This information has been updated on 02/20/2020
In this text various data are recurring, and we will refer to them as follows:
This website www.newyorkcollection.eu belongs to NEW YORK COLLECTION srl, which is defined in this text as "NYC".
The website indicated above, identified as www.newyorkcollection.eu,is defined in this text as "the Site" or "from the Site" or "of the Site".The company e-mail address is: info@nycsrl.net, which is defined in this text as "company e-mail".
The owner of the data processing is NEW YORK COLLECTION SRL, VAT number 09184600154, which is defined in this text as "the Data Controller".
NEW YORK COLLECTION SRL, as Data Controller of your personal data, pursuant to and for the effects of the legislative decree of 30 June 2003 n. 196 (Code regarding the protection of personal data), and the new EU Regulation 2016/679 we hereby inform you that the aforementioned legislation provides for the protection of persons and other subjects regarding the processing of personal data, and that this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and with the confidentiality obligations set forth therein.
The processing of personal data applies to those who interact with the web services of NEW YORK COLLECTION SRL, accessible electronically from the Site. However, it does not apply to foreign websites that may be visited by the user via links from our site.
The information is also inspired by the Recommendation n. 2/2001 that the European Authorities for the protection of personal data gathered in the group established by Article 29 of the European Directive N° 95/46/CE – adopted on May 17, 2001 to identify some minimum requirements for the collection of personal data online, and in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages regardless of the purpose of the connection.
The processing of personal data applies to those who interact with the web services of NEW YORK COLLECTION SRL, accessible electronically from the Site. However, it does not apply to foreign websites that may be visited by the user via links from our site.
The information is also inspired by the Recommendation n. 2/2001 that the European Authorities for the protection of personal data gathered in the group established by Article 29 of the European Directive N° 95/46/CE – adopted on May 17, 2001 to identify some minimum requirements for the collection of personal data online, and in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages regardless of the purpose of the connection.
1. Type of data processed through the Website
NEW YORK COLLECTION SRL processes the following types of personal data (hereinafter, "data") provided by Users of the Site during their consultation and browsing, in particular:
1.1 Data obtained during a User's navigation on the Site
The computer systems, cookie technology and software procedures used to operate the Site acquire, during their normal operation, some data whose transmission is implicit in the use of the Internet. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow navigation Users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by Users who connect to the Site, the pages visited by Users within the Site, the domain names and addresses of websites which the User has accessed (by referral) to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server, and other parameters relating to the type of browser (e.g. Internet Explorer, Chrome, Firefox…), operating system (e.g. Macintosh, Windows) and the computer environment of the User.
The computer systems, cookie technology and software procedures used to operate the Site acquire, during their normal operation, some data whose transmission is implicit in the use of the Internet. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow navigation Users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by Users who connect to the Site, the pages visited by Users within the Site, the domain names and addresses of websites which the User has accessed (by referral) to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server, and other parameters relating to the type of browser (e.g. Internet Explorer, Chrome, Firefox…), operating system (e.g. Macintosh, Windows) and the computer environment of the User.
This data is collected through proprietary first-party technical cookies and third-party analytical cookies.
The acquisition of this data allows for example to make interactions with social networks, or with other external platforms, directly from the pages of this site. The interactions and information thus acquired are in any case subject to the User's privacy settings relating to each social network.For further information on navigation data, Users are invited to consult the Site's Cookie Policy.
1.2 Personal data provided by Users
The Site is accessible to the User without his identification being necessary for the purposes of consultation. However, the User has, if he wishes, the right to provide NEW YORK COLLECTION SRL with his identification data including, for example, name and surname, e-mail and telephone number in order to receive commercial information on the services offered by NEW YORK COLLECTION SRL and this both directly and by filling in the booking request form or newsletter subscription form if sent or in the event that registration and purchases are made.
The Site is accessible to the User without his identification being necessary for the purposes of consultation. However, the User has, if he wishes, the right to provide NEW YORK COLLECTION SRL with his identification data including, for example, name and surname, e-mail and telephone number in order to receive commercial information on the services offered by NEW YORK COLLECTION SRL and this both directly and by filling in the booking request form or newsletter subscription form if sent or in the event that registration and purchases are made.
2 Purpose of the treatment
2.1 The data provided by the User will be processed, without the prior consent of the User pursuant to art. 24 lett. b) Privacy Code and art. 6 lett. b) GDPR, for the following Service purposes:
· for the management and processing of statistical surveys on the use of the Site;
· to carry out the maintenance and technical assistance necessary to ensure the correct functioning of the Site and the services connected to it;
· to improve the quality and structure of the Site, as well as to create new services, functions and/or characteristics of the same;
· to allow the User to find information to increase his knowledge of the topics present on the site and the products and services it offers;
· to allow the owner to exercise his rights in court and repress unlawful conduct;
· to fulfill legal or regulatory obligations.
– Nature of the provision: necessary
– Consequences of refusal to provide data: failure to provide data will prevent the Data Controller from carrying out the activity requested by the user.
– Consequences of refusal to provide data: failure to provide data will prevent the Data Controller from carrying out the activity requested by the user.
2.2 The data provided by the User through the site and those through the census at our commercial offices will be processed, subject to the User's consent pursuant to art. 23 Privacy Code and art. 6 lett. a) GDPR, for the following commercial purposes:
· to process any request for information, forwarded by the User by filling in the appropriate form or by email;
· to process any purchase request and subsequent shipment, forwarded by the User through the use of the e-commerce platform available on the Site;
· to allow the User to be sent commercial communications by e-mail on products, initiatives and/or services offered by the Site and/or newsletters containing insights into the main topics related to the world of fashion and Made in Italy;
– Nature of the provision: optional
– Consequences of refusal to provide data: failure to provide data will prevent the Data Controller from carrying out the activity requested by the user.
– Consequences of refusal to provide data: failure to provide data will prevent the Data Controller from carrying out the activity requested by the user.
2.3 Newsletter
The Site newsletter is sent via email to all those who subscribe to the e-commerce, thus authorizing the Data Controller to process their personal data for the aforementioned purpose which will not be disclosed to third parties.
Method: The data collected is processed with IT tools. Appropriate security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Cancellation from the service: to no longer receive the newsletter, simply select the unsubscribe link at the end of each email, or send a request to the company email. The cancellation is managed in an automated or manual way, so further newsletters could be received, the sending of which was planned before the cancellation request was received. NEW YORK COLLECTION SRL is available to provide any clarification in this regard.
3. Nature of Data Provision
The provision of data by the User is mandatory for the purposes of the Service referred to in point 2.1 and optional for the purposes of the service referred to in point 2.2. Any refusal to provide such data may make it impossible to provide the services.
4. Methods of Treatment and Duration
The processing of User data is carried out by means of the operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR and in particular: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, access, use, interconnection, blocking, communication, cancellation and destruction of data.
The treatment is carried out using IT and/or telematic tools, with organizational methods and with logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the site may have access to the Data (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Holder.Duration of the Treatment: only for the time strictly necessary to achieve the purposes for which they were collected and, in any case, no later than 2 years from their collection for the Service purposes referred to in point 2.1 and no later than 1 year from their collection for Commercial purposes referred to in point 2.2. It is then specified, in relation to point 2.2 second item, ... "purchase and subsequent shipment ..." that the issue of the invoice (as a summary of the purchase) involves the retention of data relating to the user and his company (at least in the form of a paper document) for 10 years; as per legal tax obligations.The User can always request the interruption of the Processing or the cancellation of the Data.
5. Data access
The data may be made accessible exclusively for the aforementioned purposes to the following subjects:
· NEW YORK COLLECTION SRL as Data Controller
6. Data communication
Without the express consent of the User (ex art. 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), NEW YORK COLLECTION SRL may communicate the User's data for the purposes of the Service pursuant to art. 2.1 to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom the communication is mandatory by law for the accomplishment of the aforementioned purposes, as independent data controllers. User data will not be disclosed.
7. Data Transfer
The personal data provided by the User to allow the processing of tax obligations (invoicing) are processed electronically through the use of management software directly at the company headquarters.
Outside of this case, the management and storage of data will take place on servers located within the European Union, in particular cloud servers provided by the company Aruba S.p.A. residing in the cloud.it web space (privacy policy – https://www.aruba.it/informativa_arubaspa.pdf ).The data acquired with the user's consent based on point 2.2 of the Purpose of the Processing will not be transferred outside the European Union.
In any case, it is understood that NEW YORK COLLECTION SRL, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, NEW YORK COLLECTION SRL ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the European Commission.8. Third Party Websites
It should be noted as of now that, should the Site contain links that refer to websites of third parties, the Data Controller cannot exercise any control over the content of such websites nor has any access to the personal data of users who visit them.
The owners of the aforementioned websites will therefore remain the sole and exclusive owners and managers of the processing of the personal data of their users, remaining, NEW YORK COLLECTION SRL, extraneous to this activity as well as to any liability, prejudice, cost, which may derive from its failure or incorrect completion.
The Website may also contain links to other websites owned by NEW YORK COLLECTION SRL.
We therefore recommend that you carefully read the relative privacy policies and terms of use of these websites, before providing or consenting to the processing of your personal data.
9. Users' Rights
The User will have the right to exercise the rights referred to in art. 7 Privacy Code and art. 15-21 GDPR.
In particular, the User has the right at any time to obtain from NEW YORK COLLECTION SRL confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
1) The User also has the right to obtain confirmation:
1. of the origin of personal data;
2. of the purposes and methods of the treatment;
3. of the logic applied in case of treatment carried out with the aid of automated tools;
4. of the identification details of the owner, of the managers and of the designated representative;
5. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents.
2) The User also has the right to obtain:
1. the updating, rectification or, when interested, the integration of data;
2. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed, by explicit request to the following address email: info@nycsrl.net
3. the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.
3) The User has the right to object, in whole or in part:
1. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
2. to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication (for example relating to newsletter services).
4) Where applicable, the User also has the rights pursuant to articles 16-21 GDPR
1. Right to rectification,
2. right to be forgotten,
3. right to limitation of treatment,
4. right to the portability of contractual and raw navigation data,
5. right to object
6. right to complain to the Guarantor Authority.
In relation to the treatments described in this Information, the interested party may, under the conditions set out in the GDPR, exercise the rights set out in articles 15 to 21 of the GDPR and, in particular, the following rights:
– right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, obtain access to your personal data, including a copy of the same.– right of rectification – article 16 GDPR: right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning him and/or the integration of incomplete personal data;
– right to erasure (right to be forgotten) – article 17 GDPR: right to obtain, without unjustified delay, the cancellation of personal data concerning him.
– right to limitation of treatment – article 18 GDPR: right to obtain the limitation of the treatment, when:
· the interested party disputes the accuracy of the personal data, for the period necessary for the owner to verify the accuracy of such data;
· the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
· personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
· the interested party has opposed the processing pursuant to art. 21 GDPR, in the waiting period of the verification regarding the possible prevalence of legitimate reasons of the data controller with respect to those of the interested party.
– right to data portability – article 20 GDPR: right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning him provided to the Data Controller and the right to transmit them to another data controller without impediments, if the treatment is based on the consent and is carried out by automated means.
– right of opposition– article 21 GDPR: right to object, at any time for reasons connected to your particular situation, to the processing of personal data concerning you based on the condition of lawfulness of legitimate interest or the execution of a task of public interest or the exercise of public authorities, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court . Furthermore, the right to object at any time to the processing if the personal data are processed for direct marketing purposes, including profiling, insofar as it is connected to such direct marketing.
– right of opposition– article 21 GDPR: right to object, at any time for reasons connected to your particular situation, to the processing of personal data concerning you based on the condition of lawfulness of legitimate interest or the execution of a task of public interest or the exercise of public authorities, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court . Furthermore, the right to object at any time to the processing if the personal data are processed for direct marketing purposes, including profiling, insofar as it is connected to such direct marketing.
The above rights may be exercised, against the Data Controller, of which, the references described above.
The exercise of rights as an interested party is free pursuant to article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller could charge you a reasonable fee, in light of the administrative costs incurred to manage the request, or deny the satisfaction of your request.
10. Methods of exercising rights
To exercise the rights referred to in the previous article, the User may, at any time, contact NEW YORK COLLECTION SRL by e-mail at the company e-mail address.
11. Data Controller and Data Processor
The data controller is:
NEW YORK COLLECTION SRL – VAT number 09184600154, email: info@nycsrl.net
External data processors are:
Aruba S.p.A. (web space manager):Aruba S.p.a. – VAT number 01573850516,
24036 Ponte San Pietro(BG),
Via San Clemente 53
12. Cookie
The site makes use of cookies, small text files that allow you to store information on visitor preferences, to improve site functionality, to simplify navigation by automating procedures (e.g. Login, site language) and for site analysis.
Session cookies are essential to be able to distinguish between connected users, and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, that is, until the browser is closed. No consent is required for them.
The technical cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required.
DISABLING OF COOKIES
Cookies can be disabled directly from the settings of the browser you are using to navigate, thus refusing/withdrawing consent to the use of cookies. It should be noted that disabling cookies could prevent the correct use of some functions of the site itself.
Instructions for disabling cookies can be found on the following web pages:
THIRD PARTY COOKIES
This site can install third-party cookies, used for statistical purposes and to be able to provide additional services and features to visitors and to improve the use of the site itself, such as buttons for social networks, or videos. This site has no control over third-party cookies, which are entirely managed by third parties. As a consequence of this, information on the use of these cookies and on their purposes are provided directly by the third parties on the pages indicated below.
In particular, this site uses cookies from the following third parties:
· Google Analytics
· Shiny Stats
PLUGIN SOCIAL NETWORK
This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Keep in mind that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site when registering with the social network.
The collection and use of the information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.
· INSTAGRAM –
13. Policy Updates
We inform you that this Information will be subject to periodic updates which will be highlighted on the Site.