Privacy Policy

1. Introduction

Big Tunnel (hereinafter referred to as “we”, “us”, “our” or “Company”) cares about your privacy and places great importance on safeguarding your data. The following Privacy Policy (“Privacy Policy”) explains our privacy practices for the activities described below. As required by your rights, we inform you about how we collect, store, access and process information about individuals. In this Privacy Policy, “Personal Data” means any information that, alone or in combination with other available information, can identify a natural person.

We are committed to protecting your privacy in accordance with the highest level of privacy regulation. Therefore, we follow the obligations under

Canada Personal Information Protection and Electronic Documents Act (PIPEA) and applicable provincial legislation
the EU General Data Protection Regulation (GDPR)
Brazilian Data Protection Legislation (LGPD)
California's Consumer Protection Act (CCPA) and California Online Privacy Protection Act (CalOPPA)


Scope of application
This policy applies to Big Tunnel websites and domains.

This Policy does not apply to any third-party applications, websites, products, services or platforms that you may access through links (not involving Big Tunnel) that we provide. Those sites are owned and operated by third parties and have their own privacy and data collection practices. Any personal information you provide to those sites will be governed by the third party's privacy policy. We cannot be responsible for the actions or policies of these independent sites and we do not accept responsibility for their content or privacy practices.


Processing activities

This Privacy Policy applies when you interact with us in any of the following ways:

By using our application and services as an authorized user
By visiting any website linked to this Privacy Policy
By receiving any communication from us, including newsletters, emails, phone calls or SMS

2. PERSONAL DATA COLLECTED BY US

DATA PROVIDED BY THE USER

When you make or attempt to make a purchase, we collect personal information as part of the order information.

The data in question includes the following:

Account information, such as name, email address, and password
Payment information, such as billing address, telephone number, credit card, debit card or other payment method
We also collect the following personal data

Purchase information especially if personalized or unique
Location data
If you provide us or our service providers with Personal Data about other people, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Privacy Policy. If you believe that your Personal Data has been improperly provided to us, or to otherwise exercise your rights regarding your Personal Data, please contact us using the information set out in the Contact Us section below.


DEVICE AND USAGE DATA

When you visit a Big Tunnel website, we automatically collect and store information about your visit using browser cookies (files that we send to your computer) or similar technologies. You can set your browser to refuse all cookies or to indicate when a cookie is allowed. The Help feature on most browsers will tell you how to accept cookies, disable them, or notify you when you receive a new cookie. If you do not accept cookies, you may not be able to use some of the features of our service, so we recommend that you keep them enabled.

We also process information when you use our services and products. This information may include the following:
Timestamp
Location information
Specific products viewed by the user
Web search terms that brought the user to the site

DATA COLLECTED THROUGH THIRD PARTIES

We may receive your personal data from third parties, such as companies that receive services from Big Tunnel, business partners and other sources. This information is not collected by us but by third parties and is therefore subject to their own privacy and data collection policies. We have no control or influence over how third parties handle your personal data. As always, you have the right to review and correct the information in question. If you have any questions, you should first contact the relevant third party to obtain further information about their personal data. If the third party is unwilling to respect your rights, you may contact the Data Protection Officer at Big Tunnel (contact details below) for our assistance.

Our websites and services may contain links to other websites, applications and services operated by third parties. The information practices of these services or the social media sites that host our personalized social media pages are governed by their own privacy policies, which you should review to better understand their privacy practices.


PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

With your consent, we collect and use your personal data to provide, manage, and develop our products and services and to understand how to improve them.

Our goals include the following:

Provision of products or services
Order processing, including electronic and non-electronic shipments
Providing, developing and improving our products and services
Delivering, operating, debugging, and improving our products and services.
Opportunity for the user to access Big Tunnel services and set up accounts.
Offering the user technical and customer support.
When we process your personal data to provide you with a product or service, we do so because it is necessary to perform our contractual obligations. All of the processing activities described above are necessary in our legitimate interests to provide you with products and services and to maintain our relationship with you while protecting our business, for example in the event of fraud. We need your consent to start providing services to you. Further consent will be required if the types of data we collect change. Under our contract, not providing your consent may mean that some services will not be available to you.


SHARING AND DISCLOSURE

We limit the sharing of your personal information with third parties to the ways described in this Policy or specified at the time the information is collected.

Our online store is operated by Shopify. Learn more about how Shopify uses personal information here:

https://www.shopify.com/legal/privacy
We also reserve the right to use your personal information to provide you with targeted marketing through advertisements or communications (e.g. newsletters).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative (“NAI”) information page at the following address:

http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
You can also refuse some of these services by visiting the dedicated portal of the Digital Advertising Alliance, available at the following address:

http://optout.aboutads.info/

LEGAL OBLIGATION

We reserve the right to use or disclose your personal information to comply with a legal obligation, a request from a public or government agency, in the event of legal proceedings, or to prevent serious injury or death or to protect our rights or property. Where possible and practical, we will provide you with advance notice if such disclosure is necessary.


SERVICE PROVIDERS AND OTHER THIRD PARTIES

We may use a third party service provider, independent contractor, agency or consultant to provide and help us improve our products and services. Service providers may be located inside or outside the EEA. We may share your personal data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others, but only to maintain and improve our products and services. For more information about the recipients of your Personal Data, please contact us using the information in the Contact Us section below.

3. COOKIE MANAGEMENT

WHAT ARE COOKIES?u

n cookie is a small file containing information that your browser stores on your device. The information contained in this file is generally shared with the owner of the site as well as with potential partners and third parties of such activity. The collection of this information can be used to improve the functioning of the site and/or your experience.


How we use cookies
To offer you the best possible experience, we use the following types of cookies:

Strictly Necessary. As a web application, we need some essential cookies to run our services.
Preference.
We use preference cookies to help us remember how you like to use our services.
Some cookies are used to personalize content and provide you with a tailored experience. For example, your location may be used to provide you with services and offers in your area.
Analytics.
We collect analytics data about the types of people who visit our site to improve our services and products.

4. STORAGE AND ELIMINATION
We retain your personal data only for as long as is necessary for the purpose for which it was collected and to the extent required by applicable law. When such data is no longer necessary, we delete it from our systems and/or take steps to anonymize it.

5. PRIVACY OF MINORS
We will not knowingly collect personal information from children under the age of 16.

6. USER RIGHTS ON THEIR PERSONAL DATA
Depending on your geographic location and citizenship, your rights will be subject to specific local data privacy laws. These rights may include:

Right of access (PIPEDA, Article 15 of the GDPR, CCPA, LGPD)
You have the right to request a copy of the personal data we process about you.

Right to rectification (PIPEDA, Article 16 of the GDPR, LGPD)
You have the right to request that we correct any personal data we process about you that is incomplete or inaccurate.

Right to erasure (right to be forgotten) (Article 17 of the GDPR, CCPA, LGPD)
You have the right to request the deletion of personal data about you that we process. It is understood, however, that we will not be required to do so if the retention of such data is necessary to comply with a legal obligation or to ascertain, exercise or defend a right in court.

Right to restriction of processing (Article 18 of the GDPR, LGPD)
You have the right to request that we restrict the processing of your personal data where you believe that the data is inaccurate or that our processing is unlawful, or where the processing is no longer necessary for a particular purpose. An exception to this is where we are unable to delete the data due to legal or other obligations or because you do not want us to delete it.

Right to portability (PIPEDA, Article 20 of the GDPR, LGPD)
You have the right to obtain the personal data we hold about you, in a structured and electronic format, and to transmit them to another data controller, where (a) they are personal data provided by you and (b) such data are processed by us based on your consent or to perform a contract with you or with the third party to whom Big Tunnel services are provided.

Right to object (Article 21 of the GDPR, LGPD)
Where the legal justification for our processing of your personal data is our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. We will comply with such requests unless there are compelling legitimate grounds for the processing which override your interests and rights, or the processing is necessary for the establishment, exercise or defence of legal claims.

Right to Non-Discrimination (CCPA)
You have the right not to be denied service or offered a different experience because you have exercised any of your rights under the CCPA.


REVOCATION OF CONSENT

If you have given us your consent to process your personal data, you have the right to withdraw your consent at any time without paying any penalty, such as if you wish to unsubscribe from marketing communications sent by us. If you wish to withdraw your consent, please contact us using the details at the bottom of this page.


HOW TO EXERCISE YOUR RIGHTS

You may request to exercise any of these rights in relation to your personal data by clicking the Next button below.

To protect your privacy and security and at our discretion, we reserve the right to verify your identity before providing you with the requested information.


7. MODIFICATIONS
We reserve the right to modify this Policy at any time. If we make any changes, we will post an updated version on this website. When you use our services, you are asked to review and agree to our Privacy Policy. This will record your acceptance and notify you of any future changes to the Policy.


8. COMPLAINTS
If you have any complaints about this Policy or any of your personal data held by us, please contact us using the form below. If this does not satisfy you, you may have the option of lodging a complaint with your local data protection authority.

Users residing in the EEA are invited to visit the website (http://ec.europa.eu/newsroom/article29/document.cfm?action=display&doc_id=50061) to consult a list of local data protection authorities.


9. CONTACT US
To request a copy of your data for your information, unsubscribe from our mailing list, request deletion of your data or ask a question about the confidentiality of the same, simply follow a simple procedure:

Big Tunnel

Write to us at:

Big Tunnel Data Protection Officer

Dead End 1, Anguillara Sabazia , RM 00061, Italy