Data controller

The data controller of your personal data is "Ecommerce Lab Srls" (hereinafter also referred to as the "Controller"), with registered office in Bari at Via Tridente 22 – 70125 – Bari (VAT number, tax code, and Bari Company Register number 08334900720). You can also contact us at info@labo0.it.

Purpose of the processing

Navigation: The computer systems and software resources required to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes IP addresses, information relating to the device used to connect to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. This category also includes cookies , for which, however, please refer to the specific information.

Data categories

Browsing data

Data communication

The communication of the data in question is necessary, as it is not possible, without it, to navigate the site.

Legal basis

The processing takes place on the basis of art. 6 par. 1 letter b) , as the processing is necessary for the implementation of pre-contractual measures taken at your request or for the performance of a contract to which you are a party.

Storage times

The data in question are not retained beyond the end of the browsing session.

Purpose of the processing

Order Management: We process your data to manage orders, and more specifically to follow up on your pre-contractual requests and/or to execute the contract.

Data categories

Name, surname, shipping address, contact details (email and/or telephone number), billing information (tax code and/or certified email), payment information

Data communication

Providing the above data is a contractual obligation, as failure to provide it will not allow us to process your purchase proposal and/or subsequently process and manage your order. Providing billing information is optional, but failure to provide it will prevent us from issuing an invoice.

Legal basis

The processing takes place on the basis of art. 6 par. 1 letter b) , being necessary for the execution of pre-contractual measures taken at your request or for the performance of a contract to which you are a party.

Storage times

The data in question will be retained for ten years from the conclusion of the contract.

Purpose of the processing

Direct marketing: If you sign up for the newsletter service, we will use your data to send you commercial communications; these communications may also be sent to you under certain legal conditions, without your explicit request.

Data categories

E-mail address

Data communication

Providing your data is optional, and failure to provide it will not affect your use of other services provided by the data controller.

Legal basis

Processing is based on your freely given, conscious, specific, and unequivocal consent, pursuant to Art. 6, paragraph 1, letter a) of the Regulation. You may withdraw your consent to receiving commercial communications at any time by requesting to unsubscribe from our newsletter, without prejudice to the lawfulness of processing based on consent before its withdrawal. Pursuant to Art. 130, paragraph 4, Legislative Decree No. 196/2003, we may also use your email address, provided in the context of the sale of products or services by the data controller, to send commercial communications relating to products or services similar to those already purchased. In this case, you may always object to this processing, easily and free of charge, by requesting not to receive further communications.

Storage times

The data in question will be retained until consent is revoked and/or the right to object is exercised.

Purpose of the processing

Compliance with legal obligations: Some data may be processed to fulfill certain legal obligations to which the data controller is subject, such as fulfilling tax obligations.

Data categories

Payment and billing data

Legal basis

The processing takes place on the basis of art. 6, paragraph 1, letter c ) of the Regulation, as it is necessary for compliance with a legal obligation to which the data controller is subject.

Storage times

The data in question will be retained for the time required by the relevant legal obligations to which the data controller is bound.

Data recipients and transfer to third countries and/or international organizations

Certain data, such as name, email, shipping and billing address, payment information, telephone number, IP address, information about initialized orders, device, and browser used, may be shared with IT and telematics service providers. These providers, who are based in Europe and operate under a data processor agreement, may in turn share such data with third parties, including those located in third countries. This further sharing takes place pursuant to agreements between the data controller's providers and the third parties, and in any case, is transferred pursuant to adequacy decisions adopted by the European Commission.

Some other data, such as your name and shipping address, are shared with couriers and/or freight forwarders, who act as independent data controllers.

Exercise of rights

You have the right to obtain confirmation from the data controller at any time as to whether or not personal data concerning you is being processed, and, where that is the case, access to your personal data and the following information:

- purpose of the processing;

- categories of personal data processed;

- recipients or categories of recipients to whom the personal data have been or will be disclosed;

- retention period or the criteria used to determine that period;

- the existence of automated decision-making, including profiling.

Additionally, you can ask:

- the rectification of your data, if inaccurate;

- erasure, in the following cases: i) where the personal data is no longer necessary for the purposes for which it was collected and/or processed; ii) where consent is withdrawn, unless there is another legal basis for the processing; iii) where the data subject objects pursuant to Article 21(1) and (2) of the Regulation; iv) where it is necessary to comply with a legal obligation;

- restriction of processing in the event that: i) you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the data; ii) the processing is unlawful, and you intend to oppose its erasure, requesting that its use be limited; iii) the controller no longer needs the personal data, but you require it to establish, exercise, or defend legal claims; iv) in the event of exercising the right to object pursuant to Article 21, for a period enabling the controller to verify whether the controller's legitimate grounds for processing override yours;

- to receive, in a structured, commonly used and machine-readable format, personal data processed by automated means on the basis of consent or a contract;

- that the data not be further processed for direct marketing purposes, by objecting pursuant to art. 21 par. 2 of the Regulation

Finally, you have the right to lodge a complaint with the Italian Data Protection Authority, located in Rome at Piazza Venezia n. 11, if you believe that any processing violates the Regulation.