Privacy & Cookies

Privacy Policy

Policy on personal data processing based on REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR)

Introduction

This information notice concerns the website "http://www.inastra.com” (Website) and is provided by ScentFactory srl, with registered office in via Roma 344 Ispra (VA) IT, Chamber of Commerce of Varese, VAT number 11227810964 (Company), as Data Controller.

Purchasing through the Website

The Company shall acquire and process your personal data to process your request to purchase through the Website.

Registration

The Company shall process the personal data provided by you to enable you to register with the Website and make use of the services restricted to registered users.

Marketing

If you provide your explicit consent, the Company shall process your personal data to send you promotional communications and/or newsletter regarding products offered for sale by the Company or by third parties.

Profiling

If you provide your explicit consent, the Company shall process your personal data for the analysis of your consumer choices and purchasing habits (known as “profiling”), through a study of the type and frequency of your online purchases, in order to send newsletter and/or advertising material of the Company or third-parties that may be of particular interest to you.

Soft spamming

The Company is entitled to sale its products using the email that you communicated during your first purchase on the Website, if this product is similar of the first sale (soft spamming). You may at any time notify the Company of your refusal to receive this type of communication.

***

Pursuant to the GDPR, the Seller shall process the personal data provided by you as indicated in this privacy policy.

Article 1. Purpose of the processing. Legal basis. Mandatory or optional nature of data provision and consequences of any refusal.

The Company shall process the personal data provided by you for the following purposes:

a. to enable you to register with the Website and make use of the services restricted to registered users and for administrative/accounting purposes. The legal basis for the processing is Company’s commitment to be compliance with a legal obligation or to take steps at the request of the data subject prior to entering into a contract, as the case may be;

b. in the case of the execution of an online purchase order, to allow the conclusion of the purchase contract and the proper execution of transactions related to the same (and, where necessary, to fulfil tax obligations). The legal basis for the processing is Company’s commitment to be compliance with a legal obligation or to perform a contract to which the data subject is party;

c. limited to the email address provided by you when purchasing products offered on the Website, to enable the direct sale of similar products (soft spamming), without requiring your express and prior consent and provided that you do not exercise your right to object. The legal basis for the processing is the Company's legitimate interest to perform these activities. This legitimate interest is equal to the user's interest to riceve "soft-spam" comunication;

d. if you provide your explicit consent, for the Company to send you newsletter and for market research purposes also aimed at evaluating the level of customer satisfaction and to send you promotional communications in relation to the products of the Company and / or third-parties, by email (marketing purposes); if you provide your explicit consent, for the analysis of your consumer choices and purchasing habits (known as “profiling”), by the Company, through a study of the type and frequency of your online purchases, in order to send informative and/or advertising material about products of the Company and / or third-parties, that may be of particular interest to the user, by email (profiling purposes). The legal basis for the processing is your consent;

e. to respond to your requests through the customer care service. The provision of data is purely optional. However, as the said processing is necessary in order to respond to your request, your refusal to provide the relevant data will prevent you from obtaining answer from the customer care of the Company. The legal basis for the processing is the Company's legitimate interest to perform these activities. This legitimate interest is equal to the user's interest to use the customer care service of the Website;

f. in order to answer to your requests by email. The provision of data is purely optional. However, as the said processing is necessary in order to respond to your request, your refusal to provide the relevant data will prevent you from obtaining answer from the customer care of the Company. The legal basis for the processing is the Company's legitimate interest to perform these activities. This legitimate interest is equal to the user's interest to receive answer by the Company.

The provision of data for the purposes set out in at Point a) and b) is purely optional. However, as the said processing is necessary in order to provide the online purchasing your refusal to provide the relevant data will prevent you from completing an online purchase. Consent to marketing and profiling purposes is purely optional. Failure to consent will have the following consequences.

Failure to consent to the processing of personal data for marketing purposes will prevent you to receive promotional communication and newsletter regarding products of the Company and/or third-parties and will prevent the Company to carry out market research purposes aimed at evaluating the level of customer satisfaction.

Failure to consent to the processing of personal data for profiling purposes will prevent the Company from studying the type and frequency of your online purchases, in order to send to you newsletter and/or advertising material that may be of particular interest to you regarding products of the Company and/or third-parties.

It is understood that the Company may use your personal data to comply with legal obligations and to perform the purchase contract.

If you are a register-user, you may revoke any consent granted for the purposes described above through your personal account.

You may revoke your consent using the relevant link indicated in any promotional email sent by the Company.

If you have registered on the Website, you may in any case modify your consent for the above-mentioned purposes at any time by accessing your personal page.

We remind you that you can also object to the processing of your personal data via a specific link at the bottom of any promotional email sent by the Data Controller.

Social network

You may register and/or access to the Website using Facebook and Instagram. You give consent to the relevant social network to share with the Company your personal data necessary to register and/or access to the Website.

Payment Card Data

In order to make a payment through one of the payment cards offered on the Website, you shall enter the data of the payment card directly on a page that will communicate through secure encryption protocol with the payment service provider (which will act as an independent data controller). These data will not pass through the server of the Company which, therefore, will not process such data in any way.

To provide the above-indicated data is necessary to make purchases on the Website.

PayPal

You may make purchases using PayPal. In this event, you will be directed to a page outside the Website, where you must indicate the personal data requested by PayPal to complete the purchase process (PayPal will act as a data controller). These data will not pass through the server of the Company which, therefore, will not process such data in any way. To provide the above-indicated data is necessary to make purchases on the Website. Special Categories of Personal Data. Judicial Data.

The Company does not process special categories of personal data nor judicial data.

The Company does not process special categories of personal data nor judicial data.

Article 2. Methods of Processing Personal Data

The processing of your personal data will be carried out by electronic or automated means, in the manner and with the appropriate tools to ensure the security and confidentiality in accordance with the GDPR.

The information and methods of processing will be relevant and not excessive in relation to the type of services provided. Data will be managed and protected in environments where access is under constant control.

Article 3. Data Disclosure

For the purposes described in this privacy policy, the personal data provided by you may be disclosed or communicated to the following parties:

• to all those parties (including Public Authorities) that have access to the data by virtue of regulatory or administrative measures
• to third parties in charge of printing, enveloping, shipping (e.g., suppliers, even with reference to drop shipping activity) and/or delivery and/or collection of products purchased through the Website
• to forwarding agents and to parties responsible for the delivery and/or collection of the products purchased
• to parties who process online payment transactions
• to companies, consultants or professionals in charge of the installation,
• to companies, consultants or professionals in charge of the installation, maintenance, updating and the management of the Company's hardware and software or which the Company uses for the provision of its services
• to the companies that send the newsletters and/or other informative communications transmitted on behalf of the Company
• alla società incaricata della effettuazione dell’attività di customer care

• to all those public and/or private parties, natural and/or legal persons (legal, administrative and tax consultancy firms), where the communication is necessary or of practical use for the correct fulfilment of contractual obligations undertaken in relation to the services provided through the Website, and of legal obligations.
• • to all those public and/or private parties, natural and/or legal persons (legal, administrative and tax consultancy firms),

where the communication is necessary or of practical use for the correct fulfilment of contractual obligations undertaken in relation to the services provided through the Website, and of legal obligations.

Your data may be disclosed only in anonymous and aggregated form for statistical or research purposes.

Article 4. Data Controller

You can contact the Company, as Data Controller, at the following addresses:

ScentFactory srl via Roma 344 Ispra (VA) IT Email: info@inastra.com
By selecting the contact form on the Website.

Article 5. Data Storage

Your personal data will be stored only for the period of time required to ensure the correct provision of the services offered, in any case not beyond the legal limits.

If you close your account, your personal data will be stored for administrative purposes for a period not exceeding 90 days, without prejudice to any legal obligations regarding the storage of accounting documents or for public security purposes.

In any case, it is understood that personal data will be stored and processed for marketing and profiling purposes for the period of time allowed by law and the provisions of the Italian Data Protection Authority. At the end of this period, the Company may ask you to renew your consent to the processing of your data or to make them anonymous and keep them only for statistical or historical purposes.

Article 6. Rights of the Data Subject

Pursuant to GDPR (Article 13), you have the right to:

• request access to and rectification or erasure of personal data or restriction of processing or object to their processing, in addition to the right to data portability
• withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to the withdrawal
• lodge a complaint before a supervisory authority (for instance, the Italian Data Protection Authority).

The above-mentioned rights may be exercised by making a request to at the contacts indicated above.

Article 7. Amendments

The Company reserves the right to change this privacy policy at any time, giving suitable notice to users and ensuring in any case an adequate and similar protection of personal data. In order to view any changes, you are invited to regularly consult this privacy notice.

INFORMATION NOTICE ON COOKIES

Introduction

This information notice concerns the website "http://www.inastra.com” (Website) and is provided by ScentFactory srl, with registered office in via Roma 344 Ispra (VA) IT, Chamber of Commerce of Varese, VAT number 11227810964 (Company), as Data Controller.

What cookies are and why they are used

A cookie is a text file that a website visited by a user sends to his or her device (computer or mobile device, such as a smartphone or a tablet), where it is saved in order to be re-sent to said website at the user’s next visit.

Cookies are classified as follows:

• on the basis of the party installing them, according to whether they are installed by the manager of the website visited ("first-party cookies") or other parties ("third-party cookies");
• on the basis of the purpose served by the cookie: some cookies enable a better browsing experience, by storing some of the user’s choices, for instance the language ("technical cookies"), other cookies enable the monitoring of the user’s browsing activities, also for the purpose of sending advertising materials and/or offering services in line with his or her preferences ("profiling cookies").

It is necessary to obtain the user’s prior consent exclusively in connection with the use of profiling cookies.

The Website adopts first-party technical cookies and first-party profiling cookies together with profiling third-party cookies.

The Company takes responsibility only with reference to cookies adopted by it.

How to give consent to the use of profiling cookies

When you visit the Website for the first time, you can give consent to the use of profiling cookies by:

• clicking the button Accept and Close inserted in the banner.

If you do not perform any of the actions described in the banner and from the banner you access to this cookie policy, you can consent and / or deny consent, as the case may be, to the installation of cookies by clicking on the appropriate link in the "privacy information and consent form" column of the table below, if any. Attention: if you fail to do so you give consent for all cookies.

If you do not perform any of the actions described in the banner and from the banner you access to this cookie policy, you can consent and / or deny consent, as the case may be, to the installation of cookies by clicking on the appropriate link in the "privacy information and consent form" column of the table below, if any. Attention: if you fail to do so you give consent for all cookies.

Find out how to manage cookie settings for your browser:

Internet Explorer
Click the following link: http://windows.microsoft.com/it-it/internet-

explorer/delete-manage-cookies#ie=ie-11.

Google Chrome

Click the following link:
link: https://support.google.com/accounts/answer/61416?hl=it.

Mozilla Firefox

Click the following link:
link: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%2 0cookie.

Safari

Click the following link:
link: https://support.apple.com/kb/PH19214?viewlocale=it_IT&locale=en _US.

In case of devices such as smartphones, tablets, etc., we ask you to verify that each browser on each device is set to allow you to express your preferences regarding cookies. You can also set third-parties cookies accessing to the website www.youronlinechoices.com (the system operates with reference to the companies participating in the website). Profiling first-party cookies that require the user’s prior consent

Cookies set by the Website

First-party technical cookies that require the user’s prior consent 

Profiling third-party cookies that require the user’s prior consent 

Statistical and Analytics Cookies 

The Website uses third-party cookies, even in unbundled form, for statistical and analytical purposes. 

Statistical and Analytics Cookies 

The Website uses third-party cookies, even in unbundled form, for statistical and analytical purposes. 

Marketing and Retargeting Profiling Cookies 

The Company uses advertising profiling cookies to deliver advertising based on the interests expressed by the user through internet browsing. 

The Website uses third-party cookies, even in unbundled form, for statistical and analytical purposes. 

Further Information
With reference to the cookies set up directly by the Site, the Company specifies the following:

• the data are collected only for the purposes and for the duration indicated above and are processed electronically;
• technical cookies do not require the user's consent as they are necessary to allow the navigation within the WebSite and its proper use. In case of removal of technical cookies through the settings of the browser, navigation within the Website may not be possible;
• the data collected by first party cookies may be communicated to persons acting on behalf of the Company as data processors or persons in charge of processing, for purposes related to those described above. With respect to such data, we remind you that you can exercise your rights under the GDPR, as better described in the Information on the processing of personal data, by selecting the link "Privacy Policy".

With regard to the Company's "profiling" cookies, it should be noted that deactivating them will not make it impossible to navigate within the Site.

With reference to third party cookies, the purposes of these cookies, the logic behind their processing and the management of user preferences with respect to cookies are not determined and / or verified by the Company but by the third party that provides them, as indicated above. However, regardless of the fact that the Company believes that the user has validly expressed his/her consent to the installation of cookies, including those of third parties, the Company undertakes to provide support to users who request to know how to exercise their consent / selective refusal or to delete cookies from their browsers.