INFORMATION FOR USERS REGISTERING ON THE WEBSITE
regarding the protection of personal data
IN ACCORDANCE WITH ART. 13 of Lgs. Decree no. 196,. 30.06.2003
Pursuant to art. 13 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, the company Fashion Group S.r.l., with registered offices at via del Carmine 11, (59100) Prato (PO), in its capacity as data controller, informs users wishing to register on the website www.fashionpo.com, as Data Subjects, the purposes and methods used to process the personal data collected, the scope of communication and dissemination, as well as the way in which data are used.
PERSONAL DATA PROCESSED AND PURPOSE OF PROCESSING
1) Registration: personal data, specifically the data indicated in the registration form (name, email address, telephone number, etc.), reported and collected from the data subject and voluntarily transmitted from them during registration on the Fashion Group Lawn S.r.l. website are processed in order to meet the data subject’s request to create a personal account to use the services offered by the data controller by means of the website and access the online portal.
It should be noted that the data can also be used for the purpose of so-called "soft spam."
Accessing services using the portal: the personal data collected, including computer data (such as your IP address) will be processed to allow access to the services offered by the site owner via the company website and reserved to registered users, or, for example but not limited to access to the reserved area, the collection and management of orders submitted by users through the website , payment for the products, the delivery of the purchased products; fulfilling its obligations under law, EU legislation and public authorities.
2) Sending of advertising material, direct marketing, statistical and market research: After consent, personal data such as email address and phone number, are also used for the delivery of commercial and promotional communications and informational messages related to the activities and services of the Data Controller, through automated means (such as email and sms) and traditional media (such as telephone contact with or without operator) , in full observance of the principles of lawfulness and fairness and the provisions of law.
3) Communication of data to third parties for marketing purposes: if agreed to, the data subject’s personal information, such as email address and phone number, may be disclosed to other companies (belonging to the same group as the Data Controller, or third-party companies for the supply of products related to the activity of the owner: e.g., company selling clothing and accessories) for marketing purposes (traditional or automatic) of the latter.
In any case, processing will take place in full compliance with the principle of fairness and legality and applicable laws.
DATA PROCESSING METHODS
The personal data processed are transmitted to the servers of the Data Controller or to servers operated by third parties (appointed to take charge of data processing, as per art. 29 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations). Data processing is carried out using computerised and electronic means, as well as in hard copy form, by in-house and external staff, appointed and/or responsible for processing. Data are stored in electronic and hard copy files with full insurance of the minimum security measures provided for by law. Specifically, the Data Controller must take all necessary safety precautions to minimize the risk of destruction, loss, unauthorized access, or access which is not allowed or not compatible with the purpose of collection of personal data (in reference to articles 31 and successive of Lgs. Decree no. 196/2003 and subsequent amendments and integrations).
In particular, for the purpose of sending advertising material, direct marketing, statistical and market research, commercial and promotional communications sent regarding the activities and services of the Data Controller will happen (always in compliance with art. 130, co. 1, and 2 of Lgs. Decree no. 196/2003 and s) through:
-automated mode of contact, with the use of automated calling systems or call communication without human intervention, email, fax, Mms (Multimedia Messaging Service) or Sms (Short Message Service) or otherwise;
-traditional mode (like hard copy mail and/or operator-assisted calls).
COMMUNICATION AND DISSEMINATION OF DATA
The personal data collected will not be disclosed, sold, traded or communicated with any third party other than the Data Controller, without the express consent of the data subject. Communication to third parties, other than the Data Controller or processors, in-house but also those outside the company, and by persons appointed to process data as per articles 29, and 30 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, and is scheduled solely for the achievement of the objectives referred to in point 1 and 2 of the section DATA PROCESSED AND PURPOSES OF DATA PROCESSING and in any case within the limits of same, possibly to: subject and third-party companies supplying technical and computer assistance (e.g., companies that make the APPs and the company management system, etc.), affiliated companies or other third parties that provide information processing services to Fashion Group or activities complementary to those offered by Fashion Group, to allow the execution of the contract, shippers, all engaged in proper and regular pursuit of the purposes described. In any case, processing by third parties will be made fairly and in compliance with current laws.
Subsequent to express agreement, communication will be made to third-party companies (belonging to the same group as the Data Controller, or third-party companies for the supply of products related to the activity of the owner: e.g., company selling clothing and accessories) for marketing purposes (traditional or automatic) of the latter.
DATA RETENTION TIMES
The data will be kept for the time necessary to fulfill the purpose of managing the account created by the data subject to access the services offered by the Data Controller via the corporate website. In any case the data will be kept until the request to cancel the account, or if this is deleted by the owner.
With regard to processing for the purposes of sending commercial communications and promotional services of the Data Controller and to send informational messages relating to its activities, if agreed, the data will be stored no later than two years from the first contact, subject to the objection to processing by the party concerned. The opposition to processing can be advanced by the data subject, independently of the method used to send same (traditional or automatic), in particular, for phone numbers found on the lists it is necessary to oppose processing by registration on the Public Opt-out register, while for email, deletion is provided through referral to the appropriate link. In any case deletion can be requested by sending a fax to 0574/621397or by sending an e-mail to the address email@example.com.
DATA SUBJECT’S RIGHTS
The data subject can enforce their rights as expressed in articles 7, 8, 9, and 10 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, by contacting the Data Controller. Specifically, according to art. 7, the data subject can obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet recorded, and the communication of said data in intelligible form. The data subject has the right to obtain information regarding: a) the origin of personal data;) b) purposes and methods of processing; c) the logic applied in case of treatment with electronic instruments; d) the identity of the data controller, data processors and the representatives appointed according to article 5, paragraph 2; e) subjects or categories of subjects to which personal data may be communicated or which may become aware of same, as designated representative in the territory of the State, as managers and/or as agents. The data subject has the right to obtain: a) the update, correction or, when interested, integration of data; b) cancellation, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; c) certification that the operations in letters a) and b) have been notified, as also related to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves the use of means manifestly disproportionate to the protected right. The data subject has the right to object, in whole or in part: a) for legitimate reasons, to the processing of their personal data, pertinent for collection purposes; b) to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.
DATA CONTROLLER, DATA PROCESSORS AND PRIVACY COMMUNICATION
The Data Controller is the company Fashion Group S.r.l., with registered offices at via del Carmine 11, (59100) Prato (PO). An updated list of data processors is available at the company’s registered and/or operating offices. For all communication relevant to articles 7 and successive of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, the Data Processor has made the following address available@ firstname.lastname@example.org.
NATURE OF PROVISION
The provision of data is optional, but necessary because any refusal to do so will make it impossible for the Data Controller to create a personal account to use the services offered by the site owner via the corporate website reserved to registered users.
With regard to the provision of data for marketing purposes, the same is optional and the refusal is not affected and will not affect the main processing function, but it will make it impossible for the holder to comply with accessory requests. The same applies to the granting of consent to the communication of personal data to third parties for marketing purposes of the latter.
Pursuant to arts. 23, and 24 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, consent to the processing of valid data for creating a personal account useful to benefit from the services offered by the company website and reserved for registered users is not necessary since the data is collected for the performance of obligations arising from the contract to which it is party. It should be noted that it is not necessary to consent to so-called "soft spam" (see guidelines on promotional activities and contrast to spam by the Data Protection Authority of 4 July 2013).
Pursuant to arts. 23, and 24 of Lgs. Decree no. 196/2003 and subsequent amendments and integrations, you must consent to the processing of data for the purpose of sending commercial communications and promotional services of the Data Controller and to send information messages related to its activities. In accordance with the guidelines regarding promotional activity and contrast to spam of the guarantor for the protection of personal data.
Consent is also necessary for the transmission of data to third party companies (belonging to the group to which the owner belongs, or third-party companies for the supply of products relating to the activities of the holder better outlined above) for any promotional activity and corporate communication of the same company.
Please note that individual consents are deemed freely provided by checking the "I consent" boxes present under the registration form.