INFORMATION ON THE PROCESSING OF PERSONAL DATA
Welcome to the Joule website (the “Site”).
On this page, we are providing you with information pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) on the processing of your personal data that we collect when you browse the Site and interact with the related services.
This information is provided only for the Site and any of its subdomains, and does not apply to other websites that may be accessed through links or hyperlinks.
1. DATA CONTROLLER
The Data Controller is Joule s.r.l., headquartered in Campodarsego (PD), Via Verdi 117, Tax Code and VAT Code 05417700282, e-mail address: privacy@joulecompany.it (“Joule” or the “Data Controller”).
2. DATA PROTECTION OFFICER
The Data Controller has appointed a Data Protection Officer (DPO) who can be reached at the following e-mail address: dpo@joulecompany.it.
3. CATEGORIES OF PERSONAL DATA COLLECTED
A) Navigation data
Browsing the Site and accessing its services involves the acquisition of certain personal data relating to your browsing, such as, for example, the IP addresses or domain names of the computers you use to connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and computer environment you are using. This is information that is not collected in order to be associated with particular data subjects, but which by its very nature could, through processing and association with data held by third parties, make it possible to identify such data subjects.
B) Personal data you voluntarily provide to us
The Data Controller processes personal data that you voluntarily provide when you contact us, such as, for example, identification data and contact details.
C) Cookies
4. PURPOSE, LEGAL BASIS AND RETENTION PERIOD
Your personal data will be processed by the Data Controller for:
A) Browsing the Site
PURPOSE
To enable you to navigate the Site and access related services and, in particular, for the purpose of obtaining anonymous statistical information on the use of the Site and the services offered and to monitor its proper functioning
LEGAL BASIS
Legitimate interest of the Data Controller
RETENTION PERIOD
For the period required for the relevant processing
B) Customer service
PURPOSE
For handling and responding to inquiries you send to us via the contact form
LEGAL BASIS
Performance of the contract or pre-contractual measures you requested
RETENTION PERIOD
For the period of time necessary to respond to your request (subject to further retention, where necessary, for the purposes that follow)
C) Fulfillment of legal obligations
PURPOSE
For the fulfillment of legal obligations (in particular regarding civil matters, tax matters, public safety, banking and data protection)
LEGAL BASIS
Fulfillment of legal obligations
RETENTION PERIOD
For the period stipulated in the regulations.
D) Litigation and tort prevention
PURPOSE
To defend or enforce a right belonging to Tomorrow Tech and/or for the investigation and prevention of fraud and other crimes or torts
LEGAL BASIS
Legitimate interest of the Data Controller
RETENTION PERIOD
For as long as necessary for the purpose for which the data are collected in accordance with applicable law (e.g., statute of limitations)
E) Newsletter
PURPOSE
the sending via e-mail of the newsletter on the products, services and events of the Data Controller.
LEGAL BASIS
Your consent
RETENTION PERIOD
Until consent is revoked or, failing that, when the service is terminated.
PURPOSE
LEGAL BASIS
RETENTION PERIOD
A
Browsing the Site: to enable you to navigate the Site and access related services and, in particular, for the purpose of obtaining anonymous statistical information on the use of the Site and the services offered and to monitor its proper functioning
Legitimate interest of the Data Controller
For the period required for the relevant processing
B
C
Fulfillment of legal obligations
For the period stipulated in the regulations.
D
Legitimate interest of the Data Controller
For as long as necessary for the purpose for which the data are collected in accordance with applicable law (e.g., statute of limitations)
E
Newsletter: l’invio tramite e-mail della newsletter relativa a prodotti, servizi ed eventi del Titolare.
Your consent
Until consent is revoked or, failing that, when the service is terminated.
For technical reasons, your personal data will be deleted or anonymized within 3 months after the expiration of the aforementioned retention periods.
5. NATURE OF DATA PROVISION
The provision of data in the fields marked with an asterisk (*) for the purposes referred to in Article 4, letters A) to D) above is necessary to navigate the Site and take advantage of the related services, and failure to provide such data will make it impossible to obtain the services requested. On the other hand, the provision of data in fields not marked with an asterisk, while it may be useful to facilitate relations with the Data Controller, is optional and failure to provide such data does not affect the obtaining of the services requested.
Regarding the newsletter purpose referred to in Article 4, letter E), the provision of data is optional and your refusal will make it impossible for the Data Controller to process the data you provide in order to send you the newsletter, but it will not prevent you from browsing the Site and taking advantage of the related services.
6. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND DISSEMINATION OF DATA
For the pursuit of the purposes for which the data are collected, the Data Controller may make use of the following categories of subjects to whom the data may be communicated or who may come into knowledge of the data as Data Processors: IT service providers, such as, for example, internet and cloud computing services; subjects carrying out customer service activities; firms and other subjects who provide assistance, consultancy and services, for example in the following domains: legal, tax, accounting, economic-financial, technical-organizational, data processing, communication; public authorities and supervisory and control bodies.
The updated list of Data Processors of personal data is available upon specific request to the Data Controller via the means indicated in paragraph 9.
Exclusively for the purposes specified above, your personal data may also be made known to personnel within the organization of the Data Controller who are authorized to process it by reason of their respective duties.
No data collected on the Site is subject to dissemination.
7. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION
Your personal data may be transferred, for the purposes for which it is collected, to the United States of America, which is a country outside the European Union. The transfer of personal data to entities located in the U.S. will only take place under the adequacy decision of the European Union Commission of 10-07-2023 on the adequacy of the level of protection of personal data with the EU-US Data Privacy Framework, binding corporate rules and/or the standard contractual clauses adopted or approved by the Commission of the European Union (Articles 45, 46, paragraph II, letters c and d and 47 of the Regulations). To obtain copies of such data, you may contact the Data Controller as indicated in Section 9.
8. MINORS
The Site and services are intended for the sale of products and services to individuals over the age of 18. Therefore, the Data Controller does not intentionally collect personal data from persons under the age of 18. If you access the services of the Data Controller, you declare that you are of legal age.
9. RIGHTS OF DATA SUBJECTS
In relation to the personal data you have provided, you have the right, in the cases provided for by regulations, to request access to and rectification or erasure of your personal data, or to restrict of the processing of the personal data concerning you, or to object to its processing, as well as the right to data portability.
In cases in which you have given consent, you have the right to request the revocation of consent, without affecting the lawfulness of processing based on the consent given before revocation.
To exercise your rights, you can write to: privacy@joulecompany.it
Finally, we would like to remind you that, if the prerequisites for this are met, you also have the right to file a complaint with the Italian Data Protection Authority as the supervisory authority via the established procedures (https://www.garanteprivacy.it/home/modulistica-e-servizi-online#diritti).