PDPA Policy
Personal Data and PDPA
Data collected from you during browsing, ordering, and other occasions are considered private; resistore.com is committed to strictly respecting the confidentiality of customer data and not to transmit this data to third parties other than those specified in this section, necessary for parcel delivery and invoicing.
Personal data is stored indefinitely or until a request is received to delete this data. They are kept as long as you have an active account open on resistore.com. This data includes:
- Delivery and billing address (Name, Surname, Email, Phone, Complete Address)
- IP Address
- Site login history
- Shopping carts
- Order history
- Additional addresses
- Favorite products
- Purchased products
The user's personal data (email address) will only be used by resistore.com for:
- Sending order confirmation and delivery/payment status
- Changing the order status
- Contacting the customer if necessary to successfully complete the order
- An email for reviewing a recent order
- Sending the invoice via email
Personal data collected when placing orders will be transmitted to courier services strictly for parcel shipment. The data transmitted to the courier includes Name and Surname/Company Name, Delivery Address, Phone Number, and other information necessary for delivery.
The user's phone number will be used strictly for parcel delivery (this is transmitted to the courier by generating the AWB) and to contact the customer strictly for issues or clarifications related to the order being processed.
Personal data communicated in the billing address will be used to generate the fiscal invoice and will be stored in the billing program, whether it is "local" or "cloud" type.
We use the cloud-based service "SmartBill" for invoicing. This is compliant with GDPR requirements. Personal data collected by this service is used exclusively for the purposes of providing services offered by SmartBill - invoicing and management. Data for invoicing and management is required by law and recorded in the SmartBill program for a clearly defined purpose imposed by law.
Data collected by SmartBill: data entered in the billing address, Name, Surname, Complete Address, Email Address, Phone Number.
SmartBill is authorized to send messages via email on our behalf (in our case only invoices) and to collect and process information if the documents sent and hosted on the SmartBill platform have been opened and/or viewed by our customers.
The duration of the processing of personal data is identical to the duration of the main service supply contract between Etyra Technology SRL and Intelligent IT Srl (SmartBill). Personal data present in SmartBill is stored in the data centers in Ireland and Germany of Amazon Web Services Inc. Seattle, US which is certified under the US-EU data protection program called Privacy Shield and is GDPR-compliant.
To avoid the sender's email being recorded as SPAM, the invoice is sent in electronic format not as an attachment, but through a link that establishes a secure connection to our account and allows viewing, printing, and downloading of the invoice.
Your Rights:
- You have the right to know why your personal data is necessary.
- Right to access: You have the right to access your personal data that we are aware of.
- Right to correction/rectification of personal data.
- You have the right to revoke our access to your personal data.
- You have the right to transfer your personal data.
- To exercise these rights, please contact us at [email protected]
You can download a copy of your personal data held by us directly from your account in the GDPR section.
The deletion of your personal data from our database can be done with a written request to [email protected].