Privacy policy
PRIVACY POLICY
Information relating to the privacy of the site
This section contains information relating to the management methods of the filatiromani.com site ("Site"), owned by Filati Romani S.r.l., with reference to the processing of personal data of users of the Site itself ("Data"), pursuant to of articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and of Legislative Decree no. 196/2003
This information is intended only for the site https://www.filatiromani.com/ and not for other websites that may be consulted by the user via links contained therein and constitutes an integral part of the Site and the services offered by it.
The purpose of this document is to provide information on the methods, timing and nature of the information that the data controller must provide to users when connecting to the web pages of https://www.filatiromani.com/ regardless of the purpose of the connection itself, according to Italian and European legislation.
Personal data will be processed in compliance with the legislation on the protection of personal data and with the established confidentiality obligations. "Personal data processing" means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring , conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or the destruction.
2. Data Controller
The Data Controller is Filati Romani S.r.l. (“Filati Romani”), with headquarters in Rome (Italy), Via Cristoforo Colombo n. 134 - 00147, tax code and registration number in the Rome Company Register 15319351001, who can be contacted at the e-mail address: info@filatiromani.com
3. Processing methods
The Data is processed in paper and electronic format in compliance with the organizational and security measures established by the applicable law.
4. Purpose of the Processing
Filati Romani processes its customers' data (such as name, surname, address, telephone number, e-mail, date of birth, gender, details of purchases made and services used, including the volume of expenditure and products purchased, elements identified of one's physical identity, preferences) provided when purchasing products or using services through the Site or collected at the reference Boutique, for the following purposes:
a) manage the online sale of Filati Romani Collection products and provide all the sales and after-sales services made available on the Site (such as, for example, fraud prevention, returns, guarantees and customer assistance, ), as well as the Filati Romani newsletter service if the customer has signed up for it, and the assistance service, through which the customer can formulate specific requests and receive assistance from the Filati Romani customer service ("Contractual Purposes");
b) fulfill obligations established by current laws, regulations or community legislation, or satisfy requests from the authorities ("Purpose of the Law");
c) send, subject to the customer's consent, commercial communications relating to products, services and exclusive activities of Filati Romani, by electronic means (such as, for example, e-mail, sms, mms, mobile phone, social networks and chat) or paper (for example example, traditional mail), relating to its brand, services and/or products, for participation in events and the conduct of market and statistical analyzes ("Marketing Purposes");
d) analyse, on an individual or aggregate basis and with prior consent, the customer's habits, interests and preferences in order to offer services and send personalized commercial communications or carry out market research aimed at compiling statistics on the same or at assessing the degree of satisfaction with the products and services offered. (“Profiling Purposes”).
5. Legal basis and compulsory or optional nature of the Processing
The legal basis of the processing of personal data for the "Contractual Purposes" is the art. 6, par. 1, lit. b) of the GDPR ([...] the processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same), as the treatments are necessary for the provision of services. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The "Legal Purposes" represent a legitimate processing of personal data pursuant to art. 6, par. 1, lit. c) of the GDPR ([...] the processing is necessary to fulfill a legal obligation to which the data controller is subject). Indeed, once the personal data have been provided, the processing is indeed necessary to fulfill the legal obligations to which the Data Controller is subject.
The treatments performed for the "Marketing Purposes" and the "Profiling Purposes" are based on the release of the customer's consent pursuant to art. 6, par. 1, lit. a) ([...] the interested party has given his consent to the processing of his personal data for one or more specific purposes) and of the art. 22, par. 2, lit. c) of the GDPR. This consent can be revoked at any time without prejudice to the lawfulness of the processing carried out prior to the revocation in accordance with the provisions of art. 7 of the GDPR.
The provision of the customer's personal data for these purposes is therefore entirely optional and does not affect the use of the services. If the customer wishes to oppose the processing of their data for marketing and profiling purposes, they can do so at any time by contacting the Data Controller at the addresses indicated in the Contacts section of this information or, where available, through the Privacy Settings contained within their own Personal Area.
6. Data Retention
The customer/user data will be entered and stored, in compliance with the principles of minimization and limitation of conservation pursuant to art. 5.1.c) and e) of the GDPR, in the information systems of the Data Controller, whose servers are located within the European Economic Area.
The personal data processed are processed for the time necessary to fulfill the purposes indicated above and, in particular for the Contractual Purposes, the Data are kept for the entire duration of the contract and/or the service requested (in the case of accounts created on the site or in relation to services provided by Filati Romani), as well as for the following 10 years. In any case, for the newsletter service referred to in point (a) of paragraph 4, the Data will be processed until the customer unsubscribes from the service and/or exercises the right to object to receiving communications via e-mail via the link at the bottom of each communication received.
Personal data processed for the purposes of the law will be kept until the time required by the specific obligation or applicable law.
For Marketing and Profiling Purposes, the customer's Data will instead be kept until the revocation of his consent and, consequently, permanently canceled or made anonymous.
In general, the Data Controller reserves the right in any case to keep the customer's data for the time necessary to fulfill any regulatory obligation to which the same is subject or to satisfy any defensive needs. In fact, the possibility remains for the Data Controller to keep the customer's personal data for the period of time foreseen and permitted by Italian law for the protection of one's interests (Article 2947 of the Civil Code).
For more information regarding requests for data deletion and revocation of consent, please refer to point 8 "Rights of the interested parties" of this Information.
Further information regarding the data retention period and the criteria used to determine this period can be requested by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this statement.
7. Communication and Data Transfer
For the purposes referred to in paragraph 4 of this Privacy Policy, Filati Romani may communicate the Data strictly necessary for each processing purpose, to the following categories of subjects:
a) persons authorized by the Data Controller to process personal data pursuant to articles 29 and 2-quaterdecies of Legislative Decree 196/2003 (e.g. personnel assigned to sales, administration and accounting, after-sales assistance, management of information systems);
b) consultants and service providers of a professional and technical nature (such as, for example, IT service providers, shipping service providers, legal advisers, etc.);
c) subjects, bodies or authorities to whom it is mandatory to communicate the personal data of customers by virtue of the provisions of the law or orders from the authorities.
The Data will be transferred in accordance with articles 44 to 49 of the GDPR, as well as with the other measures required by the data protection legislation applicable at the time. The data are not disclosed. The customer will have the right to obtain information about the place where such Data are stored, as well as the measures adopted for their transfer, by making an express request to Filati Romani at the address indicated in paragraph 10 of this information.
8. Rights of data subjects
The customer, as an interested party, can exercise the rights referred to in articles 15-22 of the GDPR and revoke the consent given at any time without prejudice to the lawfulness of the processing carried out before the revocation.
In particular, the customer may request access to their Personal Data to verify its content, origin, accuracy, request additions, updates, modifications, cancellations or blocking for violation of the law as well as oppose the processing of their Data for legitimate reasons. In addition to the aforementioned rights, the interested party may request the limitation of data processing, the portability of your data and lodge a complaint with the Supervisory Authority where the conditions exist pursuant to art. 77 of the GDPR itself, or to take the appropriate judicial offices (art. 79 of the GDPR).
9. Changes
The Owner reserves the right to modify or simply update the content of this information, in part or completely, also due to changes in the applicable legislation. The Data Controller therefore invites the user to visit this section on a regular basis to read the most recent and updated version of the Privacy Policy in order to always be updated on the data collected and on the use that Filati Romani makes of it.
10. Contacts
To exercise the above rights or for any other request, the interested party can directly contact the Data Controller at the e-mail address: info@filatiromani.com, inserting the wording "request to exercise privacy rights" in the object of the communication.