Privacy Policy

This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”). It explains how WP Lavori in Corso S.r.l., as Data Controller, processes the personal data of users of www.wparchivio.it, a project by WP Lavori in Corso S.r.l.

1. Data Controller

2. Processing by activity

For each activity on the website, the sections below describe which personal data we collect, why, on what legal basis and for how long we keep it.

2.1 Registration

Data collected

• Identification data: first name, last name, date of birth
• Contact data: address (country, city, province, postcode) and email
• Data relating to orders placed
• The password you choose for your account

Purposes

• Registering on the website and using its features
• Enrolling you in the WP Club loyalty programme and its points scheme
• Sending commercial information on promotions, special discounts, prizes, points and events, including by automated systems, email, SMS and MMS
• Profiling based on purchase choices and consumption preferences, to send you personalised promotions
• Sending newsletters
• Complying with legal obligations

Mandatory or optional

The data is required to register. Providing data for commercial communications and profiling is optional: if you refuse, we will not carry out that processing.

Legal basis

Performance of a contract between the Data Controller and the user. Commercial communications and profiling are based on your free and explicit consent.

Retention

Marketing data: 24 months. Profiling data: 12 months. Purchase data: until the legal warranty periods expire.

2.2 Contact form

Data collected

• First name and last name
• Contact data (address and email)
• Data relating to an order placed, where relevant
• Information about your current request for assistance

Purpose

Replying to your requests. The data is required to receive a reply from WP.

Legal basis

Providing a service you have requested.

Retention

Where the request concerns an order: until the sale, shipment and delivery are completed, plus the period needed to handle any disputes or returns.

2.3 Newsletter – “Let’s keep in touch”

Data collected

• First name, last name, gender, date of birth
• Email address

Purposes

• Sending newsletters, including updates on initiatives, upcoming promoted or sponsored events, current special offers and promotions
• Profiling based on consumption habits

Legal basis

Your consent. The data is required to receive the newsletter.

Retention

[RETENTION PERIOD]

2.4 Purchases – registered users

Data collected

• First name and last name
• Contact data (address, email, telephone number)
• Purchase data

Purposes

• Purchasing products on the WP Lavori in Corso S.r.l. website and fulfilling contractual obligations
• Tracking shipments and order status in your reserved area
• Handling cancellations, answering questions and providing assistance
• Allowing you to join the WP Club and its points scheme
• Complying with legal obligations

Mandatory or optional

The data is required to complete a purchase; without it the purchase cannot go ahead.

Legal basis

Performance of the contract between the Data Controller and the customer, as set out in the Terms & Conditions, and the customer’s interest (for example, the product warranty).

Retention

[RETENTION PERIOD]

2.5 Purchases – unregistered users

Applies to purchases by users who are not registered with the WP Club. Data collected, purposes and legal basis are the same as in section 2.4, except that you check the order status by email rather than in a reserved area.

Mandatory or optional

The data is required to complete a purchase. Providing data for marketing purposes is optional: if you refuse, we will not carry out that processing.

Retention

Marketing data: 24 months.

2.6 WP Club membership

Data collected

• First name, last name, date of birth
• Contact data (address and email)
• Consumption and search preferences, only with your consent

Purposes

• Loyalty activities linked to WP Club membership: using promotions, offering and sending prizes, points collection, promotional events for loyal customers
• With your explicit consent, profiling based on purchase choices and optional registration information, to create personalised promotions

Legal basis

Performance of the contract between the Data Controller and the data subject for managing WP Club membership. Advertising material, newsletters and profiling are based on your consent.

Retention

[RETENTION PERIOD]

3. How we process data

Personal data is processed both on paper and electronically (servers, cloud databases, application software, etc.). The Data Controller manages and stores the data in a CRM system containing the data of users who register and/or purchase on all websites belonging to WP Lavori in Corso S.r.l.

Unless a specific period is stated in section 2, data is kept only for as long as needed for the purposes for which it was collected and in any case within the limitation periods set by law.

4. Who receives your data

Within WP Lavori in Corso S.r.l.

Only employees and collaborators who need the data to provide the services you requested can access it, and only the information relevant to their tasks. They have been informed of the importance of strict confidentiality, and we take every necessary step to remind them of their data protection responsibilities.

Service providers

We share personal data with some suppliers who help us provide the services you request: [CATEGORIES OF SUPPLIERS]. Any third party with access to the data acts in accordance with data protection law and our instructions.

Legal requirements

We do not disclose personal data to other third parties without authorisation, except when required by law or by a competent authority.

5. Your rights

Under the GDPR you have the right to:

• Access your data and obtain a copy of it (Art. 15)
• Rectify data that is outdated or incorrect (Art. 16)
• Erasure (“right to be forgotten”), when the purposes have ended and no legitimate interest or law requires us to keep the data (Art. 17)
• Restrict the processing (Art. 18)
• Data portability: receive your data in a structured, machine-readable format that can be transferred to another controller (Art. 20)
• Object to processing, including for marketing purposes at any time (Art. 21)
• Not be subject to decisions based solely on automated processing, including profiling (Art. 22)
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe the processing breaches the law

6. How to contact us

To exercise your rights or ask for any clarification, send an email or letter stating your request, with the information needed to identify you and a copy of an identity document, to:

We will reply within one month. If we cannot fulfil your request, we will explain the reasons in detail.