Informativa sulla privacy

 1. Introduction

Welcome to La Contea Cards and Games ("Company," "we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, www.laconteacardsandgames.it, or use our products and services (collectively, the "Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not use our Services.

2. Data Controller Information

La Contea Cards and Games is the data controller responsible for your personal data. If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

  • Data Controller: La Contea Cards and Games
  • Email: laconteasnc@gmail.com

3. Definitions

For the purposes of this Privacy Policy:

  • "Personal Data" means any information relating to an identified or identifiable natural person.
  • "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.
  • "Data Subject" means an individual who is the subject of personal data.
  • "Data Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • "Data Processor" means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the data controller.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

  • Consent: You have given your consent for one or more specific purposes.
  • Contract: Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.

5. Types of Data Collected

We may collect and process the following types of personal data:

  • Contact Information: Name, email address, phone number, postal address.
  • Account Information: Username, password, account preferences.
  • Payment Information: Credit card details, billing address.
  • Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Services.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

6. Methods of Data Collection

We collect personal data using the following methods:

  • Direct Interactions: You may give us your personal data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you create an account, subscribe to our services, make a purchase, request marketing to be sent to you, or give us feedback.
  • Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
  • Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as analytics providers, advertising networks, search information providers, and data brokers or aggregators.

7. Purpose of Data Processing

We use your personal data for the following purposes:

  • To Provide Our Services: To set up and manage your account, process your orders, deliver products and services, and communicate with you about your orders and account.
  • To Improve Our Services: To analyze usage of our website and services, troubleshoot issues, and improve the quality and performance of our offerings.
  • To Personalize Your Experience: To provide you with customized content and recommendations based on your interests and preferences.
  • To Market Our Products and Services: To send you marketing communications about our products, services, promotions, and events, with your consent where required by law.
  • To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.
  • To Protect Our Legitimate Interests: To prevent fraud, protect the security of our systems and services, and enforce our terms and conditions.

8. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.  We will securely delete or anonymize your personal data once the retention period expires.

9. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request access to your personal data and obtain information about how we process it.
  • Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request deletion of your personal data, subject to certain conditions.
  • Right to Restrict Processing: You have the right to request restriction of processing of your personal data under certain circumstances.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
  • Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: You have the right to withdraw your consent at any time where we rely on your consent to process your personal data.

To exercise these rights, please contact us using the contact details provided in this Privacy Policy. We may need to verify your identity before fulfilling your request.

10. Consent

By using our Services and providing your personal data, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy. You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

11. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption: We use encryption to protect personal data during transmission.
  • Access Controls: We limit access to personal data to employees, contractors, and agents who need access to perform their job duties.
  • Regular Security Assessments: We regularly review and update our security practices to enhance the safety of your personal data.

While we strive to protect your personal data, no security measures are perfect or impenetrable, and we cannot guarantee the absolute security of your data.

12. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to outside parties except as described in this Privacy Policy. We may share your personal data with:

  • Service Providers: Third-party vendors who provide services on our behalf, such as payment processing, shipping, data analysis, and marketing assistance.
  • Business Partners: Trusted partners for promotional offers or joint marketing activities.
  • Legal Authorities: When required by law or in response to legal process, law enforcement requests, or regulatory authorities.
  • Protective Measures: To protect our rights, privacy, safety, property, and users, or to enforce our terms and conditions or other agreements.

We require these third parties to maintain the confidentiality and security of your personal data and to use it only for the purposes for which we disclose it to them.

13. International Data Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA) where the level of data protection may not be equivalent to that within the EEA. When we do so, we ensure that appropriate safeguards are in place to protect your personal data, including:

  • Standard Contractual Clauses: We use standard contractual clauses approved by the European Commission to ensure an adequate level of data protection.
  • Privacy Shield: For transfers to the United States, we rely on the Privacy Shield framework where applicable.

You have the right to request more information about the safeguards we have implemented by contacting us using the contact details provided in this Privacy Policy.

14. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your user experience, analyze website usage, and assist in our marketing efforts. Cookies are small data files that are placed on your device when you visit our website.

  • Types of Cookies Used:

    • Essential Cookies: Necessary for the operation of our website.
    • Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and understand how visitors move around our website.
    • Functionality Cookies: Used to recognize you when you return to our website and personalize content.
    • Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed.

You can manage your cookie preferences through your browser settings. For more information about the cookies we use, please refer to our Cookie Policy.

15. Children’s Privacy

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information as soon as possible. If you believe that we might have any information from or about a child under 16, please contact us using the contact details provided in this Privacy Policy.

16. User Responsibilities

You are responsible for ensuring that the personal data you provide to us is accurate, complete, and up to date. You are also responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account. If you believe your account has been compromised, please contact us immediately.

17. Third-Party Services

Our website may contain links to third-party websites and services that are not operated by us. If you click on a third-party link, you will be directed to that third party’s website. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites or services before providing any personal data.

18. Automated Decision-Making

We do not engage in automated decision-making processes that have a legal or similarly significant effect on you. Automated decision-making refers to decisions made solely by automated means without any human involvement. If we do implement such processes in the future, we will inform you of the existence of automated decision-making, including profiling, meaningful information about the logic involved, and the significance and the envisaged consequences of such processing for you.

19. Profiling

Profiling involves the automated processing of personal data to evaluate certain aspects about an individual, such as personal preferences, interests, behavior, or location. We may use profiling to provide personalized services and offers tailored to your interests. Profiling will be based on your explicit consent or as otherwise permitted by law. You have the right to object to profiling activities by contacting us using the contact details provided in this Privacy Policy.

20. Data Breach Response

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant data protection authorities without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Our data breach response plan includes:

  • Immediate Investigation: We will promptly investigate the breach to determine its scope and impact.
  • Mitigation Measures: We will take necessary steps to mitigate any potential harm and prevent further unauthorized access.
  • Notification: We will notify affected individuals and authorities, providing them with information about the breach, its potential impact, and the measures we have taken to address it.

21. Marketing Communications

We may send you marketing communications about our products, services, promotions, and events that we believe may be of interest to you. You can opt-out of receiving marketing communications at any time by:

  • Unsubscribing: Using the unsubscribe link in the marketing emails we send you.
  • Contacting Us: Emailing us at laconteasnc@gmail.com to request removal from our marketing lists.
  • Even if you opt-out of receiving marketing communications, we may still send you non-promotional emails, such as those related to your account or orders.

22. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy. If the changes are significant, we will provide a more prominent notice, such as by email or through our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

23. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Italy, without regard to its conflict of law principles. Any disputes arising out of or relating to this Privacy Policy shall be resolved exclusively in the courts of Italy.

24. Contact Information

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact us at:

  • Email: laconteasnc@gmail.com

We are committed to resolving any complaints about our collection or use of your personal data. If you believe that we have not addressed your concerns adequately, you have the right to contact your local data protection authority.

25. Effective Date

This Privacy Policy is effective as of 15th May 2024 and supersedes all previous versions. Your continued use of our Services after the effective date constitutes your acceptance of this Privacy Policy.