Information on data protection
1. General informations
In the following paragraphs we wish to comply with the obligation to inform users of their rights and how we treat their data. The GDPR (general regulation on data protection) is binding starting from 25.05.18 and establishes in detail which information on the processing of personal data must be made available to the customer or interested party. We are pleased to fulfill this legal obligation.
Where necessary, this information is updated and published on the page www.sonicmotoshop.it/privacy-policy-cookie-restriction-mode , where they can be consulted by the interested party.
2. Name and address of the data controller
Person responsible for the collection, processing and use of the personal data of the interested party pursuant to the Italian data protection law is the company
Borgo Zuel di Là 4
31030 Cison di Valmarino (TV)
Tel .: +39 0438 1892239
Cell .: +39 366 114 3964
3. Contact details of the data protection officer
You can contact our data protection coordinator at: firstname.lastname@example.org
4. Collection, processing and saving of data
We take data protection very seriously. Therefore, during the collection, processing and use of the personal data of the data subject we strictly follow the legal provisions. In principle, we only process data received directly from the person concerned based on the business relationship established between us and him or in order to start such a relationship. This happens in the event that the interested party enters into a contract with our company, requests an offer, signs up for our newsletter, tells us about changes to your data, sends us a request, or asks our company for questions or complaints to an order. This data is used by our service providers solely for the purpose of performing their task. The use of the information for other purposes is not permitted and this prohibition is also respected by the service providers appointed by us.
If we collect data regarding the interested party from third parties, this is expressly indicated in the descriptions of the treatment procedures that follow.
4.1. Data processing for the purpose of executing a contract of which the interested party is a party or in the context of pre-contractual measures (Article 6 paragraph 1b of the GDPR)
When processing an order, we collect and store the personal data necessary for the execution of the contract stipulated with the interested party. In this case it is a matter of personal data such as name and surname, address, date of birth, telephone number. The data of the interested party are forwarded to shipping service providers for sending the goods. If the interested party opts for the purchase with an invoice, the solvency will be checked.
The data of the interested party necessary to execute the order, including those required for accounting purposes with our service providers, may possibly be transmitted for this purpose to companies that collaborate with us. These companies can be printers, logistics companies, e-mail service providers, suppliers active in the field of product customization or external payment service providers. Naturally all personal data are treated confidentially.
For budgetary reasons, purchase tests are filed in accordance with the terms of the law (6 or 10 years).
4.2. Treatment based on consent (Article 6 paragraph 1a of the GDPR)
4.2.1. Creating a customer account and sending the newsletter
In creating a customer account at our online store, the interested party provides an e-mail address, first and last name, address, telephone number and date of birth. We have the right to use your personal data in order to contact you regarding your client account or your transactions. Your data is saved in our customer database and, at the request of the data subject, deleted ( see point 9 ).
If the interested party signs up for the newsletter through our online store, this will be based on the so-called "double opt-in" procedure. This means that before sending the first newsletter we will send the person concerned an e-mail confirmation asking again if he wishes to receive our newsletter. Once confirmation has been obtained through the link contained in the e-mail, we will send the newsletter. To send the newsletter we use the tool of an American service provider. We use personal data relating to the use of the newsletter both for statistical purposes and to optimize communication to the reader of information, products and services specific to the company and for advertising purposes. The interested party can cancel the subscription to the newsletter at any time and for free using the appropriate button shown in the "Subscriptions to the Newsletter" section of his account. You can also contact us by e-mail or by post at the addresses indicated in point 9 .
4.3. In the context of the pursuit of legitimate interest (Article 6 paragraph 1f of the GDPR)
Only to the extent that this is necessary, do we process the data of the interested party for purposes other than the actual fulfillment of the contract or from a possible request in order to pursue our legitimate or third-party interest in the following circumstances:
- direct advertising to acquired customers;
- guarantee of computer security in the company;
- prevention and investigation of possible crimes;
- measures aimed at the further development of services;
- measures necessary for business management;
- advertising and marketing operations, as long as the interested party has not objected;
- saving pseudonymised data obtained through cookies.
4.3.1. Newsletter via e-mail for acquired customers
If the interested party has purchased a product from us, we may also send him our newsletter by e-mail for information. For the denial of consent and the sending of the newsletter the same conditions apply as in point 4.2.1 .
4.3.2. Communication with Sonic-moto (by e-mail, telephone, contact form)
If the interested party contacts our customer service via e-mail, by telephone or using the contact form, we may record personal data such as name, postal address, telephone number and / or e-mail address. These data are compared with the customer data stored and used and treated solely within the company by customer service personnel. In this context we could access the customer's account of the interested party in order to provide the necessary assistance.
In case of financing obtained from a branch, we reserve the right to carry out an automated solvency check.
5. Information on the data services of the online store
Access to our website involves saving log files. We do not associate such data with any natural person, nor do we merge it with other data sources or compare it. The anonymized data is used exclusively for statistical analysis related to the visit to our website. After the statistical analysis these data are deleted.
Bing Ads: this website uses Bing Ads from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft"). Bing Ads makes use of so-called "cookies", which are text files that are saved on the user's computer and that enable them to analyze how the latter uses the website. This cookie has a limited validity and is not intended for personal identification. If the cookie has not yet expired when the user visits certain pages of our website, we and Microsoft are able to recognize that the user has clicked on the ad and that it has been redirected to that page. The information obtained with the help of the cookie is used for the purpose of creating sales statistics. We learn about the total number of users who have clicked on one of our ads and who have been redirected to a page containing a conversion tracking tag. However, a personal identification of such users is not possible. The processing is carried out based on the art. 6, paragraph 1, lett. f of the GDPR on the basis of our legitimate interest to offer targeted advertising and to analyze the impact and effectiveness of such advertising. The user has the right to object at any time to such processing of his personal data in question pursuant to art. 6, paragraph 1. lett. f of the GDPR. The user has the right to prevent the storage of cookies by selecting the appropriate settings on his browser; however, we point out that by doing so it will not be possible to fully exploit all the features of the website. Following this operation, the user will not be included in the conversion tracking statistics. Bing is certified under the US-EU data protection agreement "Privacy Shield" and therefore undertakes to comply with European data protection regulations. More detailed information on data protection and cookies used in Microsoft Bing is available at https://privacy.microsoft.com/it-it/privacystatement
Google Ads: this website uses "Google Ads", a program for online advertising of Google Inc. ("Google"). Google Ads is a conversion tracking tool that helps us analyze the actions of visitors to our site. As soon as a user clicks on an ad published by Google, a conversion tracking cookie is placed on his computer. These cookies do not contain personal data and are therefore not used for personal identification. Furthermore, they have only a limited validity. If the cookie is active, we can recognize that the user has reached our website through a Google announcement. Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked through the websites of Ads customers. The information obtained with the help of conversion cookies is used to create conversion statistics. In this way we learn about the total number of users who have clicked on one of our ads and who have been redirected to a page containing a conversion tracking tag. However, we do not receive any information that makes personal identification of the user possible. The processing is carried out based on the art. 6, paragraph 1, lett. f of the GDPR on the basis of our legitimate interest to offer targeted advertising and to analyze the impact and effectiveness of such advertising.
For transparency reasons, we point out that we use Google Tag Manager. This Google tag management tool does not collect personal information, but facilitates the integration and management of our tags. Tags are small blocks of code that can be used, among other things, to measure visitor traffic and behavior, analyze the impact of online advertising and social channels, adapt remarketing and targeting based on segments of public, test and optimize websites. For more information on Google Tag Manager, visit https://www.google.com/intl/it/tagmanager/use-policy.html .
Alternatively, you can disable third-party cookies by visiting the Network Advertising Initiative deactivation page at https://www.networkadvertising.org/choices/ and following the additional instructions for denying consent (opt-out) mentioned therein. More detailed information on Google's remarketing function and its information on data protection can be found at the following website: https://www.google.com/privacy/ads/
Google Analytics: this website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files that are saved on the user's computer to allow the site to analyze how users use the website. The information generated by the cookie about the use of the website by the user is normally transmitted to a Google server in the United States, where it is saved. If the IP anonymization is activated on this website, the IP address of the user will be truncated within the territory of the Member States of the European Union or other countries belonging to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address first be transferred to a Google server in the United States where it will subsequently be truncated. Google will use the information on behalf of the operator of this website to evaluate the use of the site by the user, compile reports on website activity and provide other services related to website activity and internet use .
The IP address transmitted by the browser as part of Google Analytics will not be associated with other data held by Google. The interested party has the right to prevent the storage of cookies by selecting the appropriate settings on his or her browser; however, we point out that by doing so it will not be possible to fully exploit all the features of the website. The interested party may also deny consent to the acquisition of data generated by cookies on the use of the website (including IP address) and to its processing by Google by downloading and installing the browser plugin available at the link https: // tools .google.com / dlpage / gaoptout? hl = it . By clicking on the following link, it is possible to prevent Google Analytics from collecting data. In this case, an opt-out cookie will be stored on the user's device, which will prevent the collection of data through Google Analytics in the future if visiting this site: Disable Google Analytics
Thanks to the marketing tools used, your browser automatically connects directly to the Google server. We have no influence on the scope and further use of data collected by Google through the use of this tool and therefore we inform you based on our knowledge: through the integration of Campaign Manager, Google receives from us the information you have called the relevant part of our website or click on an advertisement. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or you have not logged in, it is possible for the provider to find and store your IP address. Furthermore, the Campaign Manager cookies (DoubleClick Floodlight) used allow us to understand if you are performing actions on our website after you have visited or clicked on one of our display / video advertisements on Google or on another platform through Campaign Manager ( conversion tracking). Campaign Manager uses this cookie to understand the content with which you have interacted on our websites to send you targeted advertisements.
You can prevent participation in this monitoring process in several ways:
a) setting the browser software accordingly, in particular by suppressing third-party cookies to prevent third-party advertising;
b) disabling conversion tracking cookies, setting the browser to block cookies from the googleadservices.com domain, https://www.google.de/settings/ads , where this setting is deleted if cookies are deleted;
c) deactivating the ads based on the interests of the providers that are part of the "About Ads" self-regulation campaign through the link http://www.aboutads.info/choices , according to which this setting will be canceled in the event of cookies being deleted ;
d) permanently deactivating the Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin Furthermore, it is possible to prevent Google from collecting the information generated by cookies on the use of the sites web and on the processing of this information by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=it under "Settings of display "," Extension of Campaign Manager deactivation ".
Legal basis: Art. 6 para. 1 letter to the Federal Veterinary Office (UCSB)
Social plugins: in order to protect user data, we use a technical solution that ensures that the transfer of data via social plugins to the respective social network manager takes place only if the user has activated the social plugin. The first time the user visits our website, the integrated social plugins are disabled, so that without activation no contact can be established with the servers of the social network managers. If the user activates the social plugins by selecting the button of a social network present at the bottom of the page of a website, they consent to the transmission of their data to social networks. Disconnecting from social networks in advance and deleting stored cookies, the user prevents social networks from attributing the information collected during his visit to our website to his user account on the relevant social network. If the user does not want his collected data to be associated with his profile on the respective social network, he must log out of the social network before visiting our website. It is possible to completely prevent the loading of plugins even with additional components for your browser, for example with "NoScript", an extension that allows the user to block the execution of the scripts and which can be found at: noscript.net .
This website uses "social plugins" from the following social media providers:
|Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA||All information on Facebook data protection can be found here:
Facebook has joined the EU-US privacy shield: https://www.privacyshield.gov/EU-US-Framework
6. Consequences of failure to make personal data available
The personal data of the interested party are processed in accordance with the provisions of the GDPR in force in the European Union and of the Italian law on data protection, as well as all other relevant legal provisions. We need personal data provided by the interested party in order to conclude the contract.
We point out that, in the absence of the personal data of the interested party, it is not possible to conclude or provide a service, nor send the ordered goods!
7. Transmission to third countries (article 13 + 14 paragraph 1f of the GDPR)
The transmission of personal data to a country that lies beyond the borders of the European Economic Area (EEA) takes place in the manner described below.
In order to provide the contents and distribute the loads of the online store, we use the Content Delivery Network (CDN), a network for distributing the contents of the Cloudflare company. In some cases, by virtue of the nature of the services provided by Cloudflare, the data of users who view our web offers can be transmitted to third countries outside the borders of the EU / EEA. Since Cloudflare is a US-based service provider for which there is an adequacy decision of the European Commission (Commission Implementing Decision (EU) 2016/1250 ( Privacy Shield )), we have entered into a compliant agreement with this company to guarantee the protection of the rights of the interested party for our customers.
Our web hosting service is based in Bulgaria and therefore the data needs to be forwarded to and from this country.
In the case of customers who have placed an order in our online store from a country outside the EU / EEA, personal data is transmitted to the countries where the order was generated in order to fulfill the contract stipulated with the interested party to the extent that this is necessary to process the order or is prescribed by law.
8. Data retention period (Article 13 paragraph 2a of the GDPR)
Unless otherwise specified as above, as the person responsible for the processing of personal data we keep the data of the interested party only for the period necessary to satisfy the purpose of memorization or according to the rules, legal provisions and directives of the European legislator or national laws.
If the deadline for data storage prescribed by the law expires or the need to store personal data ceases to exist, the latter are normally blocked or canceled in accordance with the law.
The retention period depends on the duration of the contracts based on the statutory limitation periods, or six years pursuant to the Italian Civil Code or in compliance with the detailed provisions of the Italian general tax law, the Italian commercial code or other legal regulations.
If the customer requests the deletion of his account, the data present within it even within our backup are completely eliminated from our media within ten years.
9. Rights of the interested party (access, rectification, cancellation, limitation and opposition pursuant to Article 13 paragraph 2b of the GDPR)
The interested party can assert his rights protected by the law at any time. These are basically the following rights:
- right of access (art. 15 of the GDPR);
- right of rectification (art. 16 of the GDPR);
- right to cancellation (art. 17 of the GDPR);
- right to limit the treatment (art. 18 of the GDPR);
- right of opposition (art. 21 of the GDPR);
- right to data portability (art. 20 of the GDPR).
The interested party has the right to obtain access to his personal data saved by us at any time. He also has the right to rectification, blocking or, independently of saving the prescribed data for the purposes of the commercial transaction, the deletion of personal data. We will respond to the access request in encrypted mode in order to ensure data protection.
In order for us to be able to consider a possible data block at any time, these data must be kept in a lock file for control purposes. The data subject also has the right to request the deletion of data, provided that there is no legal obligation to archive. If such an obligation exists, the data is blocked on request. The interested party has the right to modify or revoke a consent by sending us an adequate communication with effect for the future.
Naturally we remain at your disposal to inform interested parties at any time about the respective personal data stored. Upon request, we will be happy to correct or delete such data, unless this does not contravene any legal obligation. Requests regarding access, correction or deletion of data can be submitted at the following addresses:
Borgo Zuel di Là 4
31030 Cison di Valmarino (TV)
For completeness, we wish to report here possible restrictions on the right of access or cancellation pursuant to Article 8 of the Italian Personal Data Protection Code
10. Right of revocation (Article 13 paragraph 2c of the GDPR)
The interested party has the right to revoke the consent to the processing of data granted to us at any time. For further details see the box below: Opposition right pursuant to art. 21 of the GDPR:
Opposition right pursuant to art. 21 of the GDPR
The interested party has the right to revoke the consent to the processing of data granted to us at any time.
Even if personal data are processed in order to pursue legitimate interests, the data subject may object to such processing provided that there are reasons connected with his / her particular situation that lead him / her to dispute the processing of data.
As a result of the opposition, the personal data of the interested party are no longer processed, except that we do not prove the existence of legitimate cogent reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment , the exercise or defense of a right in court.
If personal data is processed within the scope of the law, also for direct marketing purposes, the data subject has the right to oppose such processing as well.
In case of opposition to the processing of personal data of the interested party for direct marketing purposes, we also do not treat them for such purposes.
The opposition applies to future actions. This opposition can be expressed informally. Please direct the opposition to the contact details of the manager indicated above if possible.
11. Right to lodge a complaint with the supervisory authorities (Article 13 paragraph 2d of the GDPR)
If he is not satisfied with the processing of a request made by us, the interested party has the right to contact the data protection officer indicated above or the competent Italian state control authority.
12. Processing of personal data for a different purpose (Article 13 paragraph 3 of the GDPR)
In principle, our company does not provide for such treatment.
In the event that we intend to process personal data for purposes other than those indicated above, we will inform the interested party in advance in accordance with the provisions of the law.
13. Secure data transmission
We protect data using a secure SSL connection. Key length: RSA 2048 bit / 128 bit. The encryption of user data is based on the functionality of the browser used, with a maximum encryption level of RC4 128 bit, Triple DES 168 bit or AES 256 bit.
All data is encrypted during the ordering process, such as:
- name, surname, address, telephone number, etc.;
- payment method selected;
- credit card and account information.
We also protect our web pages and other systems through technical and organizational measures designed to combat the loss, destruction, access, modification or disclosure of the data of the data subject by unauthorized persons.
14. Modification of our data protection guidelines
In order to be able to comply with the current legal requirements or to adapt our information on data protection in the event of changes to our services (for example in the case of introduction of new services), we reserve the right to make changes.
Therefore, when you visit our site again, the new data protection notice is in effect from time to time.