Pursuant to and for the purposes of Articles 13 et seq. of the EU Regulation no. 2016/679, with regard to the personal data provided which will be processed, the data subject is hereby informed of the following:
The company Flos Floris S.n.c di Antonio Matarazzo & C., with registered office in Milan (MI), Via Mauro Macchi 44 – 20144, (C.f.)/tax code and (p.iva) VAT No. 07411430965 (hereinafter “FLOS FLORIS” or the “Data Controller”) is the owner of the domain www.flosfloris.com, as described in this information notice.
Data Controller and Data Processors
The data controller is the company Flos Floris S.n.c di Antonio Matarazzo & C., with registered office in Milan (MI), Via Mauro Macchi 44 – 20144, (C.f.)/tax code and (p.iva) VAT No. 07411430965 in the person of the legal representative p.t.
Processing is carried out through the site www.flosfloris.com, owned by the company Flos Floris S.n.c di Antonio Matarazzo & C.
E-mail address: firstname.lastname@example.org
Method of processing:
The Data Controller will process the personal data provided by you, in particular the following categories of personal data will be processed:
• Account Data: at the time of creating an account, you will be asked to provide certain Personal Data, such as your first name, last name and telephone number, necessary to complete your registration and take advantage of the services offered by the Site. The provision of your e-mail address is optional.
• Payment Data: in case of purchase of products, payment data will also be processed, in accordance with current legislation.
• Contact data: if you wish to contact FLOS FLORIS by e-mail, your e-mail address and the content of the message sent will be processed in order to provide a response to your communication. The provision of further data is optional.
• Browsing data: the Site’s computer systems and software procedures acquire identification data during your browsing. This data is not permanently stored or collected, but may allow Users to be identified. This data could be used by FLOS FLORIS to ascertain responsibility in case of computer crimes.
Legal basis of processing
In particular, Personal Data will be processed when one of the following legal bases applies:
Consent of the data subject; Performance of a contract or adoption of pre-contractual measures; Legitimate interest of FLOS FLORIS; Legal obligation.
For more details on the purposes of the processing and the related legal bases, please refer to the table below.
Purpose of Processing
Preventing fraudulent activities and establishing liability
Answering queries from the data subject
Registration and use of the reserved area
Order management and administrative activities
Fulfilment of legal obligations
Sending of commercial communications
Execution of pre-contractual measures
Execution of pre-contractual measures
Execution of a contract
Consent of the person concerned
Consent to the processing of personal data
The provision of Personal Data is necessary to fulfil legal obligations or for the performance of a contract and consent must be express, specific and informed. Without it, it may not be possible to pursue the purposes of the processing. The provision of Personal Data is optional for other indicated purposes. Refusal will have no consequences on the conclusion of the contract. The compulsory or optional nature will be specified at the time of collection.
Communication and dissemination of data
In addition to the company that owns the site www.flosfloris.com, the personal data provided may be communicated to employees, external consultants, accountants, lawyers, credit institutions, service and consulting companies. As part of its activity, FLOS FLORIS may also communicate the data provided: to third parties operating and collaborating on behalf of FLOS FLORIS as external data processors.
Transfer of personal data
Personal data may be transferred to countries within the European Union and to countries outside the European Union, if this is necessary for the performance of obligations arising from a contract to which the data subject is a party or to fulfil, prior to the conclusion of the contract, specific requests made by the data subject, or for the conclusion or performance of a contract entered into in favour of the data subject, or in the other cases provided for in Article 13 of EU Regulation no. 2016/679, subject to the signing of specific model contract clauses.
Criteria used to determine the data subject’s data retention period
FLOS FLORIS will use the personal data provided by the data subject for the period of time necessary for the proper performance of its contractual obligations to the data subject, and in relation to the timing of the service or until the consent given is revoked.
Rights of the data subject
Articles 13 et seq. of EU Regulation no. 2016/679, grant the data subject the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and their communication in a structured and/or intelligible format; to obtain an indication of the origin of the personal data; to obtain an indication of the purposes and methods of processing; to obtain an indication of the identification details of the data controller; to obtain an indication of the subjects or categories of subjects to whom the personal data may be communicated; to obtain the updating, rectification or, when he/she is interested, the integration of the data; to obtain the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed to obtain certification to the effect that the operations as per the two preceding paragraphs have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection.
The data subject is also informed that:
The data subject has the right to request from the Data Controller access to and rectification or erasure of personal data concerning him or her or to object to the processing of personal data concerning him or her, as well as the right to data portability;
He/she also has the right to withdraw the consent given in relation to the processing of personal data concerning him/her and that this right may be exercised at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation.
We inform you that you still have the right to object at any time to the processing of Personal Data concerning you carried out for direct marketing purposes, including profiling, insofar as it is related to such direct marketing. The right to object to such processing by automated means of contact also extends to the processing of Personal Data by traditional means of contact, unless you wish to object only in part.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
To exercise your rights and revoke your consent, as well as to obtain more information about your personal data, you may send a communication to the e-mail address email@example.com , indicating in the subject line “request Privacy FLOS FLORIS“.
It is your right to lodge a complaint with the Personal Data Protection Authority.