Privacy Policy
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) NO. 2016/679 (HEREINAFTER “GDPR”)
This page describes the Privacy Policy adopted by Our Films Spa, with registered office in Rome (RM) at Via Giovanni Nicotera, 29, 00195, VAT no. 17506111008 (hereinafter, also Our Films) and EASYREPLICA INTERNATIONAL SRL, with registered office in Via Toscana, 34 – 61122 Pesaro (PU), VAT/Tax Code 02568220418 and Pesaro Companies Register registration number PS – 192173 (hereinafter, also the “Partner” and, together with Our Films Spa, the “Companies” or the “Joint Controllers”), regarding the processing of personal data (the “Data”) relating to users (“Users”) who have provided them to the Companies through the registration of their Data within the e-commerce portal https://ourfilmsmerch.it/ (the “Site”), given that the Companies have concluded a joint controller agreement pursuant to art. 26 of the GDPR, the essential content of which is available to you at the offices of the Joint Controllers.
This Site is reserved for individuals who are sixteen years of age. The Joint Controllers do not therefore collect Personal Data relating to subjects under the age of 16. Upon request by Users, the Joint Controllers will promptly delete all Personal Data involuntarily collected and relating to subjects under the age of 16.
1. Purpose of the processing and related legal basis User Personal Data will be lawfully processed by the Joint Controllers pursuant to art. 6 of the GDPR for the following processing purposes: a) to execute/fulfill specific contractual and pre-contractual obligations, allow navigation of the Site or give execution to the Site’s Terms of Use, which are accepted by the User during registration on the Site and/or during the use of services and fulfill specific User requests (article 6, para. 1, lett. b) of the GDPR). The User Data collected includes: name, surname, tax code, age, residence/domicile address, gender, e-mail address, as well as all User personal information possibly and voluntarily published. The Data will be used by the Joint Controllers for the exclusive purpose of ascertaining the User’s identity (also through validation of the e-mail address), thus avoiding possible fraud or abuse, and contacting the same for service reasons only. b) administrative-accounting purposes, i.e., to carry out activities of an organizational, administrative, financial, and accounting nature (article 6, para. 1, lett. c) of the GDPR); c) to fulfill obligations provided for by law, by an authority, by a regulation or by European legislation (article 6, para. 1, lett. c) of the GDPR). The provision of Personal Data for the processing purposes indicated above in letters a), b), and c) is optional but necessary, since failure to provide the same will result in the impossibility for the User to browse the Site, register on the Site, and use the services. Personal Data necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk within the registration form on the Site.
2. Further processing purposes: marketing (sending advertising material, direct sales, and commercial communication) With the User’s free and optional consent, some Personal Data (namely name, surname, e-mail address, residence address) may be processed for carrying out promotional activities (so-called “marketing”) and sending information and promotional communications – by the Joint Controllers – on products and services by mail, e-mail, telephone (landline and/or mobile) and/or SMS and/or MMS. In case of lack of consent, the possibility to register on the Site will not be prejudiced in any way. In case of consent, the User may revoke it at any time, by making a request in the manner indicated in paragraph 8 below. The User may also easily object to further sending of promotional communications via e-mail by clicking on the appropriate link for revocation of consent, which is present in each promotional e-mail. Once consent is revoked, an e-mail message will be sent to the User to confirm that consent has been revoked. Should the User intend to revoke their consent to the sending of promotional communications via telephone, while continuing to receive promotional communications via e-mail, or vice versa, please send a request in the manner indicated in paragraph 8 below. Please note that, following the exercise of the right to object to the sending of promotional communications via e-mail, it is possible that, for technical and operational reasons (e.g., contact lists already completed shortly before the Partner received the objection request), the User may continue to receive some further promotional messages. Should the User continue to receive promotional messages after 24 hours have elapsed since exercising the right of objection, please report the problem to the Partner, using the contacts indicated in paragraph 8 below.
3. Further processing purposes: newsletter With the User’s free and optional consent, some User Personal Data (namely name, surname, address, e-mail address) may also be processed by the Joint Controllers for the purpose of sending the newsletter. Therefore, the User will receive a periodic newsletter containing information regarding news and promotions present within the Site and/or initiatives of the Joint Controllers. In case of lack of consent, the possibility to register on the Site will not be prejudiced in any way. In case of consent, the User may revoke it at any time, by making a request to the Partner in the manner indicated in paragraph 8 below. The User may also easily object to further sending of promotional communications by clicking on the appropriate link for revocation of consent, which is present in each e-mail containing the newsletter. Once consent is revoked, an e-mail message will be sent to the User to confirm the cancellation.
4. Further processing purposes: profiling With the User’s free and optional consent, User Personal Data (namely personal and contact Data, as well as information relating to services in which the same has expressed interest) may also be processed by the Joint Controllers for profiling purposes, i.e., to reconstruct the User’s tastes and consumption habits, identifying their consumer profile, in order to be able to send the User commercial offers consistent with the identified profile. In case of lack of consent, the possibility to register on the Site will not be prejudiced in any way. In case of consent, the User may revoke it at any time, by making a request to the Partner in the manner indicated in paragraph 8 below.
5. Processing methods and Data retention times The Joint Controllers will process User Personal Data using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the Data itself. User Personal Data will be kept for the times strictly necessary to carry out the primary purposes illustrated in paragraph 1 above, or in any case as necessary for the protection in civil proceedings of the interests of both Users and Joint Controllers. In the cases referred to in paragraphs 2, 3, and 4 above, User Personal Data will be kept for the times strictly necessary to carry out the purposes illustrated therein and, in any case, for no more than, respectively, twenty-four (24) months in the case of marketing activities and twelve (12) months in the case of profiling.
6. Scope of communication and dissemination of Data Employees and/or collaborators of the Joint Controllers appointed to manage the Site may become aware of User Personal Data. Such subjects, who have been instructed in this sense by the Joint Controllers, will process User Data exclusively for the purposes indicated in this information notice and in compliance with the provisions of the Applicable Law. Third parties who may process Personal Data on behalf of the Joint Controllers as “External Data Processors” pursuant to art. 28 of the GDPR, such as, by way of example, providers of IT and logistical services functional to the operation of the Site, providers of outsourcing or cloud computing services, may also become aware of User Personal Data. Your Data may also be communicated by the Joint Controllers, to the extent that this is necessary and essential to execute contractual obligations, to independent third-party data controllers, such as managers of payment services and logistics services necessary for the delivery of goods sold through the Site, consultants, and professionals.
7. Social buttons and widgets Social buttons/widgets are also present on the Site. These are in particular the icons of social networks, such as, for example, Facebook, Twitter, Pinterest, Google+, Youtube, and Instagram, which allow Users to reach – by “clicking” on the icon – the related social networks. With the support of these tools, the User can, for example, share content or recommend Site products on social networks. Some content shared on social networks may also be shared on the dedicated page of the website. Following clicks on social buttons/widgets, the social network may collect Data relating to the User’s visit to the Site. As anticipated in the introduction, this privacy policy does not concern the processing of User Data by the social network for which the User must refer exclusively to the privacy policy provided by the social network. Outside of cases where the User spontaneously shares their Data with the chosen social networks by clicking on social buttons/widgets, the Joint Controllers do not disseminate or share any User Personal Data with social networks.
8. Rights of Data Subjects We inform you that at any time regarding your Data, you may exercise the rights provided for within the limits and conditions set forth in articles 7 and 15-22 of the GDPR. A suitable response will be provided to such request without delay within one month of receipt of the same. To exercise these rights, described below, please contact the Partner at the following addresses. By sending a registered letter with return receipt to the Partner’s registered office in Via Toscana, 34 – 61122 Pesaro (PU); By sending an e-mail message to the Data Protection Officer (DPO) of the Partner at the e-mail address: info@easyreplica.com Furthermore, you have the right to: obtain confirmation as to whether or not Personal Data concerning you is being processed; if processing is in progress, obtain access to Personal Data and information relating to the processing as well as request a copy of Personal Data; obtain the rectification of inaccurate Personal Data and the integration of incomplete Personal Data; obtain, if one of the conditions provided for by art. 17 of the GDPR exists, the deletion of Personal Data concerning you; obtain, in the cases provided for by art. 18 of the GDPR, the limitation of processing; receive Personal Data concerning you in a structured, commonly used and machine-readable format and request their transmission to another controller, if technically feasible.
Right to object Each data subject has the right to object at any time to the processing of their Data carried out for the pursuit of a legitimate interest. In case of objection, your Data will no longer be processed, provided that there are no compelling legitimate grounds for processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
Right to object and withdraw consent in relation to processing carried out for marketing and profiling purposes With reference to the processing of Data for marketing and profiling purposes, each data subject may revoke any consent given at any time or object to the processing, by writing to the addresses indicated above. The revocation of your consent will not affect the lawfulness of processing based on consent given before the revocation. The objection to processing exercised through these methods also extends to the sending of commercial communications via the postal service or telephone calls with an operator, without prejudice to the possibility of exercising this right in part, objecting for example only to processing carried out through automated communication systems.
Right to lodge a complaint with the Privacy Guarantor Finally, pursuant to Article 77 of the GDPR, we remind you that you have the right to lodge a complaint with the Privacy Guarantor, if you believe that your rights under the GDPR have been violated, in the manner indicated on the website of the Privacy Guarantor accessible at www.garanteprivacy.it.
9. Controllers, Processors and Data Protection Officer The Joint Data Controllers are:
– Our Films Spa, with registered office in Rome (RM) at Via Giovanni Nicotera, 29, 00195, VAT no. 17506111008;
– Easyreplica International srl, with registered office in Via Toscana, 34 – 61122 Pesaro (PU), VAT/Tax Code 02568220418 and Pesaro Companies Register registration number PS – 192173.
The relationship between the Joint Controllers is regulated by a written agreement, deposited at the respective offices. The complete list of respective Data Processors is available at the offices of the Joint Controllers and can be requested at the e-mail address: info@easyreplica.com. Furthermore, the Data Protection Officer of Easyreplica International srl can be contacted at the email address: info@easyreplica.com. This information notice will be subject to updates. The Joint Data Controllers therefore invite Users who intend to know the methods of processing Personal Data collected by the Companies to visit this page periodically.