INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 (GDPR)
1. NATURE OF THE DATA PROCESSED. DATA CONTROLLER
This information is prepared by F.B. s.r.l. (P.IVA 03105310134), with registered office in Mozzate (CO), Via Mattei n. 11 (22076), number REA Camera di Commercio di Como 296259, share capital in euro 10,000.00 (i.v.) (F.B.), telephone 0287366253 (from Monday to Saturday from 9:00 to 22:00, excluding Sundays and public holidays in Italy) (fixed number for a fee; to check the cost of the call please consult your telephone operator), email: firstname.lastname@example.org.
F.B. acts as data controller in relation to personal data provided by the user when registering on the website www.gioiapura.it (Site), or when purchasing products on the Site. This information is also intended for anyone who interacts with the pages of the Site without making any registration.
2. PURPOSE OF TREATMENT
F.B. will process the personal data provided by the user for the following purposes:
(a) to allow you to register on the Site and take advantage of services reserved for registered users. The legal basis of the treatment is your consent to the processing of your data to subscribe to the Site and access services reserved for registered users;
(b) in the event that the user makes use of the e-commerce service provided by F.B. on the Site:
1. to allow the correct execution by F.B. of the operations connected with the online purchase and, therefore, to allow it to fulfill correctly and punctually the obligations deriving from the contractual relationship established with the user, as well as the administrative and legal obligations connected to it. The legal basis for the processing is the existence of a sale and purchase agreement;
2. limited to the e-mail coordinates provided by the user in the context of the purchase of a product from the Site, to allow the direct sale of similar products (so-called soft spamming), provided that the user does not oppose such treatment. The legal basis of the processing is the legitimate interest of F.B. to send this type of communication;
(c) to reply to user requests by email. The legal basis of the processing is the legitimate interest of F.B. to respond to the requests of the user;
(d) for administrative and accounting purposes connected with registering on the Website and making an online purchase, as well as to comply with legal obligations;
(e) subject to your consent, to send newsletters and to carry out market surveys, also aimed at assessing the level of user satisfaction, and to send advertising material relating to F.B. products and/or services. and/or third parties, by means of automated systems, such as e-mail, fax, SMS or MMS, or by traditional means (e.g. paper mail or telephone) (marketing purposes); subject to your consent, for the elaboration of your commercial profile, by means of the survey and elaboration of your choices and purchasing habits on the Site, in order to monitor the degree of customer satisfaction to ensure better satisfaction of the needs of the same, and to send you advertising material relating to products and/or services of F.B. and/or third parties of your specific interest, by means of automated systems, such as e-mail, fax, sms or MMS, or by traditional means (e.g. paper mail or telephone) (profiling purposes). The legal basis of the processing is your consent to receive this type of communication;
(f) for statistical purposes.
The processing of personal data concerning the user will be mainly carried out with the help of electronic or automated means, in accordance with the methods and tools to ensure the security and confidentiality of the data, in accordance with the provisions of the GDPR. In particular, all technical, IT, organisational, logistical and procedural security measures will be adopted in order to guarantee the minimum level of data protection required by law, allowing access only to the persons in charge of the processing by the data controller or any managers designated by the owner.
The information acquired and the methods of treatment will be relevant and not excessive with respect to the type of services rendered.
The data will also be managed and protected in environments where access is under constant control
CREDIT CARD DETAILS
To make a payment on the Site by credit card, the user must enter the confidential data of the credit card (card number, holder, expiration date, security codes). Such data will be acquired by the provider of the payment service who will act as an independent data controller, without passing through the server of F.B. which, therefore, will not process such data in any way. The user who has registered to the Site may request, through the Site, the saving of such data but the data will be saved directly by the payment service provider and will not be acquired by F.B..
The sensitive or judicial data of the user do not constitute the object of treatment by F.B..
IP ADDRESSES AND LOG FILES
F.B. will keep, within the terms of the law, the log files and IP addresses used when making a purchase online, in order to prevent and detect any fraud in online transactions.
You can access the Site without being asked to provide any personal information. However, the computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet.
This information is not collected to be associated with identified interested parties, but also by their very nature could, through processing or associations, allow the identification of the user.
This category includes IP addresses or domain names of computers used by the user connecting to the Site, Url addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, etc.. These data are used only to obtain anonymous statistical information on the use of the Site (such as, in particular, the number of accesses) and to check its correct functioning and are deleted immediately after processing. This process does not involve the processing of directly identifying information.
3. CONFERMENT OF DATA AND CONSEQUENCES IN CASE OF LACK OF CONSENT TO THE PROCESSING
The provision of data for the purposes referred to in points (a), (b.1) and (d) of art. 2 is merely optional. However, since such processing is necessary to allow registration to the Site and the making of the online purchase service, any refusal by the user to provide the data in question will make it impossible to register to the Site and conclude an online purchase.
The provision of data for the purposes referred to in point (c) of art. 2 is optional. However, since such processing is necessary to allow the user to respond to requests, any refusal to provide the data in question will make it impossible for F.B. to respond to requests.
Consent to the processing of your data for marketing, profiling and transfer purposes is merely optional. Failure to do so will only entail the consequences described below.
Failure to consent to the processing of data for marketing purposes will make it impossible for you to receive advertising material relating to products and / or services of F.B. and / or third parties and the impossibility for F.B. to conduct market surveys, including directed to assess the degree of user satisfaction, and to send you newsletters.
Failure to consent to the processing of your personal data for profiling purposes will make it impossible for F.B. to process your commercial profile, by collecting your choices and buying habits on the Site (also in order to ensure greater satisfaction of customer needs), and to send you advertising material relating to goods and / or services of F.B. and / or third parties, of your specific interest.
The user may, in any case, revoke any consent given for marketing or profiling purposes by contacting F.B. at the addresses indicated in Article 1; (ii) by clicking on the link "click here" in each promotional communication and newsletter sent by email by F.B.; (iii) access your personal page on the Site.
4. SCOPE OF DATA COMMUNICATION
The personal data provided by the user, for the purposes described in art. 2 above, may be brought to the attention of or communicated to the following subjects:
- employees and/or collaborators of F.B. for the performance of administration, accounting and IT and logistical support activities who act as, respectively, managers and processors;
- to the company that sends, on behalf of F.B., the promotional communications and newsletters transmitted on behalf of F.B.;
- the entities that handle online payment transactions;
- to all those public and/or private subjects, natural and/or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional to the correct fulfilment of the contractual obligations undertaken in relation to the services provided through the Site, as well as the obligations deriving from the law;
- freight forwarders and those responsible for delivering and/or collecting the products purchased;
- to all those subjects (including the Public Authorities) who have access to the data by virtue of regulatory or administrative measures.
All personal data provided by the user in connection with registration on the Site and/or purchase through the Site are not subject to dissemination. The updated list of those responsible for and in charge of the processing is available at the offices of the data controller.
5. DATA RETENTION
The user's data will be kept only for the time necessary to ensure the proper provision of the services offered.
In the event of closure of the account of the Site at the initiative of the user, the data contained therein will be stored for administrative purposes for a period not exceeding one quarter, without prejudice to any specific legal obligations on the storage of accounting documents or for purposes of public security. In order to close your personal account on the Site, the user can contact F.B. at the addresses indicated in art. 1 or click on the link "Delete profile" on your personal page. In any case, it is understood that personal data will be stored and processed for the purposes referred to in letter (d) of art. 2 above, for the period of time allowed by law and the provisions of the Guarantor for the Protection of Personal Data. Before this period F.B. may ask the user to renew consent to the processing of his data for such purposes or make the same anonymous and keep them only for statistical purposes.
6. USER PRIVACY RIGHTS
Pursuant to Art. 13 of the GDPR, F. B. informs you that you are entitled to:
- ask F. B. for access to personal data and for their rectification or erasure, or for the limitation of the processing of personal data concerning you, or to oppose their processing, in addition to the right to data portability;
- withdraw consent at any time without prejudice to the lawfulness of the processing based on consent given prior to the withdrawal;
- lodge a complaint with a supervisory authority (e.g. the Data Protection Supervisor).
The above rights may be exercised with a request addressed without formalities to F. B. to the contacts indicated in art. 4 above.
In particular, F.B. informs you that the right to portability implies that you have the right to receive in a structured format, in common use and readable by an automatic device the personal data concerning you provided to F.B. and has the right to transmit such data to another owner of the processing without hindrance by F.B..
The above rights may be exercised with request to the data controller, at the addresses indicated in art. 1.