As Data Controller of the personal data of the Users (hereinafter also " Members " or " Customers " or " Users ") who browse and use the services available on the site (hereinafter also " the Site ”, “ i Services ” or “ the Platform ”), Caterina Neri (hereinafter also “ Aranoir ” or “ the Data Controller ”) provides below the privacy information pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter also " the Regulation " ).
- DATA CONTROLLER
The data controller is Mrs. Caterina Neri, in her capacity as owner of the individual company Aranoir di Caterina Neri (hereinafter also “ Aranoir ” or the “ Data Controller ”).
Aranoir is a company that mainly deals with the online sale (e-commerce) of paintings and/or posters, whose social mission is the simplification and economic optimization of the sales process of the same. The Portal, https://aranoir-prints.com/, allows you to view the paintings and/or posters and purchase them.
By making a purchase through the website, you establish a direct, legally binding contractual relationship with the company.
- OBJECT OF THE PROCESSING: TYPES OF DATA COLLECTED
2.1. Information necessary for the use of the Payment Service .
To comply with current legislation and adequately fulfill its contractual duties, when accessing the Payment Service, Aranoir needs to collect the following information, without which the User will not be able to use the Service:
- Payment information: when you use the Service, the Data Controller will ask you for some payment data (such as your PayPal account details or data relating to your credit card or stripe);
- Name, surname, email, address and telephone number.
2.2 Optional information that the User provides directly.
To improve your experience on the Aranoir Platform you can choose to provide further and additional personal data, which will be processed on the basis of the legitimate interest of the Data Controller or on the consent of the interested party, where applicable. In particular:
- Company data;
- Email address.
2.3 Information collected automatically from the use of the Platform and the Payment Service
- Transaction information: Aranoir collects information relating to transactions on the Platform, including payment instruments used, date and time, amounts paid, expiration of the payment instrument and the user's billing address, email address linked to the PayPal account and/or stripe and further information relating to the transaction. This information is necessary for the adequate execution of the contract stipulated with the User and to allow the latter to use the Payment Service.
The owner may collect data, including your personal data, that third parties provide about you when using the Platform and Payment Services, or obtain information from other sources and combine it with information collected through the Platform and Payment Services. It is important to remember that any request for information regarding the communication of such personal information must be forwarded directly to these third parties. In particular:
- Third party services: if you connect, connect or access the Aranoir Portal with a third party service (e.g. Google, Facebook) this tool may send information to Aranoir such as, but not limited to, registration data, friends list and user profile on this service, name, surname, email address, profile image etc. This information varies and is processed directly by these third-party services in compliance with their respective privacy policies;
- Other Sources: To the extent permitted by applicable law and in line with fraud prevention and risk assessment efforts, Aranoir may receive additional information about you (including, for example, demographic data or information that helps detect fraud and security issues) from third-party service providers and/or partners and combine it with information they already hold about you.
- Furthermore, when you use the payment service Aranoir will be able to transmit your data to the couriers used for shipping the purchased products (see paragraph 4.3.)
2.2 Data of minors.
The site and the Platform are not directed to children under 16 years of age and the company does not knowingly collect personal information directly from children under 16 years of age. Upon request of Users, the Owner will promptly delete all personal data involuntarily collected and relating to subjects under the age of 16.
- PURPOSE AND USE OF DATA
The purposes of the processing carried out by Aranoir must be understood, in general, as: a) collection, storage and processing for the purposes of establishing and managing the contractual relationship connected to the provision of the requested service; b) use of the User's personal data (e.g. email address) to carry out communications relating to the performance of the contractual relationship and/or for commercial purposes (see letter e); c) processing of the personal data provided and that deduced from browsing the site in order to provide a service consistent with the request; d) collection, storage and processing of data for internal statistical and/or market research purposes; e) purposes functional to carrying out the activity, such as offering personalized content and/or communicating commercial information on future initiatives, new products or services; f) sending advertising or promotional material and for the execution of promotional initiatives in general.
Specifically, Aranoir may use, store and process personal information to: 3.1.1 provide the requested Services, improve and develop the Platform; 3.1.2 create and maintain a safe environment; 3.1.3 deliver, personalize and enhance advertising and marketing.
3.1.1 Providing the requested Services, improving and developing the Platform : Aranoir uses the personal information collected to provide the requested Services, as well as to improve and develop the Platform and, specifically: to allow you to use the Platform; manage, protect, improve and optimize the Platform and the User experience (for example, conducting analysis and research activities); provide assistance to Customers; send service or support messages (such as, for example, updates, security alerts and Account notifications); for fraud detection and prevention and/or for any additional purposes authorized by the User.
The Company processes the personal information provided for these purposes on the basis of the legitimate interest in improving the Platform and the Users' experience, as well as to ensure the adequate execution of the contract with the User and comply with applicable laws.
3.1.2 create and maintain a secure environment : Aranoir may use the personal information collected to create and maintain a reliable and secure environment such as, without limitation, to detect and prevent fraud, abuse and other harmful activities; fulfill your legal obligations; resolve any disputes with Users and/or assert their rights against third parties.
Aranoir processes personal information on the basis of the legitimate interest to protect the Platform, to ensure the adequate execution of the contract with the User and to comply with applicable laws.
3.1.3 Provide, personalize and enhance advertising and marketing : Aranoir may use personal information to provide, personalize, evaluate and improve advertising and marketing, for example: send you promotional messages, marketing information, advertisements and other information that may be of your interest based on your preferences (including information regarding campaigns and services) and social media advertising through social media platforms (such as Facebook, Instagram and Google); evaluate and improve our advertising based on your characteristics and preferences (based on the information you provide, your interactions with the Platform, information obtained from third parties and your search history) to send you promotional, marketing and advertising messages and other information we think may be of interest to you.
Aranoir will process your personal information for the purposes listed in this Section, by virtue of the legitimate interest in undertaking marketing activities to offer you products or services that may be of interest to you or with your consent, where applicable.
3.1.4 data collected when accessing the Payment Service : Aranoir may use personal information from the Payment Service, for example, to: allow the User to access and use the Service; detect and prevent fraud and other malicious activity; carry out investigations and carry out checks, also making comparisons with other sources of information; fulfill legal obligations; ensure the application of Terms and Conditions of Service and payment policies; with your consent, send you promotional messages, marketing information, advertising and other information that may be of interest to you based on your preferences.
Aranoir processes the information provided on the basis of the legitimate interest to improve the Payment Services and the experience of its Users, as well as to ensure the adequate execution of the contract with the User and to comply with applicable laws.
It is important to remember that you have options over the promotional messages you choose to receive. We may still need to contact you with important information about your Account transactions (for example, even if you turn off emails, we may still send you activity confirmations or fraud alerts).
3.2 Processing methods
The processing is carried out through IT systems and automated tools (e.g. using electronic procedures and supports) and/or manually (e.g. on paper) and the data is handled only by personnel in charge of processing. In addition to the Data Controller, in some cases, categories of Managers and/or authorized parties involved in the company organization may have access to the data; furthermore, the Data Controller may make use of external parties who may be appointed external Managers.
- SHARING AND COMMUNICATION
4.1 Advertising and social media.
Where permitted by applicable law, Aranoir may use some personal information about you, such as your email address, to create the hash and share it with social media platforms, such as Facebook, Instagram or Google, to generate leads, drive traffic to your website or otherwise promote your products and services or the Platform. These processing activities are based on Aranoir's legitimate interest in undertaking marketing activities in order to offer you products or services of possible interest to you.
Aranoir does not control or supervise the social media platforms from which your personal data may be shared and/or communicated. Therefore, any questions relating to how your personal data is processed by such third parties should be addressed to them.
We remind you that at any time you can request the cessation of the processing of your data for marketing purposes by sending an email to firstname.lastname@example.org.
4.2 Compliance with the law, responding to requests from public authorities, prevention and protection of our rights.
Aranoir may communicate your data, including personal data, to Courts, Public Authorities, Government Authorities, Tax Authorities or authorized third parties, in the case and to the extent that it is required or authorized to do so by law or if such communication is reasonably necessary For:
- fulfill legal obligations
- comply with a valid legal request or to respond to claims made against Aranoir,
- comply with a valid legal request relating to a criminal investigation or alleged or alleged illegal activity or any other activity that may expose Aranoir, yourself or any other user to legal liability,
- manage and enforce our Terms of Service, Payment Terms and policies,
- protect the rights, property and/or safety of Aranoir, its employees and/or contractors, its Members and/or the general public.
This information may be necessary to comply with legal obligations, to protect our own or others' primary interests, or for the purposes of Aranoir's or third parties' legitimate interests in keeping the Platform safe, preventing harm or crime, enforcing or defending rights. , etc.
Where deemed appropriate, Aranoir may inform Members of such requests, unless:
- providing such information is prohibited by applicable legal process, by order of a court or by law,
- the Data Controller believes that the notice is useless or ineffective, creates a risk of injury or physical damage to an individual or a group of individuals or creates or increases a risk of fraud against the property of Aranoir, its Members and the Platform .
In cases where Aranoir complies with legal requests for communication of data without providing notice to the User for the reasons stated above, it will attempt to inform the User affected by the request as soon as it determines in good faith that this is no longer prohibited and/ or counterproductive.
4.3 Service Providers.
Aranoir uses third-party suppliers to provide services relating to the Platform and Payment Services; for fraud prevention and risk assessment; provide technical assistance, maintenance and product development services; allow the provision of the Services through third-party platforms and software; provide customer support, advertising or payment services; process, manage or estimate compensation claims or other requests of a similar nature; provide the shipping service for the purchased goods.
The providers of these services may be located inside or outside the European Economic Area (“EEA”). Specifically, the Owner uses - for the services provided by the site and the Platform - servers located in the following countries:
These suppliers have access to your personal data limited to carrying out these operations on behalf of Aranoir and are contractually bound to protect and use such data only according to the instructions received.
Aranoir will have to communicate your data, including personal data, to guarantee the adequate execution of the contract stipulated with the User.
4.4 Business transfers.
- OTHER INFORMATION
5.1 Analysis of your communications.
Aranoir may examine, scan or analyze your communications on the Platform for the purposes of fraud prevention, risk assessment, compliance with current legislation, investigation, analysis, product development and customer support. In some cases, Aranoir may also scan, review or analyze messages to debug, improve and expand the offerings of the Services. Automated methods will be used where reasonably possible; however, the Owner may also need to manually review some communications (for example, for customer support or to evaluate and improve the functionality of such automated tools). Aranoir will not sell analytics of such communications to third parties.
These activities are carried out on the basis of Aranoir's legitimate interest in ensuring full compliance with applicable laws, preventing fraud, promoting security, improving and ensuring the adequate performance of the Services offered.
5.2 Third Party Partners and Integrations
The Platform may contain links to websites or services of third parties (so-called "Third Party Partners") and specifically:
- YOUR RIGHTS
In accordance with current legislation, you can exercise every right described in this section (and, more generally, all the rights provided for by the Regulation) towards the Data Controller. Please note that Aranoir may ask you to verify your identity before taking further action based on your request.
6.2. Right of access.
As a User you have the right to obtain confirmation as to whether or not data processing concerning you is in progress and, if so, you have the right to request copies of personal data that you have provided to Aranoir and/or that it processes, in a structured, commonly used and machine-readable format.
6.3 Right of rectification and right of cancellation.
As a User you have the right to request that inaccurate or incomplete personal data concerning you be rectified and/or updated and/or deleted.
6.4. Right to restriction of processing.
Where the processing of your personal data is based on consent, you can revoke such consent at any time by sending a communication to Aranoir (at the contact details indicated in the "Contacts" Section) in which you specify which consent you wish to revoke. We remind you that the revocation of consent does not affect the legitimacy of any processing activity based on it before its revocation.
6.5. Right to portability.
You have the right to obtain copies of personal data that you have provided, in a structured, commonly used and machine-readable format, and to request that we transmit this information to another service provider and/or other data controller (where technically feasible).
6.6. Data retention and deletion.
In general, the Company retains your personal data for the time strictly necessary for the execution of the contract stipulated with the User and to fulfill its legal obligations. We remind you that if you decide to request the deletion of your personal data:
- Aranoir may retain some of your personal data for as long as necessary to fulfill its legitimate interests, such as the prevention and detection of fraud or for security purposes;
- Aranoir may retain some of your personal data to the extent necessary to comply with its legal obligations (for example, for tax obligations, legal reporting and investigations).
- Information you have shared with others may continue to be visible on the Platform. Furthermore, some copies of this information (e.g. access logs) may remain in our database, but disassociated from identifiers and, therefore, not referable and/or attributable to any identified and/or identifiable person.
- Since the Company protects the Platform from risks regarding the loss, theft, theft and/or accidental deletion of data, residual copies of your personal data may be retained for a limited and strictly necessary period of time.
6.7. Right of opposition.
As a User, you have the right to object to the processing of personal data for specific purposes (e.g. profiling, marketing), where such processing is based on Aranoir's legitimate interest. In case of opposition to such processing, Aranoir will refrain from further processing the personal data for these purposes, unless it can demonstrate the existence of compelling legitimate reasons to proceed with the processing which prevail over the User's interest or if such processing it is necessary for the establishment, exercise or defense of a right in court.
Where your personal data is processed for direct marketing purposes, you can at any time ask us to stop processing that data for this purpose by sending an email to email@example.com.
6.8. Right to lodge a complaint with the Supervisory Authority.
If you believe that the data processing by the Data Controller is carried out in violation of the Regulation, Aranoir invites you to lodge a complaint at the contact details indicated in the "Contacts" paragraph (see paragraph 10).
However, you have the right to lodge a complaint regarding the data processing activity by Aranoir to the Supervisory Authority, without prejudice to the right to appeal to the administrative or judicial Authority.
- TRANSFER OF PERSONAL DATA
Aranoir implements and constantly updates security measures of an administrative, technical and physical nature aimed at helping to protect the User's data from unauthorized access, destruction or alteration or theft of the same. Some of the security measures that the Data Controller uses to protect your information are: firewall, encrypted connection between browser and server (HTTPS), database access controls, encryption of sensitive data (password), secure access tokens (JWT ).
- email: firstname.lastname@example.org
- TERMS OF SERVICE
11.1. By accepting these Terms of Service, you declare that you are of legal age. You may not use our products for any illegal or unauthorized purpose or violate any applicable laws, including copyright laws.
11.2. The sales prices are those indicated on the individual advertisement and include shipping costs.
11.2.2. Aranoir reserves the right to change product prices at any time and without notice.
11.3. Returns of purchased goods are not accepted;
11.4. Shipments are made approximately within 5 working days; Aranoir will not be responsible for any delays not attributable to it (by way of example but not limited to: courier problems).
11.5. The trademarks and images present on the site belong to their respective owners or owners and may be protected by patents and/or copyrights granted or registered by the relevant authorities.
11.6. The contents and images of the products offered are drawn up with the utmost care/diligence, and subjected to careful control. Aranoir, however, declines all responsibility, direct and indirect, towards users and in general to any third party, for any inaccuracies, errors, omissions deriving from the aforementioned contents.