PRIVACY POLICY

DATA PROCESSING STATEMENT 

This page describes how the website is managed as regards the processing of the personal data of users that consult it, as well as the methods used in and the purposes of data processing.

The information is provided pursuant to arts. 13-14 of Regulation (EU) 2016/679 – hereinafter G.D.P.R. – to those who interact with web services accessible electronically from the address: https://www.plooyo.com

The website is the property of PEA & PROMOPLAST S.r.l., which manages and maintains it with the purpose of providing information and communications regarding the products or services offered.

This statement concerns only the site in question and no others that may be consulted through our links, for which PEA & PROMOPLAST S.r.l. is in no way responsible.

PEA & PROMOPLAST S.r.l. with registered offices in San Mauro Torinese (TO) – Corso Lombardia 79, in its capacity as data controller of your personal data, pursuant to and for the purposes of the GDPR, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights.

Data controller contact details

The data controller may be contacted at the following address:

Email: info@plooyo.com

TYPES OF DATA PROCESSED

Navigation data

During normal operation, the IT systems and software procedures used for the functioning of this website automatically gather personal data as a result of utilising Internet communication protocols. This information is not intended to be linked with identified data subjects; however, by its very nature, its processing and correlation with data held by third parties could allow users to be identified.

This data category includes the IP addresses or domain names of the computers employed by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating server response status (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility for hypothetical computer crimes to the detriment of the site.

Data provided voluntarily by the user

• Communicating through our email addresses: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site for the purpose of making specific requests, entails our acquiring the sender’s address, which is necessary for the reply, plus any other personal data included in the message.
• Contact us: explicitly and voluntarily completing the data collection form for the purpose of requesting information, entails the subsequent acquisition of the sender’s address, which is necessary so as to reply, as well as any other personal data included in the request.
• Stay informed: subscribing to our newsletter with the intention of receiving information and commercial material, means that we acquire your email address for the purpose. Once you have subscribed via the form, you will receive a confirmation email enabling you to activate the subscription by clicking on the link provided to validate the authenticity of the email. Inside the same (and every periodic newsletter you receive) is a link that can be used to unsubscribe from the service and stop receiving information and commercial communications.  
• Register: registration allows you to purchase products published on the site and to interact in the PlooYo Community. On your profile page you can cancel your registration and delete your personal data.
• PlooYo Community: comments and interactions within the PlooYo Community are published under the nickname you register with. A comment on a post or blog, a review of a product, a star rating given to a product generates 1 PlooYo Coin: more information can be found in the “Terms and conditions of use” section.
• Idea Factory: filling in the form and submitting your project allows us to acquire your personal data for the purpose of contacting you again and evaluating the possibility of your becoming a PlooYo Designer

Profile Data

These data, communicated when registering in the personal area, include your first name and surname, email address, phone number, the nickname to be used on the portal and your access password. In the case of a company registering, billing data (address, city, postcode, company) are also required.

Purchase Data

After registration we collect your purchase data, including your order number, details of the goods purchased, details of the means of payment, delivery and invoicing addresses.

Payment Data

As regards payment, data are collected via credit card using Stripe technology (Maestro, Visa, MasterCard, American Express, Apple Pay, Google Pay), and PayPal. Stripe technology allows us to save data linked to your credit card only on Stripe, therefore none of your credit card data are saved on our systems. The user, however, is free to choose to deactivate data saving so that they are never saved in purchases subsequent to the first one. 

We receive further payment data from outside payment processing services and economic information services with which we cooperate for managing payments and carrying out credit checks. We only pass on to our payment processing services what data are necessary for the processing of the ongoing payment. Additional data connected with the processing of the payment and the creditworthiness check also form part of the payment data. These include, for instance, data that external service providers use for ID purposes, such as your PayPal identifier.

PlooYo Designer Data: these Data, which include your first and last name, email, phone number (optional), and project name, are necessary to evaluate the submitted project and possibly get back to you.

PROCESSING METHOD

Data are mainly processed electronically and digitally and retained both on computer media and on paper media as well as on any other suitable media, in compliance with the methods set out in articles 6, 32 of the GDPR and through the adoption of appropriate security measures to prevent the loss of, the unlawful or incorrect use of and unauthorised access to data.

We would inform you that, in order to provide a comprehensive service, our portal may contain links to other websites not managed by us. We are not responsible for errors, content, cookies, publication of unlawful moral content, advertising, banners or files that do not comply with the regulations in force and for compliance with the privacy legislation by sites operated by us to which reference is made. In order to improve the service offered, you are kindly requested to immediately report any malfunctions, abuses or suggestions to the e-mail address: info@plooyo.com.

Your data will be processed only by personnel expressly authorised by the data controller.

PURPOSE OF THE PROCESSING AND LEGAL BASIS

1. Registration on the site, access to the reserved areas of the site, participation in the PlooYo Community and posting comments on the blog. The legal basis of the processing is the consent of data subjects, pursuant to Article 6, par. 1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide them would make it impossible to create a reserved area on the site. 
2. Process requests for information. The legal basis of the processing is the consent of data subjects, pursuant to Art. 6, par. 1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide them would make it impossible to obtain the requested response.
3. Allow the purchase to take place and the product to be made available. The legal basis of the processing is the execution of the contract or the execution of pre-contractual measures, pursuant to Art. 6, par. 1, letter b) of the Regulation. The provision of data for these purposes is mandatory, as failure to provide them would make it impossible to execute the contractual relationship;
4. Send newsletters. The legal basis of the processing is the consent of data subjects, pursuant to art. 6, para.1, letter a) of the Regulation. The provision of data for these purposes is optional, but failure to provide them would make it impossible to obtain the requested response;
5. Fulfilling obligations under laws or regulations. For this purpose, data processing is necessary to meet a legal obligation to which the controller is subject, pursuant to article 6, para.1, letter c) of the Regulation.
6. The protection of the controller in judicial proceedings. For this purpose, the processing is necessary for the pursuit of the legitimate interest of the controller pursuant to Art. 6, para. 1), letter f) of the Regulation.

SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

Personal data relating to the processing in question may also be communicated to subjects who are permitted to access your personal data by law or by secondary and/or community regulations. Your data may be communicated exclusively to competent subjects and those duly appointed to perform the services necessary to properly manage the relationship, with protection of the rights of data subjects being guaranteed.  Moreover, some data may be communicated and disseminated to internet operators which PEA & PROMOPLAST S.r.l. uses for the management of its domains.

Your personal data will not be disseminated under any circumstances.

DATA RETENTION PERIOD

We would inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period for your personal data is:

• for purposes 1-2, the time necessary to execute the requested services.
• for purpose 3, 10 years in compliance with current regulations regarding the retention of fiscal, tax and contractual documents.
• for purpose 4, until you exercise your right to cancel or revoke your consent. Your data, however, will be processed for a period of time not exceeding five years from the date of consent; once this period has expired, you will be asked to renew the consent previously given in order to continue receiving our newsletter.

RIGHTS OF DATA SUBJECTS

1. Data subjects have the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in intelligible form.
2. Data subjects have the right to obtain indications of:
3. the origin of their personal data;
4. the purposes and methods of processing;
5. the logic applied in the event of processing carried out with the aid of electronic instruments;
6. the identification details of the data controller, the data processors and the representative designated pursuant to article 5, paragraph 2;
7. the subjects or categories of subjects to whom or which the personal data may be communicated or who or which may become acquainted with said data in their capacity as designated representative(s) in the State’s territory, of data processor(s) or data subjects.
8. Data subjects have the right to obtain:
9. the updating and rectification or, where there is concern, integration of their data;
10. the cancellation, anonymisation or blocking of data processed in breach of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
11. a declaration to the effect that the operations as per letters a) and b) have been notified, including their content, to the entities to which the data were communicated or disseminated, except where this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is being protected;
12. portability of the data.
13. Data subjects have the right to object, in whole or in part:
14. for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of collection;
15. to the processing of personal data concerning them for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
16. Data subjects have the right to request the restriction of processing.

They may exercise their rights by sending an e-mail to info@plooyo.com or by sending a written request to the addresses specified above.

In addition, if data subjects consider that the processing of their data is contrary to ruling legislation, they may lodge a complaint with the Data Protection Authority pursuant to Article 77 of Regulation 2016/679.

COOKIE POLICY

This website uses different types of cookies. We use cookies to personalise content and to analyse our traffic. We also share information about the way you use our site with our Web analytics partners, who may combine it with other information you have provided them with or that they have collected from your use of their services.

Cookies are small text files that can be used by websites to make the user experience more efficient. To view the cookies on the site click here.

Cookie policy