Privacy information on the processing of personal data – in accordance with the (eu) regulation 2016/679 of the european parliament and the european council of april 27th 2016 (GDPR)
1. nature and owner of the processed data
The current privacy information was made by the Seller F.B. s.r.l. (Vat Number 03105310134), with registered office in Milano (MI), Via V. Monti n. 55 (20123) and administrative and operation office in Mozzate (CO), Via Mattei n. 11 (22076), REA number at the Chamber of Commerce of Milano, Monza Brianza, Lodi MI1874968, share capital of 10.000,00, with telephone number +39 0287366253 available from Monday to Saturday 9 AM – 10 PM, Sundays and festivities excluded (landline telephone number with fees that may change according to the provider) and e-mail address: firstname.lastname@example.org.
F.B. is the owner of the treated personal data, which are provided by the users as they submit in the website www.gioiapura.it (Website) or while purchasing products online in the Website. This privacy information is also aimed to any other users that visit the Website without proceeding with the profile registration.
2. purposes of the processing operations
F.B. shall process the personal data provided by the users for these purposes:
(a) to enable the users to submit in the Website and obtain the required services. The main legal purpose of this processing is the agreement with the treatment of the personal data so that they could submit in the Website and access to the required services;
(b) for users that purchase online goods sold by F.B. in the Website:
1. to enable the Seller to proceed with the correct execution of the operations related to the online purchase. Hence, in order to enable F.B. to respect the contract made with the users that proceed with the online purchase. This purchase contract is the main legal purpose of the data processing;
2. users shall be notified only to the e-mail address provided with the order placement, in order to enable the direct sale of similar articles (soft spamming). In any case, users have the chance to oppose to this data processing. The main legal purpose of this data processing is the interest of F.B. in sending this type of communications;
(c) to answer per e-mail or chat to all the requests made by the users. The legal basis of the treatment is the mutual interest of the Seller to respond to all the requests made by the users;
(d) for administrative reasons related to the registration in the Website and to the placement of an online purchase, as well as to respect the relevant terms;
(e) to send the newsletter communications, with the consent of the users, and for market research activities, aimed at understanding the level of user satisfaction. The data processing is also required to send advertising material related to products and/or services provided by F.B. and other partners. This material may be sent per e-mail, fax, sms, MMS, or also per mail or phone. With this consent, the processing can also be aimed at customizing the personal profile, by evaluating the personal choices and habits of the users in the Website, in order to supervise the level of customer satisfaction and to ensure the best service in line with every specific interest. The required condition for the data processing is the consent to these type of communications;
(f) for statistical purposes.
how data are processed
The personal data of the users are mainly processed through electronic means with specific tools, used always in respect of the privacy, according to the GDPR policy. All the technical and logistical methods are used to ensure the privacy and the safety of the processed data. In particular, all security measures set forth will be implemented so that the minimum level of security requested by the law is always guaranteed, allowing the access to the aforesaid data only to the subjects in charge of the data processing.
The acquired information and the methods of processing will be relevant in respect with the offered service.
The personal data shall be handled and protected in areas that are always under control.
credit card details
All the users that choose to pay with Credit Card shall insert the credit card details (credit card number, owner, expiry date and secure codes). Such personal data are acquired by the payment service provider, which shall act as an independent data controller, without passing from the server of F.B., which will not process such data. The users can choose to have the credit card details reminded in the Website, but all data are saved directly at the payment service provider and will not be handled by F.B..
Any eventual sensitive or judicial data of the users shall not be processed by F.B..
ip addresses and log files
According to the time limits prescribed by the law, F.B. shall store the log files and the IP addresses used to purchase online, in order to prevent and investigate on eventual fraudulent transactions made online.
It is possible to enter and visit the Website without being requested any personal data. However, the IT systems and the software used to operate the Website make use of some data, required for the normal communication protocols of the Web.
These data are not collected to be associated with specific users, but considering their nature, through elaborations and links, they shall allow the identification of the users.
These data include IP addresses or domain names of computers used by those who visit the Website, Url notification addresses, time of the request, the method used to make the request to the server and the file dimension obtained. These data are only used to acquire anonymous statistical information about the use of the Website (such as the number of accesses in the Website) and to check the correct functioning. In this case all the provided information is not processed and handled directly.
3. data provision and consequences in case of lack of consent to the data processing
The data provision for the purposes indicated in the sections (a), (b.1) and (d) is merely optional. However, as this processing is required to allow the registration in the Website and the online purchase service, the eventual refusal in the data provision will bring to the impossibility to submit in the Website and to conclude the purchase.
The data provision for the purposes indicated in the section (c) is optional. However, as this processing is required to answer eventual customer’s requests, the eventual refusal in the data provision will bring to the impossibility to respond to such requests.
The consent to the data processing for marketing, profiling and advertising purposes is merely optional. The lack of consent will only determine the following consequences.
The lack of consent of data processing for marketing purposes will make it impossible to receive newsletter and advertising material related to products and/or services provided by F.B. and/or other partners. In such case F.B. shall not proceed with market research activities, aimed at understanding the level of user satisfaction.
The lack of consent of data processing for profiling purposes means that F.B. shall not be allowed to process these profiles by evaluating your personal choices and habits in the Website (made to guarantee a proper level of customer satisfaction) to ensure the best service in line with the specific interest of every user.
In any case, all users can unsubscribe and refuse the consent previously agreed for advertising and profiling purposes. They shall contact F.B. at the contacts given in the section 1; (ii) by clicking in the indicated link in the relevant newsletter sent by the Seller; (iii) or by entering the personal account in the Website.
4. communication and diffusion of personal data
The personal data provided by the users, for the purposes indicated in the section 2, shall be disclosed and communicated to the following subjects:
- staff, employees and/or collaborators of F.B., in order to accomplish administrative, logistical and IT activities. These subjects act as persons in charge of the data processing;
- the company that deals with the newsletter and advertising material sent on behalf of F.B.;
- the subjects that deal with the transactions related to the online payment;
- all the public and private subjects, individuals and/or legal entities (legal and administrative offices), in case it is required or useful, in order to accomplish the contract duties and to meet the obligations under the applicable law;
- couriers and subjects in charge of the delivery and/or pick up of the purchased articles;
- all the subjects (included Public Authorities) that shall get access to the data due to legal or administrative provisions.
The personal data provided by the users for submitting in the Website and/or for purchasing online shall not be broadcasted or spread anyway. The updated list of the subjects in charge of the data processing is available at the legal office of the owner.
5. data storage
All the personal data shall be stored only for the time required in order to offer the services correctly.
In case the users request to close their account, their data shall be stored for administrative purposes for no longer than a trimester, excluding eventual specific data that shall be stored for accounting documents or for purposes related to public security. In order to close their personal profile, all users shall contact F.B. at the contacts given in the section 1, or by clicking in the section “Delete Profile” in the personal area. In any case, the personal data shall be stored and processed for the purposes indicated in the section 2.d, for the period of time permitted by law and by the Authority for the protection of personal data. Before such period, F.B. can request the users to renew the consent to data processing for such purposes or if they prefer to convert them into anonymous form and keep them only for statistical purposes.
6. user’s PRIVACY rights
F. B. informs the users about their rights, as they shall:
- request F. B. the access to the personal data or to unsubscribe, by requesting to cancel, remove or edit the personal data processing;
- remove the consent in any time without compromising the lawfulness of the data processing allowed before the consent removal;
- lodge a complaint with a supervisory authority (for instance the Authority for the protection of personal data).
The users shall make use of their rights without a formal request to F.B. to the previously indicated contacts in section 4.
In particular, F. B. informs that the users have the right to obtain a copy of your stored data in a structured and commonly used format, i.e. the right of portability. The users have the right to transmit such personal data to another data processing owner without being impeded by F.B..
Under specific request, the aforementioned rights can be exercised to the data processing owner, as indicated in section 1.