Privacy Policy

FIVE GROUP S.r.l.s., data controller – is constantly committed to protecting the online privacy of users who use the application and the website sabbatiniturco.shop

This document (“Information”) has been drawn up in order to allow you to understand how your Personal Data will be processed when using the application and to provide you with all the information necessary so that you can express explicit and informed consent to the treatments carried out.

In general, the processing of any information or Personal Data that you provide to the Data Controllers through the application, or that is collected in any other way through the site, will take place according to the internationally recognized principles of lawfulness, correctness, transparency, limitation of purpose and conservation, data minimization, accuracy, integrity and confidentiality and will be aimed at the provision of the services offered on the site itself, the sale of the Products and the activation of an information service with newsletter service.

1. Data Controller

FIVE GROUP S.r.l.s., as identified at the beginning of the Information, is the Data Controller in relation to all Personal Data that is processed through this application.

2. The Personal Data Subject to Processing

Following navigation of the Site, we inform you that the Data Controllers will process your Personal Data, which may consist - also depending on your decisions on how to use the Services - by an identifier such as your name and surname, an identification number, a online identifier or to one or more characteristic elements of your physical, physiological, cultural or social identity capable of making you identified or identifiable (hereinafter only "Personal Data").

Among the Personal Data collected by this Application, independently or through third parties, there are also: Cookies, Usage data, Email, Password. Other Personal Data collected may be indicated in other sections of this privacy policy or through information texts displayed together with the collection of the Data itself. Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application. Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording the relevant preferences for purposes strictly linked to the provision of the service requested by the User.

Failure by the User to provide some Personal Data may prevent this Application from providing its services. The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that he or she has the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.

The Personal Data processed through the platform are as follows:

A. NAME, CONTACT DETAILS AND OTHER PERSONAL DETAILS

In various sections of the Site, in particular the one relating to the creation of a personal account and the one for subscribing to the news letter, you will be asked to enter information such as Email, Password, name, surname, date of birth, gender.

B. SPECIAL CATEGORIES OF PERSONAL DATA

Some sections of the Site Platform include free fields in which you can provide the Owners with some information, which may contain Personal Data.

Since these fields are free, you may use them to communicate (voluntarily or otherwise) some sensitive categories of Personal Data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to a natural person's health or sex life or sexual orientation.

The Data Controllers invite you not to send such Personal Data unless strictly necessary.

Indeed, these special categories of Personal Data can only be processed with your explicit consent (manifestable via the flag present in the specific format) and in compliance with the legislation in force at the time.

The Data Controllers therefore underline the importance of expressing your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.

C. DATA PROVIDED VOLUNTARILY BY THE INTERESTED PARTY

As already mentioned above, in some parts of the Site you are allowed to insert text messages or information, visible to the Owners, which may contain Personal Data of other people.

With respect to these hypotheses, you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the broadest indemnity on this point with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that should reach the Data Controllers from third parties whose Personal Data has been processed through your use of the Site's functions in violation of the applicable personal data protection regulations.

In any case, if you provide or otherwise process Personal Data of third parties when using the Site, you guarantee from now on - assuming all related responsibility - that this particular processing hypothesis is based on the consent of said third party or on another suitable legal basis that legitimizes the processing of the information in question.

D. NAVIGATION DATA

The IT systems and software procedures used to operate the platform acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing.

The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the platform or third parties.

E. PAYMENT DATA AND MANAGEMENT

Payment management services allow this Application to process payments via credit card, bank transfer or other instruments. The data used for payment are acquired directly from the manager of the requested payment service.

Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or payment notifications.

The payment services are Multisafepay and PayPal which collect data as specified in their privacy policy.

F. MANAGEMENT OF ADDRESSES AND SENDING OF EMAIL MESSAGES

These services are managed by Mailup and allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time of viewing of messages by the User, as well as the User's interaction with them, such as information on clicks on links included in messages.

G. INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS

These services allow you to interact with social networks, or other external platforms, directly from the pages of the Application. The interactions and information acquired by this Application are in any case subject to the User's privacy settings relating to each social network. If an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.

H. THE BUTTONS

TWEET BUTTON AND TWITTER SOCIAL WIDGETS (TWITTER)

The Tweet button and Twitter social widgets are interaction services with the Twitter social network, provided by Twitter Inc. and the data processed are Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Facebook Like Button and Social Widgets (Facebook, Inc.)

The "Like" button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc. The Personal Data collected are Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

+1 BUTTON AND GOOGLE+ SOCIAL WIDGETS (GOOGLE)

The +1 button and Google+ social widgets are interaction services with the Google+ social network, provided by Google Inc.

Personal data collected are Cookies and Usage Data.

Place of processing: USA – Privacy Policy

I. GOOGLE ANALYTICS (GOOGLE)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize the ads of its advertising network.

Personal data collected are Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out.

L. TRACKING GOOGLE ADWORDS CONVERSIONS (GOOGLE)

Google AdWords conversion tracking is a statistics service provided by Google, Inc. that connects data from the Google AdWords advertising network with actions performed within this Application.

Personal data collected are Cookies and Usage Data.

Place of processing: USA – Privacy Policy.

M. VIEWING CONTENTS FROM EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this Application and interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.

NO. YOUTUBE VIDEO WIDGETS (GOOGLE)

Youtube is a video content viewing service managed by Google Inc. which allows this Application to integrate such content within its pages. Personal data collected: Cookies and Usage data.

Place of processing: USA – Privacy Policy.

O. VIMEO, LLC

Viewing content from external platforms. Vimeo is a video content viewing service managed by Vimeo, LLC which allows this Application to integrate such content within its pages.

Personal data collected: Cookies and Usage data.

Place of processing: USA – Privacy Policy – Cookie Policy.

3. THE PURPOSES OF THE PROCESSING

The Data Controllers will use your Personal Data, collected through the Platform, for the following purposes:

purchase and delivery of products and services: we use your personal data to receive and manage orders, provide products and services; to verify your identity and help you, in case you lose or forget the login/password details of your personal account on the platform; purchase a loyalty card; send you the newsletters you requested as a Service by subscribing; allow you to save your favorite items and provide you with any services you request;

marketing and remarketing: we use your personal data to show you advertising defined according to interests in relation to features, products and services that may interest you, to be able to send you promotions by email, SMS, push notifications, by telephone, via banner, instant messaging , through the official social media pages of the Owners, relating to products and/or services also referable to third parties;

soft spam: the processing for this purpose is based on the Owners' interest in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequences for you (in addition to the fact that you will no longer receive further communications of this kind from the Owners).

compliance: to fulfill legal obligations that require the Data Controllers to collect and/or further process certain types of Personal Data;

abuse/fraud: to prevent or identify any abuse in the use of the platform, or any fraudulent activity and therefore allow the Owners to protect themselves in court.

4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING

The legal bases used by the Data Controller to process your Data, according to the purposes indicated in the previous Paragraph 3, are the following:

purchase, delivery and supply of services and products: processing for this purpose is necessary to be able to provide you with the Services and products and, therefore, to execute the contract stipulated with you. It is not mandatory to provide the Owner with your Personal Data for this purpose, but otherwise it will not be possible to provide you with any Service. The same applies to the newsletter service which arises from your specific request by entering an e-mail address and which you can revoke at any time by following the instructions in Paragraph 7 of this Policy.

marketing and remarketing: processing for this purpose is based on your consent. It is not mandatory to give your consent to the Owner for this purpose and you are free to revoke it at any time without any consequences (except for the fact that you will no longer receive marketing communications from the Owner). You can revoke your consent previously given by following the instructions in Paragraph 7 of this Policy.

soft spam: the processing for this purpose is based on the Owner's interest in sending you marketing communications via email regarding products and services similar to those you have already purchased through the Site. You can stop receiving these communications, without any consequences for you (in addition to the fact that you will no longer receive further communications of this kind from the Owners).

Compliance: processing for this purpose is necessary for the Data Controller to fulfill any legal obligations. When you provide Personal Data to the Owner, they must be processed in accordance with applicable legislation, which may involve their retention and communication to the Authorities for accounting, tax or other obligations.

abuse/fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activities or abuses in the use of the Site and therefore allows the Data Controllers to protect themselves in court.

6. STORAGE OF PERSONAL DATA

The Personal Data processed for the purpose of purchase, delivery and supply of services and products will be retained by the Data Controllers for the time strictly necessary for the aforementioned purpose (e.g. for sending the purchased product).

In any case, since such Personal Data is processed to provide you with the Services, the Owner may retain them for a longer period, in particular as may be necessary in order to protect the interests of the Owners from possible complaints relating to the Services.

Personal Data processed for Marketing and remarketing purposes will be retained by the Owner until you revoke your consent.

In any case we will remind you of the consent you have given us every 24 months. Once consent has been revoked, the Data Controller will no longer use your Personal Data for these purposes, but may still retain them, in particular as may be necessary to protect the Data Controller's interests from possible complaints based on such processing.

The personal data processed for the purposes of Soft Spam will be retained by the Data Controller until you object to such processing through the link found at the bottom of each of the Soft Spam emails.

Personal Data processed for Compliance purposes will be retained by the Data Controller for the period required by specific legal obligations or applicable legislation.

The Personal Data processed for the purpose of preventing Abuse/Fraud will be kept by the Data Controller for the time strictly necessary for the aforementioned purpose and therefore until the moment in which the Data Controller is required to keep them to protect himself in court and to communicate said data to the competent Authorities.

7. RIGHTS OF THE INTERESTED PARTY

You have the right to ask the Owner, at any time:

access to your Personal Data, (or a copy of such Personal Data), as well as further information on the processing in progress on them

the rectification or updating of your Personal Data processed by the Owner, where they are incomplete or not updated;

the deletion of your Personal Data from the Data Controller's databases;

the limitation of the processing of your Personal Data by the Owner;

to obtain the Personal Data concerning you in a structured, commonly used and machine-readable format;

As well as you can:

object to the processing of your Personal Data by the Owner (e.g. Soft Spam);

withdraw your consent for Marketing and Remarketing purposes.

We point out that most of the Personal Data you have provided to the Owner can be modified at any time by accessing, where possible, your personal account created on the Site.

When requesting the Services, you may have selected which communication channels through which you want to be contacted for Marketing purposes (i.e. telephone, text message, email, post, push notifications, social media).

You can revoke your consent for Marketing relating to each of these communication channels through your personal account on the Site, by deselecting the relevant options.

You can also revoke your consent to Marketing sent by e-mail and stop receiving Soft Spam by using the appropriate link found at the bottom of each e-mail received. The same method can be used to stop receiving the newsletter, if you have requested it as a Service.

In addition to the above, you can also exercise your rights by writing to the Data Controllers at the following address: fivegroupsrls@gmail.com

In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Personal Data Protection Authority) if you believe that the processing of your Personal Data is contrary to the legislation in force.

8. MODIFICATIONS

The Owner reserves the right to modify or simply update its content, in part or completely, also due to changes in applicable legislation. The Owner will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. The Owner therefore invites you to regularly visit this section to become aware of the most recent and updated version of the privacy policy in order to always be up to date on the data collected and the use made of it by the Data Controller.