Privacy & Cookie Policy - disclosure on personal data processing
Pursuant to Article 13 of (EU) Regulation No. 2016/679 on the protection of personal data (hereinafter the “Regulation” or “GDPR”), the Data Controller informs on the processing of personal data carried out via the website www. fisico.it (hereinafter just the “website”).
This information concerns this website and not other websites possibly consulted by the user via browsing from links present on the website, in relation to which please see the information provided by the other websites with regard to the handling of privacy aspects. Pursuant to Article 37 of the GDPR, the Data controller is not obliged to appoint a Data Protection Officer (DPO).
Data Controller
Olmar and Mirta S.p.A.
Headquarters: Via Cocapana 9, 46026 Quistello (MN), Italy
Mail: info@olmarandmirta.com
Tel No. +39 0376 618905
Data processed and purpose of data processing
The personal data collected via the website will be used for the following purposes: to allow the correct navigation of the website by means of cookies and technical browsing data; to analyse the use of the website by means of statistical processing of anonymous or aggregate data; to provide information and reviews on products and services; to sell our products or services and to promptly execute the obligations arising in the pre-contractual and contractual phase; to fulfil the obligations envisaged by applicable Italian and EU laws, regulations and/or legislation. Subject to free, specific and informed consent, the data will also be used to provide marketing information on our products and/or services and to profile the user in order to offer better and more personalised services.
Legal basis of the processing
The legal basis of the processing may be: the execution of a contract to which the data subject is a party (online sale) or the performance of pre-contractual measures adopted at the request of the data subject (information request); specific, free and informed consent, when required for data collection for purposes other than contractual purposes or simple browsing (marketing and profiling); the fulfilment of legal obligations also not arising from the performance of the sale; the protection of the legitimate interest of the Data Controller in the conduct of its business.The conferral of the data requested is mandatory for contractual purposes (e.g. for making purchases via the website) and for legislative and regulatory fulfilments; it may be optional for other purposes. The failure to, partial or inaccurate conferral of the required data will make it impossible for the Data Controller to execute the contract and consequently fulfil the associated legislative and regulatory obligations, as well as preclude the appropriateness of said processing.
Technical browsing data - log files
The IT systems and the software procedures tasked with the functioning of this website acquire - during their normal running - certain data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites accessed or exited from, information on the webpages visited by users within the website, access time, internal path analysis and other parameters relating to the user's operating system and computer environment. Such technical data can be accessed by the Data Controller in an aggregate and non-identifying manner and is used for purposes of technical management of the services provided and anonymous statistical analysis of the traffic generated and the webpages visited. In the event of cyber attacks on the website, crimes or offences committed via the website, it may be used for investigation and ascertainment of responsibility purposes. The data is kept for the period of time necessary to fulfil the specified purposes, except when it is necessary to keep the data in order to ascertain incidents, unlawful acts or crimes or at the request of the Police or the Authorities.
Data provided by users via e-mail messages, telephone or ordinary mail
The website publishes our addresses, telephone numbers, e-mail addresses, which each person can freely contact to request information or assistance with purchases: the conferral of data is optional, the data will be processed to reply to the request and/or for the purposes specified by the data subject, will be kept for the period of time for achieving the purposes or for fulfilling of requests, if not already stored for other purposes of handling the relationship with the data subject that envisage different and extended storage times.
Data provided for the registration of the user account
The creation of a user account is required in order to access one’s reserved area and to make purchases on the website via the E-commerce platform. Registration requires only limited and necessary generic personal data, such as personal details and place of residence, telephone number, e-mail address and password, which will be used to register and manage the user's account, to allow access to the reserved area of the website and to view notifications, to manage the electronic shopping cart, to view the order history, to manage any credit notes or vouchers in favour of the user, and to modify personal, invoicing, shipping and payment data. The data will be kept in accordance with the principles of lawfulness, limitation of the purposes and minimisation of the data, pursuant to Article 5 of the GDPR, for the period of validity of the registration of the user until request is made to cancel or withdraw by the user, who subsequently can no longer access their reserved area.
Data provided for purchases and shipments
For online purchases with issuance of the sales document, for the purposes of managing the sale, fulfilling contractual and legislative obligations and issuing the necessary documents, the purchaser's personal and fiscal data required by law, an e-mail address and a telephone number are required, which will be used to communicate with the customer regarding delivery. The data will be kept for the period of time required by the purposes and by applicable Italian or EU law.
In the event of payment by credit card or other online payment circuit, the data of the user and the credit card used will be processed directly by the e-commerce platform external to our website, which will manage this information autonomously, so we invite the visitor to read the information on the processing of personal data provided by the e-commerce platform where the payment is made.
Consent for marketing
Subject to your separate and specific consent, the personal data collected will be used to send you offers and promotions or communications with informative and/or promotional content about our products or services via e-mail, SMS or MMS messages, instant multimedia messaging applications and applications on the mobile network or data network (so-called Apps). The legal basis for the processing is your possible free, specific and informed consent in accordance with Article 6.1, letter a) of the GDPR
Consent for profiling purposes
Subject to your separate and specific consent, the data may be used for profiling activities, so as to improve the offer of products and services by ourselves. The legal basis for the processing is your possible free, specific and informed consent in accordance with Article 6.1, letter a) of the GDPR.<
Cookies
Cookies are small files which are saved on the user’s device during browsing of the website, they have the purpose of collecting information on the browsing of the website by the user and can be retransmitted or reused on subsequent visits.
Cookies have different characteristics and are used for different purposes, either by the owner of the website you are visiting (so-called first party cookies), or by other sites (so-called third-party cookies) because web tools provided by third parties are embedded on our website. Cookies can be stored permanently on the device or have a variable duration (so-called persistent cookies), otherwise they are temporary and are deleted when the browser is closed or have a limited duration (so-called session cookies). There are other technologies such as pixel tags, web bugs, web storage and other similar files and technologies that can perform the same functions as cookies; in this Cookie Policy we also use the term "cookies" for all these similar technologies.
Session cookies
Their duration corresponds to the session of use of the browser and they are cancelled automatically on closure of the same.
Persistent Cookies
They remain stored on the browsing device until the envisaged expiry date, or are cancelled by the user before expiry.
Technical or functional cookies
Technical or functional cookies are necessary for browsing and using the website, they are used to ensure the correct functioning of the website or for managing determinate functions of the website on the basis of the user’s choices, they are necessary and their deactivation may lead to the loss of functioning of the website or the impossibility of correctly browsing the same.The consent of the visitor is not necessary for this type of cookie.
Analytical cookies
On the website we use third-party services provided by Google Analytics (analytics.google.com) with anonymisation (partial masking of the IP address), so the third party is not able to capture the user's IP address and cross-reference it with other data in its possession, so no profiling of user preferences is possible. We use these cookies to collect and analyse website traffic and usage in an anonymous way: without directly identifying the user, they allow us to monitor access to the website and improve its performance and usability.
The deactivation of these cookies can be done without any loss of functionality, for more information, please refer to the link https://www.google.it/policies/privacy/partners/. You can also selectively disable the action of Google Analytics by installing the opt-out component provided by Google on your browser, please refer to the link https://tools.google.com/dlpage/gaoptout
The consent of the visitor is not requested for these cookies as the data is collected in anonymous form.
Third-party cookies
We use third-party services on the website that use tracking and profiling cookies, in relation to which we inform the visitor before accessing the website and request consent: these cookies are only recorded on the device if the user explicitly accepts them.
Profiling cookies monitor and profile users during browsing, studying and storing their options and browsing habits on the website and on the web in general, as well as their consumption habits, also for the purpose of sending targeted and personalised service advertisements. These tracking cookies are used for marketing purposes, to create profiles relating to the user and the user’s preferences during browsing of the website and may cross-reference the information collected with information already held by the third parties or collected by other third-party websites.
For these cookies, the data collected care of the user is also transmitted to service providers or suppliers located in the United States of America (USA), therefore outside the European Union. In observance of the principles and requirements of Articles 44 and 49 of the GDPR for transfer outside the EU, the legal basis for the transfer is the prior consent of the data subject pursuant to Article 6. 1, letter a) of the GDPR.
Links to other websites –Social Network Plugins
On the pages of the website there may be links to visit other third party websites, the use of such features leads the user to interact with web services offered by third party websites and implies the exchange of information with such websites. The visitor is redirected to the third party website by leaving our website and, therefore, the handling of the information is carried out by the third party independently.
The site also incorporates plug-ins such as “social buttons” with the aim of enabling easy sharing of the content of our website on your favourite social networks. In order to protect the privacy of users, these plugins are programmed so that they do not set any cookies when the page is accessed, but only when the user makes effective and voluntary use of the plugin, according to the settings of the social network. If the user browses the website while they are logged into their profile on the social network, they have already consented to the use of the cookies channelled via the social network. The collection and use of information obtained from third parties by means of the plugin is governed by the respective privacy policies of the social networks, to which reference should be made.
Handling of the cookies
At the time of accessing the website a banner is present which contains a brief disclosure and the link to the extended form of this disclosure.
The banner allows the visitor to manage the use of cookies and to set the choice for optional profiling/tracking cookies; by default only functional/technical cookies are enabled which are necessary and cannot be disabled without loss of website functionality.
Consent to use the enabled cookies is registered by means of a “technical cookie” saved on the user’s device.
The handling of the cookies is also possible by changing the settings of the browser by means of the following possible solutions, these are examples and there are also others:
- modification of the browser settings, which makes it possible to allow or disallow the storing of the cookies and which usually also makes it possible to set the rules of the cookies so that those of “third parties” are not accepted. Some also make it possible to block the cookies of certain third parties and not those of others, via a function which makes it possible to indicate which domains to allow cookies to be sent from;
- with specific software components added to the browser (so-called plug-ins), which specialise the functions commonly made available by browsing software and which can be configured by the user to select cookies on the basis of the domains of origin;
- by means of “do not track”, which allows the user to indicate to each website visited whether or not they wish to be tracked during browsing. However, this technical mode is not standardised and there is no certainty that this function is implemented on all domains that deposit cookies on the website and over which, being third parties, the Data Controller has no control;
- It is possible to disable the Google Analytics cookies by visiting the Google webpage (Google GaOptOut) and downloading the additional component for the selected browser.
Note: by choosing to block all the cookies, the full functioning of the website may be compromised.
Processing and retention methods
The data is processed by computerised/electronic instruments by authorised personnel instructed by the Data Controller, or also by third parties appointed as Data Supervisors for the relevant processing operations, always in compliance with the principles of lawfulness of processing and by adopting appropriate security measures to limit access to the data to authorised persons only. The data will be kept for the period of time required by the purposes of the processing, as specified in the previous sections where for each processing the retention timescales are indicated.
Communication and transfer of the data
The data will be communicated exclusively to authorised parties appointed to manage the website and our activities relating to the website:
- internal staff who act under the authority of the Data Controller;
- hosting providers, website developers, other internet service providers for the website, professionals, consultants or companies, for services functional to the management of our activities or for the administration of the website;
- in the event of purchases on the website: carriers, couriers, postal services, shipping and logistics companies, who act as autonomous data controllers;
- iin the event of purchases on the website: payment platforms for e-commerce, who act as autonomous data controllers.
The data of the users of the website is not disseminated and is not transferred outside the European Economic Area.
The data of the cookies will be communicated exclusively to authorised parties appointed to manage the website and our activities relating to the website:
- internal staff who act under the authority of the Data Controller;
- website developers, other internet service providers for the website.
Transfer of data outside the EU
Some third-party cookie data, deposited after the specific consent of the user, may be transferred outside the EU to web service providers or suppliers located in the United States (USA): these third parties provide guarantees of an adequate level of protection meeting regulatory requirements, with particular regard to the security measures adopted in accordance with the GDPR.
For some analytical cookies, the data collected from the user is transmitted in anonymised form to web service providers or suppliers located in the USA but does not identify the user because it is partially anonymised, so the GDPR requirements for non-EU transfer do not apply.
Exercise of the rights of the data subject
Subject to the limitations envisaged in the same Regulation, the data subject may at any time contact the Data Controller at the addresses indicated herein to exercise the rights envisaged by Articles 15-22 of the GDPR:
- access to personal data; rectification; deletion; restriction on processing; objection to processing; data portability;
- withdrawal of consent, where envisaged: the withdrawal of consent shall not affect the lawfulness of processing based on consent granted before its withdrawal.
- information on the automated process relating to the profiling.
The data subject also has the right to lodge a complaint, in the manner and within the time limits envisaged, with the Italian Data Protection Authority: please visit the website
www.gpdp.it for greater details.
Updating of the Privacy & Cookie Policy
The possible entry into force of new sector regulations, as well as the constant review and updating of services for the user, may entail the need to change the way in which personal data is processed via the website: it is possible that our policy may change over time and we therefore invite the visitor to periodically consult this page.
