GDPR & Data Protection
Understanding your data protection rights under the General Data Protection Regulation (GDPR).
Our Commitment to Data Protection
At Univer Dealz, we are fully committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR). This page explains your rights and how we safeguard your information.
What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It gives EU residents greater control over their personal data and places obligations on organizations that collect and process personal information.
GDPR applies to all companies processing personal data of EU residents, regardless of where the company is located.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
1. Right to Be Informed
You have the right to know how your personal data is being collected and used. We provide this information through our Privacy Policy and this GDPR information page.
2. Right of Access
You can request a copy of all personal data we hold about you. This is commonly known as a "Subject Access Request" (SAR). We will provide this information free of charge within 30 days.
3. Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly through your account, or contact us for assistance.
4. Right to Erasure ("Right to Be Forgotten")
You can request that we delete your personal data. We will comply unless we have a legal obligation to retain it (such as tax records) or it's needed for ongoing services you've requested.
5. Right to Restrict Processing
You can request that we limit how we use your data. This means we can store your data but not process it further until the restriction is lifted.
6. Right to Data Portability
You can request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so you can transfer it to another service provider.
7. Right to Object
You can object to processing based on legitimate interests, direct marketing, and processing for research or statistical purposes. We will stop processing unless we have compelling legitimate grounds.
8. Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not use automated decision-making processes.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us:
Email: [email protected]
Phone: +39 02 845531
Post: Univer Dealz, Via Mecenate 42, 20118 Milan, Italy
When submitting a request, please provide:
- Your full name and contact information
- A clear description of your request
- Any relevant order numbers or account details
- Proof of identity (we may request this for security purposes)
Response Timeframe
We aim to respond to all GDPR requests within 30 days. In complex cases, we may extend this by an additional 60 days, but we will notify you within the first 30 days if an extension is needed.
There is no fee for most requests. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.
How We Protect Your Data
Encryption
All data transmission uses SSL/TLS encryption. Sensitive data is encrypted at rest.
Access Controls
Strict access controls ensure only authorized personnel can access personal data.
Regular Audits
We conduct regular security assessments and audits of our systems.
Staff Training
All staff receive data protection training and are bound by confidentiality obligations.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours
- Notify affected individuals without undue delay if there is a high risk
- Document all breaches and remediation actions taken
Filing a Complaint
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority.
Italian Data Protection Authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
Website: www.garanteprivacy.it
Email: [email protected]
Data Controller Information
Univer Dealz
Via Mecenate 42
20118 Milan, Italy
VAT: IT13295199004
Email: [email protected]
Phone: +39 02 845531
Data Protection Questions?
If you have any questions about GDPR or how we handle your data, please don't hesitate to contact us.
