Privacy policy

Privacy Policy, website www.noodz.it.

This privacy policy explains what Personal Data is collected by Noodz srl (hereinafter referred to as "Noodz") and how such Personal Data is used when the User uses Noodz's website and web services, accessible at www.noodz.it (hereinafter referred to as the "Site"). This policy is provided in accordance with Article 13 of Legislative Decree No. 196/2003 (Personal Data Protection Code, hereinafter referred to as the "Code") and Article 13 of EU Regulation No. 2016/679 (General Data Protection Regulation, hereinafter referred to as the "GDPR").

This policy does not apply to Personal Data collected by other websites that the User may access through links to external third-party pages. Noodz is not responsible for the privacy policies and/or practices of third parties. When connecting to another site or using a third-party service, it is necessary to read the privacy policy of that site or service.

The term "Personal Data" refers to any information relating to an identified or identifiable individual, even indirectly, by reference to any other information.

Noodz may modify, supplement, or update this policy periodically, considering any changes to applicable regulations. The changes and updates to the policy will be applied and made known to the interested parties as soon as they are adopted through a link to the privacy policy on the Site. Therefore, every interested User is invited to regularly access the Site to check the updated policy.

Processing of Personal Data

Access to certain sections of the Site and/or any requests for information or services from the Site's Users may require the provision of Personal Data. Additionally, any contacts with Noodz, such as through customer service, or the optional, explicit, and voluntary sending of messages, either via email or traditional mail, to the addresses provided by Noodz on the Site, will result in the subsequent acquisition of the sender's address, including email, or their telephone number, necessary to respond to the requests, as well as any other Personal Data included in the communications.

The processing of the above-mentioned Personal Data by Noodz, as the Data Controller, will be carried out in compliance with the Code and the GDPR. This policy aims to allow Users to know, even before accessing the various sections of the Site and providing their Personal Data, how Noodz processes the Personal Data of Users. Users should read this policy before providing their Personal Data by filling in the appropriate spaces in the various sections of the Site.

Purposes of Data Processing

According to the specific needs expressed by the User accessing the various sections of the Website, the purposes of processing Personal Data provided directly by Users may include:

  • Allowing registration on the Website, which is necessary for accessing specific sections of the Website and for delivering and managing the various services offered.
  • With the User's prior consent until its revocation, conducting marketing activities (such as, but not limited to, sending promotional and advertising materials, communications about marketing campaigns or promotions, conducting related analyses on registered users, and customer satisfaction surveys that enable Noodz to improve the services and products offered to its customers), including through email, WhatsApp, SMS, telephone calls, or regular mail. The User has the option to unsubscribe from receiving such communications at any time.
  • With the User's prior consent until its revocation, sending newsletters to provide updates on all the news about the Website and other information related to the world of Noodz.
  • Providing assistance and responding to User inquiries regarding Noodz products, advertising, or the Website ("Contacts" section of the Website).
  • Social Networks: Offering advertisements and engaging Users on Noodz's social media platforms (e.g., Facebook, Twitter, Instagram, Pinterest, etc.) through the use of Personal Data derived from the User's interaction with third-party social media functions (such as the "Like" function). By consulting the privacy policies of the relevant third-party social networks, Users can learn more about how these functions operate, the profile Personal Data obtained by Noodz, and how to opt out.
  • Order-related communications: If an order is placed on e-commerce platforms, Noodz will use the User's Personal Data to process and ship the orders and to send order confirmation, shipping confirmation, and feedback request emails. This processing of Personal Data is necessary for the performance of Noodz's services, and the legal basis for this processing is Article 6(1)(b) of the GDPR. Users are reminded that they are contractually obligated to provide such Personal Data, and without it, Noodz will not be able to send order-related communications to the User.
  • Legal reasons or mergers/acquisitions: In the event that Noodz is acquired or merged with another company, it may share its Personal Data with any legitimate successor. Noodz may also disclose its Personal Data to third parties: (a) when required by applicable law; (b) to respond to legal proceedings; (c) to respond to a request from a competent law enforcement agency; (d) to protect its rights, privacy, security, or property; or (e) to fulfill the terms of any contract or terms of its own website.

User registration on the Website is not required for the provision of certain services offered by Noodz. However, in order to process User requests regarding such services, Users may be asked to provide Personal Data, which will be processed solely for the respective purposes and for the strictly necessary period.

Methods of Data Processing

Personal Data will be processed through the operations of collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of Personal Data. Personal Data will be processed mainly through automated means, but also in paper form, with logics strictly related to the aforementioned purposes.

Nature of User's Personal Data Provision

The provision of Personal Data is optional, but it is partly necessary for Noodz to meet the User's needs in relation to the services offered by the Website and the above-mentioned purposes. Failure to provide, provide partially, or provide inaccurate Personal Data necessary for the execution of the requested service makes such execution impossible. Failure to provide, provide partially, or provide optional Personal Data that is not necessary does not have any consequences.

Categories of Personal Data Subject to Processing

In addition to the Personal Data provided directly by users (such as name, surname, postal address, email address, password, age, date of birth, gender, image, profession, marital status, etc.), when connecting to the Website, the computer systems and software procedures used to operate the Website automatically and indirectly acquire certain Personal Data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses or domain names of computers used by users who connect to the site, URI - Uniform Resource Identifier - addresses of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numerical code indicating the status of the response given by the server - successful, error, etc. - and other parameters related to the user's operating system and computer environment). Such Personal Data is processed solely for the purpose of conducting anonymous statistical investigations on the use of the Website and ensuring its proper functioning, and is deleted immediately after processing. Personal Data may be used to ascertain responsibility in case of hypothetical computer crimes against the Website. Please refer to the cookie policy to learn how to manage cookie settings and obtain detailed information about the cookies used and the reasons for their use.

Categories of Individuals who may become aware of User's Personal Data

Personal Data may be disclosed to employees or collaborators of the Data Controller or Noodz in Italy and abroad, who, operating under the direct authority of the Data Controller, are appointed as Data Processors and/or Data Processors and will receive appropriate operational instructions in this regard.

Scope of Communication or Disclosure of User's Personal Data

The Personal Data provided directly by users through online forms may be communicated to external service providers, entrusted with the management of Personal Data for the purposes for which the Personal Data was collected. Noodz shares the User's Personal Data to the extent necessary to enable such third-party service providers to provide the applicable service to Noodz or on its behalf (e.g., order fulfillment, service and payment processing, credit card management, debt collection, website and e-commerce platform operation, support services, promotions, website development, email services to send emails and/or newsletters and/or SMS/WhatsApp on its behalf, Personal Data analysis, etc.). Such providers, whose Personal Data can be requested from the Data Controller indicated below, are appointed as Data Processors and must provide appropriate operational instructions to their employees or collaborators who may become aware of the Personal Data.

Noodz does not share, sell, transfer, or otherwise disclose the User's Personal Data to third parties, except as required by law under Article 6(1)(c) of the GDPR, unless required for the performance of a contract under Article 6(1)(b), or unless the User has expressly consented under Article 6(1)(a).

Data Controller and Data Processors

The Data Controller is Noodz srl with registered office at Viale Quattro Novembre 6 - 42121 Reggio Emilia | Fiscal Code, VAT number, and registration in the Companies Register of Reggio Emilia 02873300350 | tel +39 0522 1607217 - email [email protected].

The updated list of Data Processors and Data Processors can be requested at the contact details of the Data Controller mentioned above.

Rights of Users recognized by Article 7 of the Code and Article 15 of the GDPR

The data subject has the right to obtain confirmation of the existence or non-existence of Personal Data concerning them, even if not yet recorded, and to have them communicated in an intelligible form and to access their content.

The data subject has the right to obtain information about:

  • the origin of the Personal Data;
  • the purposes and methods of processing;
  • the logic applied in case of processing carried out with the aid of electronic instruments;
  • the identification details of the Data Controller, Data Processors, and the designated representative within the territory of the Italian State, where applicable;
  • the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of it as designated representatives within the territory of the Italian State, Data Processors, or appointed individuals.

The data subject has the right to obtain:

  • the updating, rectification, or integration of the Personal Data;
  • the erasure, anonymization, or blocking of Personal Data processed unlawfully, including data that does not need to be retained in relation to the purposes for which it was collected or subsequently processed;
  • confirmation that the operations referred to above have been made known, including their content, to those to whom the Personal Data has been communicated or disclosed, except in cases where such fulfillment proves impossible or involves a disproportionate effort compared to the protected right.

The data subject has the right to object, in whole or in part, to:

  • the processing of Personal Data concerning them for legitimate reasons, even if pertinent to the purpose of collection;
  • the processing of Personal Data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

The data subject, where applicable, also has the rights provided for in Articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

The exercise of the above rights can be carried out directly or by granting a written delegation or power of attorney to individuals or associations.

Retention of Personal Data

In compliance with applicable laws, Noodz will use Personal Data for the time necessary to fulfill the purposes for which it was collected (as described in the "Purpose of processing" section) or to comply with applicable legal requirements.

Methods for exercising rights and obtaining the list of Data Processors

The User may exercise the aforementioned rights at any time and obtain the complete list of Data Processors by sending an email to the Data Controller's address or a letter via regular or registered mail, or a certified email.

Furthermore, if the User initially provided consent, they may subsequently object to the processing for the purposes outlined in points 2 and 3 of the Processing Purposes section by clicking on a specific "link" present in each email or by contacting the Data Controller using the methods indicated in the previous paragraph.

Regarding these rights, the Customer may contact the Data Controller of Personal Data using the following contact details:

 

Noodz srl

registered office: Viale Quattro Novembre 6 - 42121 Reggio Emilia - Italy

tel: +39 0522 1607217 | Email: [email protected] | PEC: [email protected]

tax code, VAT number, and registration number within the Companies Register of Reggio Emilia: 02873300350

share capital: €10,000 fully paid

 

Last updated: June 10, 2023.