Privacy Policy – Customer Support Contact

Below is the information required by the GDPR regarding the processing of personal data provided by completing the online “Contact Us” form and using the related customer care service.

1. Identity and contact details of the data controller

Inticom S.p.a., tax code and VAT no. 02649140122, with registered and operational office at Via Carlo Noè 22, 21013 – Gallarate (VA), e-mail address privacy@yamamay.com, certified e-mail address inticomspa@certimprese.it (hereinafter, the “Controller”).

2. Purposes of processing, legal bases and data retention periods

why are personal data processed?	what is the legal basis that makes the processing lawful?	how long do we retain personal data?
To respond to the request for information or assistance.	The performance of a contract to which the data subject is party.	The data will be retained for the time necessary to handle the request and in any case for no longer than 1 year, unless further periods are required by law.

Once the retention periods indicated above have expired, the Data will be destroyed, erased or anonymised, compatibly with the technical deletion and backup timelines.

3. Provision of data

The provision of data marked with an asterisk is necessary for the proper management of the request; therefore, failure to provide such data will prevent the request from being sent.

4. Categories of recipients.

The data may be disclosed to third parties acting as independent data controllers, such as public authorities and professional firms.

The data may also be processed, on behalf of the Controller, by third parties appointed as Data Processors pursuant to Article 28 of the GDPR, such as natural and/or legal persons carrying out activities functional to the purposes indicated above (e.g. IT and customer care services), also operating outside the European Union (“EU”).

In particular, the data will be transferred to the company responsible for the management and maintenance of the Site, namely Shopify International Limited, located in Ireland, and may also be transferred to its sub-processors established outside the EU. Where such sub-processors are established in countries lacking an adequacy decision pursuant to Article 45 of the GDPR, the standard contractual clauses adopted by the European Commission pursuant to Article 46, paragraph 2, letter c) of the GDPR will be used as appropriate safeguards, with the possible provision of “supplementary measures” designed to ensure a level of protection substantially equivalent to that required by EU law.

Furthermore, the data are processed by the Controller’s employees — belonging to the company functions responsible for pursuing the purpose indicated above — who have been expressly authorised to process the data and have received appropriate operating instructions.

5. Rights of the data subject

The data subject may exercise the rights referred to in Articles 15 to 22 of the GDPR, where applicable, and, in particular, obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to such data and to the information referred to in Article 15, rectification of inaccurate data, completion of incomplete data, erasure of data in the cases provided for by Article 17, and restriction of processing in the cases provided for by Article 18 of the GDPR. Furthermore, where the processing is based on consent or on a contract and is carried out by automated means, the data subject has the right to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to transmit those data to another controller without hindrance (“right to data portability”).

To exercise these rights, the data subject may contact the Controller at the contact details indicated in paragraph 1.

The data subject has the right to lodge a complaint with the competent Supervisory Authority in the Member State in which he or she habitually resides or works, or in the State in which the alleged infringement occurred.