Communication in reference to Art. 13 of EU Regulation 2016/679 and related applicable regulations to K-Way.com website

In accordance with art. 13 of EU Regulation 2016/679 (“Regulation”), and with applicable regulations on the subject of Privacy, K-WAY S.p.A. with sole proprietorship, hereby declares that the personal data provided by you or acquired through the online purchase of products by the brands BasictItalia is exclusive license holder of for Italy (hereinafter “Products”) will be processed according to current regulations and in full respect of the principles of fairness, legitimacy, transparency and safeguarding of privacy thereby envisaged.

Purposes

Data processing will be aimed at:

a)  Fulfilling any potential legal and/or regulatory requirement (i.e. tax and accounting duties);

b)  Correctly managing and implementing the purchase order procedure and the contract potentially established between K-WAY and clients, including the dispatch of communications via e-mail and/or SMS text messages related and functional to the on-line purchase procedure;

c)   Fulfilling all obligations related to the contract, such as, for instance, delivery and post-sale assistance services for clients;

d)  conducting direct marketing activities, such as sending – also via e-mail, SMS and MMS messages - advertising and promotional material related to products or services provided and/or promoted by the Controller or by its commercial partners, including free gifts;

e)   processing your personal data to position you in the correct group of interest (profiling) and to make it possible to send, via e-mail, fax and phone, custom commercial and promotional communications.

Legal Basis

The legal basis for data processing with the aims listed at points a, b and c is provided by the contractual relationship, and for points d and e, by your consent.

Data Provision

Providing data for the aims listed at points a, b and c, although optional, is necessary for online purchase services and refusing to provide it will make it impossible for the Controller to provide the services. As for the aims listed at points d and e, providing data is optional, and refusing to provide it will make it impossible for the Controller to carry out direct marketing and profiling activities as listed above, but will not preclude online purchasing.

Data processing methods

Personal data will be processed using paper-based and digital tools, and implementing appropriate safety measures to protect the safety and privacy of your personal data, and regarding profiling, to safeguard your rights, freedom, legitimate interests, and in particular to safeguard your right to obtain human intervention on behalf of the Controller, to espress your opinion and to challenge any decision.

Personal Data Recipients

The data gathered will be used exclusively within the aims listed above on the Italian territory.

Data processing will be carried out by Controller employees and/or subjects identified and authorized by the Controller to process the data.

The data provided will be not distributed or made public. The data may be communicated to:

1.    subjects granted access by law or by special orders by the authorities, as well as

2.    subjects, including third parties, the Controller employs to carry out instrumental and/or accessory activities to manage online purchases.

Data retention

In accordance with the principles of proportionality and necessity, the data will not be stored for periods longer than those essential to achieve the aims listed above.

Rights of concerned parties

The subjects personal data refers to have the right to obtain at any moment confirmation whether data regarding them is being processed, and if that is the case may access the data and information referred to in art. 15 of Regulation, to obtain a copy of said data or relative rectification (art. 15 and 16).

Subjects concerned may also request data deletion, processing limitation, mobility and to complain to overseeing authority and oppose, for legitimate reasons, their processing (art. 17).

These rights may be exerted via written communication to be sent to: RequestGDPR@basic.net

For other informations contact: customer@k-way.com

Processing controller

Processing controller is K-WAY S.p.A. with sole proprietor, located in Milano, Via Dell'aprica 12, 20158.

A list of data processing external supervisors has been published on the Controller’s website.