Search Cart (0)
Search Close

Privacy policy

K-Moon Data Protection Statement - Information on the processing of personal data

Introduction

Pursuant to articles 13 and 14 of the basic data protection regulation (EU) 2016/679 (or general data protection regulation - GDPR) and in general in compliance with the applicable national and European regulations and standards in the field of data protection, K-Moon provides the following information on the processing of personal data.

 

1. Data Controller

    The owner and person in charge of data processing is Soda Roberta's K-Moon in the person of its legal representative based in 39022 Lagundo, Strada Vecchia 58, VAT number IT03020310219, Telephone +39 349.390.2582, e-mail service @ kmoon.it, PEC: besoda@pec.net

    K-Moon by Soda Roberta
    Old Street 58
    39022 Lagundo (BZ)

    VAT number IT03020310219

    Telephone +39 349.390.2582
    e-mail service@kmoon.it
    PEC: besoda@pec.net

    For contacts specifically relating to the protection of personal data, including the exercise of the rights referred to in point 8 below, we kindly ask you to send any questions to the following e-mail address: service@kmoon.it

     

    2. Type of data processed

    The personal data that this website processes independently or through third parties include: cookies, usage data, personal data, payment and shipping data.
    Complete information on each type of personal data processing will be provided in the appropriate sections of this Privacy Policy or, as appropriate, in explanatory texts displayed before data collection.

    Personal data may be provided voluntarily by the user or, in the case of data relating to the use of the website, collected automatically while browsing this site.

    Users who wish to have more information on which personal data are mandatory (mandatory fields are always marked with a special "*" character) can contact the supplier.

    Any use of cookies - or other tracking tools - by this site, or by third party service providers used through this site, is intended to provide the service requested by the user as well as any further purpose described in this document and , if applicable, in the cookie policy.

     

    3. Purpose of the treatment

      The processing of your personal data may have the following purposes:

      1. the conclusion of contracts and the fulfillment of contractual obligations (borne by and in favor of the data controller), or for purposes strictly related to the management of customer relations, including formalities and administrative and accounting operations (eg: collection of information preliminary to the conclusion of a contract; execution of operations based on the obligations deriving from the contract concluded with the customer, including the shipment of the goods; application of the agreed payment methods; operational, administrative and accounting requirements; requirements relating to the control of payments and of the resulting phases; access to all services, including interactive services, offered on the site; collection of the information necessary to resolve complaints and / or requests for information relating to the services; dispute resolution - breach of contract; reminders; transactions; recovery credits; arbitration; litigation, etc.);
      2. fulfillment of legal obligations and provisions issued by authorities legitimated by the law and by supervisory and control bodies (Guarantor for the Protection of Personal Data);
      3. market research and customer satisfaction surveys, also conducted by specialized companies with personal or telephone surveys, questionnaires, online surveys and with the aim of offering special products and services (marketing);
      4. if the interested party gives his consent, carrying out automated procedures to analyze his preferences, habits and / or consumer decisions in order to be able to offer you products or services tailored to his interests (profiling);

        4. Type and place of data processing

          The following categories of personal data can be processed:

          1. surname, name and date of birth, residence;
          2. tax code and / or VAT number;
          3. telephone number / e-mail address as well as other contact details;
          4. address and house number of the supply point;
          5. address and house number of the delivery point;
          6. type of supply and use contract;
          7. Address for the delivery of bills;
          8. place of performance of the provision of contractual services;
          9. data relating to the services to be provided under the contract;
          10. supply measurement data (purchase of thermal energy);
          11. intended use of the building;
          12. cadastral data and parcel number
          13. terms of payment.

          In relation to the aforementioned purposes, your personal data may be processed for the following purposes:

          1. fulfill our contractual obligations existing between the parties and provide the information and services requested by the interested party. This processing is necessary to fulfill our mutual contractual obligations;
          2. Sending information for active services via e-mail and / or SMS as well as with the use of other means of communication (such as order confirmation). This processing is necessary for the fulfillment of our mutual obligations and / or performed with the user's consent;
          3. receive or transfer to you any payments or refunds we receive on your behalf. This processing is necessary for the fulfillment of our mutual contractual obligations;
          4. allows you to customize your user profile on our platforms. This treatment is carried out with the user's consent;
          5. give access to our customer service and allow the user to communicate with the K-Moon team. This processing is necessary for the fulfillment of our mutual contractual obligations, which are carried out with the consent of the user and / or are necessary to establish, exercise or defend legal rights.

          The data will be processed at the service provider's headquarters and in all other places where the subjects involved in the processing are located. Depending on the user's location, the data may be transferred to another country (including outside the EU and the EEA). To find out more about the place where the data is processed, users can contact K-Moon.

           

          5. Legal basis of the processing and mandatory nature of the provision

            The art. 6 I letter a) of the GDPR represents for our company the legal basis for the processing operations for which we obtain consent for a certain type of processing. If the processing of personal data is necessary for the execution of a contract to which the data subject is a party, as in the case, for example, of processing operations necessary for the supply of goods or the provision of other services or fees, the treatment is based on art. 6 I letter b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, for example in the event of requests for information about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, for example to fulfill tax obligations, the processing is based on art. 6 I letter. c) of the GDPR. Ultimately, the processing operations could be based on art. 6 I letter f) of the GDPR. Processing operations that do not fall under any of the aforementioned legal bases are based on that legal basis if the processing is necessary to safeguard a legitimate interest of our company or third parties, provided that interests, fundamental rights and freedoms do not prevail fundamental of the interested party. These processing operations are permitted for us in particular because they have been specifically mentioned by the European legislator. In this respect, it considered that a legitimate interest could be presumed if the data subject is a customer of the data controller (recital 47, second sentence, GDPR).

             

            6. Collection, processing and storage of data

              The data will be collected from the interested party, therefore these are data that the interested party provides us and those deriving from the use of contractual services.
              The data will be processed:

              1. using manual and automated systems;
              2. by persons authorized to carry out these tasks;
              3. adopting appropriate measures to ensure the confidentiality of data and to prevent access by unauthorized third parties.

              With particular reference to the purposes of the processing provided for in points 3) to 5) of the previous point 4, it is specified in particular that personal data are processed as follows:

              • using automated call or call communication systems;
              • by electronic means of communication such as e-mail, fax, SMS (Short Message Service) or any other type of message;
              • by telephone from an employee or by post.

              With reference to the purposes of the processing provided for in points 1) and 2) of the previous point 4, the data of the interested party will be kept for the entire duration of the contractual relationship, and after its termination, only to the extent that it is data necessary for the resolution of the contractual obligations assumed and for the execution of any legal provisions, as well as for protection needs of a contractual nature connected or consequent to the contract.

              With reference to the purpose of the processing d) provided for in point 4 above, the data processing will end at the latest - that is, if the interested party does not withdraw consent in advance - at the time of termination of the contractual relationship.

              In relation to the purposes of the processing c), e) and f) of the previous point 4, the data processing may continue until the consent is revoked, but in any case no later than two years from the termination of the contractual relationship or from the renewal of consent.

              There are no automated decision-making processes, so the possibility of profiling (provided that the corresponding consent is granted) remains unchanged.

               

              7. Disclosure of data

                We do not share the information that the interested party provides us, including personal information, with third parties, except in cases where:

                • It is necessary to involve a third party provider to perform a contract with you in order to simplify or improve our services (for example, if we charge you costs or credits in relation to the services on the platforms);
                • We use analysts and search engines to support the improvement and optimization of our platforms;
                • We may distribute parts of our platforms through APIs or widgets to be displayed on the websites of our business partners. In such cases, some of the user's public profile information may be viewed on these sites. 

                We may associate information about you, including personal data and cookie information that we send and receive from our business partners, in accordance with applicable laws and, if necessary, with your consent. We may use this information and the combined information for the above purposes.

                 

                8. Rights of the interested party
                1. Right to confirmation of processing

                  2. Each person concerned by the processing of personal data has the right, as guaranteed by the directives and by the European legislator, to request the data controller to obtain confirmation as to whether the personal data concerning him are actually processed. If an affected person wishes to make use of this right to confirm the processing, he or she can contact an employee of the controller at any time.

                2. Right to information

                  3. Each person concerned by the processing of personal data has the right, as guaranteed by the directives and the European legislator, to receive from the data controller, at any time, free information on the processing of personal data relating to him, which involves him and to also obtain a copy of the stored data. Furthermore, the European Regulatory Authority and the guidelines provide that the information, which is made available to the person concerned, contains the following information:

                  • the purpose of the processing
                  • the types of personal data that are processed
                  • the recipients or categories of recipients to whom the personal data processed with particular reference to recipients based in third countries with respect to the EU have been disclosed or may be disclosed, as well as international organizations
                  • if possible, the expected retention period of the personal data processed and, where not possible, the criteria for defining the retention period be communicated
                  • the right to rectify or delete personal data concerning him, the limitation of processing by the data controller or the right to object to such processing
                  • the possibility of using a right of appeal to a competent authority in the matter
                  • in the event that the personal data processed are not collected from the data subject, comprehensive information must be provided on the origin of the data
                  • the possibility that the data are processed in an automated manner with particular reference to profiling activities in compliance with Art. 22 paragraphs 1 and 4 of the GDPR and that at least in these cases, due and appropriate information is provided regarding the processing logic involved as well as the extent and impact expected from this particular type of processing on the personal data of the person concerned.

                  Furthermore, the data subject has the right to access information on whether the personal data has been transmitted to a third country or to an international organization. Upon the occurrence of this case, the interested party has the right to obtain information on the use of appropriate security guarantees in relation to the transfer of the data concerned.

                  If an interested party wishes to exercise this right to information, he or she can contact an employee of the data controller at any time.

                3. Right of rectification

                  4. Each subject concerned by the processing of personal data has the right, as guaranteed by the directives and by the European legislator, to request the immediate correction of incorrect personal data concerning him. Furthermore, the interested party has the right to request the completion of personal data concerning him / her and which appear to be incomplete, also by means of a complementary declaration, taking into account the purposes of the processing.

                  If an interested party wishes to exercise this right to information, he or she can contact an employee of the data controller at any time.

                4. Right to cancellation (right to be forgotten)

                  5. Any person affected by the processing of personal data has the right, guaranteed by the directives and by the European legislator, to request the data controller to immediately delete personal data concerning him, provided that one of the following reasons is satisfied and that the processing is not necessary:

                  • the personal data acquired and processed were stored for purposes that are no longer necessary and valid.
                  • the person concerned revokes the consent given, on the basis of which the data processing took place in compliance with the provisions of Art, 6 paragraph 1 letter a) of the GDPR or Art 9 paragraph 2 letter a) of the GDPR and at the same time lacks any further legal basis for the processing.
                  • the person concerned opposes the processing of data pursuant to Art. 21 paragraph 1 of the GDPR and there are no previous and legitimate reasons for the processing or the person concerned opposes the processing of data pursuant to Art, 21 paragraph 2 of the GDPR.
                  • The personal data of the data subject have been processed unlawfully or illegally.
                  • The deletion of personal data is necessary to fulfill a legal obligation under Union or national law to which the data controller is subject.
                  • The personal data processed was collected in relation to the information society services offered pursuant to Art. 8 paragraph 1 of the GDPR.

                  If any of the aforementioned reasons are correct and a data subject wishes to initiate the procedure for deleting personal data held by K-Moon, he can contact an employee of the data controller for this purpose at any time. A K-Moon employee will immediately satisfy the cancellation request.

                  In the event that the personal data of the person concerned have been made public by K-Moon and our company is the data controller pursuant to Art. 17 paragraph 1 of the GDPR and therefore obliged to delete the processed data, K-Moon, considering the available technology and the cost of implementing appropriate measures, including technical ones, undertakes to also inform other data processors involved about the request. cancellation of personal data received by the person concerned.

                  If an interested party wishes to exercise this right to information, he or she can contact an employee of the data controller at any time.

                5. Right to limitation of processing

                  6. Any person affected by the processing of personal data has the right, recognized by European directives and by the regulatory authority, to request the data controller to limit the processing if at least one of the following conditions is met:

                  • the accuracy of the personal data is contested by the data subject for a period of time that allows the person in charge to verify the accuracy of the personal data in his possession.
                  • the processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data.
                  • the data controller no longer needs to retain personal data for processing purposes, but the data subject requests them to assert, exercise or defend their legal rights.
                  • the person concerned has presented objections to the processing pursuant to Art. 21 paragraph 1 of the GDPR and it is not yet clear whether the legitimate reasons for the processing of the data controller are superior to those of the person concerned.

                  When one of the aforementioned causes occurs, and the person concerned wishes to request the limitation to the processing of personal data that have been stored by K-Moon, he can contact a collaborator of the owner at any time.

                6. Right to portability

                  7. Any person involved in the processing of personal data has the right, recognized by the European directives and regulations regarding the processing of personal data, to obtain the personal data, which he has made available to a data controller, in a structured, consistent format and readable by computer tools. Furthermore, the data subject has the right to transfer these data, without being hindered by the transferring owner, to another incoming data controller as long as this relationship is based on a relationship in compliance with Art. 6 paragraph 1 of the GDPR or of Art. 9 paragraph 2 letter a) of the GDPR as well as on a contract pursuant to Art. 6 paragraph 1 letter b) of the GDPR and the processing takes place using automated procedures, provided that the same is not necessary for the execution of an obligation that is of public interest or in the exercise of public authority.

                  Furthermore, in exercising their right to data portability pursuant to Art. 20, paragraph 1 of the GDPR, the interested party has the right to obtain that personal data be transmitted directly from one owner to another, to the extent that this is technically feasible and in this case this does not affect the rights and freedom of others.

                  If an interested party wishes to exercise this right to information, he or she can contact an employee of the data controller at any time.

                7. Right of opposition

                  8. Any person affected by the processing of personal data has the right conferred by the European directives and by the regulatory authority, to object at any time, and for reasons deriving from a particular situation, to the processing of personal data relating to it in accordance with Art . 6, paragraph 1, letter e) of the GDPR. This right also applies to profiling based on these premises.

                  K-Moon no longer processes personal data in the event of an opposition, unless we are able to establish valid legitimate reasons for the processing that override the interests, rights and freedoms of the data subject, or the processing has the purpose of assert, exercise or defend legal claims of the data subject.

                  In the event that K-Moon processes personal data in order to manage direct advertising, the interested party has the right to object at any time to the processing of personal data for the purposes of this exercise. This also applies to profiling, insofar as it is associated with such direct advertising. If the data subject objects to the processing by K-Moon for direct marketing purposes, K-Moon undertakes not to process the personal data for these purposes anymore.

                  Furthermore, the interested party has the right, for reasons deriving from his particular situation, to oppose the processing of personal data concerning him by K-Moon also for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 paragraph 1 of the GDPR, unless such processing is necessary to fulfill an obligation of public interest.

                  To exercise the right of opposition, the interested party can directly contact any collaborator of K-Moon or any other collaborator. The interested party is also free, in the context of the use of information society services, despite Directive 2002/58 / EC, to exercise his right to object through automated procedures using technical specifications.

                8. Automated decisions in individual cases, including profiling

                  9. Any person affected by the processing of personal data has the right, as guaranteed by the European legislator and the directives, not to be subjected to a decision based exclusively on automated processing, including profiling, which has a legal effect on themselves or, in a way analogous, which significantly affects it; unless the decision is necessary for the conclusion or execution of a contract between the data subject and the data controller or is permitted by the legislation of the Union or of the Member State to which the data controller is subject and that the legislation provides for appropriate measures in order to safeguard the rights and freedoms as well as the legitimate interests of the data subject or with the explicit consent of the data subject.

                  If the decision is required to conclude or execute a contract between the data subject and the data controller or is made with the explicit consent of the data subject, K-Moon will take appropriate measures to safeguard the rights and freedoms and legitimate interests of the person concerned, including at least the right to obtain the intervention of a person appointed by the data controller to express his position and thus challenge the decision.

                  If the interested party wishes to claim the rights inherent in automated decisions, he or she can contact an employee of the data controller at any time.

                9. Right to withdraw data protection consent

                  10. Any person affected by the processing of personal data has the right, granted by the European directive and by the regulatory authority, to withdraw consent to the processing of personal data at any time.

                  If the interested party wishes to claim the rights inherent in automated decisions, he or she can contact an employee of the data controller at any time.

                   

                  © 2026 K-Moon.
                  American Express Apple Pay Google Pay Maestro Mastercard Shop Pay Union Pay Visa