Skip to main content

PRIVACY POLICY PERSONAL DATA PROCESSING E-COMMERCE SITE

 

Data controller: DRIBBLIUM s.r.l. – Via Giordano Bruno n. 15, 20154 Milano (MI), email: legal@dribblium.com DRIBBLIUM S.r.l. is the owner of the DRIBBLIUM word mark, the Site www.dribblium.com and the Web-App “App.dribblium.com”

The interested party, having read the information below, expressly agrees to the registration and consultation of their data to take advantage of the services made available by the Site www.dribblium.com in the manner indicated below, through the submission of the required data, which will take place by pressing the “Place an order” button in the section https://dribblium.com/pagamento/, following the provision of consent.

Information pursuant to Articles 13 and 14 of EU REG. 2016/679 and national data protection legislation.

DEFINITIONS

  • Training Map: playing mat 150 x90cm (ball not included
  • App.Dribblium.com: platform containing the virtual experience offered by Dribblium, hereafter “webapp”

TYPE OF PERSONAL DATA

The Site requires the input of personal data of persons of age or older.
The Site requires data (master data, billing and shipping address, contact data, e-mail and cell phone, necessary to carry out operations of:

  • Service Communications.
  • Billing
  • Product shipment

The requested data are required to finalize the online purchase of the product including Training map and access code to the web-app and related training programs.

PURPOSES AND LEGAL BASES THAT MAKE THE PROCESSING LAWFUL

Data on the Site are processed for the following purposes:

(a) allow the data subject to make payment for the Training map, Training map custody and web-app access code;
(b) allow the data subject to receive billing for payment for the Training map product and related services offered by the Site;
c) allow the data subject to receive text messages/notifications regarding the confirmation of the transaction and product shipment;
(d) allow the data subject to receive the Training map;
e) allow the data subject to receive through the e-mail registered on the site the unique code to access the webapp
f)enable the Owner to know the performance of user acquisition channels;
(g) for statistical reports with anonymized data on Site activity
(h) allow the Holder to defend its rights in court, where necessary

For the purposes indicated above from a) to e), the legal basis is the contract concluded between the company Dribblium S.r.l. and the User of the website www.dribblium.com. For the purpose referred to in letters f) and g), the legal basis is constituted by the consent of the User through the acceptance of the cookie policy. For the purpose referred to in letter h), the legal basis is the fulfillment of legal obligations.

MODE OF TREATMENT

The data subject is asked to provide his or her information in the https://dribblium.com/pagamento/ section, which allows him or her to purchase the Training map and access code to the webapp containing the training programs.

The access code is a unique parametric code whose sole purpose is to allow the individual who made the product purchase to set up the training account within the webapp. Once the code is entered into the training platform, it is automatically cancelled by the system. All information regarding the processing of the data subject’s personal data within the webapp is contained in the privacy policy which can be found here (link).

By confirming your e-mail, you understand that this is the only way to enable the process of selling, billing and shipping your product.

The data of the interested party will be processed in accordance with the principles of lawfulness correctness and transparency, using manual or automated tools, including through the inclusion in databases, lists and lists suitable for the storage, management and transmission of data, in the manner and to the extent necessary to achieve the aforementioned purposes. The processing will be carried out in accordance with the principle of necessity and proportionality, avoiding the processing of personal data if the operations can be achieved through the use of anonymous data or by other means. Dribblium S.r.l. has adopted specific security measures to prevent the loss of personal data, illicit or incorrect use and unauthorized access.

Data are neither subject to automated decision making nor profiling.

When processing personal data that may, directly or indirectly, identify “the data subject,” the Data Controller acts according to the principle of strict necessity. For this reason, it has configured access to data, present on the Site in such a way that the use of personal data is kept to a minimum and in such a way as to limit the processing of personal data that can identify the data subject for the provision of the services requested and in accordance with the manner indicated by the data subject when paying for the product, and subsequently modifiable, or at the request of the authorities and the police or for the investigation of liability in case of hypothetical crimes against the Site.

PERSONAL DATA RETENTION PERIOD

Personal data processed by the Owner are stored as follows:

for the purposes of (a) to (e) up to 2 months from the operations necessary for the conclusion of the online sale (including any post-sale activities); for the purposes of (f) and (g), one month; for the purposes of (h) for 10 years from the conclusion of the sales transaction according to the current legislation. If the data subject wishes to obtain the deletion of his or her personal data before the indicated periods, he or she is invited to communicate this wish by sending a request legal@dribblium.com, after verification of the recognition of the data subject. The cancellation of data is irreversible. The request cannot be fulfilled for the purposes mentioned in (h).

The indicated retention periods will be interrupted in case of litigation or verification by the competent authorities.

RECIPIENTS OF THE DATA

Personal data processed by the Owner for the purposes:

(a) to (e) will be disclosed only to logistics service providers for the shipment of the Training map product, and to billing service providers for the issuance of accounting documents, as well as to Dribblium personnel for the management of the kit buying and selling relationship;
f. will be visible to Dribblium personnel who are responsible for the technical maintenance of the Site;
g. data will be intended as required by legal obligations as stated in the purpose.

Where necessary, the data subject’s registration data, may also be disclosed to external third parties. They may be communicated to the Owner’s workers and to some external subjects who collaborate with them, always in compliance with the indicated purposes. In particular, these are employees/collaborators who, on the basis of the roles and work duties performed, have been legitimized to process personal data, trained to do so within the limits of their competence and in accordance with the instructions given to them by the Controller. They may, moreover, be communicated, to the extent strictly necessary, to subjects who for the purpose of issuing orders or requests for information and quotations or formulation of offers, performance of Dribblium must provide/deliver goods and/or perform/receive on behalf of Dribblium or the person concerned performance or services. Finally, the data may be disclosed to third parties in the event of extraordinary transactions (e.g.: mergers, acquisitions, business transfers, etc.).

The data may be accessed (for purposes of assistance on SW applications, computer networks and for connectivity) by technicians appointed by Dribblium or external consultants or appointees of companies providing such services. Finally, they may be communicated to the subjects entitled to access them by virtue of provisions of the law, regulations, and community standards. The updated list of data processors, where required, is available at the headquarters of Dribblium s.r.l. in via Giordano Bruno n. 15, Milan (MI).

INTENTION OF PERSONAL DATA PROCESSING

Although currently all entities that process data on Dribblium’s behalf as external data controllers are established within the European Union, in the future it may also be necessary to give such data to entities that may be established outside the European Union, in countries that do not guarantee personal data an adequate level of protection under the European Data Protection Regulation RE. EU 679/2016. Dribblium will transfer, if any, the data outside the European Union only after taking the precautions established by the European Regulation and after obtaining from the indicated subjects the necessary guarantees and with the consent of the data subjects.

HIS RIGHTS.

Pursuant to Articles 15 to 22 of EU Reg. 2016/679, the data subject may exercise the following rights when provided:

  • Request confirmation of the existence or non-existence of their personal data;
  • Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, when possible, the retention period;
  • Obtain rectification and deletion of data;
  • Obtain restriction of processing;
  • (where applicable) obtain portability of data, i.e., receive them from a data controller, in a structured, commonly used, machine-readable format, and transmit them to another data controller without hindrance;
  • To object to the processing at any time and also in the case of processing for direct marketing purposes;
  • Object to automated decision-making related to natural persons, including profiling;
  • to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to its processing, as well as the right to data portability;
  • To revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.

The same, where exercisable by the interested party, may be asserted by writing to Dribblium S.r.l., via Giordano Bruno 15, Milan (MI), using the following addresses: legal@dribblium.com, specifying the subject of the request, the right he/she intends to exercise and attaching a photocopy of an identity document attesting to the legitimacy of the request.

RESPONSIBILITY FOR DATA PROTECTION.

Dribblium S.r.l., considering the protection of the personal data of those concerned to be of primary importance, has activated a dedicated e-mail address: legal@dribblium.com. Therefore, for all inquiries or complaints, Dribblium can be contacted at the e-mail address legal@dribblium.com.

The Data Controller reserves the right to make changes to this policy, which is made available, in the updated version and communicated to interested parties in the manner, from time to time identified as most functional.

INFORMATION UPDATE

Dribblium S.r.l. reserves the right to update this information in case of changes, regulatory, organizational of services rendered, etc. In this case it will give the widest dissemination to the new version of the document.

 

1st issue: 20 February 2024