpose and legal basis of the processing The personal data of users are used to ensure visitors a good browsing experience and effective support when consulting the site/purchasing, as well as to carry out statistical surveys aimed at improving the services and products offered. The personal data indicated on this page are processed by the Data Controller in the execution of the contract (art. 6 lett. b of EU Regulation 2016/679), or in the absence of a contract, in the legitimate interest of the Data Controller to free economic initiative (ex art. 41 of the Constitution and art. 6 lett. f of EU Regulation 2016/679).
Processing methods Data collection is carried out in compliance with the principles of relevance, completeness and non-excessiveness in relation to the purposes for which they are processed.
Personal data are processed in compliance with the principles of lawfulness, fairness and transparency, as provided by law, with the help of tools suitable for recording and storing the data themselves and in any case in such a way as to ensure their security and protect the utmost confidentiality of the data subject.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access in full compliance with Article 32 of the GDPR. The processing is carried out by the Data Controller, by the staff of the Company Vexpa innovative vapes s.l belonging to the competent offices and by any Data Processors appointed by specific written deed, who operate on the basis of specific instructions provided by the Data Controller regarding the purposes and methods of processing.
All IT services used by the Company Vexpa innovative vapes s.l for the performance of the tasks better described above are GDPR complied "certified", i.e. compliant with the standards defined within the EU Regulation 2016/679. Categories of persons to whom the data may be communicated or who may become aware of them The data processed for the purposes described above will be accessible only to persons appointed by the Company Vexpa innovative vapes s.l who demonstrate outstanding professionalism, diligence and compliance with the obligation of secrecy provided for in Art. 9 co. 3 GDPR, including any Data Processors if appointed. Place of processing Processing related to the web services of the site is carried out at the registered office of the Data Controller located in CALLE ANETO 708105 SAN FOST DE CAMPCENTELLES BARCELONA by authorized technical personnel.
Retention of personal data in view of litigation The entity may, subject to the adoption of appropriate protection measures, also retain data for purposes of protecting the administration against possible litigation. Transfer of data outside the European Union There is provision for the transfer of data outside the European Union in case of use of analytics cookies (for their definition click the following link https://vexpashop.com/it/content/cookies-policy).
Rights of data subjects Pursuant to Articles 15 et seq. of EU Regulation 2016/679 and Article 7 of Legislative Decree 193/03, the data subject may exercise the right to access, rectification, erasure, restriction of processing, data portability, objection, to withdraw consent at any time, not to be subjected to a decision based solely on automated processing.
Rights made known and fully described in previous notices issued by the writer. The rights may be exercised by request to the e-mail address info@niumadesign.com or by registered mail addressed to the Company Vexpa innovative vapes s.l, CALLE ANETO 708105 SAN FOST DE CAMPCENTELLES BARCELONA.
Right to lodge a complaint with a Supervisory Authority In relation to a processing that the data subject considers does not comply with the regulations, the data subject may lodge a complaint with the competent supervisory authority, which, for Italy, is the Garante per la protezione dei dati personali.