PepperScripts

Privacy Policy and informations about Data Processing

Personal data (referred as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly product, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

The Customer retains control of the Customer’s Personal Data and remains responsible for its compliance obligations under the Applicable Data Protection Laws, including providing any required notices, information and obtaining any required consents, and for the processing instructions it gives to us. For the avoidance of doubt, Customer’s instructions for the Processing of Personal Data shall comply with Applicable Data Protection Laws. Customer shall have sole responsibility for the accuracy, quality, and legality of Personal Data and the means by which Customer acquired Personal Data.

Customer specifically acknowledges that its use of the Services will not violate the rights of any Data Subject that has opted-out from sales or other disclosures of Personal Data, to the extent applicable under GDPR.

Pursuant to Article 13 of the GDPR, we inform you that:

DATA CATEGORIES: we will process your personal data such as: personal and contact data, e-mail, necessary for the management of commercial relationships;

SOURCE OF PERSONAL DATA: The personal data in our possession are collected directly from the interested party, the Customer.

DATA CONTROLLER: The data controller is Andrea Vitale (P.IVA 03338240793, Via Abruzzi, 20068, Peschiera Borromeo (MI)) which can be contacted at info[at]pepperscripts[dot]com

PURPOSE OF DATA PROCESSING AND LEGAL BASIS: 

• Perform the requested service;
• Contact customers to remember deadlines and give information regarding previously purchased services - art.6 par1 lett.f GDPR;
• Profiling your data for statistical purposes to improve your customer experience within our services (anonimously, things added to shopping list and products purchase for statistical purpose) - art.6 par1 lett.a GDPR

DATA RECIPIENTS: Within the limits relevant to the processing purposes indicated, your data may be disclosed to:

• subjects who can access the data under the provisions of the law provided for by the law of the European Union or that of the Member State to which the Data Controller is subject;
• Companies and / or collaborators appointed as Managers by the Data Controller or for legal obligations or to fulfill your specific requests. Your data will not be disseminated in any way except in the cases provided for by law.

Licenses are provided by Hyper https://hyper.co/, which is responsible for the data it processes for the service offered.

Credit card or other means of payment information are processed by Stripe https://stripe.com/, which is responsible for the data it processes for the service offered. We have no access to this information, other then billing information.

STORAGE PERIOD: The data collected will be kept for a period not exceeding the achievement of the purposes for which they are processed (Art. 5, GDPR) or on the basis of the deadlines set by law. Data stored obsolescence verification in relation to the purposes for which they were collected is carried out periodically.

RIGHTS OF CUSTOMERS: Customer has the right to request from the Data Controller: 

• Data access, their correction or deletion, restrict said processing or the possibility of opposing the processing; 
• confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data;
• the right to request data portability, to revoke his consent. The interested party can also lodge a complaint with a supervisory authority;
• receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers;
• file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions.

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.  

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Contact

If you contact us via email info[at]pepperscripts[dot]com, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Par. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.