Shop in: ITALIA / EN

Free shipping over € 100

  Newsletter

-30% discount on all clothing: discover the advantages available on the Fantic shop!

Privacy Policy

1. Introduction

This section contains information on how Fantic Shop Online manages the processing of the personal data of visitors to the website www.shop.fantic.com
This information is also valid for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

This information applies only to visitors to www.shop.fantic.com and not to other websites.
This policy may be subject to change due to the introduction of new legislation in this regard, so please check this page periodically.

2. DATA CONTROLLER

The data controller is the natural or legal person who, alone or together with others, determines the purposes and means of the processing of personal data. With regard to this website, the data controller is:

  1. Fantic Motor S.P.A with headquarters in Via Tarantelli, 7 - 31030 Dosson di Casier/(TV) Italy C.F./VAT code IT 04684370267, contactable at: fanticmotorsrl@legalmail.it
  2. New Works Webtech Srl, with registered office in Via San Gregorio, 44, 20124, Milan, tax code and VAT number 02658930132, contactable at the following e-mail: webtech@newworks.it.

According to art. 26 GDPR, we inform you that:

  • Fantic Motor S.P.A. is the controller of your personal data necessary for: the management of the Shop's accounts for the purposes of transition to new operators or the internalization of services currently entrusted to New Works Webtech, to assist New Works Webtech in processing your position for the purposes of legal or conventional guarantees, including the management of product return procedures, for the management and maintenance of the Shop and, after obtaining your consent, for marketing purposes and to send commercial communications;
  • New Works WEBTECH srl is co-owner of the processing of your personal data for the following purposes: processing and managing your orders, shipping the products you have purchased, providing you with the necessary assistance during the purchase process and after-sales service, managing the procedure for returning purchased products, handling warranty claims, complying with the provisions of the law and, subject to your consent, sending commercial communications relating to Fantic Motor S.P.A. products.
3. CATEGORIES OF DATA PROCESSING AND METHODS OF COLLECTION

Your navigation on the site and/or the data entry in some areas may involve the collection and subsequent further processing of your Personal Data by us. In fact, the computer systems and software procedures used to operate them automatically and implicitly administer and/or acquire certain information (such as, for example, the so-called "cookies" - as specified below - or the data expressly specified in the collection formats, such as name, surname, e-mail address, nationality, address, telephone number, e-mail address, information on the market sector in which you operate and information on products used or about which you are interested).
The information collected from you may be as follows:

  • internet protocol address (IP);
  • type of browser and device parameters used to connect to the site;
  • name of internet service provider (ISP);
  • date and time of the visit;
  • the visitor's source (referral) and exit web pages;
  • number of clicks on the site;
  • comments left in fields on the site;
  • e-mail address;
  • the advertiser identifier for your mobile device (IDFA - Identifier for Advertising iOS and AAID - Google Advertising ID – for Android).
4. PURPOSE OF DATA PROCESSING, LEGAL BASIS OF TREATMENT AND DURATION OF STORAGE

We process your data for different purposes and for each purpose we observe the applicable retention periods and conditions of lawfulness. The Controller will not retain your Personal Data longer than is necessary to fulfil the purpose for which it was processed. Data will be kept for as long as permitted or required by law. In order to ensure compliance with the principles of necessity and proportionality of processing, the Controller has identified different retention periods for Personal Data in relation to the individual purposes followed.

Purpose of processing Legal basis of processing Terms of storage
Managing and dealing with your specific requests by contacting us directly consensus 24 months
Marketing activities, commercial communications, market research, newsletter receipt consensus until you revoke your consent, which can be exercised at any time by using the link at the bottom of each promotional email (as regards marketing activities and the newsletter) or by sending us an email according to the contact details above.
to provide you with the products and services you have purchased and to send you communications relating to your order or payments execution of the sales contract or pre-contractual measures 10 years or end of account cancellation request
for you to interact with customer service execution of the sales contract or pre-contractual measures 10 years or end of account cancellation request
management and execution of legal obligations (accounting, administrative, fiscal, etc.). Legal obligation 10 years or end of account cancellation request
management of complaints and disputes; to prevent or control illegal conduct or to protect and enforce rights Legitimate interest up to the prescribed or statutory limitation periods
Collected cookies consent, as notified by the site access banner the retention period of these cookies runs from the date on which they are enabled on the site until they are disabled or the cookie itself expires
5. HOW WE PROCESS YOUR DATA

The processing of your Personal Data may include any operation such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
The operations may be carried out with or without the aid of electronic or automated tools.
The processing is carried out by the Data Controller and/or by the persons in charge of the processing who operate under the direct authority of the Data Controller, following the instructions given, or by third parties appointed as external data processors.

6. WHERE WE PROCESS YOUR DATA

Your Personal Data is mainly processed at the data controller's premises, so the physical location may vary depending on the processing purposes set out in paragraph 1. In addition, it may be processed at the locations of external data controllers.

This website may share some of the data collected with services located outside the European Union, such as Google, Facebook and Microsoft (LinkedIn) through social plug-ins and the Google Analytics service.

If you consent to processing for marketing and promotional purposes, some of your Data (first name, last name, e-mail address) will be transferred to our newsletter software partners located worldwide, including outside the European Union.
Please note that we only transfer your Personal Data to entities located in countries for which there is an appropriate decision of the EU Commission ensuring their adequacy and guarantee of processing according to the provisions of Reg. 679/2016 (GDPR).

7. THE RECIPIENTS OF YOUR PERSONAL DATA

Your Personal Data may be disclosed to the following entities:

  1. legal or natural persons acting as external data processors, performing outsourced activities, appointed by the Controller or by the Controller's external data processors (including entities entrusted with the assistance, communication, marketing, advertising, promotion and sale of products and/or services as well as advertisers, advertising agencies, IT service providers, Site/APP managers, electronic platform managers, partners, credit institutions, professional firms);
  2. employees and/or contractors of the Controller (including system administrators) who, acting under the direct authority of the Controller, will be authorised to process your Personal Data; and
  3. employees and/or contractors of external data controllers (including system administrators) who, acting under the direct authority of the external data controllers, will be authorised to process your Personal Data.

Your Personal Data will not be disclosed to third parties except where the data controller is obliged to do so by law or in order to protect its rights.

8. OBLIGATION TO PROVIDE DATA

The provision of data must be considered mandatory for the processing operations that the Data Controllers must carry out in order to fulfil their obligations towards the data subject on the basis of the existing relationship (or contract), as well as to comply with legal obligations, rules and regulations.

Consent is not required for all other purposes and, even if given, may be revoked at any time by the data subject.

9. REFUSAL TO PROVIDE DATA

Failure to provide the data that the data subject is obliged to communicate may result in the impossibility of satisfying your requests or of initiating a business relationship and contracts that you may wish to establish with the Controller.

In the event of failure to provide non-compulsory data, the consequences will be assessed on a case-by-case basis, taking into account the specific case, and will presumably entail failure to perform the service linked to such data.

10. RIGHTS OF THE INTERESTED PARTY:

The Privacy Policy gives you, as a data subject, a number of rights. In particular, you have the right to:

Rights Description
Right of withdrawal of consent (Art. 13 paragraph II letter A and Art. 9 paragraph II letter A GDPR) You have the right to revoke your consent at any time for all processing operations whose legitimacy depends on a declaration of consent by you, as indicated in the purpose table above. Withdrawal of consent does not affect the lawfulness of the previous processing.
Right of access to data (Art. 15) You may request (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; (d) where possible, the expected storage period of the personal data or, if this is not possible, the criteria used to determine this period; (e) the existence of your right to request from the Controller the rectification or erasure of your personal data or the restriction of the processing of personal data concerning you or to object to their processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from you, all available information on their source; (h) the existence of automated decision making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance and expected consequences of such processing for you. You have the right to request a copy of the personal data being processed.
Right of rectification (art. 16) You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data..
Right to oblivion (art. 17) You have the right to obtain from the Data Controller the cancellation of the personal data concerning you if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with the profiling processing, if the data have been processed unlawfully, if there is a legal obligation to cancel them; if the data are related to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information prevails, the data are retained for the performance of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving purposes in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of legal claims.
Right to limitation of processing (art. 18) You have the right to obtain from the Controller the restriction of processing when you have contested the accuracy of your personal data (for the period necessary for the Controller to verify the accuracy of such personal data), or if the processing is unlawful and you object to the deletion of your personal data and request instead that their use be restricted, or if they are necessary for the establishment, exercise or defence of a legal claim, whereas the Controller no longer needs them.
Right to portability (art. 20) You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us. You have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority and such transmission does not affect the right of a third party.
Right to complain to the supervisory authority (Garante per la protezione dei dati personali) (Art. 77) Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data is in violation of the Data Protection Regulation, you have the right to complain to a supervisory authority, in particular in the Member State in which you have your habitual residence, work or the place where the suspected violation occurred.
11. WAYS OF EXERCISING RIGHTS

You may at any time exercise the rights listed in this notice by contacting the Data Controllers (see paras. 2 and 3). You may complain to the Garante by following the instructions provided on the Garante's website, in the "Forms" section, under the heading "Complaint" (or by clicking on the following link).

12. NOTES ON COOKIES

Consent to the use of cookies.

For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

  • Your consent status or the withdrawal of consent
  • Your anonymised IP address
  • Information about your Browser
  • Information about your Device
  • The date and time you have visited our website
  • The webpage url where you saved or updated your consent preferences
  • The approximate location of the user that saved their consent preference
  • A universally unique identifier (UUID) of the website visitor that clicked the cookie banner
13. VARIATIONS TO THIS DOCUMENT

This document may be subject to changes or updates. If there are significant changes or updates, users will be notified accordingly.