Dear Customer,

in accordance with article 13 EU Regulation  2016/679 (hereinafter, “GDPR”), we inform you that the processing of data by you provided will be carried out with methods and procedures aimed at ensuring that the processing itself is compliant with fundamental rights and freedoms, with special attention to confidentiality and security, to personal identity and the right of data protection.

Remember that “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (article 4 GDPR).

Object of processing, data origin and legal basis for the processing

The data processed by PARCODIYELLOWSTONE S.r.l. refer to:

– personal data (such as name and surname and nationality);

– contact data (such as e-mail address, home address and telephone number);

– data relating to payments made (such as debit/credit card number).

Legal basis for the processing

The legal basis for such processing is its express and unequivocal consent, execution of a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the same (ex art. 6.1, lett. A) B) of the GDPR). The personal data held by the Data Controller are collected directly from the data subject and only possibly may come from third parties, registers or public lists. 

Purposes of the processing

The personal data and any changes that you will communicate in the future to PARCODIYELLOWSTONE S.r.l. are collected and processed for the following exclusive purposes:

(a) Carrying out the activity of purchasing from this website.

Modalities of the processing

The treatment is limited to the following operations and in the following ways: 

– Collection of data from the interested party, by filling in online forms;

– Registration and elaboration on computerized support;

– Organization of the archives in a mainly automated form, through company applications and computerized records;

– Communication of your data to third party partners of the data controller.

The data will be processed using instruments that guarantee confidentiality, integrity and availability, in accordance with appropriate technical and organizational security measures provided by the GDPR. 

The processing is carried out on paper and by means of information systems and / or automated and will include all the operations or set of operations provided for in Article 4 of the GDPR and necessary for the processing in question, including communication to the persons in charge of the processing itself. The data in question will not be disseminated, while they will or may be communicated to subjects, public or private, operating within the scope of the purposes described above. 

Data Retention

The Data Controller will process your personal data for the time necessary to fulfill the above purposes and in any case for a period not exceeding 10 years from their collection.

Access to processing

The data will be made accessible, for the purposes referred to in paragraph n. 3:

-To employees/collaborators in their quality of authorized to the treatment, after appropriate appointment;

-To third parties who carry out activities in outsourcing on behalf of the Owner.

Data transfers

The management and storage of personal data will be carried out on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors. The data will not be transferred to outside the European Union.

Nature of providing data and consequences of refusing to answer

The conferment of data for the purposes referred to in paragraph 3.a) is mandatory. In their absence, it will not be possible to proceed with the purchase.

Rights of the data subject

According to the provisions of the GDPR, the interested party has the following rights towards the Data Controller:

• obtain confirmation of whether or not personal data processing is being processed and, in this case, to obtain access to personal data (Right of access article 15);
• obtain the rectification of inaccurate personal data concerning him without undue delay (Right to rectification article 16);
• obtain the erasure of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if certain conditions are met (Right to be forgotten article 17);
• obtain the restriction of processing in certain cases (Right to restriction article 18);
• receive the personal data concerning you provided in a structured, commonly used and readable form by automatic device and have the right to transmit such data to another Data Controller, without impediments by the data controller who provided them, in certain cases (Right to data portability article 20);
• object at any time, for reasons connected with your particular situation, to the processing of your personal data (Right to object article 21);
• receive without undue delay communication of the personal data breach suffered by the Data Controller (article 34);
• withdraw the consent expressed at any time (withdraw of the consent article 7).

Where applicable, in addition to the rights referred to articles 16-21 GDPR the data subject has the right to lodge a complaint with the Supervisory Authority.

Modalities of exercising your rights

The data subject can contact the Data Controller at email address: hello@parcodiyellowstone.it

Data Controller

Data Controller is Via Gianfranco Zuretti 35 – 20125 Milano – Tel. 0236799381 – email: hello@parcodiyellowstone.it

The list of data processors is available at the registered office of the owner mentioned above.

Update this information

This information may change. Any substantial changes will be communicated through our website.