Privacy Policy

WITH INFORMATION PURSUANT TO ART. 13 REG. EU No. 679/2016

Tocatì Kids srls srls with registered office in Bassano del Grappa (VI), viale of the processing of personal data of users/visitors (hereinafter, the "Users") who consult the website www.tocatikids.com (hereinafter, the "Site"), invites you to take note of this information pursuant to the art. 13 of EU Reg. n. 679/2016 (hereinafter "GDPR") on the processing of your personal data, containing important information on the management methods of the aforementioned site, in compliance with current regulations and as better specified below.

This information is provided exclusively for the website “www.tocatikids.com” and not for other websites that may be consulted by the user via links.

  1. Object of the Processing

The Data Controllers will process the personal identification data (by way of example: name, surname, address, telephone number, email, etc. hereinafter also "Data") freely communicated by you during registration or purchase (for example through orders, etc.) of Tocatì Kids srls products and/or in any case of products directly and/or indirectly attributable to the latter, or during the compilation and signing phase of the Contract for the purchase of the aforementioned products, or even those data provided by you to the in order to take advantage of specific services offered by the Site, in addition to those (navigation data) normally accessible by the Data Controller through the IT systems and software procedures used to operate the site. In the latter case we refer to those personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes ex multis the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

  1. Purpose of the processing

Your Data will be processed lawfully and correctly for the purposes described below.

  1. As regards navigation data: a) allow the Data Controller to obtain anonymous statistical information on the use of the Site and check its correct functioning; b) for security reasons (anti-spam filters, firewalls and virus detection), in order to block attempts to damage the site itself or cause harm to users, and in any case to avoid harmful activities or activities constituting a crime; c) carry out any other function necessary or instrumental to the operation of the site, including the installation of technical cookies to improve the functionality of the site for which please refer to the Cookie Policy d) allow the Data Controller to fulfill legal, accounting obligations , fiscal, administrative and contractual related to the management of the site and the provision of the requested services, as well as the correct management of relationships with authorities, control bodies and third-party public bodies for purposes related to particular requests, the fulfillment of legal obligations or other procedures.
  2. As for the data provided voluntarily by the user: allow the Data Controller to carry out any activity connected (even preliminary) to the sale of the products requested by the User, including the fulfillment of fiscal duties (e.g. VAT free, where applicable), administrative - accounting (including, by way of example, invoicing, historical archiving, debt collection - also implemented through factoring, credit insurance, credit assignment -, etc.) and the identification of the consumption characteristics of the professional and/or the client company , fulfilling your request to purchase products through the Site; or fulfill your request for the provision of other value-added services connected to the purchase of the aforementioned products. Allow the Data Controller to manage treasury activities relating to the contractual relationship (with related processing - in accordance with the law - of bank details and/or other payment data, including any identification details of credit cards or disbursement cards), based on as provided for in the terms and conditions of the Contract and/or other specific agreed contractual conditions.

 

Allow the Owner to prepare measures aimed at protecting against credit risk, including activities aimed at identifying the Customer and his financial reliability. Allow the Data Controller to fulfill legal, accounting, fiscal, administrative and contractual obligations related to the provision of the requested services, as well as the correct management of relationships with authorities, control bodies and third-party public bodies for purposes related to particular requests, to fulfillment of legal obligations or other procedures. Unless the User gives the Owner specific and optional consent to the processing of their data for further purposes, the User's personal data will be used by the Owner for the exclusive purpose of ascertaining the User's identity (also through validation of the address of email), thus avoiding possible scams or abuse, and contact the User for service reasons only. The personal data that are necessary to pursue the processing purposes described in this point B. are indicated with an asterisk in the registration form on the Site.

 

  1. Exclusively subject to your free, specific and distinct consent (ex art. 7 GDPR), allow Tocatì Kids srls to carry out market research and analyzes aimed at detecting the degree of customer satisfaction on the quality and type of services rendered and initiatives relating to the improvement of the services provided, as well as to send you newsletters, advertising material and/or communications and information of a commercial and direct marketing nature on the new products put on sale and on the new services offered by Tocatì Kids srls or by third parties, as well as on the related offers, on discounts and any other promotional and loyalty initiatives reserved for you. This may occur either via email and/or SMS messages, social media, and to personalize the customer experience based on their interests and purchasing habits (for example targeted communications) and improve our services, in particular through profiling, presentation of similar targeted campaigns by selecting your advertising impressions across our websites. In case of lack of consent, the possibility of registering on the Site and/or making product purchases via the Site will not be affected in any way. In case of consent, the User may revoke it at any time by making a request to Tocatì Kids srls in the manner indicated in paragraph 10 below. The User may also easily object to further sending of promotional communications via Email by also clicking on the specific link for withdrawing consent, which is present in each promotional email. Once consent has been revoked, Tocatì Kids srls will send the User an email to confirm the revocation of consent. If the User intends to revoke his/her consent to the sending of promotional communications via telephone, whilst continuing to receive promotional communications via Email, or vice versa, please send a request to Tocatì Kids srls in the manner indicated in paragraph 10 below. Tocatì Kids srls informs that, following the exercise of the right to object to the sending of promotional communications via Email, it is possible that, for technical and operational reasons (e.g. formation of contact lists already completed shortly before receipt by the Partner of the opposition request) the User continues to receive some further promotional messages. If the User continues to receive promotional messages after 24 hours have passed from exercising the right to object, please report the problem to Tocatì Kids srls, using the contacts indicated in paragraph 10 below.
  2. Exclusively subject to your free, specific and distinct consent (ex art. 7 GDPR), allow Tocatì Kids srls to process your data to suggest features, products and services that may interest you, to identify your preferences and personalize your experience, to show you advertising tailored to your interests in relation to features, products and services that may be of interest to you; furthermore, always subject to your free, specific and distinct consent (ex art. 7 GDPR), allow Tocatì Kids srls to use your personal data to evaluate certain aspects relating to you and, in particular, to analyze or predict aspects concerning the your professional performance, your economic situation, your health, your personal preferences, your interests, your reliability, your behavior, your location or your movements. Subject to your free, specific and distinct consent, allow Tocatì Kids srls to analyze and process information aimed at creating homogeneous groups in terms of tastes and behaviors - so-called. 'profiles' - functional to identify the individual user, or more often a group of users, or the terminal from which they connect, for the purpose of personalized offering of additional or similar goods or services. In case of lack of consent, the possibility of registering on the Site and/or making purchases via the Site will not be affected in any way. In case of consent, the User may revoke it at any time by making a request to Tocatì Kids srls in the manner indicated in the following paragraph 10.

  1. Treatment methods

The processing of your data is carried out by means of the operations indicated in the art. 4 no. 2) GDPR and precisely: collection, recording, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction of Data. Your Data is subjected to both paper and electronic and/or automated processing. The acquired data are processed in full compliance with the law, as well as the principles of lawfulness, correctness, transparency, non-excessiveness and protection of your privacy and your rights. The processing of data of minors is not foreseen. Upon request of Users, the Owner will promptly delete all personal data involuntarily collected and relating to subjects under the age of 18.

  1. Data retention period

The Data Controller retains the Data in compliance with local laws and internal company policies and procedures for the time necessary to fulfill the aforementioned purposes and satisfy its legitimate commercial interests, legal obligations or to establish, exercise or defend legal rights. Once the need to conserve the Data for these purposes has been exhausted, the same will be eliminated in a secure manner. In particular:

- the data necessary for the conclusion and execution of the contract for the sale of the Products to the User are retained until the administrative-accounting formalities are concluded. Billing data will be kept for ten years from the billing date.

- the data collected for marketing purposes are retained until the termination of the service or the exercise of opposition through unsubscription by the user.

- The data collected for the purpose of profiling for marketing purposes are kept until the user requests interruption of the activity and in any case within 2 years from the last interaction of any kind by the user with Tocatì Kids srls

- The data collected for the purpose of providing the newsletter service are retained until the termination of the service or the exercise of opposition through unsubscription by the user

- The data collected for the purposes of managing the registered User's services are retained until the termination of the service or the exercise of opposition through unsubscription by the user.

In all other cases, the personal data of the Users will be kept for the time strictly necessary to carry out the primary purposes illustrated in the previous paragraph 2 point B, or in any case as necessary for the civil protection of the interests of both the Users and the Owner .

  1. Legal basis of the processing

The processing of the aforementioned Data is necessary to allow you to browse the site and to follow up on your requests (including the request to purchase the aforementioned products, which is based on your purchase order sent to the Owner and/or in any case on the subscription by You affixed to the Contract stipulated with the latter). Where necessary, for specific purposes, express consent will be obtained from the user. The processing of Data for marketing purposes is permitted in relation to the free circulation of data as provided for by the GDPR and can take the form of activities aimed at satisfying the legitimate commercial interests of the Data Controller, including any commercial development activities (by way of example marketing, customer satisfaction etc.) carried out by the latter.

  1. Communication, dissemination and access to Data

Your Data may be made accessible for the purposes described above:

  • to employees and collaborators of the Data Controller in Italy and abroad, in their capacity as internal data processors and/or sub-processors/processors and/or system administrators;
  • to carriers or shippers for the management of any activity aimed at delivering the goods to the Customer;
  • to agents, sales representatives, agents, contractors, and any other person who operates on behalf of the Owner;
  • to other third-party companies or other subjects (merely indicative and not exhaustive, credit institutions for the management of payments and collections, financial intermediaries, credit insurance institutions, professional firms, consultants etc.) who carry out outsourced activities on behalf of the Owner, in their capacity as external data controllers, including suppliers or subjects appointed to perform ancillary or instrumental services for the purposes indicated above, with which the Owner enters into specific agreements. The Data Controller also reserves the right to share personal data with some third parties, including: IT providers for system development and technical assistance purposes; auditors and consultants to ensure compliance with external and internal requirements; certification bodies; legal entities, law enforcement agencies and litigants pursuant to legal disclosure obligations or claims; any successors or business partners of the Owner, assignment or other extraordinary operations; police forces, armed forces and other public administrations, for the fulfillment of obligations established by law, regulations or community legislation. In the event that said subjects are established in non-EU countries, the Data Controller ensures that the transfer of non-EU Data will take place in compliance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission. Users have the right to obtain a list of any data controllers appointed respectively by each Data Controller, by making a request to the Data Controller concerned in the manner indicated in paragraph 10 below.

  1. Data Transfer

The Data will be stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, has the right to share the data with other companies in the Group and/or to transfer the Data also to other non-EU areas; in this case, the Data Controller hereby ensures that the transfer of non-EU Data will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission. The Data Controller will apply to the aforementioned transfers all the necessary protections pursuant to current legislation on privacy.

  1. Nature of the provision of Data and consequences of failure to communicate the Data

The provision of Data for the purposes referred to in art. 2 “A.” it is optional but necessary to visit and access the various features of the Site and allow correct navigation. The provision of Data for the purposes referred to in art. 2 ”B.” it is equally optional but necessary to allow Tocatì Kids srls to follow up on your requests. The provision of Data for the purposes referred to in Article 2 "C." it is optional but not necessary to be able to visit and access the various features of the Site and/or to make purchases of products via the Site. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case , will not be able to receive the requested information, newsletters, commercial communications and advertising material relating to the services offered by the Owner. The provision of Data for the purposes referred to in Article 2 "D." it is optional but not necessary to be able to visit and access the various functions of the Site and/or to make purchases of products through the Site. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided.

  1. Rights of the interested party

In your capacity as an interested party, you have the rights referred to in the articles. 13, paragraph 2, letters b), c) and d), 15, 16, 17, 18, 19 and 21 GDPR and precisely the rights of:

  • obtain confirmation of the existence or otherwise of Data concerning you, even if not yet registered, and their communication in an intelligible form;
  • obtain the indication: a) of the origin of the Data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the Data Controller, the Data Protection Officer, the managers and the designated representative pursuant to art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the Data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State and as managers;
  • obtain: a) updating, rectification or, when interested, integration of the Data; b) the cancellation, transformation into anonymous form or blocking of personal data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the personal data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves a manifestly disproportionate use of means compared to the protected right;
  • object, in whole or in part: a) for legitimate reasons to the processing of data concerning you, even if pertinent to the purpose of the collection; b) to the processing of Data concerning you for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator via Email and/or through traditional marketing methods via telephone and/or paper mail. Please note that the right of opposition of the interested party, set out in the previous point b), for direct marketing purposes through automated methods, extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition even if only partly. Therefore, the interested party can decide to receive only communications via traditional methods or only automated communications or neither of the two types of communication;
  • where applicable, he also has the rights referred to in the articles. 16 – 21 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority;
  • revoke any consent given at any time.

  1. Methods of exercising rights

You may at any time exercise your rights or make a request in the following ways:

  • by sending a registered letter with return receipt to the registered office of the Owners for Tocatì Kids srls with registered office in Bassano del Grappa (VI), viale XI February 1/B tax code and VAT number 04505250243
  • By sending an Email to the address: info@tocatikids.com or a PEC to the address: pec@tocatikids.it

Tocatì Kids srls will comply with User requests relating to the processing referred to in paragraph 2 points ABCD

  1. Owner, Data Protection Officer, Data Processors

The Data Controller(s): the company Tocatì Kids srls, tax code and VAT number 04505250243, in the person of its legal representative, with registered office in Bassano del Grappa (VI), viale The Data Protection Officer of Tocatì Kids srls can be contacted at the following email address: info@tocatikids.com

Information relating to the categories of Data Processors is available at the registered office of the relevant Data Controller and can be requested by the User using the methods and contact details indicated above.