PRIVACY

PRIVACY

NOTICE REGARDING THE PROCESSING OF PERSONAL DATA OF THE COLLABORATORS

Pursuant to art. 13 of EU Regulation 2016/679 of 27/04/2016

Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as RGPD (General Regulation for the Protection of Personal Data), this Notice is provided to inform you of the following:

Owner and manager of the processing

The Data Controller is FANATICS ITALY S.R.L., Via Privata Pietro Magistretti, 10, 20128 Milano MI. 

Purpose of the processing

The personal data provided are collected when you place an order and purchase goods and while you are browsing or using the services offered on www.bolognafcstore.com.

FANATICS ITALY S.R.L. may therefore collect data about you such as, for example, personal details (name and surname), shipping address and billing address, navigation data and your purchasing habits.

Your personal data are processed for the following purposes:

(a) to conclude and execute the contract for the purchase of goods offered on www.bolognafcstore.com;

b) to provide the services of www.bolognafcstore.com such as newsletter subscription;

c) allow you to register on the Site and the use of services reserved for registered users;

d) handle your requests submitted to our Customer Service;

e) marketing and promotional activities for products and services, commercial communications, both by automated means without operator intervention (e.g. sms, fax, mms, e-mail etc.) and traditional means (via telephone, mail);

f) statistical surveys and analysis with data in aggregate form to understand how users interact and use the Site, to improve our offer and our services.

Legal basis of the data processing

In the cases referred to in letters a) to d), the processing of your personal data does not require your express consent as the legal basis of the processing is art. 6 lett. b) ("processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject") and e) ("processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller") of the RGPD.

In the cases referred to in letters e) and f) above, the legal basis for the processing of personal data is your express consent (art. 6 letter a) and art. 7 of the RGPD). This consent concerns both the automated and the traditional methods of communication described above. You will always have the right to object easily and free of charge, in whole or in part, to the processing of your data for said purposes, excluding, for example, the automated methods of contact and expressing your wish to receive commercial and promotional communications exclusively through traditional methods of contact.

Mandatory or optional nature of the conferment of data and the consequences of an eventual refusal to provide personal data

The data requested for the purposes referred to in paragraphs a), b), c) and d) above must be provided for the fulfillment of legal obligations and / or for the conclusion and execution of the contractual relationship and the provision of services required. Therefore, your refusal, even partial, to provide such data would make it impossible for the Supplier to establish and manage the relationship itself and to provide the requested service.

The provision of personal data necessary for the purposes referred to in paragraphs e) and f) above is optional, therefore, your refusal to provide such data would make it impossible to carry out the activities described therein.

Methods of data processing

The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) RGPD, for the aforementioned purposes, both on paper and computer, by means of electronic or automated tools, in compliance with the current legislation in particular regarding confidentiality and security and in compliance with the principles of correctness, lawfulness and transparency and protection of the Customer's rights.

The processing is carried out directly by the owner's organization, by its managers and/or delegates.

Communication and Dissemination

Your personal data may be communicated, within the limits strictly pertinent to the obligations, tasks and purposes referred to above and in compliance with current legislation on the subject, to the following categories of subjects:

1. subjects to whom this communication must be made in order to fulfill or require the fulfillment of specific obligations under laws, regulations and/or EU legislation;

2. companies belonging to the Data Controller's Group or controlling, controlled or associated companies pursuant to Art. 2359 of the Italian Civil Code, which act as data processors or for administrative and accounting purposes (purposes connected with the performance of activities of an internal organisational, administrative, financial and accounting nature, in particular, functional to the fulfilment of contractual and pre-contractual obligations)

3. individuals and/or external legal entities that provide services instrumental to the activities of the Owner for the purposes referred to in paragraph 1. above (eg call centers, suppliers, consultants, companies, organizations, professional firms). These subjects will operate as data processors.

Personal data will not be disseminated in any way.

Retention period of the personal data

In compliance with the provisions of art. 13 paragraph 2 lett. a) of the EU Reg., all the aforementioned data may be kept for the entire duration of the contract entered into with the Data Controller concluded which data will be retained for the completion of the terms provided by law for the storage of administrative documents after which they will be deleted.

Transfer of data

Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

Rights of the interested party

As an interested party, pursuant to art. 15 GDPR you have the right to:

1) obtain from the data processing owner confirmation as to whether or not the personal data concerning you is being processed and, in this case, to obtain access to the personal data and to the following information:

a) the purposes of the processing;

b) the categories of such personal data;

c) The recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular if they are recipients of third-party countries or international organizations;

d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine such period;

e) the existence of the right of the interested party to ask the data processing owner for the correction or deletion of the personal data or for the limitation to the processing of the personal data concerning him, or to oppose to its handling;

f) the right to lodge a complaint with a supervisory authority;

g) if the data is not collected from the data subject, all available information on its origin;

h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.

2) If personal data is transferred to a third-party country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer.

3) The data processing owner provides a copy of the personal data that is being processed. In case further copies are requested by the interested party, the data processing owner may charge a reasonable fee based on the administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.

4) The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedom of others.

5) Where applicable, you also have the rights referred to in art. 16-21 RGPD (Right of rectification, right to oblivion, right to limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.