INFORMATION FOR DIRECT MARKETING

Information document Article 13 EU Reg. 2016 / 679- GDPR – Information on the processing of personal data collected from the interested party.

In compliance with the provisions of EU Reg. 2016/679 (European Regulations for the protection of personal data) we provide the necessary information regarding the processing of personal data provided. This is an information that is provided pursuant to art. 13 of EU Reg. 2016/679 (European regulation for the protection of personal data).

Personal data that can be processed: «personal data»: any information concerning an identified or identifiable natural person («concerned»); an individual is identified as identifiable, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social; (C26, C27, C30).

1. HOLDER OF THE TREATMENT, pursuant to art. 4 and 24 of EU Reg. 2016/679, is GFB SRL, with registered office in Via Mazzini, 6 – 43121 Parma – TEL. 0525-71938 E-MAIL: [email protected]

2. RESPONSIBLE FOR DATA PROTECTION (RPD / DPO Data Protection Officer), pursuant to art. 37 – 39 of EU Reg. 2016/679: NOT PRESENT

3. PURPOSE AND LEGAL BASIS OF TREATMENT

The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 EU Reg. 2016/679, for the following purposes:

compilation of data collection form for receiving newsletters or promotional communications via e-mail, direct telephone contact, sms – consent (Article 6 paragraph 1 letter a)) as the legal basis of the processing;
Remarketing and behavioral targeting
This type of service allows this Application and its partners to communicate, optimize and serve advertisements based on the past use of this Application by the User.

This activity is carried out by tracking Usage Data and the use of Cookies, information that is transferred to the partners to whom the activity of remarketing and behavioral targeting is connected.

Some services offer a remarketing option based on email address lists.

In addition to the options for the opt-out offered by the following services, the User can opt for the exclusion from the reception of cookies related to a third party service, by visiting the opt-out page of the Network Advertising Initiative.

Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. which links the activity of this Application with the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Subject to the Privacy Shield.

Google Ads Remarketing (Google Ireland Limited)
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that links the activity of this Application with the Google Ads advertising network and the DoubleClick cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy. Person adhering to the Privacy Shield.

Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. which links the activity of this Application with the Facebook advertising network.

Personal Data collected: Cookies and e-mails.

Place of processing: United States – Privacy Policy – Opt Out. Subject to the Privacy Shield.

Remarketing with Google Analytics (Google Ireland Limited)
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that links the tracking activity carried out by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy. Person adhering to the Privacy Shield.

Statistics
Tracking conversions of Facebook Ads (Facebook, Inc.)

Tracking conversions of Facebook Ads is a statistics service provided by Facebook, Inc. which connects data from the Facebook ad network with the actions performed within this Application.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Person adhering to the Privacy Shield.

4. ADDRESSEES OR CATEGORIES OF ADDRESSEES OF DATA

4. ADDRESSEES OR CATEGORIES OF ADDRESSEES OF DATA

The personal data provided will be communicated to recipients, who will process the data as managers (Article 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Reg. 2016/679), for the purposes listed above under point 3. Precisely, the data will be communicated to:

subjects providing services for the management of the information system and communication networks, including e-mail, newsletters and management of websites, Remarketing, behavioral targeting, statistics and studies or companies in the context of assistance and consultancy reports – competent authorities for fulfillment of legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in complete autonomy as separate Data Controllers. The list of data processors is constantly updated and available by writing to [email protected] at the registered office of the Data Controller.

5. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

The personal data provided may be transferred to countries belonging to the European Union and to countries outside the EU, in order to comply with the aforementioned purposes.

The data will be transferred according to Article 44 – General principle for the transfer; Article 45 – Transfer on the basis of an adequacy decision; Article 46 – Transfer subject to adequate guarantees, specifically the data will be transferred:

towards third countries international organizations for which the Commission intervened with an adequacy assessment (Article 45 of the EU Reg. 2016/679)
to third countries or international organizations that have provided adequate guarantees and with which the person concerned has rights to action and effective remembrance (Article 46 EU Reg. 2016/679, also with contractual clauses and the other provisions referred to in Article 46, paragraph 3)
to third countries or international organizations on the basis of binding corporate rules for companies belonging to the same business group (Article 47 of the EU Reg. 2016/679)
towards third countries international organizations on the basis of exceptions in specific situations (Article 49 of the EU Reg. 2016/679)
The interested party can obtain information about the guarantees for data transfer by writing an email to [email protected]

6. PERIOD OF CONSERVATION OF DATA OR CRITERIA FOR DETERMINING THE PERIOD

The Data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of the contract is completed.

Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the processing is based on the consent of the User, the Data Controller may retain the Personal Data for a longer time until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

7. NATURE OF THE CONFERRALITY AND REFUSAL

Apart from that specified for navigation data, the user is free to provide personal data. The provision of personal data for the marketing purposes mentioned in point 3 is necessary to authorize GFB S.r.l. to send me promotional and informative material related to its products and services.

Failure to provide it will result in the inability to be updated on initiatives and promotions.

8. RIGHTS OF THE INTERESTED

You can assert your rights as expressed in EU Regulation 2016/679, by contacting the Data Controller, by sending an e-mail to [email protected] or by writing to the office of the owner indicated above.

You have the right at any time to ask the Data Controller to access your personal data (Article 15), the correction (Article 16) or the cancellation (Article 17) of the same, or the limitation of processing (art. 18). You also have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), has the right to revoke the consent given at any time.

Update date 14/02/2019