Pursuant to the General Regulation for the Protection of Personal Data (EU) 2016/679 (hereinafter "RGPD") and Legislative Decree 196/03, this page describes the methods of processing the personal data of interested parties who consult the GIS site Milan and use the web services available electronically. The processing of personal data will always be based on the principles of maximum correctness, lawfulness, transparency and protection of the privacy and rights of the interested parties; at any time you can contact us for any clarifications / information on the subject.
DATA CONTROLLER
The data controller is FINCO.2G Srl (hereinafter also only "Owner" or "Company").
PURPOSE OF TREATMENT
The purpose of the site is to allow visitors to consult the GIS Milano catalog and proceed with the possible purchase of one or more products. Furthermore, to provide information on the history and activity of the Company, on the materials and articles produced, on the initiatives underway and planned and to facilitate contact with visitors. The personal data collected through the contact form, the newsletter subscription form and when completing the purchase order will be processed by personnel authorized by us, exclusively to adequately manage the questions and requests received, manage the promotional communication of the company and to process a purchase order received. The data relating to navigation, specified below, are collected for impersonal statistical purposes and to ensure correct functionality and correct use of the site.
LEGAL BASIS OF THE PROCESSING / DURATION
The personal data collected on the website are processed by the Company to respond to requests or to execute contact requests, proceed with the registration of the visitor to the newsletter service and organize and send a purchase order received. The data are processed on the basis of the consent provided by the interested party.
TYPES OF DATA PROCESSED
Data communicated by the user
The contact form made available on the site has the sole purpose of allowing visitors to contact the Data Controller, if they so wish, by sending him a communication / e-mail. The registration form for the newsletter service is intended to collect the visitor's name and e-mail address in order to send him promotional and commercial communications. The registration and order submission form is designed to collect all the information necessary for the billing and shipping of an order made by the site visitor.
The data entered via the contact form will be transformed into an e-mail that can be stored in the mail system used by the owner of the site and in the archive of the site itself. The registration data for the newsletter service will be sent via API to the external MailChimp service in order to be able to send communications to subscribers and will be stored in the site archive. The purchase order data will be stored in the site archive, will give rise to a confirmation e-mail sent to our company and to the buyer; the data relating to the shipment will be shared with the company appointed by the Data Controller to deliver the products. All data collected may be recorded on other media or devices, for the timely execution of the requests received and for the purpose of backing up information.
Navigation data
Following the consultation of the site, data relating to natural persons identified directly or identifiable through codes or telematic addresses are collected / processed. This type of data includes: IP addresses or domain names of computers and terminals used by users; computer traces of the activity performed (log activity) and other parameters relating to the operating system and the user's IT environment. These data, necessary for the use of web services, are also processed for the purpose of:
- keep evidence of the activity performed;
- obtain statistical information on the use of the services and check the correct functioning of the site.
The navigation data are kept for NO more than 3 MONTHS and are deleted immediately after their aggregation (except for any need to ascertain crimes by the judicial authority)
SCOPE OF COMMUNICATION AND DIFFUSION
Your data will be communicated to competent and duly authorized subjects to perform the services necessary for a correct management of the activity, with a guarantee of protection of the rights of the interested party. Your personal data will not be disclosed in any way.
PROFILING AND / OR AUTOMATED DECISION-MAKING PROCESS
For the purposes in question, no profiling activities are carried out on the users of the site. Automated access controls are carried out to ensure the availability and functionality of the site.
OBLIGATION OR RIGHT TO PROVIDE DATA AND CONSEQUENCES OF ANY REFUSAL
The provision of data is optional for all the purposes described above. Failure to provide it will make it impossible to use the services made available.
TRANSFER OF DATA TO THIRD COUNTRIES
No data collected will be transferred to third parties for purposes other than those indicated above. The data provided in relation to contact and order forwarding services will not be transferred to third countries. The data provided for the newsletter service may be transferred to third countries under specific agreements signed with the external service provider and specific "Standard contractual clauses".
STORAGE PERIOD
Your personal data are kept for a period of time not exceeding that necessary to achieve the purposes for which they are collected and processed or for those required by law. The general criterion used is however linked to compliance with the principles of lawfulness, purpose limitation and minimization of the data processed, pursuant to art. 5 GDPR 2016/679. The data collected by the contact form of the site will be archived for a maximum duration of 10 years, those relating to registration as long as the member does not execute or request to cancel his registration, those relating to a purchase order at least for the entire duration of the purchase and delivery operations and in any case for no less than 10 years. The data necessary for the fiscal management of the transactions carried out are kept for the time required by current legislation.
RIGHTS OF THE INTERESTED PARTY
You can exercise at any time the rights that are recognized by the legislation on the protection of personal data, including, for example, that of:
- access your personal data, obtaining evidence of the purposes pursued by the Data Controller;
- obtain without delay the correction of inaccurate personal data concerning you;
- obtain the limitation of processing, when possible;
- propose a complaint to the Personal Data Protection Authority.
For clarifications and / or to exercise your rights, provided for by articles 12-22 of the EU GDPR n.679 / 2016, you can send a written request to the Data Controller using the appropriate contact form.