DATA PROCESSING CARRIED OUT BY PROFAR S.A.S. FOR ONLINE SALE
Dear User, on this page we describe the ways in which Profar S.a.s. processes your data that is collected through the website www.bandanashop.it
The processing of your data will be based on principles of correctness, lawfulness and transparency and protecting your privacy and your rights in line with both the Privacy Code (Legislative Decree 196/2003) and the European Regulation n. 2016/679 (RGDPR)
1. The Data Controller
The Data Controller is Profar S.a.s. di Moschen Andrea & C. Via di Costa San Nicolò, 40 38123 Trento (TN) VAT Number / Fiscal Code 01966500223 Reg. Companies Register TN-191018 info@profar.pro.
2. Data Protection Officer or DRP
Pursuant to and for the purposes of art. 37 of EU Reg. 2016/679 GDPR Profar S.a.s. has appointed the Data Protection Officer who you can contact using the following contacts Tel +39 3341527656 mail: info@profar.pro
3. Type of data collected:
With regard to the data collected, we inform you that the collection and processing concern the following types of data:
- Personal data
In order to be able to carry on our relationship and/or the services connected to it, we collect personal data such as: user identification data such as name, surname, tax code, place of residence, email address, bank details and in any case all those indispensable data to proceed to correctly fulfill the orders received, manage payments, deliveries, any return/refund requests, etc.
- Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error ..) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
- Cookies
A cookie is a textual element that is inserted into the hard disk of a computer only after authorization. Cookies have the function of streamlining the analysis of web traffic or of signaling when a specific site is visited and allow web applications to send information to individual users. No user data is acquired by the site for this purpose. Cookies are not used to transmit information of a personal nature, nor are c.d. persistent cookies of any kind, or systems for tracking users.
4. Purpose of the processing and data storage time
The data processing is aimed exclusively at providing the services connected to the web services of the www.bandanashop.it site and in any case for purposes strictly connected to the performance of the service. The personal data provided by users who request services are used for the sole purpose of performing the service or provision requested and are not communicated to third parties unless the communication is imposed by legal obligations or is strictly necessary for the fulfillment of the requests.
The personal information we collect is used to:
• Purchase and delivery of products and services. We use your personal information to receive and process orders, deliver products and services, process payments, and communicate with you about your orders, products, services, and promotional offers.
• Provide and improve the Services offered and solve any problems connected to them. We use your personal data to provide functionality, analyze performance, evaluate the quality of products and/or Services, correct errors and improve the use and efficiency of the Services on the Site.
• Fulfill legal obligations. In some cases we are legally required to collect and process your personal data.
• Communicate with you. We use your personal data to communicate with you about the services offered through various channels (for example, by telephone, email and chat).
Purposes for which we ask for your consent. We may also ask for your consent to process your personal data for specific purposes which we will communicate to you. When you consent to us processing your personal data for a specific purpose, you can withdraw your consent at any time and, in this case, we will stop processing your data for that purpose.
The increase of information over time allows us to improve the quality of the service.
The data will be kept for the time necessary to perform the requested service and after the termination of the commercial relationship for the purpose of issuing certificates or documentation that may be requested, for the fulfillment of any obligations connected or deriving from the conclusion of the relationship itself and in any case for a period not exceeding 5 years from the aforementioned termination. For example, after termination of the relationship it may be necessary to keep your data to comply with legal obligations and/or fulfill tax obligations. The treatment takes place at the headquarters of Profar S.a.s. and the contents are edited by employees and/or collaborators of the same who act under the supervision and control of Profar S.a.s..
Periodically visiting our site and receiving our emails is a free and automatic way to help you shop better.
5. Security Measures
The system is protected against access by any malicious people; our Company has set up and will continuously improve the security system for accessing and storing data. Profar S.a.s. uses industry standards for the protection of personal information. The data will be processed by employees and/or professionals appointed by the latter, who will carry out the aforementioned activities under the direct supervision and responsibility of the legal representative.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
6. Compulsory nature of the treatment
We point out that the provision of data is not mandatory, however failure to provide it could lead to failure or partial performance of the requested service.
7. Data provided voluntarily by users
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Brief information will be progressively reported or displayed on the pages of the site designed to offer particular services.
8. Communication and sharing of information with third parties
Profar may have to make the data concerning you accessible to the Judicial Authorities as well as to qualified third parties only on the basis of precise legal duties and for the performance of the requested service.
For example, the data, for the purposes related to the execution of contractual obligations, may be communicated by us and/or transmitted to the following categories of subjects: - Group companies as parent companies, subsidiaries or associated companies; - to our consultants, within the limits necessary for the performance of their duties at our Company; - to our suppliers of goods and services (such as couriers) within the limits necessary for the performance of the activities covered by the negotiating and contractual relationships established with you; banking institutions for the management of receipts and payments; - financial administrations and other companies or public bodies in fulfillment of regulatory obligations; companies and law firms for the protection of contractual rights; competent judicial and investigative authorities in the event of an express request by the Authorities themselves.
Profar also communicates the data you provide to third parties such as 1) Companies and/or subjects belonging to Profar or with whom Profar has entered into specific agreements which are entrusted with the task of carrying out activities aimed at improving the quality of the services offered and for marketing purposes of our services and/or updated information on products and services; 2) natural and/or legal persons who, by virtue of contracts entered into with Profar, provide specific processing services or carry out related, instrumental or support activities to those carried out by Profar.
Third party service providers: Profar uses other companies and individuals to carry out certain activities on its behalf. For example, to fulfill orders for products or services, deliver packages, service reviews, send postal mail and/or emails, remove recurring information from customer lists, analyze data, provide marketing assistance, process payments, transmit content and provide services of customer support. These third party service providers have access only to the personal data that are necessary for the performance of their activities, but they will not be able to process the data of which they become aware for other purposes. Furthermore, these third parties are required to treat the personal data of which they become aware in accordance with this Privacy Policy and the applicable regulations on the protection of personal data.
In all other cases, any communication can only take place upon explicit request and, in any case, exclusively for the purposes referred to in point 4 of this information.
No data collected through the web service is disclosed to third parties.
9. Methods of data processing
Data processing may be carried out using manual, IT or telematic tools designed to memorize, manage and transmit the data organized according to logics related to the same stated purposes and, in any case, in order to guarantee the security and confidentiality of the data processed. The retention and archiving of personal data takes place through the use of electronic and IT tools.
Data retention takes place at the headquarters of the company Profar Sas.
10. Rights of data subjects
Pursuant to art. 13 RGDPR, the User has the right to obtain the indication:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) of the logic applied in case of treatment carried out with the aid of electronic instruments;
d) of the identification details of the owner, of the managers and of the designated representative;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents.
The User also has the right to obtain:
• confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form; • updating, rectification or, when interested, integration of data;
• their cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
• the limitation of the treatment or the opposition to their treatment;
• access to data;
• data portability;
• the right to lodge a complaint with the Guarantor for the protection of personal data (www.granteprivacy.it). Interested parties who believe that the processing of personal data referring to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take the appropriate judicial offices (art. 79 of the Regulation).
• the right to cancellation (right to be forgotten).
11. Right to object
The User has the right to object, according to the provisions of art. 21 EU Reg 2016/679RGDP, in whole or in part:
1. at any time, for reasons related to your particular situation, to the processing of personal data concerning you, pursuant to art. 6 Par. 1 letters e) or f) of EU Reg. 2016/679 including profiling on the basis of these provisions;
2. to the processing of personal data concerning you for the purpose of sending advertising material or direct sales;
3. to processing for direct marketing purposes including profiling to the extent that it is connected to direct marketing.
4. To processing for scientific or historical research purposes or for statistical purposes unless the processing is necessary for the performance of a task in the public interest.
12. Methods of exercising rights
You can exercise your rights towards Profar as Data Controller at any time by sending a request to the following email address info@profar.pro and/or by writing to the addresses indicated in point 13.
13. Contacts
For any information, request, clarification, contact us at: Profar S.a.s. di Moschen Andrea & C. Via di Costa San Nicolò, 40 38123 Trento (TN) Tel +39 3341527656 or send an email to: info@profar.pro
Updated to 30.11.2021
DATA PROCESSING CARRIED OUT BY PROFAR S.A.S. FOR MARKETING AND PROFILING PURPOSES
This information governs the processing of personal data through the use of the website available at the address https://bandanashop.it/policies/privacy-policy, PROFAR S.a.s. di Moschen Andrea & C, with headquarters in Via di Costa San Nicolò, 40- 38123 Trento (TN), Italy, VAT number 01966500223, email address info@profar.pro, (hereinafter the "Owner"), in accordance with the current data protection regulations, including, in particular, EU Regulation 2016/679 (hereinafter "GDPR").
1. Identity and contact details of the data controller
The data controller is Profar S.a.s di.
Since the Data Controller is established in Italy, no representative has been appointed.
2. Contact details of the data protection officer
The Data Controller has appointed Moschen Andrea as data protection officer and can be contacted at the data controller as well as at info@profar.pro
3. Processing methods
3.1 Cookies and environmental data
TECHNICAL COOKIES
• Navigation, functional, session cookies: they allow the site to function correctly. The use of c.d. session cookies (which are not stored permanently on the device of the interested party and are automatically deleted when the browser is closed) is strictly limited to the transmission of identifiers of the individual sessions, and are used in order to allow safe and efficient use of the site. They differ in:
- activities strictly necessary for the functioning: cookies used to save the User's session and to carry out other activities strictly necessary for the functioning of the application, for example in relation to the distribution of traffic;
- saving preferences, optimization and statistics: cookies used to save browsing preferences and optimize the User's browsing experience. These cookies include, for example, those used to set the language and currency or for the management of statistics by the site owner.
• Statistical cookies: the site uses statistical cookies made directly by the data controller, such as
first party, or provided by third parties. In the latter case, suitable tools have been adopted to reduce their identifying power, including by masking significant portions of the IP addresses thus processed. Furthermore, the use of these third-party statistical cookies has been subject to contractual obligations which commit the third party to use them exclusively for the provision of the service, to keep them separately and not to "enrich" them or not to "cross" them with other information of which they have. With specific regard to Google Analytics cookies, the information obtainable from the cookies on the use of the site by users will be transmitted by the browser of the interested party to Google Inc., with registered office at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States United, and stored on the company's servers.
Google's privacy policies, which we invite you to read, are available at the following address: http://www.google.com/intl/it/privacy/privacy-policy.html
The privacy information relating to Google Analytics services is available at the following address: http://www.google.com/intl/en/analytics/privacyoverview.html
• Navigation data and environmental variables: The computer systems and procedures used to operate the site automatically acquire, during their normal operation, some personal data relating to navigation of the interested party, including environmental variables. This category of data includes, for example:
• the IP addresses of the computers used by users who use the service;
• the number of accesses;
• pages viewed;
• the date and time of access;
• the URL the browser was in before viewing our page;
• the type of navigation browser;
• the operating system used.
NON-TECHNICAL COOKIES
• Profiling cookies: the site uses profiling cookies provided by third parties. In detail, the following are used:
- interaction with social networks and external platforms: this type of service allows interaction with social networks or other external platforms directly from the pages of this application. The interactions and information acquired by this application are in any case subject to the User's privacy settings relating to each social network.
In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.
Facebook Remarketing (Facebook, Inc.): is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. which connects the activity of this Application with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
AdWords Remarketing (Google Inc.): is a remarketing and behavioral targeting service provided by Google Inc. which connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
- Statistics: the services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behaviour.
Google Analytics with anonymized IP (Google Inc.): is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics makes your IP address anonymous. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to a Google server and shortened within the United States.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out
Facebook Ads conversion tracking (Facebook, Inc.):
is a statistics service provided by Facebook, Inc. which connects data from the Facebook advertising network with the actions performed within this Application.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
Delete and disable cookies
Since cookies are normal text files, they can be accessed using word processing programs. In any case, it is possible to configure your browser to prevent it from dealing with cookies.
Delete/deactivate cookies with Firefox:
http://support.mozilla.com/it/kb/Eliminare%20i%20cookie
Clear/deactivate cookies with Edge:
https://support.microsoft.com/it-it/help/4027947/windows-delete-cookies
Delete/deactivate cookies with Chrome:
http://support.google.com/chrome/bin/answer.py?hl=it&answer=95647
3.2 Data provided voluntarily by the interested party
The data optionally and freely provided by the interested party by sending e-mails to the addresses on the site may be acquired for the purpose indicated in point 4.
In particular, in addition to the email address necessary to reply to the sender, any other personal data contained in the relative communication will be processed.
4. Purpose of the processing and legal basis of the processing
To send direct marketing communications, newsletters, advertising material, by means of traditional contact systems and automated IT systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, the consent, expressed in accordance with this information, constitutes a legal basis;
For profiling and determination of habits and preferences. In this case, the consent, expressed in accordance with this information, constitutes a legal basis.
5. Methods of expressing consent
Consent to the processing of personal data through non-technical cookies can be expressed:
• By clicking on a specific box presented within a banner.
6. Source from which the personal data originates
Only the data provided by the interested party in accordance with this information, collected through the website, will be processed.
7. Recipients and any categories of recipients of personal data
The recipients of the data subject's personal data may be:
• communications companies that carry out commercial communication and profiling activities on behalf of the Data Controller, who hold the position of data processors;
• companies offering information society services, including, in particular, those offering hosting services.
8. Data Categories
The personal data of the interested party will be processed.
9. Data Transfers
The Data Controller intends to transfer personal data to a third country or to an international organization. These subjects could be represented, by way of example, by:
• communications companies that carry out communication activities on behalf of the Data Controller;
• companies offering information society services, including, in particular, those offering hosting services;
• communication company service providers.
The transfer of personal data to these subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question ensure an adequate level of protection of your rights. In any case, the Data Controller - if he deems it appropriate in any case - reserves the right to conclude specific separate agreements that oblige such subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding their rights. Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of the data subject. The data may thus be transferred to the following countries: UK, United States of America. To obtain a copy of these data or the place where they were made available, simply send the relevant request to the email address info@profar.pro
10.Personal data retention period
Personal data processed for marketing purposes are processed and stored until the data subject revokes consent or cancels it.
Personal data processed for the purpose of determining preferences are processed and stored for a period of time not exceeding 12 months starting from collection.
The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and/or to verify the consents already expressed.
11. Optional consent and consequences of non-consent
In relation to personal data processed for marketing purposes, the communication of personal data is not a contractual obligation. You are entitled to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any marketing activity;
In relation to personal data processed for profiling purposes, the communication of personal data is not a contractual obligation. You are entitled to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any profiling activity.
12. Rights of the interested party
12.1 Right to object
In relation to personal data processed through technical cookies in order to allow correct use of the website, the communication of personal data is not a contractual obligation, but based on the legitimate
interest of the owner, as without this treatment the fully functional website could not be made available.
Consent is to be considered optional in relation to non-technical cookies. In the latter case, failure to provide such data will only make it impossible to provide a personalized service. In relation to the data provided voluntarily via email, consent is to be considered optional. However, failure to communicate such data will make it impossible to respond to the interested parties;
In relation to the data communicated for contractual and pre-contractual purposes, the communication of personal data is a contractual obligation and a necessary requirement for the performance of the pre-contractual negotiations and for the conclusion of the contract. The interested party has the right to provide personal data; in case of failure to communicate such data, however, it will not be possible to conclude any contract or carry out any contractual negotiation;
In relation to the data provided voluntarily by email, failure to communicate them will make it impossible to respond to the requests of the interested party.
12.2 Other Rights
The Data Controller also intends to inform the interested party of the existence of the following rights:
• Right of access of the interested party: the interested party has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and specific information , in accordance with art. 15 of the GDPR.
• Right of rectification: the interested party has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration, in accordance with art. 16 of the GDPR.
• Right to data cancellation, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without unjustified delay and the Data Controller has the obligation to cancel without unjustified delay the personal data, or to revoke your consent, if the reasons defined by art. 17 of the GDPR. As regards the right to withdraw, the interested party also has the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
• Right to limitation of treatment: the interested party has the right to obtain from the Data Controller the limitation of treatment when the hypotheses defined by art. 18 of the GDPR.
• Right to data portability: the interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another data controller without impediments by the Data Controller in the cases and under the conditions specified by art. 20 of the GDPR.
13. Exercise of rights
Requests to exercise the rights indicated in this information, including, in particular, the right to cancellation and the right to withdraw the consent given, must be addressed directly to the Data Controller at the email address info@profar.pro. Alternatively, it is possible to exercise one's rights by sending the relative communication by registered letter with return receipt to the address Via di Costa San Nicolò, 40 38123 Trento (TN)
14. Accessibility of the information
The information is accessible at the address https://bandanashop.it/policies/privacy-policy, as well as at the Data Controller. If expressly requested by the interested party, the information can also be provided orally, provided that the identity of the interested party is proven, by means of a telephone request addressed to the addresses of the Data Controller.