In compliance with the provisions of the art. 13 GDPR (EU regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of processing of personal data of users of the website www.filatiitaliani.com .
Who processes your personal data?
The Data Controller is the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data. It also takes care of security profiles.
a) Identity and contact details
The “owner” of data processing for this website is Hircus Filati di Federico Scatizzi (hereinafter “Hircus Filati”). The contact details are as follows:
Legal representative: Federico Scatizzi
headquarters in via Battista Tettamanti, 19, 59100 Prato (PO)
The following contact details are given: telephone: +39 366 1436185; email address: info@hircusfilati.com
certified email address (Pec): federico.scatizzi@pec.it
We inform you that the organization did not consider the appointment necessary, pursuant to art. 37 GDPR of a data protection officer.
Which of your data do we process and how do we collect them?
• Cookies and navigation data.
We collect your personal data when, during navigation, you access the website www.filatiitaliani.com: in this case the system automatically collects a series of information (logs), which identify:
• the IP address;
• the page of origin;
• the type of browser and operating system used by the navigator;
• domain names of the computers used by users who connect to the site;
• uri (uniform resource identifier) addresses of the requested resources;
• time of the request;
• method used in submitting the request to the server;
• size of the file obtained in response;
• numerical code indicating the status of the response given by the server (successful, error, etc.);
• other parameters relating to the operating system and the user’s IT environment.
This information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, and for security reasons. This information will be processed based on the legitimate interests of the owner.
For security purposes (anti-spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause harm to other users, or in any case activities that are harmful or constitute a crime. Such data is never used to identify or profile the user, but only for the purposes of protecting the site and its users, such information will be processed based on the legitimate interests of the owner. These data are not intended for communication to third parties (except for requests, in accordance with the law, by the Public Authority, and therefore by the Police, Judicial Authorities and other subjects for public security purposes), nor are they intended for dissemination.
For the correct functioning of the site, session cookies may be used. Information on Hircus Filati’s Cookie Policy can be found HERE
• Data provided with the registration of the account on the website www.florencecaschmereyarn.com, for the request to send information material on the services.
The optional, explicit and voluntary sending of your data through the registration form in order to request information on the services provided by Hircus Filati entails the acquisition of the aforementioned data by Hircus Filati. They are considered voluntarily provided with express acceptance of this privacy policy, by simply completing the registration. The data received with account registration will be used exclusively for access to the reserved area and consultation of the contractual documentation and price list.
• Data provided for the order and the conclusion of the contract. After registering the account, filling out the form to activate the services involves the further provision of data to Hircus Filati.
The data received with the activation of the services will be used by Hircus Filati only and exclusively for the execution of the contract. The legal basis of the processing is the fulfillment of the contract. Failure to provide the data referred to in point 3) will make it impossible to comply.
For what purposes can we process your personal data?
• Browsing data.
As regards the methods of processing of data collected by the site during its operation, please refer to the Cookie Policy.
• Data spontaneously provided by the user.
the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, for the purposes of evaluating job offers, in the case of sending Curriculum Vitae, or for responding to the requests contained in communication.
• Data provided with the order request.
They are used only for purposes relating to the provision of the supply requested by transmitting the order through the portal.
Services used that collect personal data
Google Analytics with anonymized IP
Provider
Google Ireland Limited
Statistical Purpose
Personal data collected
Tracking tools
Usage data
Description
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.
This Google Analytics integration anonymizes your IP address. Anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google servers and shortened within the United States.
Google Fonts
Provider
Google Ireland Limited
Purpose
Displaying content from external platforms
Personal data collected
Usage data
Tracking tools
Description
Google Fonts is a character style visualization service managed by Google Ireland Limited that allows this Application to integrate such content within its pages.
Google Tag Manager
Provider
Google Ireland Limited
Purpose
Tag management
Personal data collected
Usage data
Description
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Widget Mailchimp
Provider
Intuit Inc.
Purpose
Interaction with data collection platforms and other third parties
Personal data collected
Email
Name
Surname
Description
The Mailchimp widget allows you to interact with the Mailchimp email address management and message sending service provided by Intuit Inc.
How do we protect your personal data?
Hircus Filati is a company that cares deeply about the security of its users’ data, and seeks the best solutions to avoid data loss, illegitimate or illicit use and unauthorized access.
Where do we process your personal data?
The personal data processed by Hircus Filati are processed exclusively in EU territory, and are not transferred to third countries.
How long are your data stored?
The data collected are used exclusively for the purposes indicated above and kept for the time strictly necessary to process your request and in any case for what concerns the data during registration until the user makes a request for cancellation. As regards the data relating to the execution of the contract, 10 years as per the civil code.
To whom can we communicate the data?
The data collected are not intended for communication to third parties or dissemination, without prejudice to any request by the Public Authority, and therefore by the Police, Judicial Authorities and other subjects for public security purposes.
What are your data protection rights?
With reference to the processing of your personal data, you can exercise the following rights:
1. Right of access to your personal data (art.15 GDPR): this is the right to have information at any time, from the Data Controller, about the data that the same retains, in reference to the methods of collection, purposes, recipients etc.;
2. Right to obtain rectification or deletion of data (art. 16 GDPR): this is your right to ask the Data Controller to rectify your data, so that it is updated, relevant, correct and complete.
3. Right to limit processing (art.18 GDPR): is exercised in particular cases expressly provided for by the GDPR, when processing must be limited to what is necessary for conservation purposes and not to further operations: a) in the event that the the interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify its accuracy; b) in case of illicit processing, when the interested party opposes the deletion of personal data, requesting that instead of deletion the limitation of their use be ordered; c) when the data controller no longer needs or intends to keep the data, but there is a need to keep them as they are “necessary for the interested party to ascertain, exercise or defend a right in court”; d) in case of opposition to the processing, pending the checks necessary to determine the prevalence of the legitimate reasons of the data controller or the rights of the interested party;
4. Right to cancellation (Ar.17 GDPR): right to request transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data are been collected or subsequently processed.
5. Right to object to processing (art.21 GDPR): everyone has the right to object to the processing of data if it is necessary for the execution of a task of public interest, carried out for scientific, historical or statistical research purposes or connected to the exercise of public powers vested in the data controller or even if the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, even when profiling is foreseen in the context of such processing, for reasons related to your particular situation.
In the case of data processed for direct marketing purposes, including the profiling connected to it, the interested party can object at any time.
6. Right to data portability (right applicable only to data in electronic format), as regulated by art. 20 GDPR, i.e. the right to receive data concerning him from a data controller in a structured format, readable by an automatic device, to transmit them to another data controller.
How to exercise your rights?
Hircus Filati seeks to provide maximum assistance to users of the website www.filatiitaliani.com, providing a specific contact point: info@hircusfilati.com to make the processing of any request relating to personal data easy and rapid, as well as the exercise of the rights listed above.
Responses are provided as quickly as possible, and in any case within 30 days as required by the GDPR.
In any case, the exercise of rights can be exercised by submitting a complaint to the supervisory authority (Guarantor for the protection of personal data). For further information and insights www.garanteprivacy.it.