Who is the Data Controller?¹
ASG International S.r.l., with legal headquarters in Via dell’industria, 9 - 36065, Mussolente (VI), Italy (VAT Number: 03655610248) (hereafter, “Data Controller”).

How can I contact them?
The company's contact details are:
Email: info@sciconsports.com
Certified email: asginternational@pec.it
Address: Via dell’industria, 9 - 36065, Mussolente (VI), Italy

1. Introduction
In accordance with the UK Regulation on personal data protection (UK-GDPR), legal entities are not considered interested parties, and therefore the European regulation does not apply. However, if personal data relating to an individual is included in the context of collecting corporate data, this individual will be considered an interested party in accordance with the aforementioned regulation, resulting in the applicability of the relevant legislation.

2. What processing is carried out through the site? And what are the legal bases, purposes, and retention times?

E-COMMERCE REGISTRATION/ACCESS

PURPOSE
The purpose of data processing is to register on the site and to make purchases more easily.

LEGAL BASIS
Data subject’s consent.

In case of litigation, the data will be processed to act and/or defend in court based on the legitimate interest of the Data Controller.

RETENTION TIME
Data will be processed until consent is revoked.
If the account remains inactive for 7 years, we will send an email to find out if you are still interested in keeping it active; otherwise, the account will be deleted.
Data will be processed for a longer period in case of litigation.

OTHER INFORMATION
Registration is not mandatory to make purchases, as it is also possible to proceed in "guest" mode.

REGISTRATION VIA GOOGLE ACCOUNT
On the site, there is the possibility to register via your Google account. Therefore, the data will not be provided directly by the Interested Party but imported from the platform and thus processed according to art. 14 UK-GDPR.

The data subject to processing are: personal data and email address.

PURCHASE

PURPOSE
The main purpose of data processing is to allow you to purchase and receive the requested product, and also they are necessary for compliance with legal obligations (including accounting and tax).
Data may be used in case of disputes about the correct performance of the contract.

LEGAL BASIS
Execution of a contract and consequent fulfillment of legal obligations incumbent on the Data Controller.
In case of litigation, data will be processed to act or defend in court, and this corresponds to the legitimate interest of the Data Controller.

RETENTION TIME
Data will be deleted 10 years after the fulfillment of the contract.
They may be kept longer only in case of disputes and thus to exercise or defend a right based on the legitimate interest of the Data Controller.

OTHER INFORMATION
The provision of data is mandatory, and in case of refusal to provide them, it will not be possible to purchase the requested products.
Regarding the purchase, the sending of transactional emails or SMS is planned for which, therefore, the Data subject’s consent is not necessary.

NEWSLETTER/DEM even with automated methods (email, SMS, WhatsApp, social networks) or traditional methods

PURPOSE
The purpose of data processing is to send you newsletters and DEM through traditional methods or even through automated methods (email, SMS, WhatsApp, social networks).

LEGAL BASIS
Consent given by the Data subject according to art. 6, co. 1, lett. a) UK-GDPR and art. 22 par. 2 del The Privacy and Electronic Communications Regulations.

RETENTION TIME
5 years from the last email.

OTHER INFORMATION
Consent can be revoked at any time.
The User has full freedom to release the requested data, as there is no legal obligation to provide them.
However, if the user chooses not to provide the data identified as essential, the Controller will not be able to achieve the indicated purpose.

MARKETING AND PROFILING THROUGH DIGITAL PLATFORMS

PURPOSE
The purpose of data processing is to show marketing content based on your interests, as identified by your interactions on our site or social media.

This includes the use of retargeting tools of digital platforms to spread targeted advertising messages.

LEGAL BASIS
Consent that can be acquired through various methods:

1. Through Cookies on our Site: Your consent to marketing and profiling cookies is collected through the cookie settings on our site.
2. For Custom Audience CRM Campaigns (Prospecting and Retargeting): For these campaigns, we obtain your explicit consent to use your contact data (e.g., email address) for marketing purposes.

Interaction with Social Pages: If you have given consent to the use of profiling cookies on our Site, we can process your contact data and information communicated during the interaction with the Social Pages. We use this information, in accordance with your privacy settings on social media, to show personalized marketing ads.

RETENTION TIME
Data will be stored until the consent is revoked through the cookie settings.

OTHER INFORMATION

1. Consent acquired through Cookies on our Site: The User can manage or revoke this consent at any time, as described in our Cookie Policy. We also inform you that cookies can be both first and third party and therefore installed, through us, directly by Meta.
2. Consent acquired for Custom Audience CRM Campaigns (Prospecting and Retargeting): This consent allows us to process your data to identify similar audiences (lookalike) and show targeted advertisements on social media and other digital platforms.

In the case of simple segmentation of the User, your consent is not required.

REVIEW

PURPOSE
The purpose of data processing is to share your experience and your opinion regarding the purchased product.

LEGAL BASIS
Consent.

RETENTION TIME
Reviews will be published on the site until they become obsolete and/or until consent is revoked.

OTHER INFORMATION
The provision of data is optional, as there is no legal obligation to release the review.
However, if the User chooses not to provide the data deemed essential, it will not be possible to publish the review.

BECOME A DISTRIBUTOR OR RESELLER

PURPOSE
The purpose of data processing is to receive information about the possibility of becoming a distributor or reseller of SciconSport products.

LEGAL BASIS
Execution of pre-contractual measures carried out at the request of the Data subject.

RETENTION TIME
5 years.

OTHER INFORMATION
The provision of data is optional. However, if the User chooses not to provide the data deemed essential, it will not be possible to contact him/her.

“AFFILIATES” PROGRAM

PURPOSE
The purpose of data processing is to sign up for the “Affiliates” program to resell Scicon Sports products and thus obtain a commission.

LEGAL BASIS
Contractual execution.

In case of litigation, legitimate interest of the Data Controller.

RETENTION TIME
Data will be processed until unsubscription from the program.

OTHER INFORMATION
The provision of data is optional.
However, if the User chooses not to provide the data deemed essential, it will not be possible to subscribe to the program.

ABANDONED CART

PURPOSE
The purpose of data processing is to be able to send 3 emails in one day to invite the user to finalize the interrupted purchase on the site.

LEGAL BASIS
Legitimate interest of the Data Controller in concluding the purchase. 

RETENTION TIME
72 hours.

OTHER INFORMATION
The provision of data is automatic and follows the partial compilation of the shopping cart.

BACK IN STOCK

PURPOSE
The purpose of data processing is to contact the User who requests it in case a product is back in stock.

LEGAL BASIS
Execution of pre-contractual measures carried out at the request of the Data subject.

RETENTION TIME
Data will be stored for the time necessary to process the request and in any case not more than 12 months.

OTHER INFORMATION
The provision of data is optional.
However, if the User chooses not to provide the data deemed essential, it will not be possible to recontact him/her.

CONTACT US

PURPOSE
The purpose of data processing is to allow the sending of information requests.

LEGAL BASIS
Execution of pre-contractual measures carried out at the request of the Data subject.
In case of litigation, the data will be processed to act or defend in court, and this corresponds to the legitimate interest of the Data Controller.

RETENTION TIME
We will process the data for the time necessary to respond to requests and subsequently delete the data.
They may be kept longer only in case of possible disputes and thus to exercise or defend a right based on the legitimate interest of the Data Controller.
The verification of data obsolescence is done every 12 months.

OTHER INFORMATION
The User has full freedom to release the requested data, as there is no legal obligation to provide them.
However, if the user chooses not to provide the data identified as essential, the Controller will not be able to achieve the indicated purpose.
This processing includes every mode of contact (mail, phone, sms, WhatsApp).

WORK WITH US

PURPOSE
The purpose of data processing is to be able to send spontaneous job applications.

LEGAL BASIS
Execution of pre-contractual measures carried out at the request of the Data subject.

RETENTION TIME
Data will be stored for 3 months after which they will be deleted.

OTHER INFORMATION
The User has full freedom to release the requested data, as there is no legal obligation to provide them.
However, if the user chooses not to provide the data identified as essential, the Data Controller will not be able to achieve the indicated purpose.

NAVIGATION DATA

PURPOSE
Site security.

LEGAL BASIS
We will process the data based on the legitimate interest of the company in computer security and in fulfilling legal obligations.
The legal basis for the processing of cookies other than those necessary is consent.

RETENTION TIME
24 months.

OTHER INFORMATION
For the regulation on cookies, please refer to the appropriate information.

3. What else should I know?
Data will be processed lawfully, correctly, and with the utmost confidentiality, in compliance with appropriate security measures as provided by the Data Protection Act 2018 and the UK-GDPR.
Processing will be carried out using digital means. The data will not be subject to public disclosure, except for reviews. Furthermore, the user will not be subjected to automated decision-making processes such as profiling unless they consent to this through the installation of cookies or other tracking tools, for which the regulations are referred to in the specific information.

4. Who will my data be communicated to?
The Data Controller may communicate the data to all subjects to whom communication is mandatory by law for the fulfillment of the purposes provided by law.
The Data Controller also uses certain companies or computer tools that carry out data processing activities on personal data of the interested parties exclusively in the interest of the Data Controller itself, such as couriers, all appropriately appointed as data processors under art. 28 UK-GDPR. The data will also be communicated to payment gateways as independent controllers.

The list of data processors is available at the office.

5. What is the location of data storage and transfer?
The management and storage of personal data will take place on servers located in EU and non-EU countries. However, data may be transferred outside Europe for the performance of certain activities (newsletter and back in stock). The Data Controller ensures that the transfer outside the EU is carried out in accordance with arts. 44-47 Chapter V of the UK-GDPR.

6. What are my rights and how can I exercise them?

a) Rights of the data subject
The user, in their capacity as a data subject, has the rights set out in art. 15 et seq. of the Regulation, specifically:

• RIGHT OF ACCESS (art. 15 UK-GDPR)

The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in an intelligible form.

• RIGHT TO RECTIFICATION (art. 16 UK-GDPR)

The data subject has the right to obtain the rectification of inaccurate personal data concerning them and the integration of incomplete data.

• RIGHT TO ERASURE (art. 17 UK-GDPR)

The data subject has the right to obtain the erasure of personal data in the presence of specific reasons such as the withdrawal of consent, opposition to processing, or if the data are no longer necessary for the purposes for which they were collected and processed or in case of unlawful processing. It will not always be possible to proceed with erasure, but it will certainly be the duty of the Data Controller to provide adequate motivation.

• RIGHT TO RESTRICTION OF PROCESSING (art. 18 UK-GDPR)

The data subject has the right to obtain the restriction of processing in the presence of specific hypotheses such as, for example, in the case of a request for rectification or opposition during the evaluation period of the requests.

• RIGHT TO DATA PORTABILITY (art. 20 UK-GDPR)

If the processing is based on consent or on a contract and is carried out using automated tools, the data subject can receive them in a structured, commonly used, and machine-readable format or ask to transmit them to another controller.

• RIGHT TO OBJECT (art. 21 UK-GDPR)

The data subject has the right to object, in whole or in part:

1. for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of collection;
2. to the processing of personal data concerning them for the pursuit of purposes not contemplated by art. 2.

The user can submit a request for opposition to the processing of their personal data under article 21 of the UK-GDPR in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in case of the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights, and freedoms of the user.

• RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the competent supervisory authority under article 77 of the UK-GDPR if they believe that the processing of their data is contrary to the legislation in force.

b) How to exercise rights:
The data subject can exercise the rights mentioned in the previous article at any time by contacting the Data Controller at the addresses listed above.

Latest version: 01/02/2024
This information has been prepared by Polimeni.Legal.

¹ Pursuant to art. 4 n.7 UK-GDPR: the data controller is the person who determines the purposes and means of the processing of personal data and his responsibilities are identified by art.24 UK-GDPR.