In accordance with and pursuant to Art. 13 of the new European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data (Basic Data Protection Regulation – DSGVO).
Before processing the data, the person concerned (user of the website www.inomedia.eu) is informed, in accordance with the European Union’s basic data protection regulation (DSGVO 2016/679, Art. 13), that the personal data collected by means of computers or IT systems through the website is subject to processing by the Company for the purposes described in these guidelines.
To this end, Inomedia S.P.A. (hereinafter also referred to as „Inomedia“ or „the company“ or „the data controller“), author and operator of the services available on the website www.inomedia.eu, submits the Privacy Policy to the person concerned.

The Data Controller
The data controller responsible for the processing of personal data is Inomedia S.P.A. – legal seat in Sauders 17 – 39040 Villanders, Italia – VAT number 00607970480.
The data controller has appointed Mrs. Angela Tavaglione as the contact person for data protection issues in accordance with articles 37 and following of the D.Lgs. 2016/679.
Please consult the paragraph „Rights of data subjects“ of this Privacy Policy for further information regarding the rights of data subjects.

Information concerning processing
The personal data subject to processing will be collected either directly by Inomedia S.P.A. or by third parties expressly authorised by the latter or transferred by the company to such third parties for the purposes described below.

Legal basis and purpose of the processing
Personal data provided by the user when navigating the www.Inomedia.eu website will be processed by the data controller in accordance with the regulations in force in the field of data protection. The legal basis of the processing is the provision of the Company’s services, the simplification of the management of the website, and the drawing up, implementation and eventual cancellation of the online purchase contract between the parties and the obligations connected and/or arising directly and/or indirectly from this contract.
Inomedia S.P.A.’s processing of the data of the interested party is aimed at the following objectives:

1) SUBSCRIPTION TO INOMEDIA NEWSLETTER: In the case of subscription to the Inomedia newsletter, personal data will be processed by the data controller for the purpose of sending commercial news and offers and related current notifications, such as new trends, newly arrived products, exclusive promotions and special events and promotions, exclusively as a result of a possible and specific declaration of consent by the data subject. To unsubscribe to the newsletter, simply click on the unsubscribe link in the footer of the e-mail

The data controller uses systems for newsletter dispatch and advertising communication, which are equipped with a reporting mechanism for the purpose of comparing and improving marketing communication. This mechanism provides reports on the number of readers, emails opened and clicks, the type of device used to read the communication (desktop or mobile device), the number of users who have not yet confirmed their subscription, the number of emails sent per day, hour or minute, the number of emails received compared to the number sent, the list of unsubscriptions from the newsletter, the number of email openings and clicks on individual links, problems with displaying the message, link tracking (i.e. the number of individual clicks on the links contained in the message) and click tracking (the record of which links are clicked on) This data is used for the purpose of comparison and, where possible, improvement of marketing communications.

2) REGISTRATION ON Inomedia.eu: In the case of registration on the website www.Inomedia.com, personal data will be processed by the data controller for the purpose of registration on the website, solely as a result of a possible and specific declaration of consent by the person concerned. In particular, the provision of name, surname, e-mail address and the creation of a password for access, for the purpose of creating an individual account, speeding up the purchasing process, the possibility of visualising the status of the order and obtaining updates on the purchases made, changing personal settings and updating the account, visualising past returns and the request for access to the site, will be processed by the data controller only if the data subject has given his/her specific consent.

3) ONLINE-SHOPPING: The personal data provided by the data subject will be processed for the purpose of the establishment, management, conclusion and/or execution of the online purchase contract. The data provided by the data subject will be used by the data controller for the purposes of managing the purchase with a view to, for example, payment, delivery, possible responsibility for returns, after-sales service, carrying out the administrative operations connected with the order and fulfilling the obligations provided for by the regulations in force. All the information necessary for the processing of credit card payments (card number, expiry date, security code) is sent by means of an encrypted protocol to the competent institution (in the specific case of Banca Sella, Worldpay or Adyen) for the purpose of processing and, if necessary, to a company charged with fraud control. The access of third parties to these data is excluded. This information is neither viewed nor stored by the merchant (Inomedia SPA).

4) PROFILE PROCESSING OF THE NATURAL PERSON: Exclusively in the case of possible and specific consent, the data provided by the data subject will be processed by the data controller for the purpose of profiling, which serves to analyse preferences with the aim of producing content and personalising offers.

Type of processing
In relation to the purposes mentioned in point 1) of the previous paragraph, the provision of your personal data and the consent to their processing is voluntary.
If consent is not given, it will be impossible for Inomedia to carry out the registration for the newsletter and thus to send commercial news and offers, for example regarding the latest trends, newly arrived products, exclusive offers, special events and promotions.
Should the person concerned decide to continue with the newsletter subscription through the section of the website dedicated exclusively to this activity, the provision of personal data and consent to their processing is obligatory.
If consent is not given, it will be impossible for Inomedia to carry out the subscription to the newsletter and thus to send commercial news and offers, for example regarding the latest trends, newly arrived products, exclusive offers, special events and promotions.

In relation to the purposes mentioned in point 2) of the previous paragraph, the provision of personal data and consent to their processing is obligatory.
If consent is not given, the following activities will be impossible for Inomedia: Your registration on Inomedia.com, the creation of an individual account, the acceleration of the purchasing process, the possibility to visualise the order status and to note updates on the purchases made, the modification of the personal settings and the updating of the account, the visualisation of past returns and requests for exchange of goods, the saving of products in the wish list and the future accession, if desired, to the loyalty programme Iuniqshop Privilege.

In relation to the purposes mentioned in point 3) of the previous paragraph, the provision of personal data and consent to their processing is obligatory.
If consent is not given, the following activities will be impossible for Inomedia: establishment, management, conclusion and/or execution of the on-line purchase contract, management of the purchase with a view to, for example, payment, delivery, possible responsibility for returns, after-sales service, execution of the administrative measures related to the order and fulfilment of the obligations provided for by the regulations in force.

In relation to the purposes indicated in point 4) of the previous paragraph, the provision of your personal data and consent to their processing is voluntary.
If consent is not given, it will be impossible for Iuniqshop to create a profile that will be used to analyse preferences with the aim of producing content and personalising offers.

The personal data processed – The personal data processed by the data controller are those provided by the user when visiting the website www.Inomedia.com on the occasion of registration/accession for the use of the services/programmes provided by Inomedia and/or the possible purchase of products distributed by Inomedia, such as Name, surname and e-mail address, in addition to the data required for the provision of the online sales are indispensable, such as those data required to carry out payment and to send / exchange the purchased products.

Nature of the processing and storage of personal data – The processing of personal data is carried out by the data controller in accordance with the applicable data protection legislation. The Data Controller shall take adequate security measures to ensure that personal data collected for the purposes set out in this Policy is protected against unauthorized access, misuse, improper disclosure, unauthorized alteration, unlawful destruction and loss. Despite the security measures used for the Site and the data and information transmission on it, Inomedia SPA. cannot completely exclude the risk of unauthorised access or data loss from the equipment used by the user. For this reason, we advise users to use a computer with adequate security software for data transmission on the network (for example, updated antivirus software) and an Internet connection provided by a trustworthy provider that meets the requirements necessary for secure data transmission on the network. The Company also undertakes to process the data in accordance with the principles of correctness, lawfulness and transparency, to collect the data in the exact scope necessary for processing and to use them only for the authorised purpose. The management and storage of the personal data collected will be carried out in archives or servers located within the European Union and owned by the Data Controller and/or by third party companies appointed as external data processors and whose current headquarters are located in Italy.
Personal data will be kept, according to the different purposes for which they were collected, for the time strictly necessary to achieve these purposes and in any case in compliance with the regulations in force.
In any case, the Company will take care to avoid the use of data for an indefinite period of time by regularly verifying the actual permanence of the interests of the data subject to whom they refer.

Recipients and persons responsible for the data – The data collected will not be disseminated in any way whatsoever, and their processing will be carried out by the company’s employees (for example, administrative, commercial, marketing, legal and system administrators, etc.), in compliance with appropriate organisational processes and solely for the purposes described. In some cases, access to personal data may also be granted to third parties who assist the Data Controller in managing the contractual relationship, providing the services offered and the organisational requirements of its activities and who may also be appointed as Data Processors by the Data Controller.
In particular, the data could be communicated to:

1. a) public and private subjects who may access the data by virtue of laws, regulations or Community legislation, within the limits set by these rules
   b) subjects who, within the limits strictly necessary for the performance of ancillary tasks, need access to data for contractual relations between the parties (such as banks and lenders, technical service providers, hosting providers, IT companies, communication agencies and private or public courier services);
   c) consultants, within the limits necessary for the performance of their professional duties.

Transfer of data abroad – The management and storage of personal data is carried out on servers of the Data Controller and/or third party companies duly designated as external data processors, located within the European Union.
Personal data may also be transferred abroad, including countries outside the European Union, in accordance with the provisions of the applicable regulations.
Transfers to countries outside the EU, in addition to the cases where this is ensured by the Commission’s adequacy decisions, will be carried out in such a way as to provide appropriate and suitable safeguards in accordance with Articles 46 or 47 or 49 of the Regulation.

Rights of the data subject

The data subject may at any time exercise the rights granted by Articles 15, 16, 17, 18, 20 and 21 of the Basic Data Protection Regulation (DPA), in particular the right to:

(a) to obtain confirmation from the controller, in accordance with Article 15, as to whether personal data relating to him/her are being processed; if this is the case, he/she shall have the right to be informed of such personal data and to receive the following information (i) the purposes of the processing; (ii) the categories of personal data being processed; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations; (vi) if possible, the envisaged duration for which the personal data will be kept or, if that is not possible, the criteria for determining that duration;
(b) to obtain without delay from the controller referred to in Article 16 the rectification of inaccurate personal data relating to him/her; having regard to the purposes of the processing, the data subject shall have the right to obtain the completion of incomplete personal data, including by means of a supplementary declaration;
(c) to require the controller referred to in Article 17 to erase personal data relating to him/her without delay, and the controller shall be obliged to erase personal data without delay if one of the reasons listed in Article 17, paragraph 1, applies;
(d) to obtain from the controller pursuant to Article 18 the restriction of the processing if any of the conditions laid down in Article 18, paragraph 1, is fulfilled;
(e) to obtain, in accordance with Article 20, the personal data concerning him/her which he/she has supplied to a controller, in a structured, standard and machine-readable format; to communicate such data to another controller without hindrance by the controller to whom the personal data have been supplied, if the conditions referred to in Article 20, paragraph 1 are fulfilled; to obtain, in so far as this is technically feasible, the communication of personal data directly from one controller to another controller.
(f) object, in whole or in part, to the processing of personal data relating to him/her, in accordance with Article 21.

Changes to the policy – The Data Controller reserves the right to make changes to the Privacy Policy at any time and to inform users of such changes on this page. It is strongly recommended that you visit this section periodically, with reference to the update date indicated below, to be informed of any changes. If the user objects to any changes in the privacy policy, he/she must stop using the website and can request the data controller to delete his/her personal data. Unless otherwise indicated, the previous Privacy Policy will continue to apply to the data collected up to that point.