The Data Controller of the Data collected by this Website Fili e Forme srl with address Via Leonardo da Vinci 28, Campi Bisenzio (FI) 50013, email: firstname.lastname@example.org
Purpose of the Processing of Personal Data and Legal Basis
User Data is collected to allow the Website to provide its services, as well as for the following Purposes:
a) to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations and commercial uses, in particular, in tax/fiscal matters. This processing is mandatory to fulfill a legal obligation to which the Data Controller is subject;
b) to provide services such as courses, webinars, guides in PDF format to the User. This processing is optional and based on the User's consent, however failure to communicate one or more Data will make it impossible to provide the service offered by the Owner;
c) for other purposes ancillary or connected to those indicated above and in any case falling within the scope of the activities of the Website;
d) to respond to specific requests addressed to the Data Controller by the User for informational communications related to the Data Controller’s Services, by e-mail or filling in the contact form and other communication tools such as telephone. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Data Controller;
e) to send information and promotional offers also through the newsletter service. This processing is based on the consent freely expressed by the User;
f) for the purpose of softspam to allow the Data Controller to send by e-mail to the User promotional communications with the object of Services purchased without the need of the User’s express and prior consent, as provided by art. 130, 4 paragraph, Privacy Code, and provided that the user does not exercise the right of opposition; This processing is based on art. 130, 4 paragraph, of the Privacy Code as amended by Legislative Decree n.101 of 2018;
g) to carry out statistical analysis in pseudonymised form to analyse the User’s behaviour, to improve the products and services provided by the Data Controller and to meet the User’s expectations;
Methods of Processing Personal Data
Category of Personal Data processed
Communication of the Data
In addition to the Data Controller, in some cases, they may have access to the Data:
a) categories of specially trained Appointees involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators);
b) external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed Data Processors by the Data Controller pursuant to art. 28 GDPR.
c) public or private subjects who can access the Data in compliance with legal obligations;
d) subjects carrying out ancillary and instrumental tasks with respect to the Data Controller’s activity;
e) Users of the Website who may view certain Data on the public profile of other Users in the closed group of the website.
f) external subjects as partners in the organization of initiatives and events promoted and/or sponsored by the Data Controller to which the communication of Data is necessary for organizational reasons;
Time of treatment
As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are stored for the time necessary for the Processing of the same in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:
– The Data collected for Purposes attributable to the legitimate interest of the Data Controller will be retained until the satisfaction of this interest. The User can obtain further information about the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the same;
- The Data collected on the basis of the User’s Consent may be stored until such Consent is revoked;
– The Data collected for tax obligations /administrative or contractual obligations will be kept for the time necessary to fulfil the aforementioned purposes and in accordance with the law, for a period not exceeding that dictated by civil law and in any case for a period not exceeding 10 (ten) years;
- The Data collected for marketing and profiling purposes will be kept for a period not exceeding 24 (twenty-four) months from the acquisition of consent;
The Data may be stored by the Data Controller for a longer period in compliance with legal obligations or by order of an authority. The User can always request the interruption of the Processing or the cancellation of the Data not connected to the execution of the contract. At the end of the retention period the Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Place of processing and transfer of Data abroad
The Data are processed at the operating headquarters of the Data Controller. For further information, please contact the Data Controller. The Data may be processed by natural persons and/or legal entities operating on behalf of the Data Controller and pursuant to specific contractual obligations and established in EU or non-EU Member States. In the event that the Data are transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate data protection.
Tools used for the Processing of Personal Data
Address management and email sending
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of Data relating to the date and time of display of messages by the User, as well as the interaction of the User with them, such as information on clicks on links inserted in messages.
The User, by filling in the contact form with their Data, consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data collected through Contact Form: Email, Name and Surname
Security measures adopted
This Website has an SSL certificate and uses the HTTPS protocol to make it secure when you enter Personal Data. With the use of this protocol, the transactions and data that are transmitted in the websites are carried out with the utmost security and the content of the communication is not read or manipulated in any way by third parties.
Interaction with social networks
These services allow interactions with social networks or other external platforms directly from the pages of this Website. The interactions and information acquired by this Website are in any case subject to the User’s privacy settings related to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if users do not use the service, the same collects traffic data related to the pages where it is installed.
1. Facebook (Facebook Ireland Ltd.)
2. Instagram (Facebook Ireland Ltd.)
Content on external platforms
These services allow you to view content hosted on external platforms directly from the pages of this Website and to interact with them.
If a service of this type is installed, it is possible that, even if Users do not use the service, the same collects traffic data related to the pages where it is installed.
This website uses:
Youtube (Google Ireland Limited)
Exercise of the data subject’s rights
The interested party has the right to exercise the faculties provided for in art. 7, 15-22 of European Reg. 679/2016. In particular, you have the right to revoke your consent at any time and, upon simple request to the Data Controller, you may request access to Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit them to another Data Controller without hindrance (c.d. portability), obtain the update, limitation of the processing, the rectification of the Data and the cancellation of those processed in breach of current legislation. You have the right, for legitimate reasons, to object to the Processing of Personal Data concerning you and to the Processing for the purposes of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Data Protection Supervisor as the supervisory authority for the protection of personal data. The data subject may exercise his rights by contacting the Data Controller by email at: email@example.com