POLITYKA PRYWATNOŚCI

INFORMATION ON THE PROCESSING OF PERSONAL DATA (FOR WEB PORTAL AND/OR APP)

On this page we want to explain the methods and purposes of the processing of personal data collected during the navigation and use of http://scale-index.com and/or the app (jointly, the "Application"), which are provided to you pursuant to art. 14 of EU Regulation 2016/679 (GDPR).

Further information may be provided on specific pages, where expected and necessary.

This information does not concern other sites, pages or online services reachable via links/buttons/banners possibly published in the Application.

The Application and the Controller's Services are not intended for minors under 18 and the Controller does not intentionally collect personal information relating to minors. In the event that information on minors is involuntarily recorded, the Controller will delete it promptly, upon users' request.

• 1) Data controller and other contacts
  

  The Data Controller is Quantum Core Link in the person of the Legal Representative in office, with registered office in: Via Bellaria, 58, 61041 Acqualagna PU – tel. [Phone] - e-mail: corporate@quantumcorelink.it
  
  The data controller has appointed a Data Protection Officer (DPO) who can always be contacted at the email address: corporate@quantumcorelink.it
• 2) What data we collect
  

  a) Data provided by the user: during the contact request, registration and/or order completion process, personal data may be collected, including:
  

  • Personal data: name and surname, date of birth.
  • Contact details: address, e-mail, telephone, delivery address.
  • Tax data: tax code, VAT number (02859470417), billing address.
  • Payment data: payment-related data is acquired in encrypted format and according to adequate security requirements respecting the Payment Card Industry Data Security Standard (PCI DSS) security standards directly from our payment service providers. From such subjects, we can receive some data in unencrypted form such as: the first and last numbers of the credit card used, the belonging circuit and the expiration date, however elements not sufficient to complete transactions on other stores/sites.
  • Any other personal data included in communications with the user.
  • Personal data registered in the user's Facebook, Google or Apple accounts (based on the applicable conditions of use of the specific platform) in the event that the latter registers through such Facebook, Google or Apple accounts.

  b) Data relating to purchases: history and type of products purchased
  
  c) Browsing data: the computer systems responsible for the functioning of the Application automatically acquire some data, including personal data, the transmission of which is implicit and necessary in the use of Internet communication protocols. This category of data includes IP addresses used by users connecting to the Application, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.
• 3) Why we collect your data
  

  a) To respond to a pre-contractual contact or information request sent via the appropriate section.
  Legal basis: pre-contractual measures (Art.6.1.b of the GDPR).
  Retention: maximum 12 months after ticket closure for internal management and organizational purposes.
  
  b) For registration to this Application and for access to its private area.
  Legal basis: Provision of requested services (Art.6.1.b of the GDPR).
  Retention:
  

  • for users with addresses in geographical areas served by Quantum Core Link : up to 2 years from the user's last use of the Application, or until the deletion of the account (the Controller undertakes to delete or anonymize such data within three months from said deadline);
  • for users with addresses in geographical areas not served by Quantum Core Link : up to 10 years from registration, or until the deletion of the account (the Controller undertakes to delete or anonymize such data within three months from said deadline).

  c) For the completion and fulfillment of purchase orders, and related activities, their billing and subsequent post-sales assistance.
  Legal basis: Provision of requested services (Art.6.1.b of the GDPR).
  Retention: up to 10 years from the completion of the transaction to fulfill the obligations established by current tax regulations.
  
  d) For sending commercial communications, newsletters, market surveys, optimization of the user experience based on previously made purchases and to have access to offers related to such purchases, via email, telephone call or SMS (only for those who complete the address by inserting the telephone number), push notifications*, instant messaging apps (e.g. Whatsapp)* and social profiles associated with the provided email address.
  Legal basis: specific consent (Art.6.1.a of the GDPR) and, for those who have made at least one purchase, legitimate interest (Art.6.1.a of the GDPR and Art. 130.4 D.Lgs 196/03) limited to offers related to their purchases via e-mail.
  Retention: up to 2 years from the last use of the Application for those who have made at least one purchase, or, until the deletion of the account itself and, in any case, until the revocation of the consent given (the Controller undertakes to delete or anonymize such data within three months from said deadline).
  * Please note that push notifications can be disabled at any time, via the dedicated settings of your device (iOS or Android).
  
  e) For participation in “Loyalty Programs” via Quantum Core Link or third-party platforms.
  Legal basis: program regulation (Art.6.1.b of the GDPR).
  Retention: until the end of each Loyalty Program, unless further retention is necessary for protection purposes in court.
  
  f) For purposes related to browsing and management of this Application, namely:
  

  • protect the security of the Application or and users and to prevent or unmask fraud or abuse against the Application or Quantum Core Link itself;
  • verify and guarantee the correct functioning of the Application and its functions also through third parties;
  • collect access and navigation statistics, to improve the services and use of the Application (via logs and technical/analytical cookies also from third parties).

  Legal basis: the provision of the Application's navigation service, the legitimate interest of the owner as well as the obligations established by law (Art.6.1.b/c/f of the GDPR).
  Retention: up to 12 months from the recorded event (saving any need to ascertain crimes by the Judicial Authority).
• 4) Provision of data
  

  The provision of data for the purposes referred to in the previous article 3A, 3B, 3C, 3D and 3E is to be considered optional, however, without some of these data it will not be possible to complete the registration to the Application or respond to any requests for information.
  
  The provision of data for the purpose referred to in point 3F is to be considered mandatory, since without them it is not possible to provide access and navigation to the Application.
  
  The interested party always has the right to revoke any consents given. This revocation will not affect the lawfulness of the processing based on consent before the revocation.
• 5) Methods of processing and security measures
  

  Personal data are processed in electronic format, for the time necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
• 6) Who are the recipients of your data
  

  In pursuing the illustrated purposes, personal data as well as processed by our staff, acting on the basis of specific instructions, may also be communicated to various subjects, including but not limited to:
  

  • subjects and bodies whose access to such data is recognized by virtue of regulatory provisions;
  • natural, legal, public or private subjects, to whom communication is necessary or functional to our activity;
  • our providers of development, maintenance, analysis and hosting services necessary for the functioning of this Application.

  The list of data processors who process data can be requested from the Controller. If necessary and solely for our organizational and operational purposes, the personal data provided could be transferred to foreign suppliers, even outside the European Economic Area (EEA). In this case, the transfer will take place in compliance with current international regulations, as well as against the adoption of suitable measures (such as, for example, EU adequacy decisions or the presence of adequate guarantees).
  
  Under no circumstances will the personal data provided be subject to dissemination without authorization or sale to third parties.
• 7) Your rights
  

  The Controller guarantees the rights provided for by Arts. 15 to 22 of the GDPR, including: that of asking and obtaining access to the data, the rectification, deletion or limitation of their processing, as well as the right to object, in whole or in part, for legitimate reasons, to the processing of your personal data, to request their portability, to revoke the consent(s) provided, with the methods indicated in the individual communication channels, and to lodge a complaint with a supervisory authority.
  
  These rights can be exercised by sending a communication to the Controller, at the address: corporate@quantumcorelink.it
  
  The information provided may be subject to revision. Users are kindly invited to periodically visit this page, in order to be constantly updated on the characteristics of the processing.