PRIVACY POLICY

Salcas S.r.l., with registered office in Milan in Via Abbondio Sangiorgio, 12 and operational headquarters in Settimo Milanese (MI) in Via Keplero No. 29 belonging to the “Nuncas Group”, together with Nuncas Italia S.p.A., with registered office in Milan in Via Abbondio Sangiorgio, 12 and operational headquarters in Settimo Milanese (MI) in Via Keplero No. 29, on whose behalf it acts, recognises the importance of maintaining the confidentiality, integrity and security of Personal Data.

Therefore, it informs you that the Personal Data you provide to the Nuncas Group through the site will be processed in compliance with current European legislation on privacy (Regulation (EU) 2016/679 - hereinafter "GPDR", Legislative Decree 101/2018).

Any further requests for information and/or clarifications regarding data processing may be requested by sending an email to the following address: privacy@nuncas.it

The contact details of the Data Protection Officer are as follows: dpo@mc3innovation.it

1) Type and source of data

Browsing data and storage times - data acquired from system and security logs

This site, during user visits, automatically acquires information through system and security logs.

The information collected could be the following:

• time and date of the visit;
• IP address and name of the provider of origin;
• records of errors and problems.

All this data, collected in aggregate form, is only used to support diagnostics for security purposes. Example: in the event of an attack, the logs are monitored to block unauthorised access and to prevent malicious activity.

Access to this data is only at the server administration level and is never used for the identification or profiling of the user/visitor but only acquired for the protection and security of the present site. It could be used only in the event of a crime, and only at the request of the judicial authority in the cases provided for by law.

The LOG data collected by the site is processed at the headquarters of the Data Controller, and at the web Hosting datacenter.

The web hosting is responsible for data processing (DHH Switzerland SA, Via degli Agustoni 3, CH-6830 Chiasso - Switzerland) and processes the data only at the explicit request of the owner and acts in compliance with European regulations.

Data used for security purposes is kept for 90 days.

Personal data that the interested party voluntarily provides

The Nuncas Group will collect and process Personal Data, such as, for example, name and surname, postal address and email address, directly and knowingly provided by you through the site on the occasion of your online purchase order and/or your registration on the site and/or to the Group's newsletter service and/or a request through the Contact Us section as well as on the occasion of joining the MYNUNCAS Program.

With particular reference to your application to join the MYNUNCAS Program, data relating to the volume of global spending progressively achieved will also be collected, without detailed references to individual products, to the extent that it is necessary in order to allow you to accumulate points, obtain discount vouchers and in general to be able to attribute all the benefits of the program to you.

Finally, we specify that the optional, explicit and voluntary sending of e-mails through the site and/or to the addresses indicated on the site will result in the subsequent acquisition of your email address, necessary to respond to requests, as well as any other personal data included in the message sent.

With regard to the relationship between the owner of this site and Facebook and in particular the sharing of personal data knowingly provided by the user, we would like to invite you to read the following link: Terms for Facebook Business tools and the Appendix on the data controller

However, we specify that Facebook Ireland is co-controller of the joint processing with the owner of the site and the necessary information provided pursuant to Art. 13 of the GDPR is contained in the Facebook Ireland data regulation which can be consulted at: https://www.facebook.com/about/privacy.

As for the personal data processed so that the user can make payments online via PayPal, please read here: https://www.paypal.com/webapps/mpp/ua/privacy-full

2) Purposes of data processing

Personal Data will be used for the following purposes:

a) to respond to your requests for information and manage the related relationship, including your request to join the MYNUNCAS Program to allow you to enjoy benefits offered;

b) to process your online purchase order and to carry out all the administrative and accounting management activities of the same, as well as the shipment of products, the management of payments, any disputes and the prevention of fraud, as well as in fulfillment of all obligations imposed by the laws in force.

Furthermore, with your prior consent, your Personal Data may be entered in the database of our customers and processed, together with the detailed data of your purchases, for the following purposes:

c) profiling purposes: for the development of studies, surveys, analysis and statistical and/or market research, in relation to your preferences on our products, in order to offer a personalised service to your needs and promote initiatives that may interest you;

d) marketing purposes: to contact you and/or send you (by email and/or other forms of communication) information and promotional messages, including commercial ones, newsletters, advertising material, catalogues and invitations to events, relating to products and services of the Nuncas Group.

3) Processing methods

Personal data will be processed by electronic means or otherwise automated and IT and/or through manual paper processing with logic strictly related to the purposes for which the personal data was collected and, in any case, in such a way as to guarantee the security and confidentiality of the data.

4) Legal basis of the processing and nature of the provision

The provision of Personal Data is optional but mandatory in order to be able to pursue the purposes referred to in points a) and b) of paragraph 2) of this notice, so much so that failure to provide them will not allow us to be able to respond to your requests, formulate and/or assume any obligation towards you.

The processing of your data for the purposes referred to in letter b) (relating to payments made via PayPal), c) and d) of paragraph 2 will be subject to your explicit consent. Any refusal to grant consent will have no other effect than that of not being able to carry out any study, survey, analysis and statistical and/or market research in relation to your preferences on our products to offer a personalised service and promote initiatives that may interest you or be able to send you information of a commercial nature about our products or initiatives; if you reject the cookies, PayPal will not be able to make purchases and payments online.

Further information on how Facebook Ireland processes personal data, including the legal basis to which Facebook Ireland refers and on how to exercise the data subject's rights vis-à-vis Facebook Ireland, can be found in the Facebook Ireland Data Policy at: https://www.facebook.com/about/privacy.

5) Communication, dissemination of data and transfer to third countries.

Your Personal Data will be processed only by persons expressly authorised by the Nuncas Group or who act as Data Processors, on behalf of the Group itself, and who have signed a specific contract that punctually regulates the treatments entrusted to them and the obligations regarding data protection (by way of example, service providers, couriers, technicians who maintain IT services, companies that the Nuncas Group may use for the creation and/or management of promotional campaigns for its products or services, etc.).

Your Personal Data may be transferred to third countries such as Switzerland, whose protection levels have been deemed adequate by the European Commission as well as the USA (in relation to the Google and Pixel ID Facebook services used) under whose Standard Contractual Clauses the Holder must comply with. Your data will never be disclosed by the Data Controller.

6) Storage time-frame 

Your Personal Data will be processed and stored for the time necessary to carry out the purposes for which they were collected and in accordance with the storage times provided for by the applicable regulations or until you revoke the consent given for the treatments where required.

7) Rights of the interested party

You may exercise the rights provided for in Articles 15 to 21 GDPR and, in particular, request information on the existence and characteristics of the processing of personal data, the rectification and cancellation of the same, or the limitation of processing, oppose the processing and/or request the transmission of your personal data to another owner; moreover, at any time it will be possible to revoke the consent without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

With regard to personal data processed through Pixel ID Facebook, the user can learn more about their rights by reading the Appendix on the data controller

Finally, in the event that your requests for information have not resulted in satisfactory responses, you have the right to lodge a complaint with the Supervisory Authority.

The reference Authority is the Garante per la Protezione dei dati personali (the Italian Data Protection Authority): http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524