Pre-order privacy policy

Welcome to the website www.shop.avathor.it. In this section, you can pre-order the Avathor One product. Your privacy is important to us, and under Article 13 of the EU Regulation No. 2016/679 “GDPR”, we want to assure you that your personal information is managed with the utmost care and in compliance with applicable laws.

DATA CONTROLLER

The data controller of personal data is Avathor S.r.l. with registered office at Corso Re Umberto 54 – 10128 Turin (TO). The controller can be contacted through the following communication channel: privacy@avathor.it.

INFORMATION PROVIDED VOLUNTARILY BY THE USER

The company processes personal data voluntarily provided by the user through the completion of the pre-order form for the Avathor One product available on the website. This includes common personal data such as name and surname, tax code, email address, phone number, billing/shipping address, and payment methods.

PURPOSES AND LEGAL BASIS OF PROCESSING

The personal data communicated are processed for the following purposes:

1. the management of product Avathor One booking requests and the payment of the deposit. We pursue this purpose in order to execute contractual or pre-contractual measures. Art. 6 1) b) GDPR.

1. sending informative and commercial communications via traditional contact systems and automated IT systems. We pursue this purpose based on the consent of the data subject. Art. 6 1) a) GDPR.
2. creating a profile based on the analysis of purchasing preferences and consumption habits of the data subject aimed at sending personalized commercial offers to enhance the user experience and provide a service tailored to their needs. We pursue this purpose based on the consent of the data subject. Art. 6 1) a) GDPR.
3. communicating personal data to Avathor S.r.l. partner companies operating in the utilities sector for sending offers and commercial communications. We pursue this purpose based on the consent of the data subject. Art. 6 1) a) GDPR.

METHODS OF PROCESSING

The processing of data is carried out using instruments or information technologies or automated means strictly related to the purposes pursued. The controller has adopted technical and organizational measures suitable to ensure an adequate level of security, in compliance with Art. 32 GDPR.

DATA RETENTION TIMES

Personal data will be processed and stored for only the time necessary to pursue the specific purposes for which they were collected, in compliance with the principles of proportionality and necessity, and in any case not beyond 24 months for direct marketing purposes and 12 months for profiling purposes, unless consent is revoked.

After such periods, the controller will proceed with the deletion of the collected data or their irreversible transformation into anonymous form and will process the data only in aggregate form.

CIRCULATION OF DATA

The processing is carried out directly by the organization of the controller, through suitably designated and trained persons, who will act as authorized processors as well as external companies that perform activities on behalf of the Company, duly appointed external data processors.

By way of example, data may be communicated to external companies and technical support entities that collaborate with the data controller, subjects, bodies, or authorities to whom it is mandatory to communicate personal data by law or upon specific request.

The list of data processors is available by sending a request to privacy@avathor.it.

Your data will not be subject to dissemination to undetermined subjects.

DATA TRANSFER ABROAD

The data provided concerning the requested services will be used and managed within the European territory. The use of certain features of the website may result in the transfer of personal data abroad. In particular, the use of third-party cookies may involve a transfer of data to data controllers located outside the European Economic Area. For more information, please consult the website’s cookie policy.

RIGHTS OF THE DATA SUBJECT

The data subject may at any time obtain from the data controller, where applicable, access to personal data concerning them, rectification, erasure of the same, or restriction of processing (Articles 15 et seq. GDPR). If they have given consent to the processing of information, they may revoke it at any time. The specific request should be addressed to the contact points indicated in this policy, preferably including in the subject line the wording “Request to exercise privacy rights”.

Individuals who believe that the processing of personal data relating to them violates the provisions of data protection regulations have the right to lodge a complaint with the Garante pursuant to Article 77 GDPR (https://www.garanteprivacy.it/reclamo) or to take legal action (Article 79 GDPR and Article 140-bis Privacy Code).

CHANGES TO THE PRIVACY POLICY

This privacy policy may be subject to changes and updates, also as a consequence of potential legal requirements. It is advisable to visit this page periodically to stay informed about our privacy practices.

Avathor S.r.l.

www.avathor.it

Policy updated on 26/03/2025