Privacy Policy

Information pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (RGPD) and request for consent for the processing of personal data collected from the Data Subject

This Notice is given to inform you of the processing of your personal data.
Index
1. Identity and contact details of the data controller
2. Purpose and legal basis for processing
3. Recipients of personal data
4. Period of data retention
5. Rights of the Interested Party
6. Communication and provision of data

1. Identity and contact details of the data controller
The data controller is. BLUE RIBBON S.R.L., headquartered in Capannori (LU), via di Sottomonte, 70 frazione Guamo, tax code and VAT number 02590230468, registered with the REA of Lucca under no. 237706, in the person of the Chairman of the Board of Directors, Procopio Iacopelli, C.F. CPLPCP58T27H841N, domiciled for the office in Lucca, via dei Landucci, 92, frazione Massa Pisana, with the necessary powers under the law and the bylaws, reachable through the following channels:
email: info@thetimewatches.com
pec: referenzadeltempo@pec.it
tel. +39 3293243683
mail: via di Sottomonte, 70 frazione Guamo, Capannori (LU)

2. Purpose and legal basis for processing
The user's personal data will be processed for the following purposes:
(a) provision of the service requested by the user (by way of example only, but not limited to, to carry out good evaluation or watch research to be purchased);
(b) direct marketing and market research;
(c) profiling related to the luxury goods buying/selling/horology sector.
The processing referred to in point a) is necessary for the provision of the service requested by the user, while the processing referred to in points b) and c) requires your express consent through the affixing of specific "flags". It should be noted that a) the provision and use of e-mail address are necessary to receive the newsletter, b) the direct marketing activity (carried out by the Company) aims to collect and use data relevant and limited to what is necessary in relation to the purpose for which they are processed, to develop studies, research, market statistics, send advertising and informative material, carry out direct sales or placement of products or services, send commercial information, carry out interactive commercial communications. Profiling activities, on the other hand, consist of collecting information on behaviors and business habits in the field of buying/selling luxury goods/logistics in order to improve the services offered according to the needs of customers who have given specific consent. With reference to marketing and profiling activities, it should be noted that in the event that the user does not give specific consent to the processing, it will not be possible to carry out the aforementioned activities.

3. Recipients of personal data
Recipients of personal data may be:
Fabest S.r.l.s.
REFERENCE OF TIME S.r.l. does not make transfers of personal data to non-EU territory.
Where necessary or appropriate, individuals to whom data is transmitted for the computerized management of the newsletter service will be appointed as (external) Data Processors in accordance with Article 28 GDPR.

4. Period of data retention
Personal data will be retained for the amount of time strictly necessary to pursue the specific purposes of the processing for which you have given your consent and, specifically:
- for the purposes indicated in letter a) of art. 2 for the time necessary for the fulfillment of contractual obligations and, in any case, no longer than 10 years from the time of collection of your data for fulfillment of regulatory obligations and, in any case, no longer than the terms set by law for the prescription of rights;
- for the purposes set forth in letter b) (i.e., for direct and indirect marketing and market research purposes) of Article 2 for 24 (twenty-four) months from the time of issuance of consent for processing;
- for the purposes indicated in letter c) (i.e., for profiling purposes) of Article 2 for 12 (twelve) months from the time of the granting of consent to the processing.

5. Rights of the Interested Party
The user may, at any time, exercise the rights set forth below.
a. Access to personal data: obtain confirmation or otherwise that data concerning you is being processed and, if so, access to the following information: the purposes, the categories of data, the recipients, the period of storage, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure or restriction of processing or opposition to processing as well as the existence of an automated decision-making process;
b. Request for correction or deletion of the same or restriction of processing concerning him/her; "Restriction" means the marking of retained data with the aim of limiting their processing in the future;
c. Opposition to treatment: object on grounds related to your particular situation to the processing of data for the performance of a task of public interest or in pursuit of a legitimate interest of the Data Controller;
d. Data portability: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive in a structured, commonly used and machine-readable format the data concerning him or her;
e. Withdrawal of consent to processing for marketing purposes, both direct and indirect, market research and profiling; the exercise of this right does not in any way affect the lawfulness of the processing carried out prior to revocation;
f. Propose complaint pursuant to Article 77 of the GDPR to the competent supervisory authority based on your habitual residence, place of work or the place of violation of your rights; for Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted via the contact details given on the website http://www.garanteprivacy.it.
I The aforementioned rights may be exercised by sending an appropriate request to the Data Controller through the contact channels indicated in Article 1 of this policy.
Requests relating to the exercise of user rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and the number of requests this deadline may be extended by an additional 2 (two) months.

6. Communication and provision of data
The provision of data by the user is mandatory as it is necessary for the provision of the requested service. Therefore, any refusal by the user to provide the data may result in the failure to provide the service, to the extent that such data are necessary for such purposes.