Privacy policy

Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), G.Fedeli Ottica Cinefoto di Fedeli Gabriele hereby provides its customers, including potential ones, as well as third parties in general (e.g. delegates, legal representatives, etc.) who come into contact with the company on behalf or in representation of customers, including potential ones (the “Data Subjects”), with the information required by applicable law regarding the processing of their personal data (“Personal Data”).

1.- Data Controller and Data Protection Officer

G.Fedeli Ottica Cinefoto di Fedeli Gabriele (tax code/VAT no. 12430350152), with registered office at Via Lomellina 11, 20133 Milan, represented by the current legal representative, is the entity processing the Data Subjects’ data and, pursuant to the law, is considered the Data Controller of the Personal Data. In this role, it is responsible for ensuring the application of adequate organizational and technical measures to protect the data, in accordance with current legislation.

G.Fedeli Ottica Cinefoto di Fedeli Gabriele has appointed a Data Protection Officer (DPO), responsible for ensuring compliance with data protection laws, who can be contacted for matters relating to the processing of Personal Data at the following address: info@otticafedelimilano.it

2.- Methods of Personal Data Collection

The Personal Data processed by the Controller may be collected from the Data Subject, including through remote communication technologies used by the Controller (e.g. websites, smartphone and tablet apps, call centers, etc.);

3.- Categories of Personal Data Processed

The Personal Data processed by the Controller include, by way of example:

i. browsing data (e.g. IP addresses or domain names of the computers used by users who connect to the site, time of the request, method used to submit the request to the server, numeric code indicating the status of the server’s response, and other parameters related to the user's operating system and browser, logs);

ii. personal data (e.g. name, surname, tax code, address, date and place of birth, nationality); iii. contact data (e.g. landline and/or mobile phone numbers, email address);

iv. profiling and marketing data (e.g. interests and passions); 

v. other data related to the categories listed above.

4.- Purposes and Legal Basis of Processing

Personal Data, under the specified conditions, will be processed for the following purposes:

  • website registration and management of contact and/or informational material requests

The processing of the Data Subject’s Personal Data is carried out to fulfill preliminary and subsequent activities related to the request for registration to the website, if applicable, as well as to manage requests for information and contact and/or sending of informational material, and to fulfill any other related obligations.

The legal basis for such processing is the performance of services related to the request for registration, information, contact, and/or sending of informational material and compliance with legal obligations.

Providing data is optional; however, any refusal by the Data Subject to provide such data makes it impossible for the Controller to fulfill the requested service.

  • contract performance

Personal Data will be processed for the management of the contractual relationship (e.g. invoicing, payment handling, or handling of complaints submitted) and for the provision of services requested through the website.

The legal basis for such processing is the performance of the services related to the contractual relationship and compliance with legal obligations.

Providing data is optional; however, any refusal by the Data Subject to provide such data makes it impossible for the Controller to fulfill the requested service.

  • compliance with legal obligations, legal defense in court or out of court, and fraud prevention

Personal Data will be processed to comply with legal obligations, as well as to establish, exercise, or defend a right of the Controller and/or to defend against third-party claims, in court or out of court. In particular, the Controller may process Personal Data to fulfill accounting, tax obligations, and compliance with measures from judicial authorities aimed at preventing and repressing crimes.

The legal basis for such processing is the pursuit of the Controller’s legitimate interest, considering the balance of the rights of the Controller and the Data Subject.

  • promotional activities on Services/Products similar to those purchased

Personal Data of the Data Subject is processed for sending communications related to promotions and offers of Services/Products of the Controller that are identical and/or similar to those covered by the ongoing contract with the Data Subject, unless the Data Subject has initially objected to such processing or does so at a later time.

The legal basis for such processing is the Controller’s legitimate interest in promoting products or services that the customer may reasonably be interested in, considering the balance of rights between the parties. The Data Subject has the right to object at any time, based on reasons related to their personal situation, to the processing of personal data for this purpose.

  • promotional activities on Services/Products offered by G.Fedeli Ottica Cinefoto di Fedeli Gabriele

Personal Data of the Data Subject is processed, with specific consent, for sending communications promoting Services/Products of the Controller through traditional methods (e.g. postal mail, calls with an operator) and/or automated methods (e.g. email, SMS, MMS, fax, prerecorded calls).

The legal basis for such processing is the consent given by the Data Subject prior to the processing, which can be freely revoked at any time, without affecting the lawfulness of the processing carried out before the revocation.

Refusal to provide consent will make it impossible to access the related services, without prejudice to the contractual relationship with the Controller.

  • marketing purposes relating to products or services of G.Fedeli Ottica Cinefoto di Fedeli Gabriele’s partners

Personal Data of the Data Subject is processed, with specific consent, for sending promotional communications and offers of Services/Products of G.Fedeli Ottica Cinefoto di Fedeli Gabriele’s commercial partners through traditional methods (e.g. postal mail, calls with an operator) and/or automated methods (e.g. email, SMS, MMS, prerecorded calls).

The legal basis for such processing is the consent given by the Data Subject prior to the processing, which can be freely revoked at any time, without affecting the lawfulness of the processing carried out before the revocation.

Refusal to provide consent will make it impossible to access the related services, without prejudice to the contractual relationship with the Controller.

  • profiling

Personal Data, including location data, socio-demographic data collected during the provision of electronic communication services and from public sources, will be processed, with specific consent, for profiling purposes such as analysis of data and Services/Products purchased, to offer advertising and/or commercial proposals in line with the users’ expressed preferences. This activity will be conducted in aggregated and anonymized form using models for customer data analysis through statistical algorithms, predictive models, and aggregations, only for the time strictly necessary for the purposes pursued, and based on the types of products/services offered.

In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect the Data Subject.

The legal basis for such processing is the consent given by the Data Subject prior to the processing, which can be freely revoked at any time, without affecting the lawfulness of the processing carried out before the revocation.

Refusal to provide consent will make it impossible to access the related services, without prejudice to the contractual relationship with the Controller.

5.- Recipients of Personal Data

The collected Personal Data may be disclosed to subjects acting, depending on the circumstances, as independent Controllers or Data Processors, for the purposes described above, in compliance with legal, regulatory, and/or EU obligations, or where they have a legitimate interest.

In particular, Personal Data may be made available to:

– parties responsible for carrying out activities related and instrumental to the processing (e.g. archiving service providers, IT service companies, social media management providers, marketing agencies, insurance companies, banks);

– commercial partners of G.Fedeli Ottica Cinefoto di Fedeli Gabriele; 

– public administrations, authorities, and other parties in fulfillment of legal obligations;

Personal Data will not be disclosed (made available to unspecified third parties).

6.- Transfer of Personal Data to Third Countries

Personal Data is stored in archives located within the European Union. If necessary for the purposes stated, the Data may be transferred outside the EU to countries/organizations recognized by the European Commission as offering an adequate level of data protection, or based on other appropriate safeguards, such as Standard Contractual Clauses or the consent of the Data Subject. The Data Subject has the right to obtain a copy of the Data transferred abroad and a list of the countries/organizations to which the data was transferred by writing to info@otticafedelimilano.it

7.- Data Retention Period

Data will be retained in a form that allows identification of the Data Subject for no longer than is necessary for the purposes for which it was collected, taking into account the applicable laws in the sectors where the Controller operates. Once these terms expire, the Data will be deleted or anonymized, unless further retention is necessary to fulfill obligations (e.g. tax and accounting) that continue beyond the end of the contract (Art. 2220 of the Civil Code) or to comply with orders from Public Authorities and/or Supervisory Bodies.

The duration of cookies used on the website is detailed in the specific Cookie Policy below.

In case of legal dispute, the above retention period may be extended up to 10 years after its resolution.

8.- Processing Methods

Processing will be carried out by authorized personnel who need access to the data to perform their tasks, using electronic tools, in accordance with principles of lawfulness and fairness, and in a way that ensures confidentiality and rights of the Data Subject at all times, in compliance with applicable legislation.

Profiling related to marketing (analysis of habits and consumer preferences) is performed through an automated process in order to analyze customer behavior and features, to optimize promotional activities for products and services.

9.- Rights of the Data Subject

The Data Subject has the right to request from the Data Controller:

i. confirmation of whether or not their Personal Data is being processed and, if so, to access it (right of access);

ii. the rectification of inaccurate Personal Data or the completion of incomplete data (right to rectification);

iii. the erasure of their Personal Data under the conditions provided by the Regulation (right to be forgotten);

iv. the restriction of the processing where one of the conditions set out in the Regulation applies (right to restriction);

v. to receive their Personal Data in a structured, commonly used and machine-readable format and to transmit it to another Controller (right to data portability);

vi. to object at any time, in whole or in part, to the processing carried out for the Controller’s legitimate interest or for marketing and profiling purposes (right to object);

vii. to withdraw any consent given, at any time, without affecting the lawfulness of the processing based on consent prior to the withdrawal.

Consent given for marketing activities using automated means (e.g. SMS, MMS, fax, voice messages, emails, web applications) also extends to traditional means (e.g. postal mail or phone calls with an operator). Similarly, objection to marketing using automated means also extends to traditional means. You may, however, choose to give consent or object to only one of the two contact methods.

To exercise their rights, the Data Subject may send an email to info@otticafedelimilano.it or a written communication to the Controller’s registered office at G.Fedeli Ottica Cinefoto di Fedeli Gabriele.

The Data Subject also has the right to lodge a complaint with the competent Supervisory Authority in Italy (Italian Data Protection Authority) or with the authority of the EU Member State where the violation occurred, pursuant to Article 77 of the Regulation, as well as to seek judicial remedies under Articles 78 and 79 of the Regulation.

10. Cookies

The cookie policy can be consulted at the following link.