Information pursuant to ART. 13 of the European General Data Protection Regulation (GDPR) 679/2016
With this notice eSales srl, a company that owns Mister Worker ™ trademark and is the website manager of www.misterworker.com, intends to inform the customer about the purposes and methods of processing of collected personal data.
Taking note of this information, the customer will be informed of the purposes and methods of collection and processing of personal data communicated as part of the navigation on the website www.misterworker.com and upon the awarding of a purchase order, with any modality (e.g. electronic, telephone) such communication occurs.
The customer can visit the online store and generally browse the website www.misterworker.com without having to communicate personal data. While browsing the aforementioned site, at no time will it be possible to identify the customer, who will remain anonymous, unless he/she decides to communicate his/her data and/or access his/her account by typing in the username and password.
The customer can print and/or save this information, using the normal browser functions ("File" - "Save as"), or download it in PDF format and store it. In order to display the PDF correctly, it will be necessary to use the free Adobe Reader program (available on the website www.adobe.it) or other equivalent programs, which support the PDF format.
1. Data Controller, collection and processing of personal data
The Data Controller is eSales Srl, with a registered office in Viale Berengario 9 20149 Milano, which owns Mister Worker™ trademark and is the website manager of www.misterworker.com.
The personal information that you provide to eSales srl during registration on this web page in the following space are processed in compliance with the aforementioned law and the confidentiality obligations provided for therein. Pursuant to art. 4 par. 1 n.2 of the GDPR 679/2016 processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2. Purposes, legal basis and methods for processing
2.1 Purchase order management: eSales S.r.l. collects and processes the customers’ personal data for the collection and execution of purchase orders, for any claims after purchase and to provide the customer with the services available. The execution of the contract is the legal basis used for data processing related to these purposes.
The provision of personal data is functional to the execution of the contract, the failure to provide it will make it impossible for eSales srl to reply to the requests and carry out the requested services.
In order to confirm a purchase order and allow eSales srl to give you its prompt and correct execution, it is advisable to enter a delivery address and a correct telephone number. A telephone number is also necessary in order to allow eSales srl to contact the customer for any questions or queries and to allow the eSales srl business partners to promptly and correctly execute the customer's purchase orders.
The email address is, finally, necessary for eSales srl to be able to communicate to the customer the confirmation of receipt of the purchase order and for any other communications. Finally, the e-mail address is used when identifying the customer to allow him or her to access his or her account.
2.2 Promotional purposes
2.2.1 Newsletter subscription
eSales srl uses the customers’ data for promotional purposes, to send information regarding the items offered on the website www.misterworker.com, only upon specific consent of the user. The legal basis of the processing for promotional purposes is only the specific consent that the customer can withdraw at any time with the methods indicated below.
The customer will regularly receive advice on purchases via email. It is possible to interrupt the dispatch of the aforementioned promotional messages free of charge by sending a request by email to email@example.com or by calling 02 9143 3257. Withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.
eSales srl processes the data collected as part of the newsletter service in order to customize and adapt the services to the interests and preferences of the customer, always acting on aggregate statistical basis and never on a single case and only upon specific consent given by the user when registering for the newsletter.
The legal basis for this processing is the specific consent.
2.3 Institutional purposes
Institutional purposes connected to the Company’s business are filing, processing, invoicing, customer management and, in particular, the fulfilment of legal obligations related to civil, fiscal, accounting purposes for administrative management of your relationship with our company; the legal basis for this processing is the fulfillment of a legal obligation to which the data controller is subject.
2.4 Method of use
2.4.1 Reserved area - Customer login
The customers’ personal data and those concerning his/her purchase orders are saved in the Mister Worker ™ system but will not be freely accessible for security reasons. eSales srl guarantees each customer access to a reserved area using a protected password. In this area, the customer can view all the data regarding the purchase orders executed and those in progress and can also manage his/her personal data, any bank data and those relating to the subscription to the newsletter service.
The customer must keep the access data responsibly and in compliance with the applicable regulations in force, and not to disclose them to third parties. eSales srl will not be in any way responsible for incorrect or improper use of the password by the customer.
Data recording and processing takes place on paper and in electronic form so as to guarantee data security and confidentiality. eSales srl processes personal data either directly or through the support of other parties acting as Data Processors, internal or external to the eSales srl structure, or as persons in charge of processing.
The data collected and processed are protected with physical and logical methods that reduce the risks of unauthorized access, dissemination, loss and destruction of data.
The customer's personal data is transferred in encrypted form. This applies both to the purchase orders and to the reserved access of the customer to his/her account. For this purpose, the SSL (Secure Socket Layer) technique is used. Although it is not possible to guarantee absolute protection, eSales srl has adopted security measures for its systems against the loss, destruction, access, modification or dissemination of customer data by unauthorized third parties.
The data are stored in the database at the headquarters of eSales srl for the period necessary to achieve the purposes indicated in this information.
The website www.misterworker.com uses different types of cookies; in relation to the management of cookies for which it is necessary to provide your consent, please see the complete information by clicking here.
Saving of personal data through cookies: Cookies are portions of code installed in the browser that assist the Data Controller in providing the service based on the purposes described. Some of the purposes of installing cookies may also require the consent of the user.
4. Rights of the data subject
The data subject may exercise the rights provided by articles 15-22 GDPR 679/2016 by sending a communication to firstname.lastname@example.org. These are the right of access, rectification / erasure / restriction, object, portability, withdraw the consent where required, without this withdrawal affecting the lawfulness of the processing based on the consent given before the withdrawal. Furthermore, the data subject can at any time lodge a complaint to the supervisory authority www.garanteprivacy.it
5. Data Transfer to third-party companies / Data recipients
We may transfer your data to third parties in the following cases:
5.1 To other companies, which act on our behalf in order to execute your contract (e.g. shippers); the execution of the contract is the legal basis for such processing. In this case, the appointed companies may use your personal data only for the stated purpose. After a careful analysis, the Data Controller has appointed these companies as Data Processors pursuant to art. 28 GDPR.
5.2 If we carry out a company merger or corporate activities of interest to users; for these purposes the processing is carried out based on the following legal bases:
a) Fulfillment of a legal obligation to which the data controller is subject.
b) Legitimate interest of the data controller or third parties.
5.3 If we have reason to believe that the transfer of your data is necessary in the event of legal proceedings or in the event of provisions by the public authorities (within the limits of what is permitted by law). We may also transfer the data of our members, in the event that we believe, in good faith, that this is required by the applicable laws and / or regulations, or that revealing them may prevent the perpetration of a crime, facilitate an investigative procedure of public security , protect the safety of anyone using our site, or to protect the security or integrity of our site, to the extent permitted by law; in this case the legal basis is the fulfillment of a legal obligation to which the data controller is subject.
5.4 If we use external data processors to process the data provided to us in accordance with the purposes envisaged in this information, for example hosting activities related to the use of our websites. Some data may also be shared with third parties (such as, for example, auditors or legal advisors) to obtain their professional opinion. This processing will be governed by an agreement (pursuant to article 28 GDPR) according to the law, safeguarding personal data protection rights.
5.5. The Data Controller informs that your personal data are not transferred to third countries, but that if it should happen to transfer processing activities to a third country this will be done only after verification of the existence of an adequacy decision by the Commission pursuant to Article 45, or on the basis of binding company rules pursuant to Article 47 of the European Reg. 2016/679 and standard contractual clauses.