Privacy policy

Loan Luxury S.r.l. with registered office located in Viale Europa n ° 87, 51030 Serravalle Pistoiese (PT), as Data Controller protects your personal data, which you provide while browsing and using this site, ensuring its confidentiality and ensuring compliance of the legislation in force as well as the necessary level of protection, from any event that could put them at risk of violation.
As required by art. 13 of the General Data Protection Regulation of the European Union (GDPR), Loan Luxury S.r.l. Informs you that your personal data, collected through the website, are processed through IT and / or telematic tools, for the purposes indicated below in this statement.

1. TYPE OF PERSONAL DATA OBJECT OF TREATMENT
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
Consequently, the following personal data may be processed, by way of example:
– navigation data: this category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI / URL (Uniform Resource Identifier / Locator) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user. These data, necessary for the use of web services, are also processed for the purpose of obtaining statistical information on the use of the services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.) and to check the correct functioning of the services offered.
– data communicated by the user: such as the personal data communicated by you through the “contact” form, the “request a free quote” form, the “book your incentive or event” form, the “request information” form.
The optional sending of such requests by completing and submitting the forms on this site involves the acquisition of your personal data, the details of which are shown below:
– first name;
– last name;
– email address;
– phone;
– Nationality;
– any of your personal data contained in the body of your request.
– cookies and other tracking systems: for the details of the cookies used by this site, please refer to the extended cookie policy available at the following link

2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
Your personal data will be processed for the following purposes:
a) allow the fruition and use of this website, as well as to carry out the maintenance and technical assistance necessary for its proper functioning;
b) allow the Data Controller to respond to requests made by you through the forms on this website;
c) allow the owner to carry out marketing activities concerning the services offered by Loan Luxury S.r.l .. The processing of personal data takes place to send the interested party advertising material about the services offered by the Data Controller, even in addition to those purchased,
to send information and / or promotional material, including via newsletters, to send surveys and to improve the services offered (customer satisfaction).
The data relating to the services purchased may be used for the development of statistics and market research;
d) allow the Owner to create your profile in order to send you dedicated offers based on preferences.
The processing of your personal data takes place with the aim of creating your personal profile based on your preferences and purchasing habits in order to send dedicated offers calmed on the basis of previous purchases and preferences, by crossing such data with any other data in our possession and deriving from your browsing activity on this website (this only if you give your consent to the use of profiling cookies. For information relating to cookies, please refer to the dedicated information available at the following link.
It should be noted that the processing in question takes place only after giving consent and only on the personal data indicated above. It is also specified that the results of the profiling activities and the data resulting from this activity will not be disclosed to third parties and will not be disseminated.
The legal basis underlying the processing referred to in lett. a) of this point is:
art. n ° 6 par.1 lett. f) GDPR: “processing is necessary for the pursuit of the legitimate interest of the data controller or third parties”;
The legal basis underlying the processing referred to in lett. b) of this point is:
art. n ° 6 par.1 lett. b) GDPR: “processing is necessary for the execution of a contract of which you are a party or for the execution of pre-contractual measures adopted at your request”;
The legal basis underlying the processing referred to in lett. c) and d) of this point is:
art. n ° 6 par.1 lett. a) GDPR: “You have given your consent to the processing of your personal data for one or more specific purposes”.

3. PROCESSING METHOD
The personal data being processed are collected directly by the Data Controller or by third parties expressly authorized by them, or communicated by the Data Controller to such third parties for the pursuit of the purposes referred to in point n. 2.
The processing of personal data will be carried out mainly with the aid of IT tools by subjects internal and external to the structure of the Data Controller, appropriately authorized and instructed for this purpose according to the methods and with the means suitable to guarantee security and confidentiality. of the data themselves, in compliance with the provisions of the GDPR.

The Data Controller periodically carries out checks, so that personal data that are not necessary for the processing and related purposes as indicated in point n. 2 of this information.

4. RECIPIENTS OF PERSONAL DATA
Personal data processed for the purposes referred to in point n. 2 of this information may be communicated:
– to internal subjects of the Data Controller’s team duly authorized for the processing parts of their respective competence;
– to external parties acting as Data Processors on behalf of Loan Luxury S.r.l. such as:
– information society and IT assistance;
– companies, or professional firms that offer professional and / or consultancy services to Loan Luxury S.r.l. in relation to accounting, legal, fiscal, administrative, financial, and credit recovery issues;
– suppliers of infrastructures and IT solutions;
– web service providers;
– consultants, within the limits necessary for the performance of their professional duties.
The communication concerns the categories of personal data whose transmission to the aforementioned third parties is necessary for the performance of the activities and for the purposes referred to in this information.
The updated list of Data Processors and persons authorized to process the processing is kept at the headquarters of the Data Controller and is available upon request by e-mail to privacy@loanluxury.it.
For the processing of communication of personal data concerning you, described in this paragraph, your consent is not required as the same occurs for the execution of obligations arising from your request.
Your personal data may be disclosed to public bodies, bodies and authorities acting as independent Data Controllers, in compliance with applicable laws or to comply with binding provisions.
In no case will your personal data be disclosed to other categories of third parties (in addition to those mentioned above) and will not be subject to dissemination operations.

5. TRANSFER FROM EXTRA UE / SSE
The Data Controller does not carry out any transfer of your personal data abroad (to be understood as all countries outside the European Economic Area).
The management and storage of your personal data will take place on the servers of the Data Controller and / or third-party companies duly appointed as Data Processors, located within the European Union.
Except for the transfers referred to in the previous paragraphs, some of your personal data deriving from the use of cookies and other tracking tools are shared with recipients who may be located outside the European Economic Area. Loan Luxury S.r.l. guarantees that your Personal Data are processed by these recipients in accordance with the applicable data protection legislation. Such transfers may be based on the adequacy decision or on the standard contractual clauses approved by the European Commission. You can request further information on the following address: privacy@loanluxury.it.

6. RETENTION PERIOD / DATA RETENTION

The personal data concerning you will be processed by the Data Controller for the time necessary to achieve the purposes for which they were collected as per point n. 2 of this information.
In relation to the purpose referred to in point n. 2 lett. a), The navigation data are not stored on the Controller’s systems for more than seven (7) days (except for any need to ascertain crimes by the judicial authorities).
In relation to the purpose referred to in point n. 2 lett. b), your personal data will be kept for the time necessary to fulfill the information requests and to send communications of this exclusive nature that the Data Controller makes following your request and in any case for a period not exceeding a maximum of twenty-four ( 24) months.
Personal data processed by the Data Controller for marketing purposes [point n. 2 lett. c), for sending commercial communications through newsletters or other means] will be kept for twenty-four (24) months, unless you proceed to revoke the consent you have given and / or in case of your opposition to the processing.
With regard to the storage of data processed by the Data Controller for the purpose of profiling [point n. 2 lett. d), creation of your profile], your personal data will be kept for a period not exceeding twelve (12) months from the time of their collection, unless the consent you have given is revoked and / or unless you object to the treatment.
Upon reaching the aforementioned terms, the Data Controller will delete the data concerning you.
Longer retention terms may be applied in the presence of specific legal obligations or in the event that the Data Controller is sent requests by public authorities or for further needs to protect the rights of the Data Controller or the Data Subject.

7. YOUR RIGHTS
Pursuant to EU Reg. 2016/679 you have the right to:
– obtain confirmation of the processing carried out by the Data Controller on the personal data concerning you;
– access your personal data and know its origin (when the data are not obtained directly from you), the purposes of the processing, the data of the subjects to whom they are communicated (recipients), the data retention period or failing that, the useful criteria to determine it;
– obtain the correction of personal data concerning you;
– obtain the deletion of personal data concerning you from the Data Controller’s databases if they are no longer necessary for the purposes for which they were collected or if the processing is unlawful and in the other cases referred to in art. 17 GDPR;
– limit the processing of personal data concerning you, for example, where its accuracy is contested, for the period necessary for the Data Controller to verify its accuracy and in all other cases referred to in art. 18 GDPR;
– obtain personal data concerning you in electronic format, also in order to be able to communicate them to another Data Controller (portability). You can assert your rights by contacting the Data Controller by means of a written communication to the address privacy@loanluxury.it.
The Data Controller must proceed in this sense without delay and, in any case, at the latest within one month of receiving the request. The term can be extended by two months, and in this case the Data Controller will, again within thirty days, inform you of the reasons that make the extension necessary.

8. COMPLAINT
You have the right to lodge a complaint with the Personal Data Protection Authority.
In the event that he resides in a different member state or the violation of the legislation protecting personal data occurs in another EU country than the one where the Data Controller is based, he must lodge a complaint with the Authority responsible for monitoring compliance. of the legislation on the protection of personal data of the aforementioned country.
The proposition of the complaint is without prejudice to the possibility of proposing any other judicial action.

9. CHANGES TO THIS INFORMATION NOTICE
Loan Luxury S.r.l. in its capacity as Data Controller, reserves the right to make changes to this Privacy Policy at any time by giving publicity to users on this site. Therefore, please consult this page often, referring to the date of the last modification indicated at the end of the document. In case of non-acceptance of the changes made to this Privacy Policy, you can ask the Data Controller to delete the personal data concerning you. Unless otherwise specified, the
previous Privacy Policy will continue to apply to personal data collected up to that time.