PRIVACY POLICY FOR DATA PROCESSING FOR DATA COLLECTED FROM OTHER SOURCES: E-Commerce

pursuant to art. 13 of Regulation (EU) 679/2016 which provides for the protection of natural persons as regards the processing of personal data

FUNGHI ENERGIA & SALUTE S.r.l., (hereinafter the "Company" or the "Data Controller"), with registered office in VIA TORCOLI 19 25050 PROVAGLIO D'ISEO (BS) Italy and  P. IVA (Tax code) 03100710981 as Data Controller, informs you as follows, pursuant to art. 13 of European Regulation 679/2016 relating to the protection of personal data ("GDPR"), about the processing of your personal data which will be carried out by the writer

1. Type of data processed

The Company is the Data Controller of the processing of personal data communicated by the User to the writer which includes:

• Surname, name, email, Tax Code as personal identification data on the user's identity as a natural person.
• Company name/Surname and Name, Tax Code and other identification data such as Tax data if required by law such as Tax Code, VAT number, Registered Office as a legal person.
• Data relating to credit cards or bank references necessary for any purchase made on the platform.

 Data Collection

If personal data (name, postal or e-mail address) are collected as part of our online services, this is done, as far as possible, on a voluntary basis. For example, if you wish to purchase our products through the e-commerce service on our website, we request your email address and the information that allows us to verify that you are the owner of the indicated email address, as well as data necessary for implementing the purchases you request.

2. Purpose of data processing

Data processing is carried out by the Company in the performance of its activities. In particular, the Data provided by the interested parties will be processed, with IT and non-IT tools, for the following purposes:

• Selling online or through the use of tools such as email or telephone contact. Processing is necessary for the execution of a contract of which the data subject is a part or for the execution of pre-contractual measures adopted at the request of the same on grounds reflected in EU law.
• Completion of any product orders placed on our online shop, their delivery and any post-sales services that may be necessary.
• Institutional purposes connected or instrumental to the Company's activities such as invoicing, customer management with the aim of improving our service towards customers and for operations related to the purchase process.

3. Processing methods

Data will be processed by the Company with electronic and manual systems according to the principles of correctness, lawfulness and transparency envisaged by the applicable legislation on the protection of personal data and protecting the privacy of the data subject through technical and organizational security measures to guarantee a level of adequate security.

4. Data storage

Data provided by the Data subject will be kept for a period of time:

• Personal data will be kept for processing purposes until the purpose requested by the user is fulfilled or until any specific request for cancellation by the user. Any personal data storage has exclusively historical or statistical purposes, in accordance with the law, regulations, community legislation and codes of ethics and good conduct signed pursuant to article 40 of EU Reg. 2016/679, for the period of 10 years specified by current legislation, or, if data are not subject to any law, for a period not exceeding five years. Beyond this period, personal data will be stored anonymously, or will be destroyed.

5. Communication, dissemination and transfer of Data

The Data will be processed, as necessary, by authorised, adequately instructed and trained personnel, by the Data Controller as well as by the staff of third parties who provide services to the Data Controller and carry out processing of Data on behalf of and on the instructions of the latter as data controllers.

In case of communication to third parties, the recipients may be:

• Banks, chambers of commerce, professionals who deal with the execution of tax and legal obligations for the company. E.g. to a Lawyer for legal assistance in case of disputes regarding the execution of the contract; to Labour and Tax consultants for tax assistance.
• Consultants and freelancers in single or associated form. Personal identification data voluntarily provided can be processed by external companies duly authorized and appointed to process the purchases made.
• Carriers, couriers, agents, employees of the administrative offices of the companies involved. Companies which the Company uses to carry out shipment of the products purchased.

More generally, in carrying out the Company’s ordinary business activities, the Data may be disclosed to parties who carry out control, revision and certification activities of the activities carried out by the Data Controller, consultants and freelancers in the context of tax and judicial activities and in the case of corporate transactions for which it is necessary to evaluate company assets, public bodies and administrations, as well as parties legally entitled to receive such information, Italian and foreign judicial authorities and other public authorities, for purposes connected with the fulfilment of legal obligations, or for the performance of assumed obligations arising from contractual relationships, including the need for defence in court.

The collected data will not be transferred to countries outside the EU

6. Automatic profiling and/or processing

The data collected will not be subject to automatic profiling or processing. Statistical data collection activities are carried out on the purchases made or on the products for which interest has been shown while browsing our site. Such data are not transferred or distributed to third parties but used only by the Data Controller in order to offer a service suitable for the Company’s customers.

7. Other Parties Connected to the Processing of Personal Data

Data Controller(s) and any representative(s) in EU:

There is no EU representative for the Data Controller

Joint Data Controllers:

There is no joint Data Controller for this processing

Data Controller: FRANZINELLI NADIA Tax Code FRNNDA56B62C417Z

No DPOs are appointed for this Personal Data processing

8. Rights of Data Subjects

Data Subjects may exercise the rights provided for by GDPR (art. 15-21) relating to the processing of Personal data as herein specified, including to:

• receive confirmation of the existence of Personal Data and access Personal Data content (access rights);
• update, modify and/or correct Personal Data (right to rectification)
• request the erasure or restriction of the processing of Personal Data which have been unlawfully processed, including those which do not need to be kept for the purposes for which they were collected or otherwise processed (right to erasure (“to be forgotten”) and right to restriction);
• object to the processing (right to object);
• make a complaint to the Supervisory Authority (Italian Data Protection Authority www.garanteprivacy.it) in case of breach of Personal Data protection laws;
• receive a copy in electronic format of the Data concerning him as a Data Subject, when such Data have been supplied for contractual purposes, and request that such Data be transmitted to another data controller (right to data portability).

To exercise these rights, the Data Subject can contact the Data Controller by sending an email to: info@funghieneregiaesalute.it

When contacting us, the Data Subject must make sure to include name, email/postal address and/or telephone number(s) to be sure that the request can be handled correctly

Rev. dated 26/07/2019