General information regarding our Privacy Policy
Welcome to our website www.artedeimercatanti.com.
We invite you to read our Privacy Policy carefully. It applies whenever you access the Site and, more generally, whenever you navigate within it or utilize the services it offers, regardless of whether you actually purchase any products. By consulting the Site or sending us an e-mail via the section ‘Contacts’ or to an e-mail address indicated on the Site, personal data relating to identified or identifiable individuals may in fact be processed.
This document therefore explains to users (‘Data Subjects’) the methods adopted to handle processing operations, and also constitutes a privacy notice, submitted in keeping with legislation regulating the Protection of Personal data.
This Privacy Policy also provides information to help you understand how we collect and use data that identify users. If you require any further information on our Privacy Policy, you can contact the customer assistance service.
1. THE DATA CONTROLLER
The Data Controller is the company Fiordaliso S.r.l., Via Giuseppe Paolini 11/D, Prato (PO), tax code and VAT registration no. 01948650971. The Data Controller establishes the purposes for which data are processed and the methods adopted.
2. PURPOSES FOR WHICH DATA ARE PROCESSED AND LEGAL BASIS
2.1. Collection of data
Fiordaliso S.r.l. collects personal data and other information directly from its users as part of the online registration process, via web pages dedicated to new commercial initiatives (e.g. landing page) or through purchase orders for products on the website in order to complete e-commerce transactions. These data are processed by Fiordaliso S.r.l. within the limits and for the purposes described in the privacy notice submitted to the user, in the section dealing specifically with the collection of data, or in this Privacy Policy, and may also be transferred to third parties for purposes linked to the supply of the services requested by the customer (as dealt with in further detail in the paragraph headed “Subjects to whom personal data may be transferred”).
2.2 Purposes and legal basis
Personal data are collected and processed by Fiordaliso S.r.l. for purposes strictly linked to the use of the website, the services it offers (which may also include marketing activities) and the purchasing of products. More precisely, your personal data may be processed for the following purposes:
- to provide services relating to registration and access to reserved areas or to specific services (during website registration processes, we collect the relevant e-mail address, personal data and/or shipment information and the password, with the use of on-line registration forms);
- when expressly requested, to send our newsletter by e-mail;
- for necessary purposes in order to provide full information and assistance regarding the services and/or the purchasing of products on the Site (in order to provide assistance services, we collect your personal data through our Customer Service in the section “Contact us”);
- in order to complete the purchasing of products on the Site (we collect your personal data, such as e-mail address, personal data, postal address, credit card and bank details and telephone number via the order form);
- in order to provide information regarding navigation problems, browser compatibility or uploading of web pages from the Site (collecting and processing data in response to a request for technical assistance);
- in order to prevent or discover fraudulent activity or improper use detrimental to the Site;
- so that Fiordaliso S.r.l. can exercise its rights (such as, the right to defend itself in legal actions);
- to allow you to save the products you like the most in your virtual shopping cart;
- having obtained express, specific consent, for marketing, analysis and profiling activities, such as:
- commercial information and/or promotions by paper mail (or flyer) and telephone or via electronic communications such as e-mails, text messages and other automated systems available for this purpose, aimed at publicizing new products and improving the services offered;
- market research and surveys on the quality of the services and customer satisfaction, also through specialized companies, with the aim of improving the products and services offered;
- profiling aimed at analyzing the needs, tastes, choices and habits of consumers, also through electronic processing, in order to provide information on products or services that reflect the preferences and interests of the users;
- analyses of aggregate data relating to the user’s behavior or analysis of the user’s behavior on the website.
The processing of your data for marketing and profiling purposes requires your clear, specific consent; nevertheless, we must inform you that the Data Controller may process your personal data for other purposes, even if you do not give your consent, in certain circumstances envisaged by the law (for example, whenever necessary in order to comply with a legal obligation) or whenever necessary in order to perform contractual obligations towards users (for example, if the user has purchased products on the Site) or when you have requested to benefit of specific services via our website.
All the personal data provided are therefore processed exclusively for purposes connected with the activities conducted by Fiordaliso S.r.l., on the following legal bases (defined as each case arises):
- consent (necessary for marketing, profiling purposes and/or to transfer your data to third parties or to personalize a user profile on the website);
- the execution of a contract to which the user is a party (e.g. to send information connected with the services via e-mail and/or text messages and/or any other means of communication, for the purpose, for example, of confirming an order or notifying that modifications have been made to our services, and to receive payments or transfer payments when a product is returned) or pre-contractual measures taken at the user’s request;
- the performance of legal obligations by which the Data Controller is bound;
- the legitimate interests of the Data Controller (as specified below).
Your personal data are processed mainly in electronic format, and in some cases also in paper format.
Marketing, advertising and promotional activities and the supply of information regarding products and services, as well as statistical analyses aimed at establishing the degree of customer satisfaction with the services offered, are carried out through traditional channels (such as paper mail and calls via the operator), and also digital automated channels (such as e-mail, text message, browser and social network).
The purposes for which your personal data are processed may, in any event, be made known specifically, as each case arises, in the privacy notice that the Data Controller submits to the user on the page on which the conferment of personal data is requested.
2.3 Legitimate interests of the data controller and/or third parties
As indicated above, Fiordaliso S.r.l. may process your personal data for marketing purposes, having first obtained your express consent, using the contact details provided when you registered on the Site. Nevertheless, in the legitimate interests of the Data Controller, if the ad relates to products similar to those already purchased, you may receive it at your e-mail address without your express consent, provided that you did not withhold your consent to the use in question when you provided your e-mail address or on subsequent occasions (so-called “soft spam” according to art. 130, paragraph 4, of Italian Legislative Decree no. 196/2003 dated 30 June 2003). Similarly, we may process your data without your consent in order to provide the services that you have willingly requested (in order, for example, to assess optimization of the efficiency of our advertising campaigns, to set up, exercise or defend the Data Controller’s rights, or when the processing is necessary in order to prevent fraud on the Site or to guarantee security and proper functioning).
3. NATURE OF THE DATA AND CONSEQUENCES OF REFUSING TO REPLY
The conferment of personal data to Fiordaliso S.r.l. (in particular, personal details, e-mail address, postal address and telephone number) is necessary in order to enter into the contract for the purchase of products on the Site.
Some of these data may, on the other hand, be of fundamental importance when supplying other services provided on the Site at your request or when performing obligations laid down by legislation or regulations.
The refusal to provide the data necessary for these purposes may make it impossible to execute the contract for the purchase of products on the Site or to provide other services available – such as assistance services – or also, to perform obligations laid down by legislation or regulations in a proper manner.
The transfer to the Data Controller of additional data, differing from those conferred as a mandatory requirement, for the purpose of performing its legal or contractual obligations, or of supplying particular services on request, is, on the other hand, optional and will not influence the use of the website and the services it offers, or the purchasing of products.
Depending on the case and whenever necessary, you will be duly informed, as each case arises, of whether the conferment of your personal data to the Data Controller is mandatory or optional. We will point out whether the transfer of your data is mandatory or optional with a notice (“please fill in this field”) or by means of a specific character (*) indicating that the information is mandatory or merely data required to provide services and permit products to be purchased on the Site. We remind you that failure to supply personal data when optional will not subject our users to any obligation or disadvantage them in any way.
4. TRANSFER OF DATA OUTSIDE THE EU
Your personal data will not be transferred abroad to countries that are not members of the European Union and are unable to guarantee that the interests of individuals are adequately safeguarded. If it should prove necessary to do so in order to provide the services requested (for example, with certain processing operations that may be delegated out to suppliers who do not operate within the European Union) or in order to enter into a contract for the purchase of products, we assure you that transferring data to countries that are not members of the European Union and are unable to guarantee adequate standards of protection will be conditional on Fiordaliso S.r.l. and the subjects concerned entering into specific contracts containing appropriate protective clauses and guarantees capable of safeguarding the personal data provided (e.g. standard contractual clauses approved by the European Commission) or on other requisites laid down by applicable Italian and European legislation being met.
5. RIGHTS OF THE DATA SUBJECT
Users are entitled, at any time, to obtain confirmation as to whether or not personal data regarding them exist and to receive them in an intelligible form.
Data Subjects are entitled to be given an indication:
- of the content and origin of the personal data;
- of the method applied in the event data are processed with the use of electronic tools;
- of the purposes for which data are processed and the methods adopted;
- of details identifying the Data Controller and data processors;
- of the storage period envisaged for the specific categories of data processed;
- of the subjects or categories of subjects to whom the personal data may be transferred or to whose attention they may be brought, when acting as processors or persons in charge of processing.
Data Subjects are also entitled:
- to have data up-dated, rectified or, when in his or her interests, supplemented;
- to have data processed (e.g. in contravention of the law) deleted, rendered anonymous or the circulation thereof restricted, including any information that need not be kept in relation to the purposes for which the data was collected or subsequently processed;
- to data portability to another Data Controller;
- to oppose processing (e.g. for the dispatch of advertising or direct marketing material or in order to carry out market research or for commercial communication purposes);
- to oppose any automated decision-making process (including profiling);
- to revoke any consent given, when envisaged (it is to be noted that the revocation of consent will not prejudice the legitimacy of processing based on the consent conferred before it was revoked);
- to receive confirmation that the operations referred to in the previous paragraphs have been brought to the attention, also with regard to their contents, of the subjects to whom the data were transferred or disseminated, apart from cases in which this obligation proves impossible or requires means that are evidently disproportionate to the right being protected.
This information is set out, partly, in our Privacy Policy
The right to oppose the processing of personal data for marketing purposes can be exercised in connection with both so-called automated contact methods (e.g. e-mail, text message, WhatsApp or other social media, etc.) and traditional methods (paper mail and telephone); this right may be exercised either wholly or partly (e.g. only in connection with communications transmitted by paper mail or telephone, or by opposing solely the transmission of promotional communications with the use of automated tools such as e-mail, test message), also on your own initiative through the specific services made available to the user (e.g. by de-selecting the relevant tick box in the newsletter).
In order to exercise the aforementioned rights, users may write to the processor responsible for responding to users exercising their rights, by emailing servizioclienti@artedeimercatanti.com, indicating ‘Privacy’ as reference.
Finally, please note that the Data Subject is entitled to make a claim to the Italian Data Protection Authority either in order to exercise his rights or in connection with any other matter relating to the processing of personal data.
6. SUBJECTS TO WHOM PERSONAL DATA MAY BE TRANSFERRED
For purely organizational and functional purposes and those strictly connected with and linked to the supply of our services (including the sale of products), your personal data may be made available to third party companies having contractual ties with the Data Controller and providing specific services, in their capacity as Data Processors (for example shipping agents or companies conducting marketing activities or providers of marketing services). These subjects, acting as Data Processors, will process your personal data exclusively on behalf of Fiordaliso S.r.l. and exclusively for the purposes indicated in this Privacy Policy and, in any event, within the scope envisaged by the law and in accordance with any consents that you may provide.
Your personal data will not be transferred, communicated or passed on to third parties for purposes that are not authorized by law or without your express consent. In addition to the companies that act as Data Processors, personal data are also made available to third parties (autonomous data controllers) who process the data autonomously, solely for the purpose of executing contracts for the purchase of products on the Site and for additional purposes linked to the supply of the services requested by the user (for example, in purchasing transactions, the bank providing electronic remote payment services, by means of credit/debit card).
7. DATA STORAGE PERIOD
Your personal data are processed for the length of time strictly necessary to achieve the purposes listed above.
The following criteria are adopted to establish the storage period:
- specific legislative provisions
- the period for which the user subscribes to the newsletter (for marketing purposes), until such time as the subscription is revoked;
- tax legislation with regard to the processing of data of an administrative-accounting nature (10 years); more precisely, the storage period laid down by tax and accounting legislation applicable is applied to financial data (e.g. payments, refunds, etc.).
With reference to data collected for commercial purposes, details of purchases referring to identifiable users are stored for 12 months (from the date on which this information is obtained) for the transmission of targeted commercial communications (profiling) and 24 months for direct marketing purposes.
The data covered by profiling may therefore be stored for this purpose solely for a period not exceeding twelve months from the date on which they were registered, with the exception of the genuine transformation of data into anonymous form, thereby not allowing Data Subjects to be identified, even indirectly or by connecting to other databases (profiling operations will be carried out using data strictly necessary to achieve the stated purposes).
The personal data of a “registered” user, instead, will be stored for:
- 12 months from closure of the account;
- 10 years after the last visit to our website (e.g. access to personal area, purchase by a logged user, etc.), if the user does not close the account.
Finally, the Customer’s personal data may also be kept for the length of time permitted by Italian legislation protecting the legitimate interests of the Data Controller company (art. 2947, par. 1 and 3 of the Italian Civil Code).
8. PROCESSING BASED ON AUTOMATED DECISIONS AND PROFILING
For further information on the processing of personal data based on automated decision-making and profiling, you can consult our Cookie Policy.
In any event, if you have subscribed to one of our services (e.g. in the “registered users” section on the website) using authentication methods on social media (e.g. Facebook) or on Google, Fiordaliso S.r.l. may access particular personal data (for example, first name, surname, e-mail etc.) found in the social media account or the user’s profile, in keeping with the operating conditions applying to the platform in question. We may also collect any of your personal data when interacting with third party social media functions, such as “I Like”.
9. PROCESSING FOR ADDITIONAL PURPOSES
The Data Controller may, once you have been specifically informed, also process your data for purposes in addition to those indicated above, provided that they are compatible with the initial purpose stated when the data were collected. If an additional purpose is incompatible with the initial purpose, your consent must be given and you will be informed in advance so that you can up-date or modify your preferences (following the instructions given), thereby confirming or withholding your consent to the use of your personal data.
Your consent will not be necessary if the additional processing carried out by the Data Controller is based on other grounds for legitimacy, such as compliance with a legal obligation on the part of the Data Controller or the performance of contractual obligations.
10. MINORS
This Site and the services it offers are not intended for subjects aged under 18, and the Data Controller does not intentionally collect personal information relating to minors. In the event that information relating to minors is involuntarily registered, the Data Controller will delete them promptly, at the users’ request.
11. APPLICABE LAW AND CONTACTS
This Privacy Policy is regulated by European law and by Italian law (the Italian Data Protection Act, Italian Legislative Decree no. 196/2003 dated 30 June 2003, as subsequently amended) regulating the processing of personal data of users of this Site.
These legislative provisions ensure that personal data are processed in a manner that respects fundamental rights and liberties, as well as the dignity of the Data Subject, with particular reference to confidentiality, personal identity and the right to safeguard personal data.
12. MODIFICATIONS AND REVISIONS OF THIS PRIVACY POLICY
The Data Controller will be responsible for modifying or simply revising the Privacy Policy on the Site, either in whole or in part, also taking into account amendments to legislation and standards regulating this subject and safeguarding users’ rights. Users who have subscribed to our services will be notified by e-mail of any amendments or revisions made to the Privacy Policy on the Site, which will, in any event, be made available on the Home page www.artedeimercatanti.com/en/privacy-policy/ as soon as they arise. We therefore invite you to visit this section regularly in order to consult the most recent, up-dated version of the Privacy Policy.
