For ECOMMERCE SPACE SRL, a company entrusted with the exclusive management of the Justbob.shop site, the protection of the privacy of its users is very important. We have therefore decided to draw up a detailed document relating to the privacy measures adopted. This document describes, among other things, what personal data we collect, the purposes and methods of processing for which your personal data are intended, and the security measures adopted to protect them.
This is an information notice pursuant to art. 13 EU Regulation 2016/679 – General Data Protection Regulation (hereinafter “Regulation”) – to those who interact with our web services accessible electronically at the addresses www.justbob.shop (since these are domains with identical content, hereinafter the “Site” will be cumulatively defined). Users are hereby informed that the personal data provided to Sativacbd.shop may be processed, in compliance with the legislation and the obligations of confidentiality.
The information is provided only for the Site and not for other websites that may be consulted by the user via links. Furthermore, this general information does not refer to the specific data processing that may be carried out, within the Site, by different Data Controllers for specific purposes, as indicated in the specific information issued by them.
According to the rules of the Regulation, the treatments carried out by Justbob.shop will be based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity, and confidentiality.
The Data Controller and the Data Protection Officer
Following the simple consultation of this Site, data relating to identified or identifiable persons may be processed: The “Data Controller” is the company ECOMMERCE SPACE SRL Registered office: via Monte Napoleone 8, 20121, Milan VAT number 11284250963, reachable at address: info@sativacbd.shop.
Data processors, data controllers and data locations
The processing operations connected to the web services of the Site take place within the servers of the company NetAdmin S.r.l., located in Palazzo C – Ala Piastra – First Floor – Via Caldera 21 – 20153 Milan, which has been specifically appointed to process the data in its capacity as data processor.
Processed Data
As a result of browsing the Site, we inform you that the Data Controller will process personal data which may consist of an identifier such as aname, an identification number, an online identifier, one or more characteristic elements of the physical, economic, cultural, or social identity capable to make the interested party identified or identifiable.
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to beidentified.
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of e-mails to the addresses indicated on the Site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered. Personal data are also collected when registering on the Site and, with the consent of the user concerned, at the time of the request on the Site they will be used by ECOMMERCE SPACE SRL solely for the purpose of providing the service to the user. To access some sections of the Site, ECOMMERCE SPACE SRL may request registration by creating a specific username and password. The collection of personal data marked with an asterisk, in the registration form or during the use of the services, is necessary to allow the user to access the features of the Site indicated at the time of registration. The service, by cross-referencing and processing the data provided, will be necessary to correctly identify the user. Personal data will be stored with the user’s consent to allow him to access the personal area of the portal again. The provision of these data is optional but refusing to provide them makes it impossible for the user to obtain registration on the Site and use the services reserved for registered users.
Furthermore, the personal identification and contact data voluntarily provided during registration on the Site or in the use of some of the services offered therein, may, with the specific and distinct consent of the interested party, be transmitted by ECOMMERCE SPACE SRL to some selected partners for their commercial and marketing initiatives, with automated tools (email, SMS, fax, MMS, messages on social networks, WhatsApp, Messenger, online instant messaging applications and autoresponders) and / or non-automated (paper mail, telephone with operator) without prejudice to the possibility for the user to oppose the sending of such communications at any time even being able to select with which tools to be contacted or not.
The e-mail address provided at the time of the request for a quote will be used by ECOMMERCE SPACE SRL, with the explicit consent of the interested party, to send the user commercial information regarding its services like those offered and requested by the user at the time of the request for a quote, without prejudice to the possibility for the user to oppose the sending of such communications at the time of data collection and at any subsequent time. You can refuse to receive further commercial or marketing communications at any time by clicking on the appropriate unsubscribe link at the bottom of all communications.
Finally, all data (provided voluntarily and navigation data) maybe processed to pursue a legitimate interest of the owner or a third party, such as, for example, protection from scams or other behaviors contrary to the User Agreement, as well as for assert and defend a right in court.
Special categories of personal data In the use of some sections of the Site, there may be a provision of personal data falling within the class of special categories of personal data referred to in art. 9 of the Regulation, and precisely the “[…] data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to identify unique a natural person, data relating to the health or sexual life or sexual orientation of the person “. We invite the interested part to communicate such data only where necessary. We specify that in front of the transmission of categories of personal data, but in the absence of specific consent to process such data, the Data Controller cannot be held responsible in any way, nor will it be able to receive disputes of any kind, since in this case the processing will be allowed as having as its object data manifestly made public by the interested part, in accordance with art. 9.1.e) of the Regulation. However, we specify the importance, as already indicated above, of expressing explicit consent to the processing of particular categories of personal data, where the interested party shares such information.
Cookies
We may use cookies (small text files transferred from the web server to the user’s computer) and other technologies for reading and / or storing information on the user’s device such as email trackers, the purpose of which is to inform the server about access to the user to that particular web page, and any other information that itobtains from the readable parameters of the system through functions contained in the web page, to personalize and facilitate the browsing experience of users and, in some cases with their consent, to enrich the user profiling for advertising and / or commercial purposes. Cookies can be “temporary” (or session cookies, they are deleted at the end of the connection) or “permanent” (they remain stored on the user’s hard drive, unless the user deletes them).
The cookies used by our websites and our apps are divided into two types identified by the Italian Data Protection Authority (“Privacy Guarantor”) with the so-called General Provision “Cookies” provision of 8 May 2014, of which the Data Controller follows the requirements in terms of information and the need / method of obtaining consent. In particular, this information also represents the extension of the synthetic banner already displayed by the user when connecting to the website and / or when installing the app.
Based on the aforementioned provision of the Italian Privacy Guarantor, ourwebsites and apps use:
“Technical cookies”, that arestrictly necessary for the operation of the site / app and / or the provision of a service explicitly requested by the user. This category of cookies includes the analytics used by the site owner to collect information, aggregate information on the number of users and how they visit the site. For the use of this type of cookies the user’s consent is not required unless the user expressly denies it for one or all of the technical cookies (listed below).
The Site uses a particular persistent proprietary cookie, to offer a more efficient service (no marketing function) in the following case: If a user returns to the Site, after making a quote, on the homepage there will be a message like “Welcome back XXXX” (plus a link “Aren’t you XXXX? Click here”).
Own and / or third-party “profiling cookies”, i.e., cookies potentially aimed at creating / enriching user profiles and used in order to send and / or show advertising messages in line with the preferences expressed by the user in the context of navigation. For the use of this type of cookies, the (optional) consent of the user is always required. The user can choose which profiling cookies to give consent to. When it comes to cookies cd. of “third parties”, i.e., installed / used on the site by third parties with respect to each owner, the user gives or denies consent directly to the owner of the cookie in question, to which the owner merely refers with a link.
The following profiling / non-technical cookies and / or other technologies such as e-mail tracking are used:
Owners
For commercial profiling purposes for direct marketing, only with the consent to online profiling by the interested party (this consent is optional and is required, together with others, when a user register on the site).
To perform these functions, a single cookie provides that before operating will check the privacy consents issued by the registry associated with that cookie. It is important to underline that the cookie will first check the privacy consents issued, and only then will it carry out the actions or not. Furthermore, if a user through his browser requests the deletion of cookies, our cookies will be removed (it is not one of those cookies that resist the request for deletion of cookies made through the browser). For this reason, we recommend to all interested parties who do not want our cookies to delete them.
Third party
- Google Analytics
- Optimizely
- Doubleclick
- Bing
- Yahoo
- Adform
- Criteo
- Google Adwords
- E-mail trackers: ContactLab, MailChimp
E-mail trackers: ContactLab, MailChimp
Each of the third-party cookies listed can be deactivated by following the link provided for each one. It is also possible to manage / disable cookies directly from the browser settings or through the portal https://www.youronlinechoices.com/uk/your-ad-choices. For more information on how to set preferences on the use of cookies through your browser, you can consult the relevant instructions:
- Internet Explorer
- Firefox
- Chrome
- Safari
To object to the use of profiling tools other than cookies (such as e-mail trackers), please contact the following e-mail address of the Owner: info@sativacbd.shop
The use of further persistent cookies and session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the Site Session cookies used by the site avoid the use of other IT techniques that are potentially detrimental to the confidentiality of user navigation and do not allow the acquisition of the user’s personal identification data.
The Site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your social networks. These plugins are programmed in such a way so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so, provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses while logged into the social network then he/she has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer:
Google+
Personal data are processed, even with electronic and automated tools, for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access, including the secure https protocol for some reserved parts of the site and applications and the protection against unauthorized access to servers and other computers in use. Purpose and legal basis of the processing The treatment, with specific consent where necessary, is characterized by the following purposes: allow the provision of the services requested, namely: i) the provision of sales services offered by Sativacbd.shop; ii) the contact request by Sativacbd.shop or by persons specifically appointed by it; iii) access to the reserved area of the Site; iv) respond to requests for assistance or information; v) fulfill any legal, accounting and tax obligations; vi) marketing and profiling.
The data provided may be processed, subject to explicit and specific consent, for sending promotional and marketing communications, including the sending of newsletters and market research, through automated tools (SMS, MMS, e-mail, push notifications, fax) and not (paper mail, telephone with operator), as well as for the analysis of the user’s personal data, purchase choices and behavioral preferences on the Site, in order to better structure communications and personalized commercial proposals, to carry out general analysis and, in general, for profiling activities. La base giuridica del trattamento di dati personali per le finalità di cui alla presente sezione è l’art. 6.1lettere b) e c) del Regolamento in quanto i trattamenti sono necessari all’erogazione dei servizi o per il riscontro di richieste dell’interessato, rappresentando altresì un trattamento necessario per adempiere ad un obbligo di legge in capo a Ecommerce Space – Ecommerce Trade Srl .
The legal basis for personal data’sprocessing arethe purposes referred to in this section is art. 6.1 letters b) and c) of the Regulations, as the processing is necessary for the provision of services or for the response to requests from the interested party, also representing a processing necessary to fulfill a legal obligation for ECOMMERCE SPACE SRL. The data provided for the purposes referred to in letter e) may be processed, subject to explicit and specific consent, for sending promotional and marketing communications, including the sending of newsletters and market research, through automated tools (SMS, MMS, e-mail, push notifications, fax) and not (paper mail, telephone with operator), as well as for the analysis of personal data, purchase choices and behavioral preferences on the Site, in order to better structure communications and customized commercial proposals, to carry out general analyzes and, in general, for profiling activities. The legal basis for data processing for these purposes is art. 6, paragraph 1, lett. a) of the Regulations. Commercial profiling and direct marketing treatments are optional and depend on the user’s free choice; therefore, failure to provide consent for these purposes will not affect the use of the services. The interested party has the possibility to oppose this treatment at any time, initially or on the occasion of subsequent communications, easily and free of charge also by writing to the e-mail address indicated above, as well as to obtain an immediate feedback that confirms the interruption of this treatment (Article 15 of the Regulation). Where necessary, specific summary information on the processing of personal data and requests for consent will be progressively reported or displayed on the pages of the Site prepared for particular services. Ove necessario, specifiche informative di sintesi sul trattamento dei dati personali e richieste di consenso saranno progressivamente riportate o visualizzate nelle pagine del Sito predisposte per particolari servizi.
Transmission of data to third parties
Personal data will not be passed on to third parties, except for personal data provided by users and transmitted to:
subjects who typically act as data processors pursuant to art. 28 of the Regulation, namely: i) people, companies or professional firms that provide assistance and advice to the Data Controller in accounting, administrative, legal, tax, financial and credit recovery matters relating to the provision of the Services; ii) subjects with whom it is necessary to interact for the provision of the Services (for example hosting providers); iii) or subjects delegated to carry out technical maintenance activities (including the maintenance of network equipment and electronic communication networks); (collectively “recipients”); the list of data processors who process data, in addition to those specifically indicated above, can be requested from the Data Controller by writing to the address above.
subjects, bodies or authorities, independent data controllers, to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders of the authorities;
persons authorized by the Data Controller to process Personal Data pursuant to art. 29 of the Regulations necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality.
As already clarified above, regarding the possible purposes of the processing in the presence of specific, free and informed consent of the users concerned, released by them in specific sections of the Site, personal data may be disclosed to some partners selected by Justbob, whose categories are specified in the specific consent requests, for their commercial and marketing initiatives, with automated tools (email, SMS, fax, MMS, messages on social networks, WhatsApp, Messenger, online instant messaging applications and autoresponders) and / or not automated (paper mail, telephone with operator).
Storage
Personal data will be kept only for the time necessary to pursue the purposes for which they are collected, in compliance with the minimization principle referred to in Article 5.1.c) of the GDPR. As this is a periodic continuous service, the data will be processed by the Data Controller until the aforementioned service is terminated by the user (for more information see General Conditions of Use of the Site).
Rights of interested parties
Pursuant to articles 15 and following of the Regulations, the interested party has the right to request, at any time, access to personal data, the correction or cancellation of the same, the limitation of processing in the cases provided for by art. 18 of the Regulation, obtain the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art 20 of the Regulation. At any time, the interested party has the possibility to revoke, pursuant to art. 7 of the Regulation, the consent given; propose a complaint to the competent supervisory authority (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force. The interested party has the rightto formulate a request for opposition to the processing of personal data pursuant to article 21 of the Regulation in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in the event the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject. For any request and / or communication regarding this Notice or the processing carried out, the user can contact customer support by sending an e-mail to: info@sativacbd.shop. If the request concerns data processing carried out by another Data Controller, the user must refer to the latter’s privacy policy.
