Privacy policy

AGMOTO.COM AG sas di Accossato Giovanni, located at Via Don Eugenio Bruno 6, 10029 Villastellone (TO), VAT number IT07726670016 of TORINO

POLICY pursuant to Articles 13 and 14 of Regulation (EU) 2016/679

Updated 05/03/2025

1. WHAT DATA IS PROCESSED

• Data provided by the data subject (user who registers on the site and makes a purchase, “guest,” or other consumer accessing the site, hereinafter referred to as the "data subject").
• Data related to purchases made on the site.
• Administrative data related to payments; data concerning payments made by the user.
• Data, also provided by the data subject, contained in any complaints and reports.

The regulation establishes specific protections for data related to criminal convictions and offenses and/or special categories of data such as: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, as well as genetic data, biometric data intended to uniquely identify a person, data related to health or sexual life or sexual orientation; these data can only be processed within the context of relationships with the data subjects, particularly in procedures related to complaints or other contacts following purchases. The data subject may communicate such personal data. Special care is taken to acquire only the necessary data and carry out treatments strictly required to meet the requests of the data subjects and only if relevant and necessary for the purposes outlined below.

1. SOURCE OF THE DATA

Personal data may be provided and updated:

• By the data subject themselves.
• By AG sas of A.G.
• Through intermediaries authorized by the data subject (family members, organizations, companies, associations, etc.) within the sales and delivery process of purchased products.
• From sources freely accessible to anyone.

1. WHY THE DATA IS PROCESSED – Purposes of Processing

The data will be processed for the following purposes:

1. a) To allow the data subject to access the purchasing procedures of the products offered on the site, ensuring their security.
   b) To comply with obligations arising from laws, regulations, or community rules; fulfilling contractual, accounting, and tax obligations, managing the sales process, and related administrative tasks (collections, refunds, etc.).
   c) To comply with provisions issued by judicial authorities and public bodies with the relevant powers.
   d) To manage records, addresses, and internal statistical calculations.
   e) To potentially protect a legitimate interest, enforce or defend a right.
   f) To fulfill the data subject’s requests.
   g) Unless otherwise stated by the data subject, the email address provided during purchase will be used by AG Accossato sas for sending courtesy communications and/or informational material/offers related to similar or related products and services.
   h) Only with prior consent, for direct marketing activities, promotional activities, sending informational and advertising materials, event invitations, offers, or personalized advertisements.

3.1 LEGAL BASIS FOR DATA PROCESSING

The data may be processed for the following reasons, in relation to the purposes indicated:

• As necessary to fulfill contractual obligations with the data subject and related legal requirements (especially for the purposes described in point 3, letters a, b, c).
• As necessary for the pursuit of legitimate interests by the data controller, including: (1) correct organization and planning of activities and improving service quality, (2) protecting assets and credit, (3) asserting or defending a right in legal proceedings or evaluating whether a right should be asserted.
• For processing personal data for direct marketing purposes, always considering the consent given by the data subject.

1. HOW THE DATA IS PROCESSED – Processing Methods

Data processing may take place using paper, computer, and telematic tools and will include all operations or sets of operations necessary to achieve the applicable purposes, ensuring the utmost confidentiality, relevance, and limitation to the purposes described above.

1. DATA RETENTION PERIOD

Personal data will be retained only for the periods allowed/required by applicable regulations for the specific purpose for which the data is processed. In particular:

• Profiling data, if consented by the data subject, and data processed for commercial purposes (email addresses and other contact details) will be retained for 18 months following the last contact/sending or until consent is revoked, after which they will be anonymized and used for statistical purposes.
• Credit card data necessary to demonstrate the correctness of the purchase procedures will be retained for 90 days, the maximum period within which disputes can be raised, also for the protection of the data subjects.

1. WHOM THE DATA CAN BE COMMUNICATED TO – Scope of Communication

Personal data may be communicated or made available to:

• Partners with whom AG SAS operates retail sales services and from whom a license is granted to do so. In this case, the partner is an independent data controller.
• Affiliated companies (parent companies, subsidiaries, associated companies, companies under the same audit) for administrative and general accounting purposes.
• Other public bodies authorized to access the data under law, regulations, or community rules, within the limits of such laws.
• Banks, credit institutions, data processing companies, and credit card issuers, limited to accounting and fiscal data for activities strictly related to the execution and management of administrative obligations.
• Entities designated by the data subject or by people acting on their behalf.
• Other entities (companies/consultants) who need to access specific data for ancillary activities related to the purposes outlined above, as necessary to perform the tasks entrusted to them, such as IT system management, financial services, delivery services (shipping/courier companies).

All communications described above will be limited to the necessary data for the entity/recipient (who will remain an independent data controller for subsequent processing) to fulfill their duties and/or achieve the objectives of the communication, always in relation to the purposes outlined above.

6.1 TRANSFER ABROAD

Personal data will NOT be transferred to third-party sites outside the European Union, but only to the country where the data subject resides or is located, based on the legal reasons outlined in point 3.1 and in compliance with applicable legislation.

1. DISSEMINATION

Unless otherwise communicated to the data subjects and/or specific consent requests are made, personal data will not be disseminated.

1. DATA COMMUNICATION AND UPDATING – When is it mandatory to provide data?

Providing and updating data is mandatory only to fulfill legal, contractual, or fiscal obligations related to purchases made on the site (see previous Section 3, points (a), (b), and (c)). Failure to comply with this requirement would make it impossible to fulfill the requests of the data subject. Clearly, indications are always provided on the data that must be communicated for the aforementioned purposes (via forms on the website).

1. DATA CONTROLLER

The data controller for the sale and delivery management of products (see Section 3, points (a), (b), (c), (g), and (h)) is AG sas di Accossato Giovanni, located at Via Don Eugenio Bruno 6, 10029 Villastellone (TO), VAT number IT07726670016 of TORINO.

Any questions regarding this policy can be sent to gdpr@accossato.eu.

1. RIGHTS OF THE DATA SUBJECT

The data subject has the right to:

• Request access, modification, or deletion of personal data from the data controller (if no longer necessary, incomplete, incorrect, or collected in violation of the law) or to limit or oppose the processing of their personal data.
• Receive or transfer any information concerning themselves to themselves or a designated third party in a structured format if the processing is carried out through automated means (computerized).
• Withdraw their consent at any time to the processing of data done on this basis (without affecting the legality of processing based on consent before its withdrawal).
• File a complaint if their requests are not satisfactorily addressed or if deemed necessary, to the Italian Data Protection Authority (http://www.garanteprivacy.it): 
• Piazza Venezia 11, 00187, Rome.
• Phone switchboard: (+39) 06696771.
• Email: protocollo@gpdp.it.
• Certified email: protocollo@pec.gpdp.it.

To exercise their rights, data subjects can contact:

• AG SAS at the email address gdpr@accossato.eu regarding processing related to the registration process on the website, product sales, or data processing by AG SAS.

Data subjects must be aware that requests cannot be answered in case of uncertainty about the identity of the requester.