Privacy Policy
Pursuant to art. 13 Legislative Decree 30 June 2003, n. 196 ("Privacy Code"), of the art. 13 of the European Regulation n. 679 of 2016 (the "Privacy Regulation"), as well as the Recommendation n. 2 of 2001 adopted pursuant to art. 29 of Directive no. 95/46/CE, NYM S.r.l.s. Unipersonale intends to inform you and all users and/or visitors of the site www.nym-store.com.com (respectively the "Users" and the "Site"), regarding the use of personal data, log files and cookies collected through the Site itself.
1. Owner, Data Processors and Data Protection Officer
The personal data controller is NYM S.r.l.s Unipersonale (C.F. and P.IVA 12226990013), with registered office in Via Carlo Capelli 5, 10146 Turin (TO) tel. +39.011723216 e-mail direzione@nym-store.com (hereinafter the "Owner").
The updated list of designated Data Processors can be provided upon request by interested parties and/or Users. The Data Protection Officer is Shopify INC. designated by us which owns the servers where the data is stored.
2. Information collected automatically by the Site - Cookies
a) Information collected automatically
Like all websites, our site also makes use of log files, in which information collected in an automated manner is kept during your visits. The computer systems and software procedures used to operate the Site, in fact, automatically acquire certain information during use, the transmission of which is implicit in the use of Internet communication protocols.
The information collected is as follows:
Internet Protocol (IP) address or domain name of the device you are using;
type of browser and parameters of the device used to connect to the Site;
the addresses in URI (Uniform Resource Identifier) notation of the requested resources or the method used in submitting the request to the server;
name of the internet service provider (ISP);
date and time of visit;
web page of origin (referral) and exit of the User;
possibly the number of clicks;
the size of the file obtained in response;
the numerical code indicating the status of the response given by the server (successful, error, etc.);
other parameters relating to the operating system and IT environment of your device.
This information is processed automatically and collected exclusively in aggregate form in order to verify the correct functioning of the Site.
b) Cookies
Cookies are used on the site. Cookies are text files recorded on computer support, which allow you to record some parameters and data communicated to the computer system, through the browser you use. These tools therefore allow an analysis of your habits in using the Site, for different purposes: execution of IT authentications, monitoring of sessions, memorization of information on specific configurations concerning users who access the server, memorization of preferences, etc.
Cookies are distinguished in:
Technical cookies: they are used to navigate or to provide a service requested by you. Without the use of these cookies, some operations could not be performed or would be more complex and/or less secure.
Profiling cookies: they are used to track your navigation and create profiles on your tastes, habits, choices, etc. In this way, advertising messages in line with your preferences already expressed in the previous online navigation can be transmitted to your device.
Your consent is not required for the installation of technical cookies. Your consent is required for the installation of profiling cookies: if you do not want your device to receive and store profiling cookies, you can change the security settings of your browser. In fact, through the settings of the browser used to navigate, you can decide whether to cancel and/or avoid the installation of cookies on the device used.
It should be noted, however, that by disabling the use of profiling cookies you will not be able to take full advantage of some functions of the Site.
While browsing the Site, you may also receive cookies on your terminal that are sent from different sites or web servers (hereinafter "Third Parties"). The Third Parties, which use cookies on our Site, are:
GA Audiences, whose information can be found at the following address:
https://policies.google.com/privacy?hl=it
DoubleClick, whose information can be found at the following address:
https://policies.google.com/technologies/ads
Facebook Custom Audience, whose information can be found at the following address:
https://www.facebook.com/full_data_use_policy
Facebook Connect, whose information can be found at the following address:
https://www.facebook.com/about/privacy/
Google Analytics, whose information can be found at the following address:
https://www.google.com/analytics/terms/it.html
Google Tag manager, whose information can be found at the following address:
http://www.google.com/intl/it/tagmanager/use-policy.html
Pay Plug, whose information can be found at the following address:
(https://www.payplug.com/it/privacy-policy)
Pay Pal, whose information can be found at the following address:
(https://www.paypal.com/it/webapps/mpp/ua/privacy-full)
Zopim Chat, whose information can be found at the following address:
(https://www.zopim.com/privacy.html)
Through the use of the Site, the use of Cookies is considered accepted and I give your consent to the processing of data collected by Third Parties.
3. The personal data you provide us using the Site: for what purpose we treat them.
Your data is used to allow you, through the use of the Site, to:
a) access the website www.nym-store.com (hereinafter the "Site") and use the following services (the "Site Services") of :
- online purchase, using the electronic commerce platform service (hereinafter "E-commerce"), which allows you, among other things, to have the packages containing the products marketed by the Owner delivered to the address you indicated (hereinafter the "Products");
- update, by e-mail, regarding all our promotional and marketing initiatives, including direct ones, including, by way of example, information regarding the latest collections, events and advertising campaigns organized by the Data Controller (the "Newsletter ”);
Your data is processed for the following purposes:
(i) execute your purchase orders for Products online through the Site, fulfill the related administrative and accounting obligations (e.g. for order fulfillment, correspondence, invoicing) and arrange for the delivery of the same through the platform E-commerce (e.g. delivery and/or collection, any requests for information, complaints, etc.);
(ii) comply with legal obligations;
(iii) carry out the technical management of the Site;
(iv) provide you with the Newsletter service;
(v) analyze your preferences, habits, interests and consumption choices, including the type, frequency, location of purchases, in order to process statistics, create specific user profiles and carry out predictive activities in relation to your future consumption ( hereinafter, the "Profiling Activity");
The processing of data for the aforementioned purposes will be carried out in compliance with the Privacy Code, the Privacy Regulations and all the specific sector regulations including the provisions of the "Guarantor Rules for loyalty programs" of 24 February 2005 and the guide on the processing of personal data for online profiling" of 19 March 2015.
In compliance with the "Guidelines on promotional activity and the fight against spam" of 4 July 2013, we point out that the consent you may have given for the sending of commercial, promotional and marketing communications using automated tools will also extend to traditional methods of contact.
The data you provide will mainly be processed with IT tools under the authority of the Data Controller, by subjects specifically appointed, authorized and trained for processing pursuant to article 30 of the Privacy Code and articles 28 and 29 of the Privacy Regulation . We inform you that suitable security measures are observed also pursuant to articles 5 and 32 of the Privacy Regulation to prevent data loss, illicit or incorrect use and unauthorized access.
4. Mandatory or optional nature of the consent for the provision of data, the consequences of any refusal and the legal basis of the processing
Know that for the purposes referred to in points (i), (ii) and (iii) of the previous art. 3, the provision of your personal data is mandatory as without it you will not be able, through the Site, to use the Site Services offered, including the transport, delivery and/or collection of Products through the E-commerce platform.
Instead, the provision of your personal data is not mandatory but optional for the purposes referred to in points (iv) and (v) of the previous art. 3. Failure to provide data for the purposes just indicated will not allow us to provide you with the Newsletter and to carry out the Profiling Activity. To this end, you can freely decide whether or not to give your consent also for these purposes and without this inhibiting the possibility of accessing the Website Services.
Remember that, in any case and at any time, you can request the Data Controller to delete your data through a simple communication to be sent, without particular formalities, to the addresses referred to in the previous art. 1.
With reference to the purposes referred to in points (i), (ii) and (iii) of the previous art. 3, the legal basis of the processing is in fact the execution of the services provided through the Site and requested by you (pursuant to article 6, paragraph 1, letter b of the Privacy Regulation and article 24, paragraph 1, letter b of the Privacy Code); instead, with reference to the purposes referred to in points (iv) and (vi) of the previous art. 3, the legal basis of the processing is your freely expressed consent (pursuant to article 6, paragraph 1, letter a of the Privacy Regulation and article 23 of the Privacy Code).
5. To whom and in what context we can pass on your data
Your data may be communicated, within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following subjects:
(i) to the financial administration and/or other public authorities, where this is required by law or at their request;
(ii) to credit institutions for purposes instrumental to the online purchase of the Products;
(iii) to the structures, subjects and external companies that the Data Controller uses to carry out related activities, instrumental or consequent to the execution of the Site Services - including the cloud computing archiving service, transport, delivery and/or withdrawal of the Products through the E-commerce platform - when sending the Newsletter and the Profiling Activity;
(iv) to external consultants (for example, for the management of tax obligations), if not designated in writing as Data Processors.
6. Your rights
Remember that at any time you can exercise the rights referred to in art. 7 of the Privacy Code and pursuant to articles 15, 16, 17, 18, 20 and 21 of the Privacy Regulation, by sending a written communication to the contact details of the Data Controller referred to in the previous art. 1 and, for the effect, obtain:
confirmation of the existence or not of your personal data with indication of the relative origin, verify its accuracy or request its updating, rectification, integration;
access, rectification, deletion of data or limitation of processing;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law.
You can also object to the processing of data concerning you.
With reference to the Newsletter, we point out that your right to request the termination of the treatment carried out through automated contact methods also extends to the traditional ones. Furthermore, the possibility remains for you to exercise this right only in part, i.e. by requesting the interruption, for example, of the sending of promotional communications made through one or some of the contact tools for which you have given consent.
7. Duration of Treatment
Without prejudice to legal obligations, personal data will be kept for a specific period, based on criteria based on the nature of the services provided.
It should be noted that the data kept for Profiling purposes will be kept for a period not exceeding 36 months respectively from their registration.
8. Security Measures
Through the Site, your data is processed in compliance with the applicable law and using adequate security measures in compliance with the legislation in force, also pursuant to articles 5 and 32 of the Privacy Regulation.
In this regard, we confirm, among other things, the adoption of appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification or unauthorized destruction of your data.
9. Changes to the Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy. In this case you will be promptly informed, when you use the Site again.
1. Owner, Data Processors and Data Protection Officer
The personal data controller is NYM S.r.l.s Unipersonale (C.F. and P.IVA 12226990013), with registered office in Via Carlo Capelli 5, 10146 Turin (TO) tel. +39.011723216 e-mail direzione@nym-store.com (hereinafter the "Owner").
The updated list of designated Data Processors can be provided upon request by interested parties and/or Users. The Data Protection Officer is Shopify INC. designated by us which owns the servers where the data is stored.
2. Information collected automatically by the Site - Cookies
a) Information collected automatically
Like all websites, our site also makes use of log files, in which information collected in an automated manner is kept during your visits. The computer systems and software procedures used to operate the Site, in fact, automatically acquire certain information during use, the transmission of which is implicit in the use of Internet communication protocols.
The information collected is as follows:
Internet Protocol (IP) address or domain name of the device you are using;
type of browser and parameters of the device used to connect to the Site;
the addresses in URI (Uniform Resource Identifier) notation of the requested resources or the method used in submitting the request to the server;
name of the internet service provider (ISP);
date and time of visit;
web page of origin (referral) and exit of the User;
possibly the number of clicks;
the size of the file obtained in response;
the numerical code indicating the status of the response given by the server (successful, error, etc.);
other parameters relating to the operating system and IT environment of your device.
This information is processed automatically and collected exclusively in aggregate form in order to verify the correct functioning of the Site.
b) Cookies
Cookies are used on the site. Cookies are text files recorded on computer support, which allow you to record some parameters and data communicated to the computer system, through the browser you use. These tools therefore allow an analysis of your habits in using the Site, for different purposes: execution of IT authentications, monitoring of sessions, memorization of information on specific configurations concerning users who access the server, memorization of preferences, etc.
Cookies are distinguished in:
Technical cookies: they are used to navigate or to provide a service requested by you. Without the use of these cookies, some operations could not be performed or would be more complex and/or less secure.
Profiling cookies: they are used to track your navigation and create profiles on your tastes, habits, choices, etc. In this way, advertising messages in line with your preferences already expressed in the previous online navigation can be transmitted to your device.
Your consent is not required for the installation of technical cookies. Your consent is required for the installation of profiling cookies: if you do not want your device to receive and store profiling cookies, you can change the security settings of your browser. In fact, through the settings of the browser used to navigate, you can decide whether to cancel and/or avoid the installation of cookies on the device used.
It should be noted, however, that by disabling the use of profiling cookies you will not be able to take full advantage of some functions of the Site.
While browsing the Site, you may also receive cookies on your terminal that are sent from different sites or web servers (hereinafter "Third Parties"). The Third Parties, which use cookies on our Site, are:
GA Audiences, whose information can be found at the following address:
https://policies.google.com/privacy?hl=it
DoubleClick, whose information can be found at the following address:
https://policies.google.com/technologies/ads
Facebook Custom Audience, whose information can be found at the following address:
https://www.facebook.com/full_data_use_policy
Facebook Connect, whose information can be found at the following address:
https://www.facebook.com/about/privacy/
Google Analytics, whose information can be found at the following address:
https://www.google.com/analytics/terms/it.html
Google Tag manager, whose information can be found at the following address:
http://www.google.com/intl/it/tagmanager/use-policy.html
Pay Plug, whose information can be found at the following address:
(https://www.payplug.com/it/privacy-policy)
Pay Pal, whose information can be found at the following address:
(https://www.paypal.com/it/webapps/mpp/ua/privacy-full)
Zopim Chat, whose information can be found at the following address:
(https://www.zopim.com/privacy.html)
Through the use of the Site, the use of Cookies is considered accepted and I give your consent to the processing of data collected by Third Parties.
3. The personal data you provide us using the Site: for what purpose we treat them.
Your data is used to allow you, through the use of the Site, to:
a) access the website www.nym-store.com (hereinafter the "Site") and use the following services (the "Site Services") of :
- online purchase, using the electronic commerce platform service (hereinafter "E-commerce"), which allows you, among other things, to have the packages containing the products marketed by the Owner delivered to the address you indicated (hereinafter the "Products");
- update, by e-mail, regarding all our promotional and marketing initiatives, including direct ones, including, by way of example, information regarding the latest collections, events and advertising campaigns organized by the Data Controller (the "Newsletter ”);
Your data is processed for the following purposes:
(i) execute your purchase orders for Products online through the Site, fulfill the related administrative and accounting obligations (e.g. for order fulfillment, correspondence, invoicing) and arrange for the delivery of the same through the platform E-commerce (e.g. delivery and/or collection, any requests for information, complaints, etc.);
(ii) comply with legal obligations;
(iii) carry out the technical management of the Site;
(iv) provide you with the Newsletter service;
(v) analyze your preferences, habits, interests and consumption choices, including the type, frequency, location of purchases, in order to process statistics, create specific user profiles and carry out predictive activities in relation to your future consumption ( hereinafter, the "Profiling Activity");
The processing of data for the aforementioned purposes will be carried out in compliance with the Privacy Code, the Privacy Regulations and all the specific sector regulations including the provisions of the "Guarantor Rules for loyalty programs" of 24 February 2005 and the guide on the processing of personal data for online profiling" of 19 March 2015.
In compliance with the "Guidelines on promotional activity and the fight against spam" of 4 July 2013, we point out that the consent you may have given for the sending of commercial, promotional and marketing communications using automated tools will also extend to traditional methods of contact.
The data you provide will mainly be processed with IT tools under the authority of the Data Controller, by subjects specifically appointed, authorized and trained for processing pursuant to article 30 of the Privacy Code and articles 28 and 29 of the Privacy Regulation . We inform you that suitable security measures are observed also pursuant to articles 5 and 32 of the Privacy Regulation to prevent data loss, illicit or incorrect use and unauthorized access.
4. Mandatory or optional nature of the consent for the provision of data, the consequences of any refusal and the legal basis of the processing
Know that for the purposes referred to in points (i), (ii) and (iii) of the previous art. 3, the provision of your personal data is mandatory as without it you will not be able, through the Site, to use the Site Services offered, including the transport, delivery and/or collection of Products through the E-commerce platform.
Instead, the provision of your personal data is not mandatory but optional for the purposes referred to in points (iv) and (v) of the previous art. 3. Failure to provide data for the purposes just indicated will not allow us to provide you with the Newsletter and to carry out the Profiling Activity. To this end, you can freely decide whether or not to give your consent also for these purposes and without this inhibiting the possibility of accessing the Website Services.
Remember that, in any case and at any time, you can request the Data Controller to delete your data through a simple communication to be sent, without particular formalities, to the addresses referred to in the previous art. 1.
With reference to the purposes referred to in points (i), (ii) and (iii) of the previous art. 3, the legal basis of the processing is in fact the execution of the services provided through the Site and requested by you (pursuant to article 6, paragraph 1, letter b of the Privacy Regulation and article 24, paragraph 1, letter b of the Privacy Code); instead, with reference to the purposes referred to in points (iv) and (vi) of the previous art. 3, the legal basis of the processing is your freely expressed consent (pursuant to article 6, paragraph 1, letter a of the Privacy Regulation and article 23 of the Privacy Code).
5. To whom and in what context we can pass on your data
Your data may be communicated, within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following subjects:
(i) to the financial administration and/or other public authorities, where this is required by law or at their request;
(ii) to credit institutions for purposes instrumental to the online purchase of the Products;
(iii) to the structures, subjects and external companies that the Data Controller uses to carry out related activities, instrumental or consequent to the execution of the Site Services - including the cloud computing archiving service, transport, delivery and/or withdrawal of the Products through the E-commerce platform - when sending the Newsletter and the Profiling Activity;
(iv) to external consultants (for example, for the management of tax obligations), if not designated in writing as Data Processors.
6. Your rights
Remember that at any time you can exercise the rights referred to in art. 7 of the Privacy Code and pursuant to articles 15, 16, 17, 18, 20 and 21 of the Privacy Regulation, by sending a written communication to the contact details of the Data Controller referred to in the previous art. 1 and, for the effect, obtain:
confirmation of the existence or not of your personal data with indication of the relative origin, verify its accuracy or request its updating, rectification, integration;
access, rectification, deletion of data or limitation of processing;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law.
You can also object to the processing of data concerning you.
With reference to the Newsletter, we point out that your right to request the termination of the treatment carried out through automated contact methods also extends to the traditional ones. Furthermore, the possibility remains for you to exercise this right only in part, i.e. by requesting the interruption, for example, of the sending of promotional communications made through one or some of the contact tools for which you have given consent.
7. Duration of Treatment
Without prejudice to legal obligations, personal data will be kept for a specific period, based on criteria based on the nature of the services provided.
It should be noted that the data kept for Profiling purposes will be kept for a period not exceeding 36 months respectively from their registration.
8. Security Measures
Through the Site, your data is processed in compliance with the applicable law and using adequate security measures in compliance with the legislation in force, also pursuant to articles 5 and 32 of the Privacy Regulation.
In this regard, we confirm, among other things, the adoption of appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification or unauthorized destruction of your data.
9. Changes to the Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy. In this case you will be promptly informed, when you use the Site again.