Privacy policy

PRIVACY POLICY

Last updated: 16 January 2025

This Privacy Policy describes how the personal data of users who visit and use the Premium Parts website (hereinafter the "Site") and the services offered are collected, used, stored and protected.

Premium Parts, a commercial brand operating in the automotive sector, as Data Controller, undertakes to guarantee the confidentiality and protection of users' personal data in compliance with Regulation (EU) 2016/679 (GDPR) and the Italian legislation in force on personal data protection.

1. DATA CONTROLLER

The Data Controller of personal data is:
Premium Parts
Operational office: Via Lima 7, 00198 Rome, Italy
Partita IVA: IT05405730655
Email: info@premiumparts.it
Tel: +39 380 635 9319

2. TYPES OF DATA COLLECTED

2.1 Data provided voluntarily by the user

While browsing the Site and using the services, Premium Parts may collect the following categories of personal data voluntarily provided by the user:

  • Identification data: name, surname, company name (for businesses)
  • Contact data: email address, telephone number, residential/registered address
  • Tax data: tax code, VAT number, SDI/PEC code (for electronic invoicing)
  • Order data: products purchased, quantities, prices, purchase date
  • Shipping data: delivery address, courier information
  • Payment data: handled exclusively through secure payment gateways of certified third parties (PayPal, Stripe, etc.). Premium Parts does not store or have direct access to credit/debit card data

2.2 Data collected automatically

While browsing the Site, the following are collected automatically:

  • Browsing data: IP address, browser type, operating system, access time, pages visited, time spent, referring URL
  • Cookies and similar technologies: as described in the dedicated section

2.3 Sensitive data

Premium Parts does not collect or process sensitive data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life).

3. PURPOSES AND LEGAL BASIS OF PROCESSING

The personal data collected is processed for the following purposes:

3.1 Contractual purposes (art. 6(1)(b) GDPR)

  • Management and fulfilment of purchase orders
  • Management of shipments and deliveries
  • Issuance of invoices and tax documents
  • Management of product warranty
  • Management of any returns or complaints
  • Communications relating to orders (confirmations, updates, tracking)

Providing data for these purposes is mandatory. Refusal to provide the necessary data makes it impossible to proceed with the purchase and provision of the requested services.

3.2 Legal purposes (art. 6(1)(c) GDPR)

  • Fulfilment of tax, accounting and administrative obligations
  • Fulfilment of obligations provided for by laws, regulations and European legislation
  • Management of disputes and protection of rights in court

Providing data for these purposes is mandatory by law.

3.3 Marketing purposes (art. 6(1)(a) GDPR – consent)

  • Sending informative newsletters on Premium Parts products and services
  • Sending commercial and promotional communications
  • Sending personalised offers and exclusive discounts
  • Sending updates on new products

Providing data for these purposes is optional. Consent can be revoked at any time without affecting the lawfulness of processing based on consent given before revocation.

3.4 Profiling purposes (art. 6(1)(a) GDPR – consent)

  • Analysis of preferences and purchasing habits
  • Personalisation of the user experience
  • Sending targeted commercial communications

Providing data for these purposes is optional. Consent can be revoked at any time.

4. PROCESSING METHODS

Personal data is processed using IT and telematic tools, as well as paper media, through procedures and methods strictly necessary to pursue the indicated purposes.

Premium Parts adopts appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction or unauthorised disclosure, in accordance with articles 25 and 32 of the GDPR.

The security measures implemented include:

  • Encryption of sensitive data (SSL/TLS)
  • Authentication and access control systems
  • Firewalls and perimeter protection systems
  • Periodic backups and disaster recovery procedures
  • Training of personnel authorised to process data
  • Security incident management procedures

5. DATA RETENTION PERIOD

Personal data is stored for the time strictly necessary to pursue the purposes for which it was collected:

  • Contractual data: 10 years from the end of the contractual relationship (tax and civil law obligations)
  • Marketing data: until consent is revoked or objection to processing
  • Profiling data: until consent is revoked
  • Browsing data and logs: maximum 24 months
  • Data relating to disputes: for the entire duration of the dispute and subsequently for the applicable limitation periods

At the end of the retention period, the data will be irreversibly deleted or anonymised.

6. DATA RECIPIENTS

Personal data may be communicated to or accessible by the following categories of recipients:

6.1 Authorised personnel

Employees and collaborators expressly authorised to process data and bound by confidentiality obligations.

6.2 External data processors

Third parties providing services on behalf of Premium Parts, appointed as Data Processors pursuant to art. 28 GDPR:

  • Hosting and cloud service providers
  • E-commerce management services and CMS platforms
  • Couriers and logistics companies for shipments
  • Payment gateways and banking institutions
  • Tax advisors, accountants and law firms
  • Email marketing and CRM services
  • Technical support and IT maintenance service providers
  • Web analytics and digital marketing companies

6.3 Public entities

Judicial authorities, law enforcement, tax authorities and other public authorities when required by law.

6.4 Parties with legitimate interest

Other parties to whom it is necessary to communicate data for purposes connected with contractual relationships (e.g. insurance companies, credit institutions).

Personal data will in no case be subject to dissemination (communication to unspecified parties).

7. DATA TRANSFER OUTSIDE THE EU

Personal data is stored on servers located in the European Union.

Should it be necessary to transfer personal data to third countries outside the European Economic Area (EEA), Premium Parts guarantees that the transfer takes place in compliance with Chapter V of the GDPR, through:

  • Adequacy decisions of the European Commission (art. 45 GDPR)
  • Standard contractual clauses approved by the European Commission (art. 46 GDPR)
  • Binding Corporate Rules
  • Approved certifications (e.g. Privacy Shield, where applicable)

The updated list of non-EU countries to which data may be transferred and of the guarantees adopted is available on request by contacting the Controller.

8. RIGHTS OF THE DATA SUBJECT

In accordance with articles 15-22 of the GDPR, the user has the right to:

8.1 Right of access (art. 15 GDPR)

Obtain confirmation as to whether or not personal data concerning them is being processed and, if so, obtain access to the data and information on the processing.

8.2 Right to rectification (art. 16 GDPR)

Obtain the rectification of inaccurate personal data and the completion of incomplete data.

8.3 Right to erasure / "right to be forgotten" (art. 17 GDPR)

Obtain the erasure of personal data when:

  • The data is no longer necessary in relation to the purposes
  • The user revokes consent and there is no other legal basis
  • The user objects to the processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with a legal obligation

8.4 Right to restriction (art. 18 GDPR)

Obtain the restriction of processing when:

  • The user contests the accuracy of the data
  • The processing is unlawful but the user objects to erasure
  • The data is necessary to establish, exercise or defend a right in court
  • The user has objected to the processing pending verification

8.5 Right to portability (art. 20 GDPR)

Receive personal data in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance.

8.6 Right to object (art. 21 GDPR)

Object at any time to the processing of personal data for:

  • Reasons connected with their particular situation (for processing based on legitimate interest)
  • Direct marketing purposes (at any time, without the need for justification)

8.7 Right to withdraw consent

Withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal.

8.8 Right to lodge a complaint

Lodge a complaint with the Italian Data Protection Authority (Garante):

  • Website: www.garanteprivacy.it
  • Email: garante@gpdp.it
  • PEC: protocollo@pec.gpdp.it
  • Address: Piazza Venezia n. 11 - 00187 Rome, Italy
  • Tel: +39 06.696771

How to exercise your rights:
To exercise the rights listed above, the user can contact Premium Parts at the following contact details:

  • Email: info@premiumparts.it
  • Phone: +39 380 635 9319
  • Postal address: Via Lima 7, 00198 Rome, Italy

Premium Parts will respond to the request without undue delay and, in any case, within one month of receiving it. This period may be extended by two months in the event of particular complexity of the request, subject to prior notice to the user.

9. COOKIES AND SIMILAR TECHNOLOGIES

The Site uses cookies and similar technologies to ensure correct operation, improve the browsing experience and analyse the use of the Site.

9.1 Types of cookies used

Technical cookies (do not require consent)

  • Navigation/session cookies: necessary for the operation of the Site
  • Functionality cookies: store user preferences (e.g. language, currency)
  • First-party analytics cookies: collect aggregated information on the use of the Site

Profiling and marketing cookies (require consent)

  • Profiling cookies: create profiles relating to the user to send targeted advertising messages
  • Third-party cookies: installed by external services (e.g. Google Analytics, Facebook Pixel, Google Ads)

9.2 Third-party cookies

The Site may use third-party services that install cookies:

  • Google Analytics: aggregated statistical analysis of traffic (can be configured in anonymous mode)
  • Google Ads / Facebook Ads: remarketing and personalised advertising
  • Social media plugins: sharing content on social networks

For information on third-party cookies and opt-out methods, please refer to the respective privacy policies.

9.3 Managing and disabling cookies

The user can manage cookie preferences through:

  • Cookie banner present on first access to the Site
  • Browser settings: each browser allows you to block or delete cookies (consult your browser's guide)
  • Opt-out tools: provided by analytics and advertising cookie providers

Useful links for cookie management:

  • Chrome: https://support.google.com/chrome/answer/95647
  • Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
  • Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac
  • Edge: https://support.microsoft.com/it-it/help/4027947

Disabling technical cookies may compromise the functionality of the Site and the use of certain services.

More information on cookies is available in the Site's complete Cookie Policy.

10. MINORS

Premium Parts services are not intended for persons under 18 years of age. Premium Parts does not knowingly collect personal data of minors without the consent of parents or those exercising parental responsibility.

Pursuant to art. 8 GDPR, for information society services offered directly to minors, the processing of a minor's personal data is lawful if the minor is at least 14 years old. Below this age, processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility.

Should Premium Parts become aware of having collected personal data of minors without the required authorisations, it will immediately proceed to delete such data.

11. DATA SECURITY

Premium Parts adopts appropriate technical and organisational security measures to ensure a level of security appropriate to the risk, in accordance with art. 32 GDPR.

However, Premium Parts cannot guarantee the absolute security of data transmitted over the Internet. The user is aware that the transmission of data over the Internet entails intrinsic risks and accepts these risks by using the Site.

In the event of a personal data breach, Premium Parts will:

  • Notify the Supervisory Authority within 72 hours of discovering the breach, where applicable
  • Communicate the breach to the data subject when it entails a high risk to the rights and freedoms of natural persons
  • Document each personal data breach in the breach register

12. LINKS TO THIRD-PARTY SITES

The Site may contain links to third-party websites. Premium Parts is not responsible for the privacy practices and content of such external sites. It is recommended to read the privacy policies of third-party sites before providing personal data.

13. CHANGES TO THE PRIVACY POLICY

Premium Parts reserves the right to modify or update this Privacy Policy at any time to comply with regulatory changes, technological developments or changes in business practices.

Substantial changes will be communicated to users through:

  • Publication of the updated version on the Site with an indication of the last update date
  • Email notification to registered users (where possible)
  • Informative banner on the Site

Continued use of the Site after the publication of changes constitutes acceptance of the updated Privacy Policy.

You are invited to consult this page regularly to stay informed about how personal data is protected.

14. CONTACTS

For any information, request or clarification relating to the processing of personal data and the exercise of the rights provided for by the GDPR, you can contact:

Premium Parts
Via Lima 7, 00198 Roma
Partita IVA: IT05405730655
Email: info@premiumparts.it
Telefono: +39 380 635 9319

15. PREVAILING VERSION

This Privacy Policy is drafted in Italian and subsequently translated into other languages for the user's convenience. In the event of discrepancies, interpretative doubts or conflicts between the different language versions, the Italian-language version shall exclusively prevail and be authentic.

Last updated: 16 January 2025
Version: 1.0