FARTAN GROUP

Information Document in compliance with current European privacy laws (Regulation EU 2016/679)

This is a report in compliance with the clause 13 of EU 2016/679 (European privacy laws) and it is not valid for other websites that you might visit by using links present on the Fartan Group srl websites; Fartan Group srl cannot be considered responsible for other’s websites.

PRIVACY POLICY

1- DATA CONTROLLER

In compliance with clauses 4 and 24 of Regulation UE 2016/679 the Data Controller is FARTAN GROUP SRL in the person of the Chief Executive Officer, its domicile is in Via Calamandrei 249/P 52100 AREZZO (AR), PIVA 01995110515. Contacts Ph. No.: 0575.446502, e-mail: info@fartan.it.

2- TYPE OF DATA

While you are browsing the website FARTAN GROUP SRL will be able to collect certain personal data as follows:

Browsing data
During their normal operation, the computer systems and software procedures, which operate our website, collect certain personal data concerning the use of internet communication protocols. Such information includes IP addresses, which kind of browse and operating system you use, domain names of the computers you use to visit our website, website addresses from which you have access to our website, information about pages visited by users inside our website, access time, for how long users visited a single page, the internal path you follow when you visit our website and other parameters concerning the user’s operating system and computer environment.
Other type of data
Personal data voluntarily provided through our website, for instance when users sign in and/or log in to a reserved area and/or to a service by writing to FARTAN GROUP SRL email address in order to ask for information or calling to the phone number inside our website.

3- PURPOSE OF THE PROCESSING

In compliance with the ex clause 6 of the Regulation EU 2016/679 your personal data may be processed for the following purposes:

a) to visit our website - legitimate interest (clause 6, paragraph 1, letter F)
b) to manage your relationship with Fartan Group Srl and respond to all your requests – legitimate interest (clause 6, paragraph 1, letter F)
c) to manage your request of information about our collections displayed in our website (clause 6, paragraph 1, letter F)

4- THE ADDRESSEES OR GROUPS OF ADDRESSEES OF YOUR DATA (clauses 28-29 Regulation EU 2016/679)

Your personal data may be communicated to other entities that will process them for purposes above mentioned (paragraph 3) as responsible subjects and/or as data processing appointees acting under the authority of data Controller.

In particular, your data may be communicated to other entities for the following activities: Maintenance and development of the web and information technology infrastructure – Consultation – Administrative, accounting and fiscal data processing – Legal activities – Mail and website management – Expert third parties that fulfil what the law obligates and/or public authorities order.

The above mentioned entities become Responsible of data processing or they can operate independently as regular data Processor. The list of the persons in charge is constantly updated and easily to consult by writing to info@fartan.it or to the offices of FARTAN GROUP SRL.

5- TRANSFER OF DATA ABROAD AND/OR TO AN INTERNATIONAL ORGANIZATION AND GUARANTEES

Personal data may be transferred to other European countries in order to fulfil the above mentioned activities, otherwise our company will implement standard clauses in accordance with European Union laws with the company which receives data; these clauses guarantee an appropriate level of data security in accordance with European laws.

Your personal data will not be disclosed under any circumstances.

6- RETENTION PERIOD OR CRITERION TO ESTABLISH THE RETENTION PERIOD

Data processing will be done by appointed entities both in an automate and manual way with means that guarantee security and safeguard of personal data.

In compliance with clause 5, paragraph 1, letter E of the Regulation EU 2016/679 the collected personal data will be stored in a way that allows individual identification as long as required for the purposes for which they were processed.

Personal data storage depends on the processing purposes:
a) Web surfing in our website (see cookies policy)
b) Contact request (no more than 12 months)
c) Request about our collections (no more than 12 months)
d) Personal data needed to sign in and possible purchases (until the sign-in cancellation) and personal data concerning legal fulfilment and obligation will be stored for 10 years starting from the sign-in cancellation of the user.

7- NATURE OF THE PROVISION OF PERSONAL DATA AND REFUSAL

Apart from what said about web surfing data, users are free to give their personal data. Your personal data are elective or necessary according to the reason why data are processed. If you don’t confer your personal data for the purposes indicated at paragraph 3, letter d, we may not be able to satisfy your request and you won’t have access to the service offered by the data Controller.

8- RIGHTS OF THE DATA SUBJECT

Please note that users may exercise the rights under Articles 15,16,17,18,19,20,21,22 of the Regulation EU 2016/679 with data Controller. At any time users have the right of asking for access at their personal data, their rectification or erasure, limitations on personal data processing. In addition to that users have the right to object to the processing (including automate processing like the outline process) or the right to have those personal data transmitted to another controller at any time. Except for other administrative or jurisdictional complains if you think that your personal data processing may violate the Regulation EU 2016/679 clause 15, letter f, you have the right to file a complaint to the personal data protection Authority and you have the right to withhold your consent at any time under the clause 6, paragraph 1, letter a) and clause 9, paragraph 2, letter a).

According to paragraph 3 letter d) the withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal (in compliance with clause 7)