PRIVACY NOTICE
pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016
The website www.fralbo.com (hereinafter the "Site") is owned and operated by Fralbo S.r.l., with registered office at Via Pianillo 116, 80047 San Giuseppe Vesuviano (NA), Italy (hereinafter "Fralbo S.r.l.") and registration number REA: NA -
Fralbo S.r.l. respects the applicable laws on data protection and constantly strives to improve the protection of its customers.
This privacy notice informs you about the processing of your personal data in relation to the website www.fralbo.com, the methods of managing such data, and how services are made available through the Site by Fralbo S.r.l.
-
DATA CONTROLLER AND DATA PROCESSOR
The data controller is Fralbo S.r.l., with registered office at Via Pianillo 116, 80047 San Giuseppe Vesuviano (NA), Italy.
The data processor is:
Data Protection Officer (DPO) The Data Protection Officer or DPO is available at the following email address: privacy@fralbo.com or at the phone number +39 0818283214 or by sending a registered letter with return receipt to the following address: Fralbo S.r.l., Via Pianillo 116, 80047 San Giuseppe Vesuviano (NA)
-
WHAT ARE PERSONAL DATA
Personal data means any information relating to an identified or identifiable natural person, such as name, surname, gender, email address, telephone number, date of birth, postal address.
-
WHAT PERSONAL DATA ARE PROCESSED
3.1 Data provided by the user
If the user creates their own personal user account, fills in the registration fields on the Site or gives us their consent, we process the personal data provided, in particular the data as defined in section 2.
3.2 Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals, but by their very nature, through processing and association with data held by third parties, could allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. This data will be recorded anonymously and in aggregate form and will be used, always in aggregate form, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and will be deleted, always in aggregate form, immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
-
WHEN WE PROCESS YOUR DATA
4.1 Contractual Agreements We process your personal data when you create your personal user account, when you order products through our website, or when you subscribe to our newsletter.
Unless otherwise specified in the following provisions, the legal basis for this data processing is Article 6(1)(b) and (a) GDPR (performance of a contract and consent), given by individuals who have reached the age of 16.
-
FINALITÀ DEL TRATTAMENTO DEI DATI
5.1 Account
To make purchases on our website, it is necessary to create a personal user account (hereinafter "user account").
Personal information such as your first name, last name, and, depending on the case, address and phone number are required to create a personal user account. In addition, users must provide their email address and a password of their choice. The email address provided by users also serves as the login data for the user account.
Furthermore, users can store their personal data in their user account and thus make purchases conveniently in the online store. The information can be updated at any time in the personal area of the user account ("User Profile").
So-called technical cookies (see dedicated section on cookies) are stored on the user's device with the "Stay logged in" function, which avoids the need for the user to log in again during subsequent visits to our website. This function is not available if the user has disabled the storage of such cookies in their browser settings.
Upon registration, the User will be asked to enter personal data, some of which - from time to time expressly identified as such - will be mandatory and indispensable for registration purposes (e.g. the email address to receive Newsletters). Other data may or may not be provided, at the User's discretion, and the failure to provide them is in no way prejudicial to the registration purposes, but may allow him partial use of the Services.
Of course, the user can delete their own user account at any time and without giving reasons. The easiest way to do this is to send an email to contact@fralbo.com. The legal basis for this data processing is Article 6(1)(b) of the GDPR (performance of a contract).
5.2 Processing of orders in our online store
Regarding the order of products in our online store, the processing of your personal data aims to allow and optimize the processing of the order, including payment and delivery. When payment is made with a credit card, we receive the payment ID and the last four digits of the credit card number from our payment service provider. This is required for authentication and allocation of your order and thus for your security. The personal data necessary for payment is collected directly by the payment service provider.
The legal basis for the aforementioned data processing is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest, based on our interest in offering you a secure credit card payment option).
All data at our disposal is verified in the context of credit risk assessment. This way we determine which payment methods can be offered for an order. Among other things, we also check all previous orders placed from your customer account. The system also checks if the delivery address is different from the billing address, if it is a new delivery address or if the order needs to be delivered to an intermediate center.
After selecting the payment service provider, you will be asked for the necessary data to use such services. This payment information is forwarded directly to the respective payment service provider and is not stored by Fralbo S.r.l.
We save the billing and delivery address data in your user account so that you do not have to enter them again the next time you make a purchase. This data can be changed at any time in the future.
If you do not consent to the offered method or methods of payment, you can inform us in writing via letter or email at the address: contact@fralbo.com. We will then review the decision in light of your feedback.
Personal data processed in the context of orders will be deleted at the latest after the expiration of the warranty terms provided by law, unless this is contrary to the legal retention obligations.
By placing an order, you accept the terms and conditions of the website www.fralbo.com.
5.3 Newsletter
We offer all users of our community (users of www.fralbo.com) the possibility to receive our newsletter. To activate it, the user can register with their email address on the appropriate page. The user can revoke their consent at any time and without giving reasons. The easiest way to do this is to send an email to unsubscribe@fralbo.com with the subject "unsubscribe me".
The Newsletter may also contain advertising banners, ads, and promotional offers from the Company. The legal basis for this process is Article 6, paragraph 1 a) GDPR (consent).
5.4 Contact via contact form
If you send us information requests using the contact form, we will process the information you provided, including your contact information, in order to process the request. In the case of subsequent requests, this additional data will also be stored. The legal basis is Article 6.1 b) GDPR (fulfillment of the contract - the user's data processing is necessary for the fulfillment of the contract to respond to your questions or requests) as well as Article 6, paragraph 1 f) GDPR (balancing of interests - based on our interest in processing user requests on our website).
As Data Controller, Fralbo S.r.l. informs that users' personal data, with their consent, may be processed by Fralbo S.r.l. for the following purposes: a) sending of informative, promotional, and advertising material relating to Fralbo S.r.l.'s brands (by way of example but not limited to: sending of newsletters, promotions, etc.); b) carry out statistical studies and research; c) collect data and information in a general and specific way on consumer trends and preferences and process them using electronic tools in order to identify products that may be of greater interest to them, in such a way as to send these individuals promotional communications expressly addressed to such products (i.e., profiling).
-
DATA PROCESSING METHODS AND LOCATION
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access. The database is only accessible by authorized personnel through methods that ensure its protection and confidentiality, thanks to the adoption of security measures designed to prevent data loss, illegal or incorrect use, and unauthorized access.
6.1 LOCATION OF DATA PROCESSING
The processing related to the Services of this Website takes place at the headquarters of the Data Controller and is carried out only by technical personnel of the Controller specifically appointed as data processors, or by any occasional maintenance personnel. No data deriving from the web service is communicated or disseminated. Personal data provided by Users who submit requests to join the Services are used only to perform the requested service or performance and are communicated to third parties only if necessary for this purpose. As the data controller, Fralbo S.r.l. may directly or through any data processors indicated on the Website, store the personal data of Users in specific servers and carry out all other processing operations through personnel - of the Controller and of the processor - specifically appointed as data processors, or through any external processors on occasion of maintenance operations.
-
USE OF EXTERNAL SERVICE PROVIDERS - DATA PROCESSORS
For the operation of our Website, we appoint external service providers for data processing (e.g. order sending, newsletter software, computing centers). If necessary, these service providers also process personal data. The service providers are carefully selected and monitored by us. Data is processed exclusively in accordance with our instructions and is also bound by this privacy statement. Only with express authorization from the User, Fralbo S.r.l. may use their data for the same activities mentioned above with the aid of automated tools without the intervention of an operator and/or for other purposes authorized by the User from time to time.
-
DATA RETENTION PERIOD
Personal data will only be kept for the time necessary to achieve the purposes indicated here or as required by law (current civil, tax and fiscal obligations). The data entered by you pursuant to section 3.1 will therefore be deleted no later than 10 years after the expiration of any storage periods provided for by commercial and tax law. Automatically recorded data, as defined in section 3.2, will therefore be deleted or anonymized after 24 months.
-
YOUR RIGHTS
Data Subject Rights As a data subject, you have the rights under Article 15 of the GDPR, specifically the rights to:
1. This right means that you can obtain confirmation of whether or not personal data concerning you exist, even if they haven't been recorded yet, and to receive them in an intelligible form.;
2. obtain indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the owner, of the responsible parties and of the designated representative pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as a designated representative in the territory of the State, as responsible parties or appointees;
3. a) obtain the updating, rectification or, when interested, integration of data; b) obtain the erasure, anonymization, or blocking of data that has been processed unlawfully, including data which does not need to be stored in relation to the purposes for which it was collected or subsequently processed; c) obtain certification that the operations referred to in letters a) and b) have been notified, also regarding their contents, to those to whom the data was communicated or disclosed, except where this proves impossible or involves a disproportionate effort compared to the right that is being protected;
4. To object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for conducting market research or commercial communication, using automated calling systems without the intervention of an operator, by email and/or by traditional marketing methods by phone and/or postal mail. Please note that the data subject's right to object, as set out in point b) above, to direct marketing purposes using automated methods also extends to traditional methods and that the data subject may decide to receive only communications via traditional methods or only automated communications or none of the two types of communication. If applicable, the data subject also has the rights under Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the supervisory authority.
To exercise the rights under Article 15 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you may in any case forward your request to our company at the following address: Fralbo S.r.l., registered office at: 80047 San Giuseppe Vesuviano(NA), Via Pianillo 116, Telephone: +39 081, E-mail: privacy@fralbo.com.
If you believe that the processing of your personal data has been carried out unlawfully, you may lodge a complaint with one of the competent supervisory authorities for the protection of personal data. In Italy, the complaint may be filed with the Garante per la Protezione dei Dati Personali (http://www.garanteprivacy.it/).
-
INFORMATION ABOUT COOKIES
We use cookies, which are small files containing information about your browsing, on this platform, primarily to make navigation easier. Please read our cookie policy to learn more about the cookies we use, their purposes, and other relevant information.
-
QUESTIONS
For any general questions or suggestions regarding data protection, please contact our Data Protection Officer by mail at the address indicated above or by email at: privacy@fralbo.com.