Sign up for our newsletter to stay updated on promotions and sales

privacy

Privacy Policy updated on May 24, 2018
This Website collects some Personal Data from its Users.

Data Controller

Military Surplus di Mattesini DanielaSR71 46
52043 Castiglion Fiorentino
ArezzoP. Iva 00364160515E-Mail info@military-surplus.it
Types of Data collected
Among the Personal Data collected by this Website independently or through third parties are: Cookies, Usage Data, name, surname, gender, date of birth, telephone number, VAT number, company name, profession, address, fax number, country, state, province, email, postal code, various types of Data, city, Tax Code, User ID, website, username, and geographical position. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data without any consequences on the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Website or the owners of third-party services used by this Website, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees to have the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.

Method and place of processing the collected Data Method of processing
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Processors can always be requested from the Data Controller. Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions exists: the User has given consent for one or more specific purposes. Note: In some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects ("opt-out") to such processing. This is not applicable, however, if the processing of Personal Data is governed by European data protection legislation. the processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures. the processing is necessary to fulfill a legal obligation to which the Data Controller is subject. the processing is necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the Data Controller. the processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party. It is always possible to ask the Data Controller to clarify the concrete legal basis of each processing, and in particular to specify whether the processing is based on law, provided for by a contract, or necessary to conclude a contract. Location
The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data. The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or constituted by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data. If one of the transfers just described takes place, the User can refer to the respective sections of this document or ask for information from the Data Controller by contacting them at the details provided at the beginning. Retention period
Data is processed and stored for the time required by the purposes for which it was collected. Therefore: Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of such contract is completed. Personal Data collected for purposes attributable to the Data Controller's legitimate interest will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller. When the processing is based on the User's consent, the Data Controller may retain Personal Data for a longer period, until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted. Therefore, at the expiry of this term, the right of access, erasure, rectification, and the right to data portability can no longer be exercised.

Purpose of Processing the collected Data
User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Access to accounts on third-party services, Statistics, Contacting the User, Interaction with social networks and external platforms, Content commenting, Contact management and message sending, RSS feed management, Payment management, Interaction with data collection platforms and other third parties, Location-based interactions, SPAM protection, Registration and authentication, Platform and hosting services, Data transfer outside the EU and Displaying content from external platforms. To obtain more detailed information on the purposes of the processing and on the Personal Data specifically relevant for each purpose, the User can refer to the relevant sections of this document. Facebook permissions required by this Website
This Website may request certain Facebook permissions that allow it to perform actions with the User's Facebook account and collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network provided by Facebook Inc. For more information on the following permissions, please refer to the Facebook permissions documentation and the Facebook privacy policy.

The requested permissions are as follows: Basic information
The basic information of the User registered on Facebook, which normally includes the following Data: ID, name, image, gender, and localization language, and in some cases, Facebook "Friends". If the User has made additional Data publicly available, it will be available. Friends' 'About Me'
Provides access to the 'About Me' section of friends' profiles. Private data access
Allows access to the private data of the User and friends. Access to posts on the User's timeline
Provides access to posts on a User's timeline. Activity access
Provides access to the User's activity list. Access to friend lists
Provides access to the friend lists that the User has created. Access to custom friend lists
Provides access to the names of custom lists that the User has created to organize their friends. Request access
Provides read access to the User's friend requests. News Feed Access
Provides access to News Feed posts and allows the application to search it. Offline access
Allows data access when the User is not connected. Page CTA access
Provides access to manage calls to action on pages managed by the User.

Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services: Access to accounts on third-party services
These types of services allow this Website to retrieve Data from your accounts on third-party services and perform actions with them.
These services are not activated automatically but require the User's express authorization. Facebook account access (this Website)
This service allows this Website to connect with the User's account on the Facebook social network provided by Facebook Inc.
Permissions requested: Friends' 'About Me', Private data access, Access to posts on the User's timeline, Activity access, Access to friend lists, Access to custom friend lists, Request access, News Feed Access, Offline access and Page CTA access.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. Twitter account access (Twitter Inc.)
This service allows this Website to connect with the User's account on the Twitter social network provided by Twitter Inc.
Personal Data collected: various types of Data as specified by the service's privacy policy.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Content commenting
Commenting services allow Users to formulate and publicly share their comments regarding the content of this Website. Users, depending on the settings decided by the Data Controller, can also leave comments anonymously. If the Personal Data released by the User includes email, this could be used to send comment notifications regarding the same content. Users are responsible for the content of their comments. In the event that a commenting service provided by third parties is installed, it is possible that even if Users do not use the commenting service, it will collect traffic data relating to the pages on which the commenting service is installed.

Directly managed commenting system (this Website)
This Website has its own content commenting system.
Personal Data collected: surname, Cookie, Usage Data, email, name, telephone number, website, and username.

Contacting the User Contact form (this Website)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form's heading. Personal Data collected: postal code, city, Tax Code, surname, date of birth, email, User ID, address, country, name, fax number, telephone number, VAT number, profession, province, company name, gender, website, state, and various types of Data. Mailing list or newsletter (this Website)
By registering for the mailing list or newsletter, the User's email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering with this Website or after making a purchase. Personal Data collected: postal code, city, surname, Cookie, date of birth, Usage Data, email, address, country, name, telephone number, profession, province, company name, gender, website, and state.

Contact management and message sending These types of services allow managing a database of email contacts, telephone contacts, or contacts of any other type used to communicate with the User.
These services may also allow collecting data relating to the date and time of viewing messages by the User, as well as the User's interaction with them, such as information on clicks on links inserted in messages. MailChimp (The Rocket Science Group LLC.)
MailChimp is an address management and email sending service provided by The Rocket Science Group LLC.
Personal Data collected: surname, date of birth, Usage Data, email, address, country, name, telephone number, company name, gender, and username.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Interaction with data collection platforms and other third parties These types of services allow Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data.
If one of these services is installed, it is possible that even if Users do not use the service, it will collect Usage Data relating to the pages on which it is installed. MailChimp widget (The Rocket Science Group LLC.)
The MailChimp widget allows interaction with the MailChimp email address management and sending service provided by The Rocket Science Group LLC.
Personal Data collected: surname, Cookie, Usage Data, email, name, and telephone number.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Location-based interactions Geolocation (this Website)
This Website may collect, use and share Data related to the User's geographical location in order to provide location-based services.
Most browsers and devices by default provide tools to deny geographical tracking. If the User has expressly authorized this possibility, this Website may receive information about their actual geographical location.
Personal Data collected: geographical location.

Registration and authentication With registration or authentication, the User allows the Application to identify them and give them access to dedicated services.
Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this happens, this application may access some Data stored by the third-party service used for registration or identification. Facebook Authentication (Facebook Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook Inc. and linked to the Facebook social network.
Personal Data collected: various types of Data as specified by the service's privacy policy.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. Log In with PayPal (Paypal)
Log In with PayPal is a registration and authentication service provided by PayPal Inc. and linked to the PayPal network.
Personal Data collected: various types of Data as specified by the service's privacy policy.
Place of processing: Consult PayPal's privacy policy – Privacy Policy.

Statistics The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior. Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the collected Personal Data for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its advertising network.
Personal Data collected: Cookie and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Subject adhering to the Privacy Shield. Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the collected Personal Data for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the ads of its advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the Users' IP address within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States.
Personal Data collected: Cookie and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Subject adhering to the Privacy Shield.

Displaying content from external platforms These types of services allow viewing content hosted on external platforms directly from the pages of this Website and interacting with them.
If a service of this type is installed, it is possible that even if Users do not use the service, it will collect traffic data relating to the pages on which it is installed. Google Fonts (Google Inc.)
Google Fonts is a font style visualization service managed by Google Inc. that allows this Website to integrate such content within its pages.
Personal Data collected: Usage Data and various types of Data as specified by the service's privacy policy.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. MyFonts (MyFonts Inc.)
MyFonts is a typeface visualization service provided by MyFonts Inc. that allows this Website to integrate such content into its pages.
Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy. Google Calendar Widget (Google Inc.)
Google Calendar Widget is a calendar content visualization service provided by Google Inc. that allows this Website to integrate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. Google Maps Widget (Google Inc.)
Google Maps is a map visualization service provided by Google Inc. that allows this Website to integrate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. Instagram Widget (Instagram Inc.)
Instagram is an image visualization service provided by Instagram Inc. that allows this Website to integrate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. YouTube Video Widget (Google Inc.)
YouTube is a video content visualization service provided by Google Inc. that allows this Website to integrate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Payment processing Payment management services allow this Website to process payments by credit card, bank transfer, or other means. The data used for payment is acquired directly by the requested payment service provider without being processed in any way by this Website. Some of these services may also allow for the scheduled sending of messages to the User, such as emails containing invoices or payment notifications. PayPal (Paypal)
PayPal is a payment service provided by PayPal Inc. that allows the User to make online payments.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: Consult PayPal's privacy policy – Privacy Policy.

Interaction with social networks and external platforms This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interactions and information acquired by this Website are in any case subject to the User's privacy settings relating to each social network.
If a social network interaction service is installed, it is possible that even if Users do not use the service, it still collects traffic data relating to the pages on which it is installed. +1 Button and Google+ social widgets (Google Inc.)
The +1 button and Google+ social widgets are services for interacting with the Google+ social network provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. "Like" Button and Facebook social widgets (Facebook Inc.)
The "Like" button and Facebook social widgets are services for interacting with the Facebook social network provided by Facebook Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. Tweet button and Twitter social widgets (Twitter Inc.)
The Tweet button and Twitter social widgets are services for interacting with the Twitter social network provided by Twitter Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield. "Pin it" button and Pinterest social widgets (Pinterest)
The "Pin it" button and Pinterest social widgets are services for interacting with the Pinterest platform provided by Pinterest Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Tumblr button and social widgets (Tumblr Inc.)
The Tumblr button and social widgets are services for interacting with the Tumblr social network provided by Tumblr Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. YouTube button and social widgets (Google Inc.)
The YouTube button and social widgets are services for interacting with the YouTube social network provided by Google Inc.
Personal Data collected: Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

SPAM protection This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages, and content recognized as SPAM. Google reCAPTCHA (Google Inc.)
Google reCAPTCHA is an SPAM protection service provided by Google Inc.
The use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Subject adhering to the Privacy Shield.

Platform and hosting services These services are intended to host and operate key components of this Website, making it possible to provide this Website from a single platform. These platforms provide the Owner with a wide range of tools, such as analytical tools for user registration management, comment and database management, e-commerce, payment processing, etc. The use of such tools involves the collection and processing of Personal Data. Some of these services operate through servers located geographically in different locations, making it difficult to determine the exact location where Personal Data is stored. Tumblr (Tumblr Inc.)
Tumblr is a platform provided by Tumblr Inc. that allows the Owner to develop, operate, and host this Website.
Personal Data collected: various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.

Transfer of Data outside the EU The Owner may transfer Personal Data collected within the EU to third countries (i.e., all countries not part of the EU) only in accordance with a specific legal basis. Therefore, such Data transfers are carried out according to one of the legal bases described below. The User may request information from the Owner regarding the legal basis concretely applicable to each individual service. Other legal basis for the transfer of Data to third countries (this Website) When no other legal basis is applicable, Personal Data may be transferred from the EU to third countries only under one of the following conditions: the transfer is necessary for the performance of a contract concluded between the User and the Owner or pre-contractual measures taken at the User's request; the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the User by the Owner and another natural or legal person; the transfer is necessary for reasons of public interest; * the transfer is necessary for the establishment, exercise or defense of legal claims; the transfer is necessary to protect the vital interests of the Data Subject or of other persons when the Data Subject is physically or legally incapable of giving consent. In such cases, the Owner will inform the User about the legal basis applicable to the specific transfer through this Website. Personal Data collected: various types of Data. Transfer of Data from the EU and/or Switzerland to the United States on the basis of the Privacy Shield (this Website) When this is the legal basis, the transfer of Personal Data from the EU or Switzerland to the United States takes place on the basis of the EU-U.S. or Switzerland-U.S. Privacy Shield agreement. In particular, Personal Data is transferred to entities that have self-certified under the Privacy Shield and therefore guarantee an adequate level of protection for the transferred Data. The services involved in the Data transfer are listed in the respective sections of this document. Among them, those adhering to the Privacy Shield can be identified by consulting their privacy policy or by verifying the status of their registration in the official Privacy Shield list. Users' rights under the Privacy Shield are described in an always up-to-date form on the website of the United States Department of Commerce. The transfer of Personal Data from the EU or Switzerland to the United States to entities not (or no longer) registered with the Privacy Shield is only permissible under another valid legal basis. Users can request information from the Owner regarding such legal bases. Personal Data collected: various types of Data. Transfer of Data to countries that guarantee European standards (this Website) When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place on the basis of an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with reference to individual third countries that it considers to guarantee a level of Personal Data protection comparable to that provided by European legislation on Personal Data protection. The User can view the updated list of adequacy decisions on the European Commission's website. Personal Data collected: various types of Data. Transfer to third countries based on consent (this Website) When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place only when the User has expressly consented to such transfer after being informed of the risks due to the absence of an adequacy decision and the appropriate safeguards adopted. In such cases, the Owner informs Users and collects their consent through this Website. Personal Data collected: various types of Data. Transfer to third countries on the basis of standard contractual clauses (this Website) When this is the legal basis, the transfer of Personal Data from the EU to third countries takes place on the basis of standard contractual clauses for the protection of Personal Data adopted by the European Commission. In such cases, the recipients of the Data have agreed to process Personal Data in accordance with the protection levels provided by law. Users can request further information by contacting the Owner at the details indicated in this document. Personal Data collected: various types of Data.