This section contains information on how Fantic Shop Online manages the processing of the personal data of visitors to the website www.shop.fantic.com
This information is also valid for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
This information applies only to visitors to www.shop.fantic.com and not to other websites.
This policy may be subject to change due to the introduction of new legislation in this regard, so please check this page periodically.
The data controller is the natural or legal person who, alone or together with others, determines the purposes and means of the processing of personal data. With regard to this website, the data controller is:
According to art. 26 GDPR, we inform you that:
Your navigation on the site and/or the data entry in some areas may involve the collection and subsequent further processing of your Personal Data by us. In fact, the computer systems and software procedures used to operate them automatically and implicitly administer and/or acquire certain information (such as, for example, the so-called "cookies" - as specified below - or the data expressly specified in the collection formats, such as name, surname, e-mail address, nationality, address, telephone number, e-mail address, information on the market sector in which you operate and information on products used or about which you are interested).
The information collected from you may be as follows:
We process your data for different purposes and for each purpose we observe the applicable retention periods and conditions of lawfulness. The Controller will not retain your Personal Data longer than is necessary to fulfil the purpose for which it was processed. Data will be kept for as long as permitted or required by law. In order to ensure compliance with the principles of necessity and proportionality of processing, the Controller has identified different retention periods for Personal Data in relation to the individual purposes followed.
| Purpose of processing | Legal basis of processing | Terms of storage |
|---|---|---|
| Managing and dealing with your specific requests by contacting us directly | consensus | 24 months |
| Marketing activities, commercial communications, market research, newsletter receipt | consensus | until you revoke your consent, which can be exercised at any time by using the link at the bottom of each promotional email (as regards marketing activities and the newsletter) or by sending us an email according to the contact details above. |
| to provide you with the products and services you have purchased and to send you communications relating to your order or payments | execution of the sales contract or pre-contractual measures | 10 years or end of account cancellation request |
| for you to interact with customer service | execution of the sales contract or pre-contractual measures | 10 years or end of account cancellation request |
| management and execution of legal obligations (accounting, administrative, fiscal, etc.). | Legal obligation | 10 years or end of account cancellation request |
| management of complaints and disputes; to prevent or control illegal conduct or to protect and enforce rights | Legitimate interest | up to the prescribed or statutory limitation periods |
| Collected cookies | consent, as notified by the site access banner | the retention period of these cookies runs from the date on which they are enabled on the site until they are disabled or the cookie itself expires |
The processing of your Personal Data may include any operation such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
The operations may be carried out with or without the aid of electronic or automated tools.
The processing is carried out by the Data Controller and/or by the persons in charge of the processing who operate under the direct authority of the Data Controller, following the instructions given, or by third parties appointed as external data processors.
Your Personal Data is mainly processed at the data controller's premises, so the physical location may vary depending on the processing purposes set out in paragraph 1. In addition, it may be processed at the locations of external data controllers.
This website may share some of the data collected with services located outside the European Union, such as Google, Facebook and Microsoft (LinkedIn) through social plug-ins and the Google Analytics service.
If you consent to processing for marketing and promotional purposes, some of your Data (first name, last name, e-mail address) will be transferred to our newsletter software partners located worldwide, including outside the European Union.
Please note that we only transfer your Personal Data to entities located in countries for which there is an appropriate decision of the EU Commission ensuring their adequacy and guarantee of processing according to the provisions of Reg. 679/2016 (GDPR).
Your Personal Data may be disclosed to the following entities:
Your Personal Data will not be disclosed to third parties except where the data controller is obliged to do so by law or in order to protect its rights.
The provision of data must be considered mandatory for the processing operations that the Data Controllers must carry out in order to fulfil their obligations towards the data subject on the basis of the existing relationship (or contract), as well as to comply with legal obligations, rules and regulations.
Consent is not required for all other purposes and, even if given, may be revoked at any time by the data subject.
Failure to provide the data that the data subject is obliged to communicate may result in the impossibility of satisfying your requests or of initiating a business relationship and contracts that you may wish to establish with the Controller.
In the event of failure to provide non-compulsory data, the consequences will be assessed on a case-by-case basis, taking into account the specific case, and will presumably entail failure to perform the service linked to such data.
The Privacy Policy gives you, as a data subject, a number of rights. In particular, you have the right to:
| Rights | Description |
|---|---|
| Right of withdrawal of consent (Art. 13 paragraph II letter A and Art. 9 paragraph II letter A GDPR) | You have the right to revoke your consent at any time for all processing operations whose legitimacy depends on a declaration of consent by you, as indicated in the purpose table above. Withdrawal of consent does not affect the lawfulness of the previous processing. |
| Right of access to data (Art. 15) | You may request (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; (d) where possible, the expected storage period of the personal data or, if this is not possible, the criteria used to determine this period; (e) the existence of your right to request from the Controller the rectification or erasure of your personal data or the restriction of the processing of personal data concerning you or to object to their processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from you, all available information on their source; (h) the existence of automated decision making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance and expected consequences of such processing for you. You have the right to request a copy of the personal data being processed. |
| Right of rectification (art. 16) | You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.. |
| Right to oblivion (art. 17) | You have the right to obtain from the Data Controller the cancellation of the personal data concerning you if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with the profiling processing, if the data have been processed unlawfully, if there is a legal obligation to cancel them; if the data are related to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information prevails, the data are retained for the performance of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving purposes in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of legal claims. |
| Right to limitation of processing (art. 18) | You have the right to obtain from the Controller the restriction of processing when you have contested the accuracy of your personal data (for the period necessary for the Controller to verify the accuracy of such personal data), or if the processing is unlawful and you object to the deletion of your personal data and request instead that their use be restricted, or if they are necessary for the establishment, exercise or defence of a legal claim, whereas the Controller no longer needs them. |
| Right to portability (art. 20) | You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us. You have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority and such transmission does not affect the right of a third party. |
| Right to complain to the supervisory authority (Garante per la protezione dei dati personali) (Art. 77) | Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data is in violation of the Data Protection Regulation, you have the right to complain to a supervisory authority, in particular in the Member State in which you have your habitual residence, work or the place where the suspected violation occurred. |
You may at any time exercise the rights listed in this notice by contacting the Data Controllers (see paras. 2 and 3). You may complain to the Garante by following the instructions provided on the Garante's website, in the "Forms" section, under the heading "Complaint" (or by clicking on the following link).
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
This document may be subject to changes or updates. If there are significant changes or updates, users will be notified accordingly.
|
|
Size: |
|
