Privacy Policy

Data Controller
The controller of data collected through this site is S.F.A.C.S. Srl, with registered office in Italy, Ravenna, via Pirano 7: the data controller decides autonomously on the purposes and methods of processing, as well as the security procedures to be applied to ensure the confidentiality, integrity and availability of data.

Compulsory/optional provision of data and types of processing
You are obliged to provide S.F.A.C.S. Srl with your personal data, (email address, telephone number, address), in order that S.F.A.C.S. Srl be able to execute the existing contractual relationship between the parties and perform the related fiscal and accounting obligations.

This is the only form of processing envisaged.

A refusal to pass on any of your data marked as mandatory to S.F.A.C.S. SRL will make it impossible to pursue the principal purpose for which the data were specifically collected.

Duration
Your data will be stored for 10 years to fulfil contractual and fiscal obligations.

Your rights
You have the right, at any time, to obtain the following from S.F.A.C.S. Srl: confirmation of whether or not personal data concerning you are being processed, even if they have not yet been recorded, and the supply of such data in an intelligible manner.

You also have the right to obtain information regarding the origin of your personal data, the purpose and method adopted to process your personal data, the logic adopted when electronic means are used to process data, the personal details identifying the data controller and the data processors, an indication of the subjects or categories of subjects to whom personal data may be disclosed or to whose knowledge they may be brought, in their capacity, for example, as data processors. All this information is contained in this Privacy Policy.

Moreover, you are entitled, at any time:

• to the updating, rectification or completion of your personal data;
• to have any of your personal data that are being processed in violation of the law erased, rendered anonymous or blocked, including information that need not be kept for the purposes for which the data were collected or subsequently processed;
• to receive confirmation that the operations specified under letters a) and b), as well as their content, have been brought to the attention of those to whom the data have been disclosed or disseminated, unless this should prove impossible or would involve means that are clearly disproportionate to the right to be protected.

You have the right, in any event, to object, either wholly or partially, for legitimate reasons, to the processing of personal data that concern you, provided they are relevant for the purpose for which they were collected.

You may freely exercise your rights at any time, making your request in writing, in the form of a registered letter with advice of receipt, to be sent to the registered office of the data controller.

We also point out that, with an order dated June 19, 2008 regarding the simplification of formalities in connection with processing for administrative and accounting purposes, the Data Protection Authority permitted the data controller to use your postal address in order to send you - together with administrative and accounting documents - ads relating to products similar to those you have already purchased, provided that you do not refuse to permit the postal address provided to be utilised in this manner.

The information given to you up to this point, is the minimum that S.F.A.C.S. Srl is obliged to provide. For any further information regarding the processing of your personal data, please write to us at the email address: sfacs@sfacs.it.

The principles on which our privacy policy is based are as follows:

1. that data be processed exclusively for the purposes and in the manner illustrated in the privacy statement presented at the time the data were collected;
2. that data only be used for purposes other than those for which the data were specifically provided, when the user has given his or her express consent;
3. that data be made available to third party companies solely for purposes instrumental to the supply of the requested service and as part of an appointment as a data processor; these data shall not be disclosed, submitted or transferred to third parties for processing on their part, unless the users have been informed in advance and have given their consent;
4. that replies be given to requests for erasure, modification or completion of data provided, or objection to the processing of data for the purpose of sending commercial information and advertising;
5. that a fair, lawful data management system be guaranteed, safeguarding the privacy of users, and adequate security measures be adopted to protect the confidentiality, integrity and availability of the data provided.

In the processing of data that may directly or indirectly identify you, we try to observe a principle of strict necessity.

For this reason we have set up the site in such a way that the use of your personal data is kept to a minimum: therefore, your data will not be processed when the purposes pursued in individual cases can be achieved through the use of anonymous data (such as, for example, in market research aimed at improving services) or by other means that allow the data subject to be identified only when strictly necessary or when required by the authorities and police forces (such as, for example, for data relating to traffic and its permanence on the website or your IP address).

Your data will be disclosed to third parties only with your express consent, except in cases where such disclosure is obligatory by law or is necessary for purposes envisaged by law for which the data subject's consent is not required; in such cases, the data may be made available to third parties who will process them autonomously and solely for the aforementioned purposes (for example, in the case of a request made by the police forces or the courts or other competent bodies or to perform obligations arising from the contract entered into with you).

There are, however, forms of processing for which consent is not required under legislation. For example, we inform you that your personal data may be processed without obtaining your consent when this is necessary to fulfil a legal obligation or when it is necessary to perform the obligations towards yourself contractually undertaken (as in the case where you have purchased products or have requested specific services through our site).

Finally, we inform you that your personal data will not be transferred abroad to countries that are not members of the European Union, or non-EU countries that do not ensure subjects adequate levels of protection. Should this prove necessary, however, in order to provide you with services or to conclude a contract with you for the purchase of products, we assure you that your personal data will not be transferred to countries that are not members of the European Union and that do not ensure an adequate level of protection, before specific contracts have been entered into with the subjects in question, in accordance with legislation and regulations applicable.

The data controller has decided to use third parties to process your personal data, for certain activities. The third parties who carry out these operations have been adequately selected and are experienced, capable and reliable and offer suitable guarantees that they will comply fully with the provisions in force regarding processing, including data security aspects.

These third parties have been appointed as "data processors" for this purpose and carry out their activities in accordance with the instructions given by the data controller and under its supervision. We periodically check that our data processors have carried out the tasks entrusted to them correctly and that they continue to provide adequate guarantees that they will comply fully with data protection regulations.

Your data will then be processed by our employees dealing with the individual services.