Privacy policy

Welcome to our website www.avashwellness.com . AVASH SRL SB takes the privacy rights of its customers and the legal obligations seriously. Please read our Privacy Policy carefully, which applies whenever you access the website and decide to browse it and use its services, regardless of product purchases. We also recommend reading the General Terms of Use of the Site, as they contain important information about privacy and security systems adopted by the Site.

This Privacy Policy ("Policy") describes how we process customer personal data collected through the Site and is provided, pursuant to art. 13 of EU Regulation 2016/679 (European Regulation on the protection of individuals with regard to the processing of personal data, hereinafter "EU Regulation") and Legislative Decree 196/2003 and subsequent amendments and additions, to those who interact with the services accessible electronically on the Site.

This Policy is provided only for this Site and not for other websites that may be accessed by the user via links, which are beyond the control of AVASH SRL SB.

The principles on which our Privacy Policy is based

The processing of user personal data collected will be carried out by AVASH SRL SB in accordance with the principles of correctness, lawfulness, minimization of data, transparency, limitation of storage, integrity, and confidentiality, in compliance with EU Regulation 679/2016. In particular, we will process your personal data exclusively for the purposes and in the manner described here. Furthermore, we will make data available to third-party companies only for the instrumental purposes of providing the requested service and as part of a data processing appointment, as specified below. We will also respond to user requests to exercise their rights recognized by the personal data protection regulations. We will apply appropriate security measures to protect the confidentiality, integrity, and availability of the data provided.

Data Controller

The data controller is: AVASH SRL SB, with legal headquarters at Via Piemonte 39/a, Rome, 00187, Tax Code and VAT number 16841181007, email orders@avashwellness.com.

Data Protection Officer: AVASH SRL SB has appointed a Data Protection Officer. The Data Protection Officer can be contacted for any need by sending an email to orders@awashwellness.com.

Types of Personal Data Collected

Browsing Data The computer systems and software procedures used to operate this Site acquire some personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols. We collect and analyze data such as the Internet Protocol (IP) address used to connect your computer to the Internet; login; email address; password; information about the computer and connection, such as browser type and version, time zone settings, types and versions of "browser plug-in," operating system, and platform; complete Uniform Resource Locators (URLs) including date and time; number of cookies; products you have viewed or searched for; and any phone number used to contact our customer service. We may also use browser data such as cookies, Flash cookies (also known as Flash Local Shared Objects), or similar data collected through certain parts of our website to prevent fraud and for other purposes. During some visits, we may use software tools such as JavaScript to collect and assess information about sessions, including page load times, download errors, duration of visits to specific pages, interaction information with pages (such as scrolling, clicks, and cursor movements on pages), and methods used to exit the page. We may also collect technical information to help identify your device for fraud prevention and diagnostics.

Data Provided Voluntarily by the User: The personal data concerning you that you have provided by accessing various sections of the Site include: your name; address and phone number; email, credit card information; names of order recipients (including addresses and phone numbers); names (with addresses and phone numbers) listed in the 1-Click settings; email addresses of your friends and third parties to whom you send purchased products; review and email content sent to us; personal description and photograph contained in "My Profile"; and banking data. AVASH WELLNESS may process personal data of third parties directly communicated by you through the Site. For example, in the event that you have purchased a product to be delivered to a friend, or when you pay for a product intended for another person, or when you want to inform a friend about a product or AVASH WELLNESS product offer for sale. In such cases, you agree to have the third party review this privacy notice before providing their personal data to AVASH WELLNESS. In any case, AVASH WELLNESS will provide the information to the third party at the time of registering their data in their archive. The consent of the third party for the processing of their personal data is not necessary when the data of that third party is communicated to AVASH WELLNESS for the conclusion of the purchase contract, on behalf of that third party. However, to use the personal data of the third party for marketing, sending promotions, newsletters, profiling activities, it is necessary to obtain their express consent.

Mobile Devices: Most mobile devices provide users with the ability to disable location services. In most cases, these commands are located in the device's settings menu. If you have questions about how to disable location services on your device, we recommend contacting your mobile operator or the manufacturer of your device.

Purposes of Processing

AVASH WELLNESS will process your personal data for the following purposes: a) Respond to information requests submitted through the Site; b) Process your purchases; c) Manage your account; d) Contact you to address requests or complaints regarding purchases; e) Perform financial transactions related to payments made by you; f) Comply with legal obligations, regulations, or EU legislation; g) Assert or defend a right of AVASH WELLNESS in court; h) Provide after-sales service for product repairs/replacements, including warranty claims; i) Improve and customize the Internet Site and our products and services by tracking preferences related to our products; j) Conduct market research; k) Analyze your preferences for our products, purchase history, and interactions with the Site for profiling purposes, or to understand your tastes and consumption habits in order to send you commercial offers consistent with your profile; l) Send offers to selected customer groups you may be part of on behalf of other AVASH WELLNESS partner companies; m) Send newsletters and other marketing communications regarding news, information, updates on our products and services, offers, promotions, special events, and other marketing communications that may be of interest to you (via SMS, email, or telephone).

Legal Basis for Processing

Each processing of customer personal data is carried out on the basis of a legitimate reason for processing. With regard to the purposes mentioned from a) to h), we inform you that the processing and communication of your personal data by AVASH SRL SB do not require your consent, as the processing is necessary for the execution of services requested by you or to fulfill the sales contract of our products, as well as to comply with legal obligations or for possible defense in court or to manage any claims and/or warranties. As for the purposes mentioned from i) to m), your express consent is necessary to proceed with such purposes, and if you decide not to provide it, this will not affect your ability to receive the requested services or purchase our products. Refusing consent to the processing of your personal data for marketing purposes will result in your inability to receive advertising material related to AVASH WELLNESS products, as well as AVASH WELLNESS not being able to conduct market research, including satisfaction surveys, or send you newsletters. Refusing consent to the processing of your personal data for profiling purposes will result in AVASH WELLNESS being unable to create your commercial profile, by detecting your choices and purchasing habits on the Site (also to ensure greater customer satisfaction), as well as to send you advertising material related to products that match your interests.

Mandatory or Optional Provision of Data

The provision of personal data for the purposes described from a) to h) is optional, but the refusal to provide them makes it impossible to provide the requested services or to request information through the various sections of the Site.

Data Processing Methods and Security Measures

The processing of data will be mainly carried out using electronic or automated tools (manual, computerized, and telematic), according to methods and with means suitable to guarantee the security and confidentiality of the data. In particular, all technical, IT, organizational, and procedural security measures will be adopted so that the level of data protection required by law is guaranteed, allowing access only to those in charge of processing by the Data Controller or by data processors who may be appointed. The data processed will be relevant, complete, and not excessive in relation to the purposes for which they are collected or subsequently processed and will be stored in a form that allows the identification of the data subject. The Data Controller uses automatic profiling processes. to reconstruct your tastes and consumption habits to send you offers consistent with the identified profile. In any case, the data subject is guaranteed the right to object to the processing for profiling purposes at any time in accordance with art. 21 of EU Regulation 679/2016, by making a request to the Data Controller in the manner indicated in the "Your Rights" paragraph.

We Guarantee the Security of Your Personal Data

We are committed to protecting the security of your personal data during transmission, using Secure Sockets Layer (SSL) software, which encrypts the information you enter. When confirming an order, we display only the last four digits of your credit card number. Of course, during order processing, we transmit the full credit card number to the issuing financial institution. Our security procedures mean that you may be asked to provide proof of your identity before disclosing personal data. It is important that you take appropriate protection against unauthorized access to your password and computer. Always make sure to log out when using a shared computer with other users.

Recipients of Personal Data

The personal data of our customers are an important part of our work and we do not engage in activities to transfer them to others. Therefore, personal data will be communicated within AVASH SRL SB and may be made known to its employees and/or collaborators and also communicated to the following subjects:

third-party companies belonging to the same group as AVASH SRL SB in order to respond to your requests submitted through the request form;

third-party companies in order to provide technical support services;

all Authorities who have access to data under regulatory or administrative provisions;

buyers of shops, branches, or production units of AVASH SRL SB, in the event of their transfer;

subjects providing services for the management of the computer system and telecommunications networks (including email).

Forwarders and carriers for the delivery/collection of products

Issuing banks of credit cards

Subjects who make payments by credit card and provide customer services related to payments

Companies providing marketing assistance (including data analysis services, research results, and links, email and newsletter sending, and profiling activities)

Companies and organizations that provide fraud prevention or credit risk reduction services. These entities only have access to personal data that is necessary to perform their services for AVASH SRL SB. We guarantee that they cannot use your personal data for other purposes, and they are also required to process personal data in accordance with this Privacy Policy and in accordance with the law. Third parties performing these operations have been suitably selected and have experience, capability, and reliability, offering adequate guarantees of full compliance with the current provisions on the processing of personal data, including data security. They have also been appointed as "data processors" and carry out their activity following the instructions given by AVASH SRL SB and under its control. We periodically verify that data processors have promptly fulfilled the tasks entrusted to them and that they continue to provide adequate guarantees of full compliance with the provisions on the protection of personal data. The complete list of data processors appointed is available on request from AVASH SRL SB, Via Piemonte 39/a, Rome 00187. In any case, the data will not be subject to disclosure.

Data Retention Period

The Data Controller informs that the personal data collected will be stored for the sole time necessary to provide the services requested by the user or to fulfill the sales contract, or to comply with the law, or to assert their rights in any legal proceedings. As for marketing and profiling purposes, data will be kept for a period of 5 years. In this regard, AVASH SRL SB has adopted various precautions to protect the personal data collected. Once this retention period has expired, the data will be destroyed or anonymized.

Your Rights

In accordance with Articles 15, 16, 17, 18, 19, 20, and 21 of EU Regulation 2016/679, at any time, you can exercise your rights with respect to the Data Controller AVASH SRL SB, as indicated below:

Right of Access
We will provide you with all information regarding your personal data in our possession upon your request.

Right to Rectification and Integration
We will rectify inaccurate information about you following your communication. We will integrate incomplete data reported by you, provided that such data is necessary for the purpose of processing.

Right to Erasure
We will delete the information we hold at your request. However, deletion is not permitted for data that must be mandatory retained by the Data Controller by law or to fulfill the contract signed with you.

Right to Restriction of Processing
In certain cases provided by law, we will block your data if you wish.

Right to Withdraw Consent
You can withdraw your consent to the processing of your data at any time, with future effect. The legality of processing your data remains unchanged until the consent is withdrawn.

Right to Object to Data Processing
You can object to the processing of your data with future effect at any time if our data processing is based on one of the legal justifications provided in Article 6 (1e or 1f) of EU Regulation 2016/679. In the event of your objection, we will cease processing your data, provided there are no compelling legitimate grounds for further processing or the need for defense or the exercise of a right in court.

Right to Data Portability
Upon your request, we can make the personal data concerning you available to you in a structured, commonly used, and machine-readable format for transmission to another data controller.

Your requests should be addressed by writing by postal mail to AVASH SRL SB Via Piemonte 39/a, Rome, 00187 or by sending an email to orders@awashwellness.com.

It is understood that if requests are made electronically, the information will be provided free of charge and in a commonly used electronic format.

Complaints to the Supervisory Authority

If you believe that the processing of your personal data by AVASH SRL SB violates your privacy rights, you can file a complaint with the Garante per la Protezione dei dati personali (the Italian Data Protection Authority), following the instructions available on the Garante's website www.garanteprivacy.it.

Minors

The protection of the security and privacy of minors is very important to us. We do not accept registrations or orders sent by anyone under the age of 16 (sixteen) or the age specified by the legislation of the country of residence that sets different age limits, and we do not knowingly collect or process personal data of such individuals.