INFORMATION PURSUANT TO ART. 13 OF REG. EU No. 679/2016 ("GDPR")
This Information describes which of your personal data is collected by “F.G.F. INDUSTRY S.p.A.” and “Filoblu S.p.A.” (referred to in this statement with the term "we"), for what purposes and how they are processed. Below you will also find the information necessary to exercise your rights under the GDPR.
In general, we collect your data when you create an account on the online store www.Blauerusa.com, (hereinafter the "Store"), when you purchase the products offered for sale in the Store, when you send us emails or call us for assistance. We inform you that the personal data collected during these processes will be processed in order to respond to your requests, to allow you to use the services offered by the Shop by accessing the reserved areas (for example, to fulfill your orders and carry out related activities instrumental, including the operations necessary for the purposes of administrative and tax obligations and, where requested by you, sending newsletters and information material) and also providing better services, marketing and support for you and for other customers, as indicated below.
1. Who processes your data: the data controllers
The following subjects:
• “F.G.F. INDUSTRY S.p.A.
” (hereinafter "FGF
"), with registered office in Padua, Vicolo Bellini n. 12, VAT no. 03315890289; the contact details are indicated in par. 2;
• “FiloBlu S.p.A.
” (hereinafter "FiloBlu
" or "FB"
), with registered office in Santa Maria di Sala (VE), Via Caltana n. 116/C, fiscal code and VAT number, e-mail: firstname.lastname@example.org
;are co-owners of the processing of your data.
Pursuant to art. 26 GDPR, we inform you that:
• FGF processes personal data for:
- the management of Store accounts for the purpose of transitioning to new operators or internalising services
- the processing of your position for the purposes of legal or conventional guarantees, in collaboration with FiloBlu, including the management of product return procedures;
- provide you with the necessary after-sales assistance, manage the return procedure for the purchased products;
- upon obtaining your consent, for marketing purposes.
• FiloBlu processes personal data collected for the following purposes:
- hosting, management and maintenance of the Store;
- provide you with the necessary after-sales assistance, manage the return procedure for the purchased products;
- or after obtaining your consent, for marketing purposes, according to the purposes and methods indicated below.
- management of the purchase order by the User
- invoicing of the purchase to the User
- management of the transaction towards banking circuits or management of any fraud.
2. Personal Data Protection Officer (DATA PROTECTION OFFICER - DPO)
FGF has appointed its Personal Data Protection Officer (DPO) pursuant to art. 37 of the EU Reg. n. 679/16 (GDPR), which can be contacted for any question concerning the processing of personal data of each interested party at the following e-mail address: email@example.com.
FiloBlu has appointed its Personal Data Protection Officer (DPO) pursuant to art. 37 of the EU Reg. n. 679/16 (GDPR), which can be contacted for any question concerning the processing of personal data of any interested party at the following e-mail address: firstname.lastname@example.org
3. What data we process - Type of data processedYour contact and account details
. We will retain the contact information you provide to us (for example, first name, last name, address, telephone number, email, country of residence, telephone number) when you create an account on the Store, purchase a product and/or participate in our contests or promotions.Your payment and billing information.
We will retain the payment and billing information you provide to us (for example, credit card number, postcode and address when you purchase a product, for the purpose of managing your purchase orders and shipping products). If you request it, we will also be able to keep payment and billing data in order to make future purchases of products easier.Information on the use of the site
. Your use of our sites involves the processing of data on the browser and device you are using and your IP address (this is the number that identifies a specific device on the internet and which is necessary for your device to communicate with the sites). We will be able to analyze which site you came from, what you have done and not done on our site.
4. Where we take your data - How we collect data: Directly from you
. For example, if you register to make a purchase on the Store, create an account, participate in a prize event, ask us a question or interact with our call centres.
If you do not communicate your data to us, you will not be able to register on the Shop and therefore you will not be able to make any purchases of the products offered for sale there.Through the use of the features of the Store
5. Why and for how long we process your data - Purpose and legal basis of data processing; retention period
|Right of revocation of the consent provided (GDPR Art. 13, Paragraph II, letter A and Art. 9, Paragraph II, letter A)
|In any moment whatsoever you have the right to revoke your consent to any of the types of processing whose legitimacy is based on your consent, as indicated in the table of purposes above.
Revocation of consent does not compromise the legitimacy of previous processing.
|Right of access to data (Art. 15)
|You have the right to request a) the purposes of processing; b) the categories of Personal Data in question; c) the receivers or categories of receiver to which your Personal Data has been or will be disclosed, and in particular whether such receivers are located abroad or whether international organizations are involved; d) whenever possible, the period of conservation envisioned for the Personal Data, or whenever this is impossible, the criteria used to determine such period; e) the Data Processing Controller to rectify or erase your Personal Data or the restriction of the processing of your Personal Data or your opposition to their processing; f) a protest to be lodged with a control authority; g) whenever the data has not been collected from you, all the information possible on its origin; h) the existence of an automated decision-making process, including the profiling specified in Article 22, Paragraphs 1 and 4, and at least in some cases, significant information on the type of processing logic adopted, and the importance and consequences envisioned for such processing for you. You also have the right to request a copy of your Personal Data that has been processed.
|Right of rectification (Art. 16)
|You have the right to request the rectification of inexact Personal Data that regards you and to obtain the integration of incomplete Personal Data.
|Right of erasure (Art. 17)
|You have the right to obtain from the Data Processing Controller the erasure of Personal Data that regards you whenever such Personal Data is no longer necessary to the purpose for which it was originally collected or otherwise processed, whenever you revoke your consent, whenever any legitimate and prevailing reason to proceed to profiling processing no longer exists, whenever the data has been processed unlawfully, whenever there is a legal obligation for its erasure; and whenever the data regards web services provided to minors without consent. Erasure may be performed except when the right to freedom of expression and information prevails or whenever it is conserved for the fulfilment of a legal obligation or for the execution of an operation performed in public interest or in the exercise of the powers of public authorities for public health reasons, for the purposes of the filing of scientific or historical research or statistical purposes or for purposes of ascertainment or the exercise or defense of a right during legal proceedings.
|Right of restriction of processing (Art. 18)
|You have the right to obtain from the Data Processing Controller the restriction of the processing of your Personal Data whenever you have protested the exactitude of such Personal Data (for the period required by the Data Processing Controller to verify the correctness of your Personal Data) or whenever the processing is unlawful and you oppose the erasure of Personal Data and ask instead that its use be restricted or if it is necessary to you for the ascertainment, exercise or defense of a right during legal proceedings and for the Data Controller it is no longer necessary.
|Right of portability (Art. 20)
|You have the right to receive in commonly used structured format legible by an automatic device the Personal Data that regards you and that you conferred to us, with the right to transmit it to others if the processing is based on consent, on contact, and if the processing has been performed with the use of automated systems except whenever the processing is necessary for the execution of an operation of public interest or regards the exercise of the power of public authorities and whenever such transmission does not infringe on the rights of others.
|Right to lodge a protest with the Data Protection Authority (Personal Data Protection Authority) (Art. 77)
|With all rights reserved to further of administrative or judicial claims, whenever you have reason to believe that the processing of your Personal Data violates Personal Data Protection regulations, you have the right to lodge a protest with a Protection Authority in the member state in which you regularly reside, work, or in which the presumed violation took place.
Please refer to the dedicated page (https://www.blauerusa.com/it/cookies-policy) for the description of cookies and their functioning.
7. Who we share your data with – recipients of personal data
Without prejudice to the fact that, where required by law, we will obtain your prior consent and carry out any formalities required by the law itself, we will be able to share your data with the following third parties (also as external managers):
Our service providers We may share your data with third parties so that they can provide us with services (for example couriers, companies that manage call centers, companies that manage warehouses and provide logistics services) but in this case we will conclude a compliant agreement to art. 28 GDPR aimed at protecting your data. These subjects only come into possession of the data necessary for the performance of their functions and can only use them for the purposes and methods established by us or to comply with the law. You can know the details of these data controllers pursuant to art. 28 GDPR by contacting the contact addresses of the data controllers and their data protection officers, where appointed, by email.
Where we deem it necessary to do so to comply with legal obligations or in order to legally protect us, or third parties, we may also share the data requested by a government agency or other authorized person or organization in order to protect or exercise our rights or third parties, or to limit or prevent fraud (including credit card fraud or other fraud which we believe may occur during a sweepstakes or promotion or event) and other torts.
Our Shop is not aimed at children under 16, but is intended for an adult audience. If you are a parent or guardian and you think your child has transmitted data to us, you can contact us.
9. Security measures
We take security measures to protect your data. The standard security measures we use depend on the type of data we process and take into account the requirements of the law and applicable best practices in the field of data protection.
10. Your rights
You can contact the data controllers indicated in paragraph 1 to request access to your personal data, rectification, cancellation of the same or limitation of treatment, to oppose the treatment and request the portability of your data; you can also revoke the consent at any time (this will not affect the lawfulness of the treatment based on the consent given before the revocation).
When you exercise your right of access, you have the right to know if your data is being processed, what the purpose of the processing is, what categories of data are processed, who the recipients are or the categories of recipients to whom the your data (and, if they reside in a third country, on the basis of which guarantees), the retention period of your data (or the criteria for determining the retention period), whether an automated treatment is in progress (for example through profiling) and what is the logic of this treatment, the origin of the data (if not initially collected by us).
You have the right to lodge a complaint with the Personal Data Protection Authority and to ask the joint controllers, at any time, for information about the data controllers and the subjects authorized by the data controllers to process your data and on the content of the agreement between joint controllers pursuant to art. 26 GDPR.
You can exercise your rights by contacting either the owners and the contacts specified above.
In any case, you can modify or withdraw your consents through the features of the Shop.
You can withdraw your consent to receive marketing communications including newsletters. In order to stop receiving marketing communications, you can access your account and change your choice or follow the instructions indicated in the promotional message you receive. Alternatively, you can communicate the withdrawal of consent by sending an e-mail to one of the addresses indicated above.
You can change your preferences regarding the sending of emails for marketing purposes and processing by profiling using the privacy settings of your account or by writing to one of the email addresses indicated above.
11. What we do if we change this policy