Privacy Policy

NIC Investment & Consulting SA with registered office in Gotthardstrasse 28 – Zug, Switzerland, (hereinafter, the ” Owner “), owner of the website mailtoshop.biz (hereinafter, the ” Site “), as data controller personal data of users of the Site (hereinafter, the ” Users “) provides below the privacy policy pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, the ” Regulation ” and / or ” Applicable Regulations“) And pursuant to the Federal Act on Data Protection of June 19, 1992 (” DPA “) and the following provisions such as the Ordinance to the Federal Act on Data Protection (” DPO “) and the Ordinance on Data Protection Certification (” ODPC “) . The Data Controller takes the utmost account of the right to privacy and protection of the personal data of its Users. For any information in relation to this privacy statement, Users can contact the Data Controller at any time, using the following methods:

  The Data Controller has not identified the figure of the Data Protection Officer (RPD or DPO), as he is not subject to the designation obligation provided for by art. 37 of the Regulation.  

1. Purpose of the processing

Users’ personal data will be lawfully processed by the Data Controller pursuant to art. 6 of the Regulation for the following processing purposes:  

1. provision of the service, or to execute the request by the User to receive promotional communications (receipt of advertising material, direct sales, commercial communication and offers) and to be contacted by the Owner via e-mail to receive proposals relating to the purchase of products offered by the same Owner or from third-party companies, to receive offers, promotions and commercial opportunities of the Owner and / or third-party companies and contact the User for service reasons only. The user data collected by the Data Controller for the purposes of any registration on the Site include: name and surname, date of birth, gender, city of residence / domicile, email address, profession, gender, interests all personal information of the User possibly and voluntarily published. Unless the User gives the Data Controller a specific and optional consent to the processing of their data for the additional purposes set out in the following paragraphs, the User’s personal data will be used by the Data Controller for the exclusive purpose of ascertaining the identity of the User (also by validating the e-mail address), thus avoiding possible scams or abuses, and contacting the User for service reasons only (eg sending notifications relating to the services offered on the Site). Without prejudice to the provisions elsewhere in this privacy statement, in no case will the Data Controller make the Users’ personal data accessible to other Users and / or third parties. the User’s personal data will be used by the Owner for the exclusive purpose of ascertaining the User’s identity (also by validating the e-mail address), thus avoiding possible scams or abuses, and contacting the User for service reasons only (eg send notifications relating to the services offered on the Site). Without prejudice to the provisions elsewhere in this privacy statement, in no case will the Data Controller make the Users’ personal data accessible to other Users and / or third parties. the User’s personal data will be used by the Owner for the exclusive purpose of ascertaining the User’s identity (also by validating the e-mail address), thus avoiding possible scams or abuses, and contacting the User for service reasons only (eg send notifications relating to the services offered on the Site). Without prejudice to the provisions elsewhere in this privacy statement, in no case will the Data Controller make the Users’ personal data accessible to other Users and / or third parties.

2.administrative-accounting purposes , or to carry out activities of an organizational, administrative, financial and accounting nature, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;

3. legal obligations, or to fulfill obligations established by law, by an authority, by a regulation or by legislation and to ascertain responsibility in the event of hypothetical computer crimes against the Site.

The provision of personal data for the processing purposes indicated above is optional but necessary, since failure to provide them will make it impossible for the User to register on the Site and receive commercial communications. The personal data that are necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk in the registration form on the Site You can easily oppose further sending of promotional communications via email by clicking on the appropriate link for the withdrawal of consent, which is present in each promotional email. Once the consent has been revoked, the Data Controller will send an e-mail message to confirm that the consent has been revoked. Following the exercise of the right to object to the sending of promotional communications via email, it is possible that, for technical and operational reasons (for example, formation of the contact lists already completed shortly before the Data Controller receives the opposition request ) you continue to receive some additional promotional messages. Should you continue to receive promotional messages after 24 hours have elapsed from the exercise of the right of opposition, please report the problem to the Data Controller, using the contacts indicated in paragraph 5 below. formation of the contact lists already completed shortly before the Data Controller receives the opposition request) you continue to receive some additional promotional messages. Should you continue to receive promotional messages after 24 hours have elapsed from the exercise of the right of opposition, please report the problem to the Data Controller, using the contacts indicated in paragraph 5 below. formation of the contact lists already completed shortly before the Data Controller receives the opposition request) you continue to receive some additional promotional messages. Should you continue to receive promotional messages after 24 hours have elapsed from the exercise of the right of opposition, please report the problem to the Data Controller, using the contacts indicated in paragraph 5 below.  

2. Processing methods and data retention times

The Data Controller will process the Users’ personal data using IT tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data. The personal data of the Users of the Site will be kept for the time strictly necessary to carry out the primary purposes illustrated in the previous paragraph 1, or in any case as necessary for the civil protection of the interests of both Users and the Data Controller.

3. Scope of communication and dissemination of data

The employees and / or collaborators of the Data Controller in charge of managing the Site may become aware of the personal data of the Users. These subjects, who are instructed by the Data Controller pursuant to Article 29 of the Regulation, will process the User’s data exclusively for purposes indicated in this information and in compliance with the provisions of the Applicable Law. Third parties who may process personal data on behalf of the Data Controller as ” External Data Processors ” may also become aware of the Users’ personal data , such as, by way of example, suppliers of IT and logistical services functional to the operation of the Site, outsourcing or cloudcomputing service providers, professionals and consultants. Users have the right to obtain a list of any data processors appointed by the Data Controller, making a request to the Data Controller in the manner indicated in paragraph 5 below.

4. Further communications: communication of data to the Data Controller’s Partners

With the free and optional consent of the User, the User’s personal data (ie name and surname, e-mail address) will be communicated by the Owner to the following categories of third-party companies: Advertising agencies (collectively, the ” Partners of the Owner“). The Partners of the Data Controller, as independent data controllers, will process the User’s personal data for their own marketing purposes (direct sales, sending advertising material and commercial communication), and will be able to contact the User by post, e-mail, telephone (landline and / or mobile, with automated call or call communication systems with and / or without the intervention of an operator) and / or SMS and / or MMS to propose to the User the purchase of products and / or services offered by the same categories of third-party companies and / or by other companies and to present offers, promotions and commercial opportunities to the User. Once the transfer has taken place, it will be the responsibility of the Partner of the Owner to provide the Users pursuant to art. 14 c. 3 of the Regulation, all the information required by the same art. 14 of the Regulation. In case of lack of consent, the possibility of registering on the Site will not be affected in any way. In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in paragraph 5 below. The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent holders. of the treatment, on the basis of the specific information that will be issued by the Partners of the Owner to the Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them. In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in paragraph 5 below. The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent holders. of the treatment, on the basis of the specific information that will be issued by the Partners of the Owner to the Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them. In the event of consent, the User may at any time revoke the same, by making a request to the Data Controller in the manner indicated in paragraph 5 below. The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent holders. of the treatment, on the basis of the specific information that will be issued by the Partners of the Owner to the Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them. The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent data controllers, on the basis of the specific information that will be issued by the Data Controller’s Partners to the Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them. The Data Controller informs that the User’s personal data will be processed by the Data Controller’s Partners as independent data controllers, on the basis of the specific information that will be issued by the Data Controller’s Partners to the Users. Any requests not to receive further commercial communications from the Data Controller’s Partners, to whom the data have already been communicated by the Data Controller, must therefore be addressed directly to them.  

5. Rights of the interested parties

Users can exercise the rights guaranteed to them by the Applicable Law, by contacting the Owner in the following ways:

Pursuant to the Applicable Law, the Data Controller informs that Users have the right to obtain the indication (i) of the origin of the personal data; (ii) the purposes and methods of the processing; (iii) of the logic applied in case of treatment carried out with the aid of electronic instruments; (iv) the identity of the owner and managers; (v) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents. Furthermore, Users have the right to obtain:

  1. a) access , updating , rectification or, when interested, integration of data;
  2. b) the cancellation , transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
  3. c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right.

  Furthermore, Users have:

  1. a) (where applicable) the right to withdraw consent at any time, if the processing is based on their consent;
  2. b) (where applicable) the right to data portability (right to receive all personal data concerning them in a structured format, commonly used and readable by automatic device), the right to limit the processing of personal data and the right to cancellation (“Right to be forgotten”);
  3. c) the right to object :

i) in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of the collection;

  1. d) if they believe that the processing that concerns them violates the Regulation, the right to lodge a complaint with a Supervisory Authority (in the Member State in which they usually reside, in the one in which they work or in the one in which the alleged violation has occurred ).

 ***  The Owner is not responsible for updating all the links that can be viewed in this Notice, therefore whenever a link is not functional and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the websites. recalled by this link.