Information on the processing of personal data pursuant to articles 13 and 14 of EU Regulation no. 2016/679 relating to the website www.gloves.it

In accordance with the current legislation on the protection of personal data, FORINO 1899 srls, with registered office in Naples, in Via s.Elia n. 32 80137 Naples, in its capacity as Data Controller (hereinafter, also “Controller”), wishes to provide users of the website www.gloves.it (hereinafter, “site”) with information regarding the processing of personal data.

The information is provided only for the site and not for other web spaces accessible through any links on the site, which have their own personal data protection policies that the user is encouraged to consult by accessing the respective websites.

The site allows you to make payments by credit card through the PayPal gateway, which, in case of use through the site, could detect and process user data according to its own privacy policies even from places outside the European Union. Therefore, before interacting with this Web platform, the user is encouraged to consult the information on data processing present on the same and, only subsequently, decide whether or not to use it through the site.

The services offered through the site are exclusively reserved for individuals who have reached the age of eighteen. The Data Controller will immediately delete all personal data involuntarily collected in relation to individuals who have not reached the age of eighteen.

The site also uses third-party Cookies to offer the user a better browsing experience. All information regarding the use of Cookies and the methods for selecting or deselecting them and possibly denying consent to the installation of any Cookie, can be found in the specific information on the use of Cookies available here: https://gloves.it/it/content/10-cookie

1) Categories of data subject to processing

1.1. Browsing data

The computer systems that ensure the functioning of the site detect some so-called "navigation" data, such as: IP addresses, domain names of computers used by users who connect to the site, URI addresses of requested resources, parameters relating to the user's computer system.

The provision of this data is automatic and is mandatory for navigation on the site.

This data is not collected to be referred to identified users, but could allow the identification of the user if associated with other data held by third parties.

The Owner has no possibility of independently identifying the user through navigation data alone, and guarantees that these data will be used for the sole purpose of obtaining statistical information on the use of the site and will be deleted as soon as the activities for which they were collected have been carried out.

The data may be used to ascertain responsibility in the event that computer crimes are committed against the site.

1.2. Data provided voluntarily by the user

The personal data provided by users when completing the information request form belong to the category of common data, and do not include sensitive, health, genetic, biometric, judicial data, or data referred to in Articles 9 and 10 of EU Regulation no. 2016/679, as the processing of these latter categories of data is not necessary for the pursuit of the purposes pursued by the Data Controller.

In any case, only personal data strictly necessary for the pursuit of specific and legitimate purposes will be processed, with respect to which the processing will always be relevant and never excessive.

2) Source from which the personal data originates

The so-called “browsing” data referred to in the previous art. 1.1 are acquired automatically by the software procedures used to operate the site.

The personal data referred to in the previous art. 1.2 are provided by users of the site by filling in specific electronic forms present on the pages of the aforementioned site.

3) Purpose of the processing

Except as specified in the previous art. 1.1 regarding the so-called “browsing” data, the personal data provided by users of the site may be processed:
a) to register on the site and enjoy the services offered by the Data Controller;
b) to conclude purchases through the site and fulfill the related contractual obligations;
c) to carry out the necessary accounting/administrative activities connected to the purposes referred to in letters a) and b);
d) to fulfill the obligations connected to the purposes referred to in letters a) and b) provided for by the law and regulations of the European Union;
e) for commercial, advertising, promotional and marketing purposes in the broad sense, which involve processing:
e. 1) for sending communications of information relating to new offers of products and services, of a commercial nature and/or commercial solicitation (Newsletter) by the Data Controller;
e. 2) to carry out sales activities of the Data Controller's services;
e. 3) for the sending of unsolicited commercial communications, immediately identifiable as such and containing the indication that the recipient of the same can oppose the receipt of further communications of this kind.

4) Expression of consent

Consent to the processing of personal data, where required, is given by the interested party by selecting the appropriate fields on the data collection form.

5) Consequences of failure to communicate personal data

The communication of personal data requested in the various information collection forms present on the site and marked with an asterisk (*), which are defined as mandatory data, although left to the free will of the user, is necessary to achieve the specific purposes pursued by the Owner and connected to the processing of this information.

Consequently, failure to provide mandatory personal data will prevent us from achieving the main purpose for which they are requested.

In particular, the communication of personal data marked with an asterisk (*) and requested in the information form in the “Checkout” section is necessary for the conclusion of the sales contract and the delivery of the product that the user wishes to purchase.

Therefore, failure to communicate this data will prevent the purchase of products through the site as well as the conclusion of any agreement with the Owner.

Even if you do not provide mandatory data, you will still be able to continue browsing the site.

The communication of data other than those marked with an asterisk, which are defined as optional, is left to the discretion of the user; consequently, failure to communicate optional data will not produce any consequences.

Likewise, consent to the processing of personal data for marketing purposes pursuant to art. 3 letter e) of the information is purely optional.

Therefore, failure to provide and consent to the relevant processing will not entail any consequences for the user, except that the user will not receive the promotional and commercial communications indicated in art. 3 letter e).

The Data Controller wishes to inform the user that by giving consent to the processing of personal data for commercial, advertising, promotional and marketing purposes in the broad sense referred to in art. 3 letter d) the user authorizes the processing of his/her data:
– both through “traditional” methods, such as: telephone calls with an operator and contact through other non-electronic means or not supported by automatic or telematic procedures, and through automated telephone calls and similar such as: text messages and similar, systems supported by automatic, electronic or telematic procedures, without an operator;
– with reference to all the purposes indicated in art. 3 letter e), that is, both those indicated in letter e.1) and those indicated in letter e.2), and those indicated in letter e.3).

In any case, the user has the right to request at any time to limit the processing of personal data for the purposes referred to in art. 3 letter e) to only some of the methods specified above (for example, only through "traditional" means) or to some of the types of processing indicated in letters e.1), e.2) and e.3) (for example, only to sending Newsletters).

6) Legal basis of the processing

The legal basis for the processing of data for the purposes referred to in art. 3 letter a) and b) consists in the need to carry out specific activities requested by the user, in the need to conclude contracts with the user and fulfill the related obligations. With reference to these purposes, although not mandatory, the Data Controller also requires the user's consent.

The legal basis for the processing of personal data relating to the purposes referred to in art. 3 letters c) and d) consists, respectively, in the need to fulfill the contractual obligations undertaken towards the user and in the fulfillment of legal obligations.

The legal basis for the processing of personal data relating to the purposes referred to in art. 3 letter e) consists exclusively in the prior, free, specific, optional and informed consent to the processing for the aforementioned purpose.

The legal basis for the processing of navigation data consists in the legitimate interest of the Data Controller in the need for the functioning of the site.

7) Methods of processing

The personal data provided by users of the site will be processed at the Data Controller's offices, or in other places where the parties involved in the processing operate, through electronic and/or mechanical and analogical methods for the time strictly necessary to achieve the purposes for which they were collected and in any case not exceeding the limits indicated in this information, in full compliance with the purposes pursued by the Data Controller and in accordance with the current legislation on privacy.

Specific security measures are observed to prevent data loss, illicit or incorrect use of the same as well as unauthorized access.

8) Communication of personal data for the fulfillment of contractual obligations or legal obligations

In compliance with current privacy legislation, the user's personal data may be communicated to third parties to whom communication is necessary for the purposes of pursuing the purposes referred to in art. 3 letters a), b) and c) without the need to acquire separate consent.

Pursuant to art. 13 letter e) of EU Regulation no. 216/679, it is specified that the Customer's personal data may be communicated to the following categories:
– the employees and collaborators of the Data Controller, appointed as Data Processors and specifically trained pursuant to art. 29 of EU Regulation no. 2016/679;
– the persons possibly appointed as Data Processors or Data Protection Officers;
– third parties in the following categories: technical studios, subjects and/or companies that offer digital communication services, including hosting services, services related to the publication of websites, software design and development, or that operate as suppliers of IT and logistics services functional to the operation of the site, as well as subjects and/or companies that perform shipping services.
– Public Authority or any other third party if required by law.

9) Communication of personal data for the pursuit of promotional and marketing purposes in general

The Data Controller will not communicate the user's data to third parties for promotional or marketing purposes in the broad sense referred to in art. 3 letter e).

10) Further hypotheses of communication of personal data

For the sole purpose of satisfying the legitimate interest of the Data Controller in protecting its rights, the user's personal data may be communicated, without the user's consent, to individuals and companies that carry out legal, fiscal, administrative, tax consultancy activities, or defense and technical assistance, both judicial and extrajudicial, who will act as independent Data Controllers.

11) Dissemination and transfers of personal data to countries outside the EU or to international organisations

The Owner will not disseminate the user's personal data and will not transfer them outside the European Union or to international organizations.

12) Period of retention of personal data

Taking into account that the guarantee provided by civil law with reference to the sale of products to consumers is 2 years from the delivery of the goods sold, the personal data provided by the interested party in order to purchase products through the site and allow the Owner to fulfill the related contractual and legal obligations will be retained for a period not exceeding 2 years from the termination of the contractual relationship, unless the interested party has previously requested cancellation.

Personal data processed for promotional, commercial and marketing purposes in the broad sense referred to in art. 3, letter d), will be retained for a period not exceeding 12 months from collection.

Browsing data remains for a period not exceeding one month.

In any case, the terms of five or ten years of conservation of documents and related data will be respected for the purposes of fulfilling the civil, accounting and fiscal obligations prescribed by current legislation, as well as for the purposes of protecting the rights of the Owner in court.

13) Rights of the interested party

Pursuant to art. 7 of the Privacy Code and arts. 13, paragraph 2, letters b) and d), 15, 18, 19, 21, of EU Regulation no. 2016/679, the user may at any time exercise the rights referred to in the aforementioned art. 7 of the Privacy Code as well as the rights referred to in arts. 15 to 23 of the aforementioned EU Regulation.

In particular, the interested party may exercise:
– the right to have access to your personal data and to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and communication of the same data in an intelligible form, as well as the right to data portability (i.e. the right to receive the personal data provided, in a structured, commonly used and machine-readable format);
– the indication of their origin, the purposes and methods of processing, as well as, in the event that the processing is carried out with electronic tools, the logic on which the processing is based; the indication of the identifying details of the owner and any responsible parties;
– the indication of the subjects and categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as managers or persons in charge;
– the updating, rectification or, if there is interest, the integration of the data;
– the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
– to oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning him/her, even if pertinent to the purpose of the collection; to oppose the processing of personal data concerning him/her for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication;
– to obtain the rectification and/or cancellation of the same and/or the limitation of the processing concerning him/her;
– to withdraw consent to the processing, if the processing is based on their consent, without prejudice to the processing already carried out;
– to lodge a complaint with the supervisory authority. This authority is represented, in Italy, by the Privacy Guarantor, with headquarters in Rome, Piazza Monte Citorio n. 121, postcode 00186.

14) Use of automated decision-making processes and profiling by the Data Controller

The Data Controller will not subject the user's personal data to automated decision-making processes, including profiling.

15) Data controller

To exercise your rights, the user can contact, at any time, the Data Controller, whose identification details are indicated: FORINO 1899 srls, with registered office in Naples, Via S.Elia n 32 80137 Naples, telephone 081210808 pec forino1899@pec.it

The Data Controller makes the following email address available to users of the site for the exercise of rights, also with reference to requests addressed to third parties to whom the data have been communicated with the specific consent of the interested party: pec forino1899@pec.it

The updated list of appointed Data Processors can be found at the indicated office of the Data Controller.