Shop in: ITALIA / EN
  Newsletter

Privacy Policy

1. Introduction

This section contains information on how Fantic Shop Online manages the processing of the personal data of visitors to the website www.shop.fantic.com
This information is also valid for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

This information applies only to visitors to www.shop.fantic.com and not to other websites.
This policy may be subject to change due to the introduction of new legislation in this regard, so please check this page periodically.

2. DATA CONTROLLER

The data controller is the natural or legal person who, alone or together with others, determines the purposes and means of the processing of personal data. With regard to this website, the data controller is:

  1. 1) New Works Webtech Srl, located in Via San Gregorio, 44, 20124, Milano, VAT 02658930132, e-mail: webtech@newworks.it.

According to art. 26 GDPR, we inform you that:

  • New Works Webtech is the data controller of your personal data necessary to: process and manage your orders, ship the products you have purchased, provide you with the necessary after-sales assistance, manage the procedure for returning purchased products, comply with the provisions of the regulations;
  • for the purposes of marketing and sending commercial communications, the data controller is New Works Webtech Srl.
3. CATEGORIES OF DATA PROCESSING AND METHODS OF COLLECTION

Your navigation on the site and/or the data entry in some areas may involve the collection and subsequent further processing of your Personal Data by us. In fact, the computer systems and software procedures used to operate them automatically and implicitly administer and/or acquire certain information (such as, for example, the so-called "cookies" - as specified below - or the data expressly specified in the collection formats, such as name, surname, e-mail address, nationality, address, telephone number, e-mail address, information on the market sector in which you operate and information on products used or about which you are interested).
The information collected from you may be as follows:

  • internet protocol address (IP);
  • type of browser and device parameters used to connect to the site;
  • name of internet service provider (ISP);
  • date and time of the visit;
  • the visitor's source (referral) and exit web pages;
  • number of clicks on the site;
  • comments left in fields on the site;
  • e-mail address;
  • the advertiser identifier for your mobile device (IDFA - Identifier for Advertising iOS and AAID - Google Advertising ID – for Android).
4. PURPOSE OF DATA PROCESSING, LEGAL BASIS OF TREATMENT AND DURATION OF STORAGE

We process your data for different purposes and for each purpose we observe the applicable retention periods and conditions of lawfulness. The Controller will not retain your Personal Data longer than is necessary to fulfil the purpose for which it was processed. Data will be kept for as long as permitted or required by law. In order to ensure compliance with the principles of necessity and proportionality of processing, the Controller has identified different retention periods for Personal Data in relation to the individual purposes followed.

Purpose of processing Legal basis of processing Terms of storage
Managing and dealing with your specific requests by contacting us directly consensus 24 months
Marketing activities, commercial communications, market research, newsletter receipt consensus until you revoke your consent, which can be exercised at any time by using the link at the bottom of each promotional email (as regards marketing activities and the newsletter) or by sending us an email according to the contact details above.
to provide you with the products and services you have purchased and to send you communications relating to your order or payments execution of the sales contract or pre-contractual measures 10 years or end of account cancellation request
for you to interact with customer service execution of the sales contract or pre-contractual measures 10 years or end of account cancellation request
management and execution of legal obligations (accounting, administrative, fiscal, etc.). Legal obligation 10 years or end of account cancellation request
management of complaints and disputes; to prevent or control illegal conduct or to protect and enforce rights Legitimate interest up to the prescribed or statutory limitation periods
Collected cookies consent, as notified by the site access banner the retention period of these cookies runs from the date on which they are enabled on the site until they are disabled or the cookie itself expires
5. HOW WE PROCESS YOUR DATA

The processing of your Personal Data may include any operation such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
The operations may be carried out with or without the aid of electronic or automated tools.
The processing is carried out by the Data Controller and/or by the persons in charge of the processing who operate under the direct authority of the Data Controller, following the instructions given, or by third parties appointed as external data processors.

6. WHERE WE PROCESS YOUR DATA

Your Personal Data is mainly processed at the data controller's premises, so the physical location may vary depending on the processing purposes set out in paragraph 1. In addition, it may be processed at the locations of external data controllers.

This website may share some of the data collected with services located outside the European Union, such as Google, Facebook and Microsoft (LinkedIn) through social plug-ins and the Google Analytics service.

If you consent to processing for marketing and promotional purposes, some of your Data (first name, last name, e-mail address) will be transferred to our newsletter software partners located worldwide, including outside the European Union.
Please note that we only transfer your Personal Data to entities located in countries for which there is an appropriate decision of the EU Commission ensuring their adequacy and guarantee of processing according to the provisions of Reg. 679/2016 (GDPR).

7. THE RECIPIENTS OF YOUR PERSONAL DATA

Your Personal Data may be disclosed to the following entities:

  1. legal or natural persons acting as external data processors, performing outsourced activities, appointed by the Controller or by the Controller's external data processors (including entities entrusted with the assistance, communication, marketing, advertising, promotion and sale of products and/or services as well as advertisers, advertising agencies, IT service providers, Site/APP managers, electronic platform managers, partners, credit institutions, professional firms);
  2. employees and/or contractors of the Controller (including system administrators) who, acting under the direct authority of the Controller, will be authorised to process your Personal Data; and
  3. employees and/or contractors of external data controllers (including system administrators) who, acting under the direct authority of the external data controllers, will be authorised to process your Personal Data.

Your Personal Data will not be disclosed to third parties except where the data controller is obliged to do so by law or in order to protect its rights.

8. OBLIGATION TO PROVIDE DATA

The provision of data must be considered mandatory for the processing operations that the Data Controllers must carry out in order to fulfil their obligations towards the data subject on the basis of the existing relationship (or contract), as well as to comply with legal obligations, rules and regulations.

Consent is not required for all other purposes and, even if given, may be revoked at any time by the data subject.

9. REFUSAL TO PROVIDE DATA

Failure to provide the data that the data subject is obliged to communicate may result in the impossibility of satisfying your requests or of initiating a business relationship and contracts that you may wish to establish with the Controller.

In the event of failure to provide non-compulsory data, the consequences will be assessed on a case-by-case basis, taking into account the specific case, and will presumably entail failure to perform the service linked to such data.

10. RIGHTS OF THE INTERESTED PARTY:

The Privacy Policy gives you, as a data subject, a number of rights. In particular, you have the right to:

Rights Description
Right of withdrawal of consent (Art. 13 paragraph II letter A and Art. 9 paragraph II letter A GDPR) You have the right to revoke your consent at any time for all processing operations whose legitimacy depends on a declaration of consent by you, as indicated in the purpose table above. Withdrawal of consent does not affect the lawfulness of the previous processing.
Right of access to data (Art. 15) You may request (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; (d) where possible, the expected storage period of the personal data or, if this is not possible, the criteria used to determine this period; (e) the existence of your right to request from the Controller the rectification or erasure of your personal data or the restriction of the processing of personal data concerning you or to object to their processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from you, all available information on their source; (h) the existence of automated decision making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance and expected consequences of such processing for you. You have the right to request a copy of the personal data being processed.
Right of rectification (art. 16) You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data..
Right to oblivion (art. 17) You have the right to obtain from the Data Controller the cancellation of the personal data concerning you if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with the profiling processing, if the data have been processed unlawfully, if there is a legal obligation to cancel them; if the data are related to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information prevails, the data are retained for the performance of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving purposes in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of legal claims.
Right to limitation of processing (art. 18) You have the right to obtain from the Controller the restriction of processing when you have contested the accuracy of your personal data (for the period necessary for the Controller to verify the accuracy of such personal data), or if the processing is unlawful and you object to the deletion of your personal data and request instead that their use be restricted, or if they are necessary for the establishment, exercise or defence of a legal claim, whereas the Controller no longer needs them.
Right to portability (art. 20) You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us. You have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority and such transmission does not affect the right of a third party.
Right to complain to the supervisory authority (Garante per la protezione dei dati personali) (Art. 77) Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data is in violation of the Data Protection Regulation, you have the right to complain to a supervisory authority, in particular in the Member State in which you have your habitual residence, work or the place where the suspected violation occurred.
11. WAYS OF EXERCISING RIGHTS

You may at any time exercise the rights listed in this notice by contacting the Data Controllers (see paras. 2 and 3). You may complain to the Garante by following the instructions provided on the Garante's website, in the "Forms" section, under the heading "Complaint" (or by clicking on the following link).

12. NOTES ON COOKIES

12.1 What are cookies?

Cookies are small text files that sites visited by users send to their terminals, where they are stored and then transmitted to the same sites the next time they visit. Third-party cookies, on the other hand, are set by a website other than the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited.

12.2 What are cookies used for?

Cookies are used for different purposes: performing computer authentication, monitoring sessions, storing information on specific configurations of users accessing the server, storing preferences, etc.. Therefore, in order to make full and easy use of a website, it would be advisable for the user to configure his browser so that it accepts the receipt of such cookies.

12.3 Characteristics and purpose of cookies for our web pages

Our site uses the following categories of cookies, which may be those of the owner or of third parties.

  • Technical (or navigation) cookies, which help the Site function, for example to allow you to navigate between pages and access the private area of the Site.
  • Functional cookies, which enable specific functionalities of the Shop and store your preferences (such as language), in order to improve your browsing experience.
  • Analytical cookies, which allow us to acquire statistical information in aggregate and anonymous form, in relation to the navigation methods.
  • Profiling cookies, which allow us to customize advertisements according to your interests and preferences, in order to send you only advertisements that you may find relevant or interesting.

12.4 How to enable or disable cookies on your browsers

You can block your browser's acceptance of cookies by opting to block all cookies or only third party cookies. However, this may make it less efficient or prevent you from accessing certain functions or pages of the Site.
Below are the ways in which the main browsers can block the acceptance of cookies:

  • Internet Explorer: http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11
  • Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
  • Chrome: https://support.google.com/chrome/answer/95647?hl=it
  • Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT
13. VARIATIONS TO THIS DOCUMENT

This document may be subject to changes or updates. If there are significant changes or updates, users will be notified accordingly.