Privacy

Privacy.

Information on the processing of personal data pursuant to Article 13 of the European Regulation n.679 / 2016 concerning the protection of individuals with regard to the processing of personal data (GDPR)

Holder of the treatment and responsible for data protection

Bata Shoe Kenya PLC, as owner of the processing of personal data (hereinafter "Owner" or "Company") guarantees the utmost confidentiality in the processing of personal data of Data Subjects, in compliance with what is established by current legislation on the subject for the protection of personal data. The Company has identified the Data Protection Officer (Data Protection Officer) pursuant to Article 37 of the Regulation.

For all the information concerning: purpose of the processing, methods of processing and timing of data storage, we report the specific information provided for each case inviting you to read the contents of this document

Types of users

Guest user

Purpose and legal basis of the processing of data provided voluntarily by the user

The personal data of the person concerned will be processed for purposes strictly connected to the purchase of the product. In particular: management and execution of the contractual relationship and related obligations; fulfillment of obligations established by laws, regulations, Community legislation, as well as the instructions prepared by the authorities and supervisory bodies.

The legal basis of the processing is identified in the constitution, execution and possible termination of the purchase contract stipulated between you and the Company, and in the obligations related to the same and / or directly and / or indirectly arising from the same contract

Nature of data provision and consequences of refusal to respond. The Owner processes the personal data necessary for the purchase of the product, in particular name and surname, contact details such as e-mail address and mobile number, address of residence or domicile.

The Owner may also save cookies, as described in more detail in the Cookie Policy

The provision of data is optional. However, failure to provide the requested data may make it impossible to establish or continue, in whole or in part, the contractual relationship and to respond to requests for service provision.

Processing methods and data retention period

The processing will take place with instruments that guarantee the security and confidentiality of the data. Data may also be processed using automated tools to store, manage or transmit the data

The processing of your personal data is carried out by means of the operations. The data together with the information relating to the order will be kept for the time necessary to provide assistance and support in case of return and / or resolve any problem relating to the order and, in general, for the management and execution of the contractual relationship and the related compliance with obligations established by laws, regulations, Community legislation, as well as the instructions prepared by the authorities and supervisory bodies

User entered in the bata club

Purpose and legal basis of the processing of data provided voluntarily by the user

The Participant's personal data will be processed for purposes strictly related to participation in the Bata Club Program and so: purposes related to the administrative management of Bata Club and the related points program; management and execution of the contractual or pre-contractual relationship with customers / users in Kenya; fulfillment of obligations established by laws, regulations, Community legislation, as well as instructions prepared by authorities and supervisory bodies; loyalty retention in the strict sense to give advantages, services (including sending newsletters) and prizes connected to the Bata Club program registration; information purpose of the advantages and services of the Bata Club program based on the study of the tastes and consumption habits of the participant.

Nature of data provision and consequences of refusal to respond

The Data Controller processes the personal data necessary for participation in the Bata Club program, in particular name and surname, e-mail, post code and nationality, telephone number, date of birth, gender. The Owner may also save cookies, as described in more detail in the Cookie Policy

The provision of data is optional. However, failure to provide the requested data may make it impossible to establish or continue, in whole or in part, the contractual relationship and to respond to requests for service provision

Only with the explicit consent of the Participant the data can be used for sending advertising, promotional material and for reserved offers (via e-mail, text messages, messaging applications, mail, telephone contact) as well as for the creation of personalized services through the study of his tastes and his consumption habits.

It should be noted that any refusal to provide data for the purposes of marketing and profiling as described above will make it impossible to follow up on the related activities but will not affect participation in the "Bata Club" initiative

Processing methods and data retention period

The processing will take place with instruments that guarantee the security and confidentiality of the data, in compliance with the law. Data may also be processed using automated tools to store, manage or transmit the data.

The data is processed and stored both manually and electronically, for the time necessary to carry out all the activities related to the Program called Bata Club for a period not exceeding 5 years, save the actual transformation into anonymous form that does not allow, even indirectly or by linking other data banks, to identify the interested parties. Extensions of the aforementioned storage times are permitted within the time limits prescribed by civil and fiscal regulations.

Providers

Purpose and legal basis of the processing of data provided voluntarily by the user

Your personal data, including personal and fiscal data, as well as the details of your bank account, will be processed for purposes linked to compliance with the legal and regulatory provisions in force in civil, fiscal and tax matters as well as the provisions issued by the competent authorities, to the activities relating to the management of the contractual relationship in accordance with current legislation, to the need to defend a right in court or in the appropriate locations provided for by the laws and regulations in force

The legal basis of the processing is identified in the constitution, execution and possible termination of the supply contract stipulated between you and the Company, and in the obligations related to the same and / or directly and / or indirectly arising from the same

Nature of data provision and consequences of refusal to respond

The provision of data for the purposes referred to in the previous paragraph is mandatory. The data acquired, object of this information, are essential for the completion of the contractual relationship and for the subsequent execution of the contractual relationship deriving from the same. Any refusal to provide the requested data and / or their inaccuracy could make it impossible to provide:

compliance with the laws and regulations in force in civil, fiscal and tax matters as well as the provisions issued by the competent authorities to the correct regulatory, technical and economic management of the contractual relationship; to action or defense of a right in court or in the appropriate forums provided for by the laws and regulations in force

Processing methods and data retention period

The processing will take place with instruments that guarantee the security and confidentiality of the data, in compliance with the law. Data may also be processed using automated tools to store, manage or transmit the data.

The data provided will be kept for the entire duration of the contract with our Company and, subsequently, for all the necessary time, for purposes related to the fulfillment of regulatory obligations in administrative, accounting, tax, fiscal and civil law. At the end of the retention period, the data will be automatically canceled in whole or in part (according to the applicable legislation) or made anonymous.

Scope of knowledge and communication of data

Your data may be made accessible for the purposes indicated above to the following subjects

Data Controller Staff authorized for processing pursuant to the Regulation;

Third parties, such as Group companies of which the Data Controller is a part and / or third parties that carry out outsourced activities on behalf of the Data Controller (for example: professional offices, consultants and / or external system administrators for the time strictly necessary for optimal performance of this service), which will process the data as Data Processors in line with the Regulation, appropriately appointed by means of a dedicated nomination act, indicating the methods of treatment and the security measures that they must adopt to the management and storage of personal data owned by the Company

Without your express consent, the Owner may communicate your data to supervisory bodies, judicial authorities and to all other subjects to whom the communication is obligatory by law for the fulfillment of the aforementioned purposes. The complete list of subjects to whom your personal data have been or may be communicated is at your disposal after your request to be made by e-mail to the address customer.service.kenya@bata.com

Rights of the interested party

The subjects to whom the personal data refer can at any time exercise the rights referred to in articles 15 to 22 of the GDPR. In particular

The interested party has the possibility to obtain from the Data Controller confirmation of the existence or not of personal data concerning him, and in this case, access to the following information

Purpose of the processing, Categories of personal data processed, Recipients or categories of recipients to whom personal data have been or will be communicated, in particular if recipients of third countries or international organizations; Period of storage of personal data provided or, if this is not possible, the criteria used to determine this period;

If the data is not collected from the interested party, all available information on their origin; The existence of an automated decision-making process and, in such cases, significant information on the logic used, as well as the importance and expected consequences of this treatment for the data subject;

In addition, the interested party has the right to:

To obtain the updating, rectification or integration of your data, cancellation, in the terms allowed by legislation, or request that the limitation of processing be anonymized, and has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you;

Obtain the portability of electronically processed data, provided on the basis of consent or contract;

Revoke your consent, if required, without prejudice to the lawfulness of the treatment based on consent before the revocation;

Propose a complaint to a Control Authority

The interested party may at any time exercise his rights in the following ways:

Sending an e-mail to the address: customer.service.kenya@bata.com

The data controller will provide the information relating to the action taken regarding the request pursuant to articles 15 to 22 without unjustified delay and, in any case, at the latest within one month of receipt of the request. This deadline may be extended by two months, if necessary, given the complexity and number of requests. The data controller will inform the data subject of this extension, and of the reasons for the delay, within one month of receiving the request.

Modifications to this document

This document may change. We therefore recommend that you regularly check this document and refer to the most up-to-date version. Current version: Oct 2019