Privacy Policy AMAHORSE GROUP S.p.A S.R.L.
Delete my dataData controller
AMAHORSE GROUP S.p.A. based in San Giustino (PG), Via Citernese no. 112, ZIP code 06016.
Contact email for submitting requests to exercise the rights provided by the GDPR and for any information on the processing of personal data:
Types of data collected
- Personal data
- Identification data
- Financial data
Of the interested party or of other subjects whose personal data will be provided by the same for reasons related to the purchase request of products, where such data is necessary for the execution of the contract.
Purposes of the processing and legal bases of the processing
The data collected are processed by the Data Controller for the following purposes:
Fulfillment of the contractual obligations assumed following the acceptance of each purchase order.
Legal basis for processing: performance of the contract between the Controller and the data subject or of pre-contractual measures requested by the data subject.
Fulfill legal obligations regarding taxes, duties, and accounting.
Legal basis for processing: compliance with legal obligations to which the Data Controller is subject.
- Contacts: response to information requests made by the data subject. Legal basis for processing: fulfillment of pre-contractual measures at the request of the data subject.
- Create your account – New customer: registration on the site to access a reserved area for purchases. Legal basis for processing: fulfilment of pre-contractual measures at the request of the data subject.
- Profiling activity: sending personalized promotional communications based on the user's interests and purchasing habits. Legal basis for processing: specific consent of the data subject.
- Marketing activity: sending advertising and/or promotional communications relating to the company's products and services. Legal basis for processing: specific consent of the data subject.
We send marketing communications and promotions to the user via email, text messages, and in social channels or the web browser. To be more efficient in our marketing communications, we work with various social media, search engines, and advertising network providers (“Advertising Partners”). We work with advertising partners such as Facebook, Instagram, YouTube for social network advertising and with Google for online advertising networks like Google Ads and Google Marketing Platform. The advertising partners use data provided by us and collected through cookies and other tracking technologies in order to understand the user’s preferences and interests, and use this information to create personalized ads.
Our advertising partners use cookies and similar technologies to track the user's use of our websites and services by accessing data stored on the user's device. To choose content that best suits users' interests, we may use the information the user provides when creating an account, subscribing to the newsletter, making a contact request, or making a purchase on the site, and we may share it with our advertising partners for profiling purposes, that is, for analysis of the user's consumer choices, consisting of automated processing of said data. This processing aims to analytically know and predict the user's purchasing preferences, including to create customer profiles, so as to personalize the commercial offer to better match the user's preferences.
Each of our advertising partners, as a joint data controller, is responsible for their part of data processing, including (any) transfers of personal data to countries outside the European Union.
The user may at any time withdraw their consent to being subject to profiling by writing to the following contacts:
Nature of the processing
Providing data is optional, but strictly necessary for carrying out contractual relationships with the parties concerned.
Any refusal of processing could result in, and normally does result in, the impossibility of fulfilling the contract.
Access to personal data and data communication
Who has access to personal data?
- The employees of AMAHORSE GROUP S.p.A, as internal data processors, specifically trained by the Data Controller.
- The consultants and companies collaborating with AMAHORSE GROUP S.p.A specifically appointed for processing by the Data Controller.
To whom will the data be disclosed? The data may be disclosed to:
- Consultants
- IT technicians
- Suppliers, carriers
- External data processors (updated list of processors available by contacting the Controller via e-mail)
for the fulfillment of contractual obligations.
Transfer and dissemination of personal data
Will the data be transferred or disclosed?
The collected data are not transferred to Third Countries outside the European Union.
Personal data will not be disclosed.
Methods of processing and data security measures
The data will be processed using electronic and paper tools.
All appropriate security measures for the protection of personal data will be implemented and all appointees will be specially instructed to comply with security procedures.
Data retention period
The personal data processed for reasons related to the execution of the contract will be kept for a period of three years from the date of signing the contract.
Invoices and accounting documents will be kept for as long as necessary to fulfill the obligations set out by tax and accounting regulations.
Rights of data subjects
You have the right to exercise the rights under Articles 7, 15-22 of European Regulation 679/2016. In particular, for processing based on consent, you have the right to withdraw it at any time, including by sending an email to marketing@amahorse.com.
In the same ways, you can obtain from the Data Controller confirmation of whether or not your personal data exists and have it made available to you in an intelligible form; you have the right to request access to your personal data, receive the personal data provided to the Controller and transmit it to another Controller without hindrance (so-called portability); to obtain the updating, limitation of processing, rectification of the data, and deletion of those processed in violation of current regulations.
You also have the right, for legitimate reasons, to object to the processing of your personal data and to the processing for the purpose of sending advertising material, direct sales, and conducting market research.
You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for personal data protection via email at: garante@gpdp.it, by fax: 06 696773785, or by mail to the Guarantor for the protection of personal data, located in Rome (Italy), Piazza di Monte Citorio no. 121, ZIP code 00186.
Use of the site www.shop.amahorse.com
Types of data collected
- Contacts: identification and contact details (name, surname, e-mail, phone).
- Create your account / New customer: identification data and contact information (first name, last name, and email).
- Profiling activity for sending promotional communications: identification and contact data (first name, last name, and email).
- E-mail marketing activities: identification and contact data (e-mail).
Nature of the processing
The provision of data for e-mail marketing and profiling activities is optional.
Any refusal to provide them will only result in the inability to receive promotional communications by e-mail or to be profiled.
Providing data for information requests and registration on the site to access a reserved area for purchases is optional. Any refusal to provide them will only result in not being able to fulfill the request or access the reserved area for purchases.
Access to personal data
Who has access to personal data?
Personal data provided for e-mail marketing activity and profiling activity:
- The company's employees as internal data processors, specifically trained by the Data Controller.
- The company managing the website and IT services, appointed as external data processor.
- The company in charge of the technical management of the services provided through the website, appointed as external data processor.
Personal data provided to request information and to register on the site:
- The company employees as internal data processors, specifically trained by the Data Controller.
- The company managing the website and IT services, appointed as external data processor.
- The company in charge of the technical management of e-commerce purchases, appointed as external data processor.
- The companies and consultants who collaborate with AMAHORSE TRADING S.R.L., specifically appointed as external data processors by the Controller.
The updated list of data processors is available upon request to the Controller by e-mail.
Transfer and dissemination of personal data
Will the data be transferred or disclosed?
The data collected through the site are not transferred to Third Countries outside the European Union.
Personal data will not be disclosed.
Data processing methods and security measures
The data will be processed using electronic and paper tools.
All appropriate security measures for the protection of personal data will be implemented, and all personnel will be specifically instructed to comply with security procedures.
Data retention period
The data provided for profiling and email marketing activities will be retained until the data subject exercises their right to withdraw the consent given, and in any case no longer than three years from the collection of said consent.
The withdrawal of consent will not have any further negative consequences for the data subject and will not affect the processing carried out before the withdrawal itself.
The data collected following the data subject's request for information will be kept until the request is fulfilled, and in any case no longer than 24 months from the collection of the data.
The data collected during site registration will be kept until the user decides to request deletion of their registration.
The personal data processed for reasons related to the execution of the gift card purchase contract will be kept for a period of three years from the date of conclusion of the contract.
Invoices and accounting documents will be kept for as long as necessary to fulfill the obligations set by tax and accounting regulations.
Rights of the data subjects
You have the right to exercise the rights provided for in Articles 7, 15-22 of European Regulation 679/2016. In particular, for processing based on consent, you have the right to withdraw it at any time by sending a communication via email to marketing@amahorse.com.
In the same ways, you may obtain from the Data Controller confirmation of whether or not your personal data exists and have it made available in an intelligible form; you have the right to request access to your personal data, receive the personal data provided to the Data Controller and transmit it to another Data Controller without obstacles (so-called portability); obtain the updating, restriction of processing, rectification of the data, and deletion of those processed in violation of the regulations in force.
You also have the right, for legitimate reasons, to object to the processing of your personal data and to processing for the purposes of sending advertising material, direct sales, and conducting market research.
You also have the right to lodge a complaint with the Privacy Authority as the supervisory authority for personal data protection via e-mail at: garante@gpdp.it, by fax: 06 696773785, or by mail to the Garante per la protezione dei dati personali, located in Rome (Italy), Piazza di Monte Citorio no. 121, ZIP code 00186.