Privacy Policy

Privacy Policy on the Processing of Personal Data pursuant to Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 (GDPR). Effective from November 3, 2022

PRIVACY POLICY INTRODUCTION

This privacy policy complies with the provisions of the GDPR and the Privacy Code (Legislative Decree no. 196 of June 30, 2003). This document has also been prepared in accordance with the Privacy Authority’s Guidelines (particularly the Guidelines against spam issued on July 4, 2013).

Data Controller: EDEN SHIFT, VAT 09430371212, PIAZZA SAN LUIGI 11, 80123 NAPLES (NA).

Website to which this privacy policy refers: https://edenshift.com/ (Website).

The Data Controller has not appointed a DPO (Data Protection Officer). Therefore, you can submit any requests for information directly to the Data Controller.

GENERAL INFORMATION ON GDPR COMPLIANCE POLICY

This document describes how the Data Controller processes your personal data submitted on the Website, to ensure the security and ethical use of your personal data, in line with GDPR.

Below, the main purposes for processing your personal data are described, including the legal basis in agreeement with GDPR Compliance Policy, whether the provision of data is mandatory, and the consequences of not providing personal data.

Registration on the Website

The information and data requested upon registration will be used to enable you to access the Website’s reserved area and use the online services offered by the Data Controller to registered users, in agreement with Data Protection Policy.

Legal basis: The need for the Data Controller to take pre-contractual measures at the request of the data subject.

Optional provision: However, your refusal to provide the data will make it impossible to register on the Website.

Purchases on the Website

Your personal data will be processed in agreement with GDPR Compliance Policy to allow you to make purchases on the Website.

In the case of an online purchase, your data will be processed to finalize the purchase contract and correctly perform the associated operations (and, where required by regulations, to fulfill tax obligations).

• Legal basis: The obligation of the Data Controller to execute the contract or fulfill legal obligations.

Regardless of the above (and thus without your consent), the Data Controller may process your data for so-called “soft-spam” purposes under Article 130 of the Privacy Code. This means that, limited to the email address you provided during a purchase, the Data Controller will process the email to directly offer similar products/services, provided you do not object to such processing.

• Legal basis: The legitimate interest of the Data Controller to send such communications, which aligns with the user’s interest in receiving “soft-spam” communications.

Additionally, the Data Controller may send you emails reminding you to complete a purchase.

Legal basis: The legitimate interest of the Data Controller to send these communications.

Responding to Your Requests

Your data will be processed to respond to your information requests, always respecting Data Protection Policy.

Optional provision: Refusal will prevent the Data Controller from responding to your inquiries.

Legal basis: The legitimate interest of the Data Controller to address the user’s requests, which aligns with the user’s interest in receiving responses.

General Marketing

With your consent, the Data Controller may process your personal data to send advertising materials and/or newsletters regarding its own or third-party products.

Legal basis: Your consent.

Optional provision: Failure to provide consent will prevent you from receiving marketing materials and newsletters.

Profiling

With your consent, the Data Controller may process your personal data for profiling purposes, analyzing your purchasing preferences to send advertising materials and/or newsletters related to products of specific interest.

Legal basis: Your consent.

Optional provision: Refusal will prevent the Data Controller from profiling your purchasing habits or sending targeted materials.

Transfer of Data

In agreement with GDPR Compliance Policy, the Data Controller does not sell your personal data to third parties.

Pursuant to Article 13 of the GDPR, the Data Controller informs you of your right to:

Rights of the Data Subject

• Request access, rectification, or deletion of your personal data.
• Limit or object to processing.
• Exercise the right to data portability.
• Withdraw consent at any time without affecting the lawfulness of prior processing.
• File a complaint with a supervisory authority (e.g., the Data Protection Authority).

Requests can be made without formalities using the contact details provided in the introduction.

---

Changes and Miscellaneous

The Data Controller reserves the right to amend this privacy policy at any time, ensuring adequate and equivalent data protection. Changes will be notified through the Website or email in the case of significant updates.