In compliance with the Privacy Code, Triboo Digitale S.r.l., with registered office in Italy at Viale Sarca 366, 20126 Milano (Italia), VAT no. IT02912880966 (hereinafter referred to as "Triboo Digitale"), and Fope spa, with registered office in Italy at Via Zampieri, 31 36100 Vicenza, registered with Vicenza Companies House under no C.F. e P.IVA IT00163880248, (hereinafter “Fope srl”), are the Data Controllers of the personal data of the Users, each respectively for the different services supplied in connection with use of the Website.
More specifically, Triboo Digitale is the autonomous Controller of the personal data of the Users in connection with the on-line sales and after-sales services supplied via the Website, whilst Fope is the sole, autonomous Controller of the personal data of the Users in connection with the generalised and potentially profiled marketing activities carried out via the Website.
1. The policy
2. Who processes your personal data, how and to what end
Triboo Digitale - in accordance with the Privacy Code - is the Data Controller of the Personal Data of the Website Users (hereinafter the "Personal Data"), processed in order to allow for the management, stipulation and fulfilment of commercial transactions concerning the purchase of products via said website (hereinafter the "Commercial Purposes"): Triboo Digitale decides the purpose and method of this data processing and the tools to be used, also in terms of security. For purely organisational and functional purposes, Triboo Digitale has appointed some external data supervisors of the Personal Data for purposes strictly connected with and related to the provision of the services on the Website, including the sale of products (merely by way of example, customer services and the delivery of products purchased). These supervisors have been chosen because they have proven experience, capacity and reliability in supplying a suitable guarantee of complete compliance with current processing legislation, including in terms of data security. The supervisors process the Personal Data in accordance with the instructions given by Triboo Digitale. We regularly check to ensure that supervisors have fulfilled their duties promptly and continue to provide suitable guarantees of complete compliance with personal data protection legislation. Names and details of Personal Data Supervisors appointed by Triboo Digitale can be obtained by sending a written request to this end to the e-mail address: firstname.lastname@example.org.
Fope - in accordance with the Privacy Code - is the Data Controller of the Personal Data of the Website Users (hereinafter the "Personal Data"), processed in order to allow for direct and profiled marketing according to the consent given by the data subject (hereinafter the "Marketing Purposes") and uses the Personal Data to send out newsletters relating to the world of Fope, its products and for generalised and/or customised promotional messages with respect to the User's consumer habits.
Personal Data is mainly processed in electronic format and in some cases also as hard copies, such as, for example, when Personal Data processing is necessary in order to prevent fraud on the Website. Personal Data will be stored in a way that enables the User to be identified only for the length of time strictly necessary to the purpose for which the data has been collected and thereafter processed and, in any case, within the legal limits. In order to guarantee that Personal Data is always exact and up-to-date, in any case pertinent and complete, please notify us of any changes thereto, by e-mailing: email@example.com.
The Personal Data will not be disclosed to any third parties for purposes not permitted by the law or without your specific consent. In addition to the companies acting as data supervisors, Personal Data is also made available to third parties, autonomous data controllers, for purposes that are accessory and related to the supply of the services requested by the User(e.g. for purchase transactions). You can obtain an updated list of the data supervisors at any time, by e-mailing: firstname.lastname@example.org.
Personal Data will not be transferred abroad to any non-European Union Member States (apart from companies belonging to the Fope spa ), which do not ensure suitable personal protection levels. If this should be necessary in order to pursue the Commercial Purposes, we can assure you that Personal Data will only be transferred to non-European Union Member States (apart from the companies belonging to the Fope spa), which do not assure suitable protection levels, upon stipulation by Triboo Digitale and said subjects with reference to the Commercial Purposes, or by Fope and said subjects in relation to the marketing purposes of the Website or Fope, of specific contracts including clauses designed to safeguard the protection of Personal Data, in compliance with the law and applicable regulations.
3. What happens if you refuse to provide Triboo Digitale and Fope with your personal data
The supply of Personal Data for Commercial Purposes (in particular personal information, your e-mail address, postal address, credit/debit card and bank details and telephone numbers) to Triboo Digitale is necessary in order to pursue the Commercial Purposes. Any refusal to provide Triboo Digitale with said Personal Data required to this end may make it impossible to fulfil the purchase contract of products on the Website or, further, to correctly fulfil legal and regulatory obligations. Failure to provide Personal Data may therefore constitute, as applicable, legitimate, justified grounds not to fulfil the contract for the purchase of products on the Website. The indication of additional Personal Data, over and above that required as compulsory, is instead optional and shall have no consequence with respect to the purchase of products from the Website.
The supply to Fope of Personal Data for Marketing Purposes is always optional and is connected with the Website registration process. Failure to supply such, and failure to consent to processing for Marketing Purposes shall not have any consequence in terms of the purchase process, apart from the fact that it will be impossible to finalise registration and therefore to benefit from services such as newsletters, generalised or customised offers and access to reserved promotional areas.
We will duly inform you each time as to whether the supply of the Personal Data to Triboo Digitale and Fope is compulsory or optional and of any consequences should you fail to supply it. Please remember that failure to provide optional Personal Data shall result in no obligation nor disadvantage for Users.
4. To whom we disclose the Personal Data
Personal Data may be made available to third party companies providing Triboo Digitale and Fope with specific services, as data supervisors; it may also be disclosed to other third parties - whose names will be duly specified - which process data autonomously purely in order to fulfil the contract for the purchase of products from the Website (such as banks, for remote electronic payment services made by credit/debit card) and only when these purposes are not incompatible with the purposes for which the Personal Data was collected and thereafter processed and, in any case, in compliance with the law.
More specifically, Triboo Digitale uses Fope, as external data supervisor, to process Personal Data of Users necessary to carry out, under the scope of the Commercial Purposes, the delivery, return and management of non-conformities connected with products purchased on the Website, as better described in the Website Conditions of Sale, available for consultation at the following link. To this end, in turn Fope uses, for the delivery stage, professional carriers (UPS, Federal Express, DHL, etc.), which, as external data supervisors, process the personal data of the Users purely in order to fulfil their appointment.
For the Marketing Purposes, Fope also uses third party countries operating as external data supervisors; the appointed supervisors also include Triboo Digitale, which provides Fope with management services of the on-line Fope store, as specifically established in the Conditions of Sale, available for consultation at the following link, and the company Fope_11111, which provides Fope with mass newsletter mailing services using the “MailUp” utility.
If the collaboration between Triboo Digitale and Fope concerning the management by the former of the sales of products of the latter through the Website, should cease, Triboo Digitale will send Fope the data of Users who have completed the Website registration procedure, in order to enable the storage, for each of said Users:
(a) of the effectiveness of the personal credentials;
(b) of details of transactions completed;
(c) of consent given to personal data processing.
Personal Data will not be otherwise disclosed, sold or transferred to any other third parties, without informing the Users in advance and obtaining due consent to such, where so required by the law.
5. How is Personal Data collected on the Website
Triboo Digitale and Fope collect the Personal Data and other information from the Users directly during processes that each of the two companies manages respective (purchase of products on the Website for the stipulation of electronic trade transactions/completion of User registration forms with the Website for the marketing purposes of Fope).
More specifically, in the pursuit of the Commercial Purposes, under the scope of the processes for purchasing products on the Website, Triboo Digitale collects Personal Data (such as personal information, e-mail address, postal address, credit card and bank details, telephone number, etc.) using the order form for the sale of products on the Website.
6. Security measures
As regards the best possible protection of your Personal Data, with regards to aspects lying outside the control and management of Triboo Digitale and Fope, we recommend ensuring that the computer used is equipped with suitable software to protect the internet transmission of data, both incoming and outgoing (such as updated antivirus systems) and that the chosen internet service supplier has used suitable measures to guarantee the security of data transmission over the internet (such as firewalls and antispamming filters).
7. Compulsory processing
Please note that Triboo Digitale and Fope may process Personal Data even without consent in certain cases envisaged by the law, such as, for example, when this is necessary in order to fulfil a legal obligation.
For example, Personal Data may be disclosed to the police force or legal authorities in compliance with the law and following a formal request submitted by such subjects, for example as part of anti-fraud services.
8. Rights of the data subjects
More specifically, as concerns the processing of your Personal Data for the Marketing Purposes of Fope, you may exercise said rights in accordance with Art. 7 of the Privacy Code at any time and obtain a list of supervisors and third parties to whom the data has been disclosed, by e-mailing email@example.com or writing to the postal address of Fope, Via Zampieri, 31 36100 Vicenza, Italy.
Finally, any users wishing to be removed from the promotional database of Fope, and who no longer wish to receive marketing communications in the future, may send a specific request to this end, in any of the following ways:
1) following the cancellation instructions given at the foot of each e-mail message.
2) e-mailing firstname.lastname@example.org with the specific request.
9. Contact details
If you wish to receive more information on how Triboo Digitale and Fope process Personal Data, please e-mail: email@example.com.
To obtain information on your rights and be kept up-to-date on personal protection legislation with respect to personal data processing, we recommend you visit the website of the Privacy Guarantor at www.garanteprivacy.it.
10. Applicable law
2) The Privacy Code guarantees that personal data is processed in compliance with fundamental freedoms and rights and in respect of the dignity of the data subject, with specific reference to the confidentiality, personal identity and right to protection of personal data.
Privacy disclosure pursuant to Article 13 of Italian Legislative Decree no. 196/2003
Please note that the personal data collected will be processed in compliance with legal requirements and the rights assured you by the law, as data subjects:
A) Processing will include: collection over the telephone or by telematic or written means or from public registers, lists of deeds and documents and/or public and/or private databases (commercial information companies), registration, organisation, storage and processing as hard copies, on magnetic, automated or telematic storage devices, processing of data collected by third parties, amendment, selection, extraction, comparison, use, inter-connection, including with data of other subjects on the basis of qualitative, quantitative and time criteria, recurring or definable each time, temporary processing with a view to enabling a rapid aggregation or transformation of said data, adoption of decision in automated and/or discretionary fashion, creation of profiles and information, communication, erasure and destruction of data or combinations or two or more of the above-described operations;
B) Without prejudice to disclosure to third parties in compliance with legal obligations or obligations deriving from regulations or other European Community legislation, the data will be disclosed by us to our appointed members of the administration, marketing, sales, after-sales and claims departments, as well as, both nationally and abroad, to the following subjects: 1) banks and credit institutes, for payments to be made; 2) insurance firms (for transport insurance cover); 3) debt collection companies, insurance and/or credit transfer companies; 4) commercial information companies; 5) consultants and professionals; 6) professionals and professional firms (lawyers, chartered accountants, auditors, etc.); 7) independent auditors; 8) other companies, entities and/or natural persons providing instrumental, support or essential services to the fulfilment of the contracts or services you may have requested (e.g. packaging companies and postal distribution companies, carriers and couriers, sub-suppliers, companies managing commercial information instruments, web space management companies for data archiving). These subjects will in turn process and disclose the data to third parties as "controllers" in accordance with Art. 28 of Italian Legislative Decree no. 196/2003, entirely independently.
C) Processing and disclosure shall take place with the following aims: 1) to satisfy pre-contractual (e.g. instruction of offers or your orders, solvency checks); 2) fulfilment of contractual obligations (connected with the supply or purchase of goods and/or services) and legal requirements (e.g. the keeping of accounts, tax formalities, administrative, accounting and treasury management); 4) customer and supplier management; 5) management of loans and risk control (fraud, insolvency, etc.); 6) management of disputes and the transfer of credits); 7) financial services instrumental to the management of customers/suppliers and management of electronic payment instruments; 8) insurance services instrumental to customer/supplier management. The internal parties appointed as above by Fope may also process said data for the purpose of 9) proliferation, 10) gaining fidelity and 11) sending newsletters and other promotional and commercial materials.
D) The conferral of data by yourself is only compulsory for the purposes specified under point C) above, from items 1 to 8 and, therefore, your prior consent for processing to this end, is not necessary. For processing for the purposes specified under points 9, 10 and 11, consent is not compulsory, but any failure to provide consent will prevent us from fulfilling the activities for which said purpose was required.
More specifically, please note that the processing for purpose 11 shall also entail the minimum amount of profiling and obtaining fidelity as is strictly necessary to ensure the targeted fulfilment of your request to receive newsletters and promotional and advertising materials specific to you and/or in your exclusive interests and which, in accordance with Art. 130, paragraph 4 of the Privacy Code, will not require any consent for the sending of advertising e-mails featuring products and services similar to those you have purchase on the Website, except where you should specifically refuse such consent. Data will be processed for the duration of the contracts stipulated with yourself and thereafter, for the time necessary to fulfil our legal obligations and to keep your business profile, in order to rationalise the selection of customers and/or suppliers. You are free to refuse your consent, however such refusal will make it impossible for us to fulfil the contract with yourself.
F) You may in any case exercise the following rights in relation to your personal data, as established by Articles 7, 8 and 9 of the Privacy Code: Paragraph 1 (...): to obtain confirmation as to whether or not personal data concerning him/her exists, regardless of whether or not it has been recorded, and to communication of such data in intelligible form; Paragraph 2 (...): to be informed: a) of the source of the personal data processed; b) of the purposes and methods of processing; c) of the logic applied to the processing, if this is carried out with the help of electronic means; d) of the identification data concerning the data controller, data supervisors, the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State’s territory, data supervisors or persons in charge of the processing. Paragraph 3 (...): to obtain the: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of any data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data was communication or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; Paragraph 4 (...): to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though relevant to the purpose of the collection; b) to the processing of personal data concerning him/her where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys (NB: our company, however, if processing the data for the purposes indicated in paragraph 4 of Art. 7 above, will ask you for specific written consent with an appropriate disclosure). Art. 8 Paragraph 1 (...): The rights referred to in Article 7 may be exercised by making a request to the data controller or processor without formalities, also by the agency of a person in charge of the processing. A suitable response shall be provided to said request without delay. Paragraph 2 (...): The rights pursuant to Art. 7, where not regarding objective data, may be exercised without prejudice to where such concerns the rectification or supplement of personal data of an evaluation nature, in relation to the judgements, opinions or other such subjective considerations and the indication of how to behave or decisions being made by the data controller. Art. 9 Paragraph 1 (...): the request made of the controller or supervisor can also be sent a) by letter sent recorded delivery, fax or e-mail, b) if regarding the exercise of the rights pursuant to Art. 7, paragraphs 1 and 2, also orally, and in this case, it is noted in summary form by the person in charge of processing or the supervisor. Paragraph 2 (...): in exercising the above rights, the data subject may issue a written delegation or power of attorney to a natural person, entity, association or organisation. The data subject may also be assisted by a trusted person. Paragraph 3 (...): the rights pursuant to Art. 7 in connection with personal data concerning deceased persons may be exercised by those with an interest or acting on behalf of the data subject or, for family reasons, deserving of protection. Paragraph 5 (...): the request pursuant to Art. 7, paragraphs 1 and 2, can be renewed by the data subject, without prejudice to the existence of justified grounds, at least ninety days apart.
What Cookies are
A cookie is a small quantity of data, often containing a unique anonymous ID code, which is sent to a browser by a Web server and then stored on the hard disc of users’ computers. Each cookie is read and recognized exclusively by the Web site that sent it every time users visit the Web site in the future. The browser is the software that enables to navigate the Web by displaying and transferring the information to users’ devices’ hard discs. If the browser’s preferences are set to accept cookies, any Web site can send its cookies to the browser, but – in order to protect users’ privacy – it can only ”see” those sent by the site itself, not those sent to the browser by other sites. In any case, cookies cannot cause damage to users’ computers/devices.
ALTERNATIVES FOR SETTING COOKIES
Users’ privacy is essentially guaranteed by the fact that AT ANY TIME WHATSOEVER they can:
> configure their browser in order to accept all cookies, refuse them all, or receive an alert message whenever one is sent,
> cancel one, some or all cookies.
Every browser has its specific settings, so it is necessary to remember to consult the “Help” section of the browser used to have the most information on how to modify its preferences.
Internet Explorer: http://windows.microsoft.com/it-IT/windows7/Block-enable-or-allow-cookies
Apple Safari: http://www.apple.com/it/privacy/use-of-cookies/
COOKIES USED ON THIS SITE
Technical cookies are those that are only used to "transmit a communication over an electronic communication network, or as is strictly necessary to the provider of a service of information explicitly requested by a subscriber or user to provide the service in question" (see Art. 122, para. 1 of the relative Law). They are not used for other purposes. These can be divided into navigation or session cookies, which ensure the normal navigation and use of Web sites (enabling, for example, to purchase items or to log in to reserved areas); analytical cookies, assimilated to technical cookies when used directly by the site owner to collect information, in aggregate form, on the number of users and how they visit the site; functionality cookies, that enable users to navigate according to a series of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided by the site. Users’ prior consent is not requested for the installation of these cookies
Profile cookies are aimed at creating user profiles and are used in order to send advertising messages that match the preferences shown by users during their Web navigation.
> are used to display advertising announcements tailored to users’ interests, obtained from the site pages visited. They are also used to avoid always showing the same ad announcement and to help measure the effectiveness of advertising campaigns.
> They are usually placed by advertising networks with the permission of Web site owners.
> They keep track of your visits to the site and this information is shared with organizations such as advertising agencies.
> They are often connected with facilities on the site provided by thirty-party companies
(when it is cancelled)
|OWNER(Link to third-party site)|
|__utma__utmc__utmz||B||after 1 month||Google Analytics (*)|
(*) GOOGLE ANALYTICS
This site uses Google Analytics, a Web analysis service provided by Google Inc. for the generation of statistics on the use of the Web site. Google Analytics uses "cookies" that are placed on your computer to analyze the use of the Web site by users. The information generated by the cookies on the use of the Web site (including the IP address) is transmitted by users’ browsers to Google, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, and stored on its servers. Google Analytics collects the information in an anonymous manner without identifying individual visitors. The browsers do not share the proprietary cookies of the Google Analytics tool with other dominions. Google Analytics does not report information regarding effective addresses: Google Analytics communicates information in such a way that only part of the IP address is used for geographic reporting, rather than the entire address, using a method known as IP masking. Google will use this information in order to track and examine the use of the Web site, prepare reports on the Web site’s activity and provide the sites’ owner other services regarding the Web site’s activities, connection methods (mobile, PC, browser used, etc) and the methods for searching for and reaching the Web site’s pages. Google can also transfer this information to third parties when this is established by law or if the aforesaid third parties process the information on behalf of Google. Google will not associate your IP address with any other datum possessed by Google. It is possible to disable Google Analytics cookies, using the opt-out browser add-on provided by Google for the main browsers. It will thus be possible to also use the anonymous online services.
- the terms of service of Google Analytics
- Google’s privacy overview http://www.google.com/intl/en/analytics/privacyoverview.html
INTERESTED PARTIES RIGHTS
Data subjects (subjects whose personal information is involved) have the right at any time to obtain confirmation to the existence (or not) of said information and to know its content and origin, check its accuracy and request its integration, updating or rectification (art. 7 Legislative Decree. 196/2003). According to this same article, data subjects have the right to request the cancellation, anonymization or blocking of any data processed unlawfully, as well as opposition for legitimate reasons to their processing.
All requests must be sent to FOPE S.P.A. using the “Contact” area of the Web site www.fope.com