GRAAD Privacy Policy

Personal data collected for the following purposes and by using the following services:

  • Contact the user

    • Contact form and Mailing List or Newsletter

      Personal data: surname, email and name

  • Payments management

    • PayPal

      Personal data: different kinds of data according to what specified by the privacy policy of the service

  • Addresses management and transmission of email messages

    • Mandrill

      Personal data: usage data and email

  • Interactions with social networks and external platforms

    • +1 button and social widgets of Google+, Like button and social widgets of Facebook and Tweet button and social widgets of Twitter

      Personal data: cookies and usage data

  • Registration and login

    • Direct registration

      Personal data: postal code, city, national identity number, surname, date of birth, email, address, country, name, phone number, VAT number, password, state, business name, workplace, username and different kinds of data

  • Statistics

    • Google Analytics

      Personal data: cookies and usage data

  • Visualization of content from external platforms

    • Google Maps widgets

      Personal data: cookies and usage data

Further information about personal data

Online sale of goods and services

Collected personal data are used in order to supply services to the user or to sell products, including the payment and the potential delivery.
Personal data collected to conclude the payment can be those regarding the credit card, the bank account used for the bank transfers or other available means of payments. Payment data collected by this application vary based on the selected payment system.

Contact information

Data owner

Pianeta Hobby snc - Via leoncavallo 15 - 20131 Milano - Italia

Email address of the owner: info@pianetahobby.it

Complete policy

Types of collected data

Among the personal data collected by this application, autonomously or via third parties, there are: name, surname, email, cookies, usage data, date of birth, telephone number, address, username, password, business name, tax code, VAT code, country, state, area, ZIP code, city, workplace and various kinds of data.

Complete details about every kind of collected data are provided in the dedicated sections of this privacy policy or via specific informative texts shown before the collection of the data themselves.
Personal data can be freely provided by the user or, in case of usage data, collected automatically while using this application.
If not otherwise specified, all the data requested by this application are mandatory. If the user refuses to transmit them, it may be impossible for this application to provide the service. In cases where this application indicates some data as discretionary, the users are free to abstain from transmitting these data, without this having any consequence on the availability of the service or its usability.
The users who might have doubts about which data are mandatory are advised to contact the owner.
The potential use of cookies - or other tracking tools - by this application or by the owners of third party services used by this application, where not otherwise specified, has the purpose of providing the service requested by the user, in addition to further purposes described in this document and in the cookie policy, if available.

The user takes the responsibility for the personal data of third parties obtained, published or shared via this application and guarantees that they have the right to communicate them or disseminate them, freeing the owner from any responsibility towards third parties.

Methods and place of collected data processing

Processing methods

The owner adopts the appropriate security measures intended to prevent unauthorized access, dissemination, alteration, or destruction of personal data.
The processing is implemented using computerized and/or telematic tools, with organizational methods and measures strictly connected to the indicated purposes. Besides the owner, in some cases, other parties involved in the organization of this application may have access to the data (administrative and sales staff, marketing, attorneys, systems administrators), that is third parties (such as suppliers of technical services, shipping services, hosting providers, IT companies, communication agencies) also appointed by the owner, when necessary, in charge of the processing. The updated list of those in charge can always be requested from the owner of the processing.

Legal basis of the processing

The owner processes personal data related to the user in the case that one of the following conditions apply:

  • the user has given consent for one or more specific purposes; note: in some jurisdictions the owner may be authorized to process personal data without the need for the user's consent or another one of the legal bases specified below, as long as the user does not oppose this processing (opt-out). This is however not applicable if personal data processing is regulated by the European legislation on personal data protection;
  • the processing is necessary to fulfill a contract with the user and/or to fulfill precontract measures;
  • the processing is necessary to satisfy a legal obligation to which the owner is subject;
  • the processing is necessary to fullfil a public interest task or to exercise public authority appointed to the owner;
  • tracking is necessary to pursue a legitimate interest of the owner or third parties.

It is in any case always possible to request from the owner that the effective legal basis of every processing is clarified and in particular that it is specified whether the processing is based on the law, expected by a contract or necessary to stipulate a contract.

Place

Data are processed at the operative offices of the owner and in any other place where the parties involved in the processing are located. For further information, contact the owner.
The user's personal data may be transferred to a different country than the one where the user is located. To obtain further information about the place of the processing, the user may refer to the section dedicated to the details of personal data processing.

The user has a right to obtain information about the legal basis of the transfer of data outside of the European Union or to an international organization under public international law or consisting of two or more countries, such as for example the UN, as well as about the security measures implemented by the owner to protect the data.

If one of the transfers just described is carried out, the user may refer to the respective sections of this document or request information from the owner by contacting them via the contacts provided at the beginning.

Retention period

Data are processed and stored for the time required by the purposes for which they have been collected.

Therefore:

  • personal data collected for purposes related to the execution of a contract between the owner and the user will be stored until the execution of the same contract is completed.
  • Personal data collected for purposes related to the legitimate interest of the owner will be stored until the same interest is fulfilled. The user may obtain further information about the legitimate interest pursued by the owner in the dedicated sections of this document or by contacting the owner.

When the processing is based on the consent of the user, the owner may store the personal data for a longer time until the same consent is revoked. Moreover the owner may be obliged to store the personal data for a longer time in compliance with a legal obligation or by order of the authorities.

At the end of the retention period the personal data will be deleted. Hence, at the expiration of this period, the right to access, delete, modify the data and the right to data portability may no longer be exercised.

Purposes of the processing of collected data

The user's data are collected to allow the owner to provide their services, as well as for the following purposes: to contact the user, visualization of contents from external platforms, statistics, interactions with social networks and external platforms, registration and authentication, management of the payments, management of the addresses and email messages.

To obtain further detailed information on the purposes of the processing and the personal data specifically needed for each purpose, the user may refer to the dedicated sections of this document.

Details on personal data processing

Personal data are collected for the following purposes and using the following services:

  • To contact the user

    Contact form (this application)

    The user, by filling in their data in the contact form, agrees to their usage to comply with requests of information, quotes, or any other service indicated in the form's header.

    Collected personal data: surname, email and name.

    Mailing List or Newsletter (this application)

    By registering to the mailing list or the newsletter, the user's email address is automatically added to a list of contacts to which email messages containing information related to this application, also commercial and promotional, may be sent. The user's email address may also be added to this list as result of the registration to this application or after a purchase.

    Collected personal data: surname, email and name.

  • Management of the payments

    Services for the management of the payments allow this application to process payments by credit card, bank transfer or other tools. The data used for the payments are obtained directly by the managing institution of the requested payment service without being processed by any means by this application.
    Some of these services may also automatically allow preprogrammed messages to be sent to the user, such as emails containing invoices or notifications about the payment.

    PayPal (Paypal)

    PayPal is a payment service provided by PayPal Inc., which allows the user to make online payments.

    Collected personal data: various types of data according to what specified by the privacy policy of the service.

  • Management of addresses and emails

    This type of services allows the management of a database of email contacts, telephone contacts or contacts of any other kind, used to communicate with the user.
    These services may also allow the collection of data related to the date and the time of visualization of messages by the user, as well as the interaction between them and the user, such as information about the clicks on the links inserted in the messages.

    Mandrill (The Rocket Science Group, LLC.)

    Mandrill is a service for the management of addresses and email messages provided by The Rocket Science Group, LLC.

    Collected personal data: usage data and emails

    Place of the processing: USA – Privacy Policy.

  • Interaction with social networks and external platforms

    This type of services allows the interaction with social networks, or with other external platforms, directly from the pages of this application.
    The interactions and the information obtained by this application are in any case subject to the privacy settings of the user on each social network.
    In the event that a service for the interaction with social networks is installed, even when the users do not make use of the service, it may still collect traffic data related to the pages on which it is installed.

    +1 button and Google+ social widgets (Google Inc.)

    The +1 button and the Google+ social widgets are services for the interaction with the Google+ social network, provided by Google Inc.

    Collected personal data: cookies and usage data.

    Place of the processing: USA – Privacy Policy.

    Like button and Facebook social widgets (Facebook, Inc.)

    The like button and the Facebook social widgets are services for the interaction with the Facebook social network, provided by Facebook, Inc.

    Collected personal data: cookies and usage data.

    Place of the processing: USA – Privacy Policy.

    Tweet button and social widgets of Twitter (Twitter, Inc.)

    The Tweet button and the social widgets of Twitter are services for the interaction with the Twitter social network, provided by Twitter, Inc.

    Collected personal data: cookies and usage data.

    Place of the processing: USA – Privacy Policy.

  • Registration and authentication

    With the registration or the authentication the user allows the application to identify them and to give them access to the dedicated services.
    Depending on what stated below, registration and authentication services may be provided with the help of third parties. When this happens, this application may access some data stored by the third party service used for the registration or the identification.

    Direct registration (this application)

    The user signs up by filling in the registration form and providing their own personal data directly to this application.

    Collected personal data: ZIP code, city, tax code, surname, date of birth, email, address, country, name, telephone number, VAT code, password, area, business name, workplace, state, username and various types of data.

  • Statistics

    The services in the following section allow the owner of the processing to monitor and analyze traffic data and are used to keep track of the user's behavior.

    Google Analytics (Google Inc.)

    Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google utilizes the collected personal data in order to track and analyze the use of this application, draft reports and share them with the other services developed by Google.
    Google may use the personal data to personalize and put into context the advertisements of its own advertising network.

    Collected personal data: cookies and usage data.

    Place of the processing: USA – Privacy PolicyOpt Out.

  • Visualization of content from external platforms

    This type of services allows the visualization of content hosted on external platforms directly from the pages of this application and the interaction with them.
    In the event that a service of this type is installed, even when the users do not make use of the service, it may still collect traffic data related to the pages on which it is installed.

    Google Maps widgets (Google Inc.)

    Google Maps is a service for the visualization of maps managed by Google Inc. which allows this application to integrate such contents with its own pages.

    Collected personal data: cookies and usage data

    Place of the processing: USA – Privacy Policy.

Further information about personal data

Online sale of goods and services

The collected personal data are used to provide services to the user or for the sale of products, including payment and the potential delivery. The personal data collected to complete the payment may be those of the credit card, the bank account used for the transfer or other accepted payment tools. Payment data collected by this application depend on the used payment system.

User's rights

The users can exercise certain rights related to the data processed by the owner.

In particular, the user has a right to:

  • revoke the consent in any moment. The user may revoke the consent to the processing of their own personal data previously expressed.
  • oppose the processing of their data. The user may oppose the processing of their data when this is carried out on a different legal basis from the consent. Further details on the right to oppose are indicated in the section below.
  • access to their data. The user has a right to obtain information about the data processed by the owner, about certain aspects of the processing and to receive a copy of the processed data.
  • verify and request a modification. The user may verify the correctness of their own data and request an update or a correction. 

  • obtain a limitation to the processing. When certain conditions are met, the user may request a limitation to the processing of their own data. In this case the owner will not process the data for any other purpose except their conservation.
  • obtain the deletion or removal of their own personal data. When certain conditions are met, the user may request the deletion of their own data by the owner.

  • receive their own data or have them transferred to another owner. The user has a right to receive their own data in a structured format, of common use and readable by an automatic device and, when technically possible, to obtain the transfer to another owner without impediments. This arrangement may be carried out when the data are processed with automatic tools and the processing is based on the user's consent, on a contract of which the user is a party or on contract measures related to it.
  • file a complaint. The user may file a complaint with the personal data protection supervising authority in charge or go to court.

Details on the right to oppose

When personal data are processed in the public interest, in the exercise of public authority to which the owner is appointed or to pursue a legitimate interest of the owner, the users have a right to oppose the processing for reasons related to their particular situation.

Please note that, if the users' data are processed for direct marketing purposes, they may oppose the processing without providing any reason. To know whether the owner processes the data for direct marketing purposes the users may refer to the dedicated sections of this document.

How to exercise a right

To exercise the user's rights, the users may send a request to the owner's contacts indicated in this document. The requests are filed free of charge and handled by the owner as soon as possible, in any case within a month.

Cookie Policy

This application makes use of cookies. To know more about it and to get a detailed notice, the user may consult the Cookie Policy.

Further information about the processing

Legal defense

The user's personal data may be used by the owner in court or in the phases preparatory to this eventuality as defense from abusive use of this application or the related services by the user.
The user declares that they are aware that the owner may be obliged to reveal the data by order of the public authorities.

Specific notices

At the request of the user, in addition to information in this privacy policy, this application may provide additional contextual notices to the user related to specific services, or the collection and the processing of personal data.

System logs and maintenance

Due to operational and maintenance needs, this application and the potential third party services used by it may collect system logs, that is files which record the interactions and which may contain also personal data, as the user's IP address.

Information not in this privacy policy

Further information related to personal data processing may be requested in any moment from the owner of the processing by using the provided contacts.

Response to "Do not track" requests

This application does not support "Do not track" requests.
To find out whether the potentially used third party services support them, the user is invited to consult the respective privacy policies.

Changes to this privacy policy

The owner of the processing reserves the right to make changes to this privacy policy at any moment notifying the users on this page and, if possible, on this application, and also, when technically and legally possible, by sending a notice to the users via one of the contacts of which the owner is in possession. You're therefore advised to consult regularly this page, by referring to the date of the latest update shown at the bottom.

In case that the changes affect processings whose legal basis is consent, the owner will make sure to request the user's consent again, if necessary.

Definitions and legal references

Personal data (or data)

It is considered personal data any information which, directly or indirectly, also in connection with other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data

They are the information collected automatically by this application (also by third party applications integrated with this application), including: IP addresses or domains of the computers used by the user who is connecting to this application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various time aspects of the visit (for example the time spent on each page) and the details related to the path followed on the application, with particular reference to the sequence of accessed pages, the parameters related to the operating system and the computer's settings of the user.

User

The individual who utilizes this application who, except when differently specified, coincides with the interested party.

Interested party

The natural person who the personal data refer to.

Manager of the processing (or manager)

The natural or legal person, the public authorities and any other entity who process personal data on behalf of the owner, according to what stated in this privacy policy.

Owner of the processing (or owner)

The natural or legal person, the public authorities, the service or another organism who, singularly or together with others, determines the purposes and the methods of the personal data processing and the adopted tools, including the security measures related to the operational activity and usage of this application. The owner of the processing, except when differently specified, is the owner of this application.

This application

The hardware or software tool by means of which the users' personal data are collected and processed.

Service

The service provided by this application as defined in the relative terms (if present) on this website/application.

European Union (or EU)

Except where differently specified, every reference to the European Union in this document is valid for all the current member states of the European Union and the European Economic Area.

Cookies

Small portion of data stored inside the user's device.


Legal references

This privacy notice is drafted on the basis of multiple legal systems, including the articles 13 and 14 of the EU Regulation 2016/679. Where not differently specified, this privacy notice concerns this application only.

Contact us for information and assistance!
Here are our channels

Our customer service is at your disposal from Tuesday to Saturday, from 10 a.m. to 6 p.m., via one of the following channels:

02 89 073 293

Dial the number to speak to a member of staff

info@graad.eu

Write to us for information or if you have any questions

Chat

You can also communicate with us live via chat

Newsletter

Stay in touch and keep up to date with all the news;

Utilizziamo i nostri cookies, e quelli di terzi, per migliorare la tua esperienza d'acquisto e i nostri servizi analizzando la navigazione dell'utente sul nostro sito web. Se continui a navigare, accetterai l'uso di tali cookies. Per saperne di più, consulta la nostra Politica sui Cookies.