Privacy and Cookie Policy

This Privacy Policy aims to describe how Enecta BV ("Enecta", "we", "us" or "our") collects, uses, and shares information about you through our website Enecta.it, which we own (hereinafter referred to as the "Site"). Please read this policy carefully to understand our practices.

We are a company incorporated in the Netherlands with registered office at Corantijnstraat 5-I, 1058DA Amsterdam, Netherlands, which will be the data controller of personal data as described in this Privacy Policy. The data concerning you will also be processed for the purposes described in this policy by the Italian company Enecta s.r.l, with registered office at Viale Panzacchi 17, 40136, Bologna, of which Enecta B.V. is the sole shareholder and which has been expressly appointed by Enecta B.V. as the data processor, in accordance with Article 28 of EU Regulation 679/2016 (“GDPR”).

SECTION 1 - HOW WE USE THE INFORMATION

When you purchase something from our store, as an essential part of the buying and selling process, we collect the user's personal information such as first name, last name, address, email address, and phone number. The processing of your data is necessary to fulfill your order and to execute the contract with you. For this reason, we may contact you via email or phone using the data you provided to simplify the order processing, and we may transmit your data, for example, to the company offering the shipping service. Such processing is based on your consent (art. 6 par. 1 lett a GDPR) and for the execution of a contract with you (art. 6 par 1 lett. b GDPR).

You can request the deletion of your personal data at any time, without affecting the lawfulness of the data processing carried out before its withdrawal.

During browsing on our store, we also automatically receive the Internet Protocol (IP) address of the computer from which the user is browsing, in order to provide us with information about the browser and operating system.

E-mail marketing

When you purchase a product from our Store, we may use the provided data to send you communications regarding products or services similar to your purchase, as permitted by Article 130, paragraph 4 of the Privacy Code.

In any case, you can object to receiving further communications via the opt-out link available in each individual communication.

By subscribing to our Newsletter, we will use only the data strictly necessary and instrumental for this purpose, namely the data you provide separately, to regularly send you our newsletter via e-mail and surveys, based on your consent (art. 6 par. 1 lett a GDPR).

is possible to unsubscribe from the Newsletter at any time, either by sending a message to the address privacy@enecta.com both through a specific link available in every Newsletter.

After cancellation, we will delete your email address, unless you have expressly consented to further use of your data and subject to our reservation for subsequent use of the data, use of which you have been properly informed in this statement in compliance with the GDPR.

SECTION 2 - CONSENT

How is user consent obtained?

When providing personal information aimed at completing a transaction such as credit card verification, order completion, delivery arrangement, or product return, it is assumed that the user consents to the collection and use of the data solely for that specific purpose.

In case personal information is requested from the user for other reasons, such as marketing or commercial activities, the request for explicit consent will be applied on a voluntary basis, with the possibility to refuse consent.

When sending a message through the form or other means (for example WhatsApp or social media) to contact our Customer Service, you authorize the processing of the personal data provided on that occasion, in order to allow us to provide Customer Service, as set forth in this Privacy Policy.

Rights of the data subjects

You have the right to be informed free of charge about your personal data stored by us and to request its correction or deletion as well as the limitation of processing, in addition to the right to authorize its transmission. For questions regarding the collection, processing, or use of your personal data, for information related to the right of access to data, their correction, deletion, or blocking of use, as well as for questions regarding the possible revocation of consents already given or opposition to a specific use of the data, we invite you to contact us directly by sending an email to privacy@enecta.com or by writing via regular mail to:

Enecta BV

Corantijnstraat 5

Amsterdam NL 1058DA

We would like to remind you of your right to lodge a complaint with the competent data protection supervisory authority.

SECTION 3 - COMMUNICATION TO THIRD PARTIES

We may disclose the user's personal information if we are required by law to do so or if the user violates the Terms of Service.

SECTION 4 - SHOPIFY

Our store is hosted on the servers of Shopify Inc.

Shopify Inc. provides us with the online e-commerce platform that allows us to sell our products and services.

User data is collected through Shopify's databases, applications, and software.

All data is stored on a secure server protected by a firewall.

Payments:

If a direct payment gateway is chosen to complete the purchase, Shopify stores the credit card data. The transaction and data transmission are encrypted through and in compliance with the Payment Card Industry Data Security Standard (PCI-DSS).

Purchase transaction data is stored only for the time necessary to complete the purchase transaction. Once the transaction is completed, the purchase information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, a joint consortium of companies and corporations such as Visa and MasterCard.

The PCI-DSS requirements help ensure the secure management of credit card information on our store and for its service providers.

To get more information, it is recommended to also read the terms of service or the privacy policy of Shopify.

How to pay:

Credit card * (Visa, Visa Electron, Mastercard, Maestro); the billing text on the card statement will be "Enecta", or Cash on Delivery (cash payment upon delivery) or via Bank Transfer.

* We will not charge the credit card until the goods have been shipped from our warehouse.

SECTION 5 - HUBSPOT

Hubspot CRM is a platform provided by Hubspot Inc. that allows us, among other things, to manage existing and potential customers, communicate with them, and plan and execute marketing activities aligned with their interests. Hubspot CRM enables us to capture, organize, and analyze customer interactions across multiple channels.

The personal data is stored on the Hubspot CRM platform following best security practices and is accessible via a dedicated password exclusively by authorized personnel.

For more information, we also recommend consulting Hubspot's Privacy Policy. https://legal.hubspot.com/privacy-policy.

SECTION 6 - THIRD-PARTY SERVICES

In general, the third-party providers we use will be authorized only to collect, use, and disclose information to the extent necessary to enable them to perform the services they provide to us.

However, some third-party service providers, such as payment gateways and other operators for payment transactions, have their own privacy policies regarding the information they are required to provide for purchase operations related to them.

For these providers, we recommend reading their privacy policies so that you can understand how personal data is handled.

In particular, we remind you that some suppliers may be located or have facilities located in a jurisdiction different from ours or that of the user.

Therefore, in the event that you choose to proceed with a transaction involving a third-party service provider, the information shared may be subject to the laws of the jurisdiction(s) in which the service providers or their facilities are located.

For example, if you are in Canada and the transaction is processed by a payment gateway located in the United States, the personal data used to complete that transaction may be subject to disclosure under United States law, including the Patriot Act.

LINK

When clicking on a link in our store, the user may be redirected to a site or platform different from ours. Enecta is not responsible for the privacy policies of third-party sites and platforms; we suggest you inform yourself each time and read the privacy policy documents of such platforms.

SECTION 7 - SAFETY

To protect personal data, we take every reasonable precaution and follow industry best practices to ensure that it is not improperly lost, disclosed, altered, destroyed, or abused or misused.

The credit card data entered by the user is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption.

Although no method of data transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and regularly implement updates following all generally accepted industry standards.

SECTION 8 - COOKIES

Below is the list of cookies we use.

We have listed them in a way that gives the user the option to disable them.

_session_id, unique temporary token: allows Shopify to store session information (referrer, landing page, etc).

_shopify_visit, does not retain data: it remains valid for 30 minutes from the last visit, it is used by our provider who handles recording internal site statistics to record the number of visits

_shopify_uniq, does not retain data: expires at midnight (relative to the user's geographical location) of the following day, Counts the number of visits to the store by a single customer.

cart, unique token: it lasts for 2 weeks, stores information regarding the cart contents.

_secure_session_id, unique, temporary token for the session,

storefront_digest, unique token, indefinite duration: If the store is password protected, this cookie is used to determine if the visitor has valid access.

SECTION 9 - AGE OF MAJORITY

Using this site, the user declares that they are at least of legal age in their state or province of residence, or that they have reached the age of majority in their state or province of residence and have given their consent to allow a minor, under their responsibility, to access and use this

SECTION 10 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify the privacy policy document at any time, so please check it frequently to stay informed of any changes.

Changes and clarifications will take effect immediately from the moment they are published on the website. In the case of substantial changes to this policy, we will inform users here that it has been updated, so that the user is always aware of the information we collect, how we use it, and under what circumstances it may be used and/or disclosed.

In the event that our store is purchased or merges with another company, the data may be transferred to the new owners to ensure continuity of service.

----

If you wish:

access, correction, modification, or deletion of personal information in our possession, the user can send us a request by contacting our Privacy Officer at the email address privacy@enecta.com or by mail to the address:

Enecta

[Re:Privacy Contact]

Corantijnstraat 5

Amsterdam NL 1058DA.