According to the provisions of article 13 of the European Regulation n. 2016/679 (General Data Protection Regulation – GDPR), the company FRAGIACOMO SHOP S.r.l., as Controller inform you that your personal data shall be processed as follows:
1. Conditions of the processing
Your personal data shall be processed by the Controller exclusively in an IT format and through the Internet.
2. Purpose of the processing
Your personal data shall be processed according to the provisions of the GDPR for the following purposes:
A) For the management of the on-line sale contract signed through the Internet website indicate above;
B) In case of explicit and separated consent, for marketing purposes for sending advertising messages via email about the Controller products, without any transferring of the personal data to third parties.
The processing of your personal data is realized through the operations indicated in article 4 comma 1 n. 2) of the GDPR and, in particular: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Your personal data are processed in an electronic/automatic manner.
Your personal data shall be stored:
• For the purpose of point A) above for the conclusion and the management of the on-line sale contract signed through this Website;
• For the purpose of point A) above for a 10 years period as indicated by the accounting and tax Italian Law in force;
• For the purpose of point B) above, with explicit and separated consent, until the cancellation request sent by the data subject to the Controller and anyway for a period not exceeding 1 year, except the case of a renewal of the explicit consent.
4. Access to the personal data
Your personal data shall be accessed for the purpose indicate above by:
• Controller’s employees and collaborators as designated subjects;
• Any other subject indicated by the Controller for the purposes included in this Privacy Information.
5. Communication and personal data diffusion
Your personal data, collected as per above, shall not be diffused, transferred or exchanged in any way with any other third party except as indicated in this Privacy Information.
6. Personal data transfer
The management and the storage of your personal data shall be executed using server located in the European Union. Your personal data shall not be transferred in any Country out of the European Union. The Controller, if necessary, could move the server out of the European Union. In this case, the Controller undertakes that the transfer of the personal data in any Extra UE Country shall be executed according to the applicable Laws and signing contracts warranting an adequate level of protection of the personal data, as indicated in the provisions of GDPR.
7. Personal data providing and consequences of the failure of the providing
Providing of the personal data for the purposes indicated in point A) above is necessary for the management of the on-line sale agreement signed through this Website. The failure of the providing shall make impossible the management of the on-line sale agreement.
Providing of your personal data for the purposes indicated in point B) above is optional and subject to explicit and separated consent at the bottom of this Privacy Information.
8. Rights of the data subject
As data subject, you have all the right indicated in article 15 and following of the GDPR, in particular:
I. To obtain from the Controller the confirmation as to whether or not personal data concerning him or her are being processed;
II. To obtain: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed; d) where possible, the envisaged period for which the personal data will be stored and, if not possible, the criteria used to determine that period;
III. To obtain: a) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object such processing; b) the right to lodge a compliant with a supervisory authority; c) the rectification of personal data concerning him or her without undue delay.
IV. To obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.
V. To object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
9. How to exercise data subject rights
You could exercise the rights indicate above at any time sending an email or a registered mail to the Controller.
11. Data Controller
The Data Controller is:
FRAGIACOMO SHOP S.r.l.
Via Carlo Espinasse, 163
20156 – Milano