The X Fun Group recognizes the importance of personal data protection, is committed to respecting users’ privacy, to processing private data with caution and confidentiality and not to use them for purposes other than those specified below.
To this end, this policy describes the methods of managing the site with reference to the processing of personal data of users who consult it. This is an information note, also pursuant to Article 13 of EU Regulation 679/2016 (hereinafter “GDPR”), to those who interact with the web services of X Fun and other X Fun Group companies, accessible electronically on the pages of the website www.xfunglasses.com
This Policy may be modified or updated at any time by X Fun
The information is provided only for this site and not for other websites that may be consulted by the user via links except those indicated above.
The data controller is: X Fun, current in Pianezza (TO), via Praglia nr. 15, VAT number: 10529200015.
Data and purpose of the processing
X Fun informs users of the site that the data collected will be used exclusively for the purposes specified below, and to keep users informed of news, promotions, and X Fun activities of X Fun Group companies.
The data subject to processing are the navigation data and the data voluntarily provided by the user.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given to the server and other parameters relating to the operating system and the user’s IT environment.
This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on the site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data contained in the message. Specific summary information is reported or displayed on the pages of the Website set up for the services on request, in such a way as to draw the attention of the interested party to the processing of his personal data.
The processing of your data has the following purposes:
purposes related to the use of the services offered by the site (site navigation);
activities strictly connected and instrumental to the management of relationships with customers and potential collaborators (contact requests);
marketing activities, only and exclusively upon specific consent of the user, aimed at market research; economic and statistical analysis; sending advertising / informative / promotional material, sending newsletters, also in relation to programs and promotions, including online, communications, development and maintenance of commercial relationships.
treat the data related to curricula for the evaluation of job applications.
The provision of data for the purposes referred to in numbers 3) and 4) is optional and must be provided in the manner expressly provided for in article 7 of the GDPR and 130 of Legislative Decree 196/03 (hereinafter “Privacy Code” ), directly from the website.
Communications relating to marketing activities may take place through the use of traditional methods (eg, paper mail, telephone calls with an operator), automated (eg, telephone calls without an operator) and similar (eg: fax, e-mail, SMS) , newsletter).
Unless otherwise agreed, the Data Controller may continue to send to its customers commercial communications relating to services similar to those they are already using.
Data processing will be carried out by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
The data will be processed both on paper and electronic and / or automated.
The data from their receipt / update will be kept for a reasonable period with respect to the purposes of the processing indicated above. For more information on the terms of data storage, please write to email@example.com.
Communication and data transfer
The data subject to processing will not be disclosed; instead, for the purposes indicated in this statement, they can be communicated to X Fun Group companies, and to third parties, including commercial partners, consultants and freelancers, banks and credit institutions, insurance companies, financial companies, factoring companies, leasing, services, credit management and recovery, auditors, debt collection companies, public bodies, auditing or supervisory bodies, to fulfill obligations arising from the law, regulations, community regulations or aspects concerning management and execution of the juridical relationship with you between you or intervened.
The data will be processed by the following subjects:
• Employees of the X Fun Group companies, in Italy and abroad, who operate as authorized persons for the processing of data according to the duties performed and adequately educated.
• External Managers pursuant to Article 28 GDPR.
The list of those responsible for the processing of personal data is available at X Fun’s registered office.
For all the purposes indicated in this information the data may also be communicated abroad, within and outside the European Union, in compliance with the rights and guarantees provided for by current legislation, subject to verification that the country in question guarantees an “adequate” level of protection pursuant to the provisions of the GDPR.
Rights of the interested party
Anyone interested in processing may, at any time, ask:
a) access to your personal data (art. 15 GDPR);
b) their correction in the event of inaccuracy (art. 16 GDPR);
c) the deletion of the data referable to the same (art. 17 GDPR);
d) the limitation of the processing (art. 18 GDPR);
e) the right to object to the processing of data where the conditions are met (art. 21 GDPR);
d) the right to data portability, ie to receive in a structured format of common use and readable by automatic device, the personal data provided (art. 20 GDPR).
Although not expressly provided for by the aforementioned provisions, please refer in full to the legislation in force on the subject of privacy.
Furthermore it is possible for the interested party to lodge a complaint with the Guarantor of personal data located in Piazza di Montecitorio n.121, 00186 Rome.
Withdrawal of consent
Consent may be revoked, at any time, without this however being able to:
• prejudice the lawfulness of the processing based on the consent given before the revocation;
• prejudice further processing of the same data based on other legal bases such as contractual or legal obligations. For further explanations about this information or about any privacy issue, or in case you wish to exercise the above mentioned rights or withdraw your consent, you can write to firstname.lastname@example.org.