• Your shopping cart is empty!

Privacy Policy

Condition

For Formale personal data represent a valuable asset to be protected; we adopt procedures and conduct to ensure that they are safeguarded. Transparency vis-à-vis data subjects is therefore a primary objective, pursued through effective communication tools and aimed at making basic information on the processing of their data available to stakeholders. In this regard, this information page, carried out in accordance with the requirements of the Reg. EU 2016/679 "General Data Protection Regulation", contains specific information relating to the following areas:

  1. data processing related to the operation of this site;
  2. data processing related to contractual relationships established with customers and suppliers.

Information of a general nature

Interested parties (ex. Art.4, p.1 of the GDPR) are informed of the following general profiles, valid for all areas of processing:

  • all data are processed in a lawful, correct and transparent manner towards the data subject, in compliance with the general principles set out in Art.5 of the GDPR;
  • specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.

References and rights of data subjects

  • Formale is the data controller, with its head in A.Campione & C. sas.SS 100 Km.18 c/o Il Baricentro, Lotto 18A Mod.13, 70010 Casamassima (Ba) - Italy
    Vat n. IT03740790724 Tel. +39 334 301 6603, in the person of the pro-tempore legal representative, contactable using the contact details published on this website;
  • The Company has supplied to appoint a Data Protection Officer who you can contact to exercise all the rights provided by art.15-21 of the GDPR (right of access, rectification, cancellation, limitation, portability, opposition), and revoke a previously granted consent; you can also contact the owner directly by sending an e-mail to info@formale.co.
  • in the event of failure to respond to their requests, the data subject may lodge a complaint with the Supervisory Authority for the protection of personal data (GDPR - Art.13, paragraph 2, letter d).

1. PROCESSING OF DATA RELATED TO THE OPERATION OF THIS SITE

1.1 Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data which transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner).

Area of communication (GDPR-Art. 13, paragraph 1, lett. e,f)

The data can be processed exclusively by internal staff, regularly authorized and instructed to the processing (GDPR-Art. 29) or by any entities in charge of the maintenance of the web platform (appointed in this case external managers) and will not be disclosed to other parties, disseminated or transferred to non-EU countries. Only in the case of an investigation can they be made available to the competent authorities.

Data storage period (GDPR-Art. 13, paragraph 2, lett. a)

The data are normally stored for the period allowed by law, except for any extensions related to investigation activities.

Provision (GDPR-Art. 13, paragraph 2, lett. f)

The data are not provided by the data subject but acquired automatically by the technological systems of the site.

1.2 Cookies

For the purposes and legal basis of cookies:

Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

These data are used for:

  • obtain anonymous statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner).
  • have information about the browsing experience of users, helping us in the continuous improvement of our site. Cookies have been designed to facilitate the device used by the browser to remember the actions previously done, such as remembering login or store the products observed; create user-related profiles that are used in order to provide advertising messages in line with the preferences expressed by the same. In these cases, the legal basis is the free informed consent of the interested party (GDPR-Art. 6, paragraph 1, lett. a) acquired and documented through a banner (GDPR- Art.7, paragraph 1), in addition to the legitimate interest of the owner.

Area of communication (GDPR-Art. 13, paragraph 1, lett. e,f)

The data can be processed exclusively by internal staff, regularly authorized and instructed to the processing (GDPR-Art. 29) or by any entities in charge of the maintenance of the web platform (appointed in this case external managers) and will not be disclosed to other parties, disseminated or transferred to non-EU countries. Only in the case of an investigation can they be made available to the competent authorities.

Data storage period (GDPR-Art. 13, paragraph 2, lett. a)

The data are normally stored for the period allowed by law, except for any extensions related to investigation activities.

Provision (GDPR-Art. 13, paragraph 2, lett. f)

The data are not provided by the data subject but acquired automatically by the technological systems of the site.

1.3 Newsletter subscription

The newsletter service provides interested parties with useful information related to our market sector, to events and initiatives, to the products/services offered, as well as any promotional offers.

Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

Only the email address is required for the sole purpose of sending the newsletter. The registration is subject to the acceptance of specific, free and informed consent (GDPR-Art. 6, paragraph 1, lett. a) documented through the appropriate check-box (GDPR-Art. 7, paragraph 1).

Area of communication (GDPR-Art. 13, paragraph 1, lett. e,f)

The data are processed exclusively by staff regularly authorized and instructed to the processing (GDPR-Art. 29) or by any persons responsible for the maintenance of the web platform or the sending of newsletters (appointed in this case external managers). The data will not be disseminated or transferred to non-EU countries.

Data storage period (GDPR-Art. 13, paragraph 2, lett. a)

The data are stored until possible "unsubscribe", freely available at any time through the link contained at the bottom of each message sent.

Provision (GDPR-Art. 13, paragraph 2, lett. f)

Failure to provide the email address and consent will make it impossible to obtain the newsletter service.

1.4 Information / contact request

The page allows the interested party to request a contact or information. Identification and contact data are requested.

Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

The identification and contact data required to respond to the requests of the interested parties are requested. The sending of the request is optional and subject to specific, free and informed consent (GDPR-Art. 6, paragraph1, lett. a) documented through the appropriate check-box (GDPR-Art. 7, paragraph 1).

Area of communication (GDPR-Art. 13, paragraph 1, lett. e,f)

The data are processed exclusively by staff regularly authorized and instructed to the processing (GDPR-Art. 29) or by any persons responsible for the maintenance of the web platform or the sending of newsletters (appointed in this case external managers). The data will not be disseminated or transferred to non-EU countries.

Data storage period (GDPR-Art. 13, paragraph 2, lett. a)

The data are stored for a time compatible with the purpose of collection.

Provision (GDPR-Art. 13, paragraph 2, lett. f)

The provision of data related to mandatory fields is necessary to obtain a response, while the optional fields are aimed at providing staff with additional elements useful to facilitate contact.

1.5 User registration

The registration allows the creation of the user to be used to make purchases and/or access the restricted areas of the site.

Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

The data necessary for the creation of the profile and for the administrative/operational management of the acquisitions carried out are requested. The processing is carried out for the fulfilment of contractual and pre-contractual obligations (purchase of products) with the customer and related legal obligations (GDPR-Art. 6, paragraph1, lett. b, c). A specific, free and informed consent is also required (GDPR-Art. 6, paragraph1, lett. a), documented through a special check-box (GDPR-Art. 7, paragraph 1).

Area of communication (GDPR-Art. 13, paragraph 1, lett. e,f)

The data are processed exclusively by staff regularly authorized and instructed to the processing (GDPR-Art. 29). The data will not be disseminated or transferred to non-EU countries.

Data storage period (GDPR-Art. 13, paragraph 2, lett. a)

I dati sono conservati per tempi compatibili con la finalità della raccolta e comunque fino all’eventuale richiesta di cancellazione da parte dell’utente.

Provision (GDPR-Art. 13, paragraph 2, lett. f)

Failure to provide data will make it impossible to complete the registration, make purchases and/ or access the reserved areas.

1.6 Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic and/or ordinary mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, and any other personal data included in the message. If the sender sends his resume to submit his professional application, he remains solely responsible for the relevance and accuracy of the data sent. It should be noted that any curriculum without permission to process data will be immediately deleted.

2. PROCESSING OF DATA RELATED TO RELATIONSHIPS WITH CUSTOMERS AND SUPPLIERS

2.1 Subject to processing

The Company processes personal data identifying customers/suppliers (for example, first name, last name, company name, personal/tax details, address, telephone, e-mail, bank and payment references) and its operational contacts (first name, last name and contact details) acquired and used in the provision of the services provided.

2.2 Purpose and legal basis of the processing (GDPR-Art. 13, paragraph 1, lett. c)

The data are processed for:

  • end contractual/professional relationships;
  • to fulfil the pre-contractual, contractual and tax obligations arising from existing relationships, and to manage the necessary communications related to them;
  • comply with the obligations provided for by law, by a regulation, by Community legislation or by an order of the Authority;
  • exercise a legitimate interest as well as a right of the Data Controller (for example: the right of defence in court, the protection of creditor positions; ordinary internal needs of an operational, management and accounting type).

Failure to provide the aforementioned data, even if legitimate, will make it impossible to establish a relationship with the Data Controller. The aforementioned purposes represent, pursuant to Art.6, paragraphs b, c, f, suitable legal bases for lawfulness of processing.

For further marketing and profiling purposes, prior consent is always required to the interested parties. The provision of personal data in such cases is optional and failure to provide the same has no consequence. It is indeed always possible to deny the consent previously granted. The aforementioned purposes represent, pursuant to Art.6, paragraph a, suitable legal bases for lawfulness of processing.

2.3 Details on the personal data provided by the customer

Formale receives and retains any data that the Customer enters on the site or that provides in any other way, including those communicated to the operator during a purchase via telephone channel or e-mail request. The Customer has the right not to provide any data, but in this case he may not be able to use part of the services. The data are also used to respond to customer requests, customize and improve the online offer and communications, also through the use of profiling techniques.

Ancillary services

The provision of data is optional in relation to ancillary and additional services such as direct marketing, SMS alert, or initiatives and any refusal to consent has no consequence for the purpose of concluding the contract but may preclude the right to use the specific services.

Mobile devices

When the data subject downloads or uses applications created by Formale or when he has requested or consented to the use of the localization function on his mobile device, Formale may receive information about user device’s geographical location and IP address and may use this information to provide personalized services and content. In any case, we inform you that almost all mobile devices are equipped with specific functions to enable and disable localization services.

Communications via e-mail and newsletter

The interested party, can change at any time the settings in the newsletter section and notification preferences. Within the limits provided by the New European Privacy Regulation n. 679/16, and without prejudice to the right of the Customer to object, the data may be used by Formale, also for customers who make purchases via telephone channel or e-mail not registered on the site, only upon request of consent to the sending of commercial communications.

2.4 Mode of treatment

The processing of personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subject to both paper and electronic and/or automated processing. The Data Controller will process personal data for the time necessary to fulfil the purposes for which they were collected and related legal obligations.

2.5 Scope of processing

The data are processed by internal subjects regularly authorized and instructed pursuant to Art.29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise information on any external subjects that operate as Data Processors or Independent Data Controllers (consultants, technicians, banking institutions, transporters, etc.). Formale does not collect data for the purpose of transfer to third parties and therefore the data will not normally be communicated to other parties, will be disseminated; however, in some cases, Formale provides services, sells product lines or takes commercial initiatives, which might be also promotional, jointly, in co-branding or on behalf of other companies, and on these operations shares with the individual third party information about customers. In addition, Formale uses other companies and individuals to carry out certain activities such as the fulfillment of orders, the delivery of parcels, the sending of traditional mail and e-mail, the removal of repetitive information from customer lists, data analysis, marketing support, credit card payments and the provision of customer services. These providers have access only to personal data that is necessary to perform their tasks and Formale guarantees that they may not use the same data for other purposes and are also required to process personal data in accordance with this Policy on privacy, and in accordance with applicable data protection laws. Disclosure of account data and other personal data is only permitted where this is expressly required by law; to enforce or enforce the General Terms and Conditions of Use and Sale and other agreements; to protect our property or rights, as well as for security reasons of Formale, its users and customers or other subjects. This includes the exchange of information with other companies and organizations that provide for fraud prevention or credit risk reduction. Of course, this does not include the sale, sharing or otherwise disclosure of personal data received from customers for commercial purposes, contrary to the commitments made in this Privacy Policy.

3. POLICY UPDATE

Please note that this information may be reviewed periodically, also in relation to the legislation and case law of reference. In case of significant changes will be given, for a reasonable time, appropriate evidence on the home-page of the site. However, the interested party is invited to periodically consult this policy.