Privacy

Privacy Notice pursuant to art. 13 of the European Regulation (EU) 2016/679 (GDPR). We want to inform you that the European Regulation provides for the protection of individuals with respect to the processing of personal data. Such processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

1. Data Controller

The data controller is Nuova Corti Shop S.r.l., with registered office at Via Palestro 19, 41049 Sassuolo (MO), P.IVA IT03083040364, represented by its legal representative. The Controller can be contacted by e-mail at amministrazione@nuovacorti.it, by registered mail or at the Company's registered office.

2. Type of Data Processed

The data processed are of an identifying nature, such as for example name, surname, date and place of birth, residence, e-mail address and phone number.

3. Purpose of Processing

Your personal data, provided at the time of purchase, will be processed solely for the purpose of:

• receiving the information requested and obtaining a quote on the product of interest;
• establishing the contractual relationship that governs the purchase of the product (bicycle and accessories) and performing it;
• managing tax and accounting data as established by laws, contracts and regulations;
• sending administrative information by e-mail and communicating changes to the terms, contractual conditions and this Privacy Notice;
• carrying out, with your specific prior consent, direct marketing activities to inform you of purchasing opportunities and promotions from our store;
• complying with legal obligations and orders from administrative or judicial authorities;
• satisfying a legitimate interest of the Company, protecting our operations, our rights and our security.

4. Legal Basis for Processing

The legal basis that justifies the processing is represented by the contract with Nuova Corti Shop S.r.l. (which is concluded at the time of purchase) and by explicit consent for the points that require it (e.g. marketing).

5. Method of Processing

Personal data may be processed both with paper and computer archives, with methods strictly necessary to meet the purposes indicated above. Processing may also be carried out by third parties who provide specific processing, administrative or instrumental services. All operations are carried out in a way that guarantees data integrity, confidentiality and availability.

6. Consequences of Failure to Communicate Data

With regard to data necessary for contract execution or compliance with a regulatory obligation (for example the keeping of accounting and tax records), failure to communicate prevents the contractual relationship from being concluded.

7. Data Retention

Data are retained only for the period necessary based on management needs and applicable regulatory obligations. In general, data are retained in accordance with art. 2220 of the Civil Code (ten years from the last entry) and European and tax regulations, and subsequently deleted.

8. Data Security

All your personal data are stored on secure servers (or in paper copies kept in a locked location at the registered office, accessible only with authorization). Payment card data are managed exclusively by payment providers (Stripe, PayPal): the Company does not see or retain in any case the card numbers, which travel on an encrypted connection to the banking manager.

9. Data Communication

Your identifying data may be communicated to: Public Administrations for the performance of institutional functions; professional firms (e.g. accountant) for accounting, administrative, tax and legal assistance (if invoice is requested); supervisory bodies and judicial authorities in cases provided for by law; banking institutions for the management of collections and payments; entities that process data in execution of legal obligations. The list of data processors can be viewed upon request by the interested party.

10. Profiling and Disclosure

Your personal data are not subject to disclosure nor to any entirely automated decision-making process, including profiling, and are processed solely in Italy. Where necessary, any extra-EU transfer will take place in accordance with applicable legal provisions, following the stipulation of standard contractual clauses provided by the European Commission.

11. Rights of the Data Subject

Among the rights recognized by the GDPR are those to: request access to your data; rectification of inaccurate data or completion of incomplete data; erasure of data (art. 17 GDPR); restriction of processing (art. 18 GDPR); data portability; the right to object to processing; the right to withdraw consent at any time (without prejudice to the lawfulness of processing prior to withdrawal).

Rights can be exercised by sending written communication to the Controller, Nuova Corti Shop S.r.l., e-mail amministrazione@nuovacorti.it, by registered mail or at the Company's registered office.

You may also lodge a complaint with the Guarantor Authority for the protection of personal data (Piazza Venezia 11, 00187 Rome — garante@gpdp.it) if you believe that your data are being processed in violation of EU Regulation 2016/679.

Cookies

The website uses technical cookies necessary for operation and, with your consent, analysis and marketing cookies. Preferences are managed from the cookie banner and can be changed at any time. No non-essential cookie is installed before consent.