Privacy Policy
This information notice is provided in compliance with the obligations imposed by the laws on the protection of personal data - EU Regulation no. 2016/679 (hereinafter, "GDPR"), Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 (hereinafter, "Privacy Code") in addition to the relevant provisions of the Italian Data Protection Authority.
The purpose of this document is to provide you with all useful information for the protection of your privacy and to enable you to have control over the processing of your personal data when you browse the www.gearxpro-sports.com website (hereinafter, "Site").
Personal Data
According to Article 4 of the GDPR, personal data means any information concerning an identified or identifiable natural person, defined as a 'data subject' (hereinafter, 'User').
Data Controller
The data controller of this Site is GEARXPro L.L.C.-FZ, with registered office in Dubai (UAE), Business Center 1, The Meydan Hotel, Nad Al Sheba Floor M (hereinafter, "Data Controller" or “Controller”).
The Holder may be contacted by sending an e-mail to info@gearxpro-sports.com
Processing methods
The personal data processed are mainly collected directly from the User, at the time the latter navigates on the Site or uses the services made available by the Site.
This statement refers to the processing of personal data covered by the various sections made available on the Site and governs exclusively the personal data processing activities carried out on the Site and not for other websites to which the User is redirected.
The data collected through the Site are processed in (mainly) electronic mode with the help of software and computer procedures that guarantee adequate technical and IT security measures.
Data processed, purposes of processing, legal bases and retention periods
|
Site Browsing |
|
|
Type of data processed |
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified Users, but may allow Users to be identified (through processing and association with data held by third parties). This category of data includes the IP addresses or domain names of the computers used by the Users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the User's operating system and computer environment (for example, the name and type of device connecting to the Site). |
|
Provision of data |
The provision of such data is not mandatory; if the User decides not to provide such data, he/she will not be able to navigate on the Site and will not be able to access the functionalities made available by the Site. |
|
Purpose of the processing |
This data is used in order to obtain statistical information on the use of the Site, to check its correct functioning and to improve the quality of the services offered (including the optimisation of the Site's functionalities). |
|
Legal basis |
Art. 6(1)(f) of the GDPR: legitimate interest of the data controller in maintaining the security of the Site and that it is not used in ways that infringe the rights of others or as a channel for the commission of unlawful acts or fraud (see recital 47 of the GDPR). |
|
Data retention |
The personal data referred to in this section shall be retained for up to 6 months after collection, unless the person concerned objects, which may be exercised at any time in the manner set out in the 'Rights of the person concerned' section of this notice. |
|
“Shop” Section – User Registration |
|
|
Type of data processed |
In order to use the 'Shop' section of the Site, the User is required to register with the Site. This section collects the following types of data - first name and surname - e-mail address; - telephone; - shipping address; - billing address (if different from the shipping address); - username - password. |
|
Provision of data |
The provision of data in this section is mandatory. Therefore, refusal to provide the aforementioned personal data does not allow the User to take advantage of the services offered by the Site, relating to the sale of products. |
|
Purpose of the processing |
This data is processed by the Controller to enable the User to take advantage of the services offered by the Site, relating to the sale of products. |
|
Legal basis |
Art. 6(1)(b) of the GDPR: processing is necessary for the performance of a contract to which the User is party or for the performance of pre-contractual measures taken at the User's request. |
|
Data retention |
The data will be stored for the duration of the contract and, after termination, for the following 10 years. |
|
“Distributor Application” Section |
|
|
Type of data processed |
The distributor may send his application by writing to the Controller's e-mail address available on the website. In this case, the Owner collects the following types of data: e-mail address; The Owner cannot carry out any kind of prior check in relation to the information provided by the User. Users are, therefore, invited not to provide information from which data belonging to special categories referred to in Article 9 of the GDPR may be known. In the event that such types of data are entered, the Data Controller will disregard such information and will proceed with its deletion in a secure manner that does not allow any type of recovery. |
|
Provision of data |
The provision of data in this section is not compulsory; if the distributor decides not to provide such data, he will not be able to forward his application to the Controller, who will therefore be unable to provide an appropriate response. |
|
Purpose of the processing |
This data is processed by the Controller in order to provide feedback to distributors' applications via the application form. |
|
Legal basis |
Art. 6(1)(b) GDPR: processing is necessary for the performance of pre-contractual measures taken at the request of the distributor. |
|
Data retention |
The data will be kept only for the time needed to contact the distributor who submitted the application and for the following 6 months after the application has been acknowledged, in order to properly handle any subsequent requests from the same distributor. |
|
“Contact” Section |
|
|
Type of data processed |
The Site contains a 'Contact' section through which the User may proceed to submit a contact request, as well as to make specific requests for assistance. This section collects the following types of data - e-mail address - telephone number; - country; - free field for entering the desired message. The Data Controller cannot carry out any type of prior check in relation to the information entered in the fields that can be freely filled in by the User. Users are, therefore, invited not to enter information from which data belonging to special categories under Article 9 of the GDPR may be known. In the event that such types of data are entered, the Data Controller will disregard such information and will proceed with its deletion in a secure manner that does not allow any type of recovery. |
|
Provision of data |
The provision of data in this section is not compulsory. If the User decides not to provide such data, he/she will not be able to forward contact requests to the Controller, who will therefore be unable to provide an appropriate response. |
|
Purpose of the processing |
This data is processed by the Controller to provide feedback to contact requests via the contact form. |
|
Legal basis |
Art. 6(1)(b) GDPR: processing is necessary for the performance of pre-contractual measures taken at the request of the data subject. |
|
Data retention |
The data will be kept only for the time necessary to contact the User who made the request, and for the following 6 months after the request has been acknowledged, in order to properly handle any subsequent requests from the same User or for further information relating to the same or similar topics. |
|
Newsletter and marketing communications |
|
|
Type of data processed |
The homepage of the Site features a special banner that allows the User to subscribe to the promotional newsletter relating to the services offered by the Controller. This section collects the following types of data - e-mail address (mandatory data for subscribing to the Controller's newsletter) - telephone number for sending SMS (optional data for subscribing to the Controller's promotional communications). |
|
Provision of data |
The provision of data in this section is not compulsory; if the User decides not to provide such data, it will not be possible to forward the request for subscription to the newsletter to the Controller, who will therefore be unable to properly process the User's request. |
|
Purpose of the processing |
This data is processed by the Controller for the purpose of sending newsletter and marketing communications by e-mail, SMS and push notification. |
|
Legal basis |
Article 6(1)(a) of the GDPR: consent freely given by the User. This consent may be revoked at any time, without affecting the lawfulness of the processing carried out prior to the revocation, by following the instructions given in the "Rights of the data subject" section of this notice, or at the bottom of any e-mail or SMS received from the User. |
|
Data retention |
The data will be stored for 24 months from the date of collection of the consent given by the User, unless the consent is revoked by the User. |
|
Law provisions |
|
|
Type of data processed |
Personal data, contact details, administrative-accounting data. |
|
Provision of data |
The provision of data in this section is not mandatory, but is directly related to the use of the Site and the services offered by it. |
|
Purpose of the processing |
This data is processed by the Controller to fulfil obligations under applicable national and supranational regulations and legislation. |
|
Legal basis |
Art. 6(1)(c) GDPR: to comply with a legal obligation to which the data controller is subject. |
|
Data retention |
The data will be stored for the duration of the contract and, after termination, for the following 10 years. |
Cookie policy
The cookie policy with details of the information processed by these tools can be reached by clicking www.gearxpro-sports.com/cookie-policy
Who will process your data
The data may only be accessed by parties authorised by the Controller pursuant to Article 29 of the GDPR.
In addition, the data may be accessed by subjects in their capacity as autonomous data controllers (for example: Authorities) or data processors pursuant to Article 28 of the GDPR (for example: companies that support the Data Controller in the Site administration activities; professionals and consultants appointed by the Data Controller).
In order to obtain an updated list of the persons who may become aware of your personal data, you may send a communication by e-mail to the e-mail address info@www.gearxpro-sports.com, taking care to specify the reason for the request.
The Controller guarantees that personal data will not be disclosed in any way other than as described above.
The personal data being processed may also be transferred to third countries or sites outside the European Economic Area (EEA). In these cases, should it be necessary to transfer the data to a third country located outside the European Economic Area, the Data Controller guarantees that the transfer of the data will only take place in the presence of an adequacy decision by the European Commission or of other appropriate guarantees provided for by the laws on the protection of personal data (for example: by stipulating standard contractual clauses).
People under 18 years of age
Persons under the age of 18 must not provide information or personal data to the Controller without the consent of those exercising parental responsibility.
Therefore, the Data Controller invites all those exercising parental responsibility over minors to inform them about the safe and responsible use of the Internet and to put in place any procedures indicated from time to time in relation to the initiatives in which the Company intends to process the data of persons under the age of 18.
Data subject’s rights
The exercise of the rights indicated in this section is not subject to any formal constraints and is to be considered as totally free of charge (with the exception of all those requests that can be considered as manifestly unfounded or excessive, as provided for in Article 12(5) of the GDPR).
In relation to the processing described in this notice and pursuant to the GDPR, the User may exercise the following rights
- right of access to their personal data and to all the information referred to in Article 15 of the GDPR,
- the right to rectification of one's own inaccurate personal data and integration of incomplete data,
- the right to the deletion of one's own data, except for those contained in documents that must be compulsorily kept by the Company and unless there is an overriding legitimate reason to proceed with processing
- the right to restriction of processing where one of the cases referred to in Article 18 of the GDPR applies.
- the right to object to the processing of one's personal data, without prejudice to what is provided with regard to the necessity and obligatory nature of the processing for the purposes of establishing the relationship
- the right to revoke consent (if given) for non-compulsory data processing, without prejudice to the lawfulness of the processing based on the consent given before revocation.
The Data Subject also has the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) or with the Data Protection Authority of the EU country in which the Data Subject normally resides or works, or of the place where the alleged infringement occurred, in relation to processing that he or she considers to be non-compliant.
With reference to the aforementioned requests, the User may contact the Controller directly by sending an e-mail to info@www.gearxpro-sports.com
Amendments to this information notice
This notice shall be deemed updated as of 25 January 2024.
Any changes made to this policy will be published on this page. Users are, therefore, invited to view this web page in order to be updated on how their personal data will be processed.
Should it prove necessary, changes to this policy will be notified directly to the User by e-mail.