Website Privacy Policy
This privacy notice is provided pursuant to Article 13 of Regulation (EU) No 679/2016 to those accessing the website www.tomasinifrancia.it. This page sets out the rules governing this website with regard to the processing of the personal data of users who visit it. By visiting this website, you accept the terms and conditions set out below; if you do not agree to them, please do not access or use the services offered via the website.
The Data Controller reserves the right to amend, add to or remove parts of this privacy policy, and will inform data subjects of any such changes by publishing them on our website.
You can also access the WhatsApp Business chat via the website. In this case, only WhatsApp’s Terms of Service and Privacy Policy (https://www.whatsapp.com/privacy) shall apply.
The Data Controller reserves the right to amend, add to or delete parts of this privacy policy, and will inform data subjects of any such changes by publishing them on our website.
1. DATA CONTROLLER AND DATA PROTECTION OFFICER
Tomasini Francia srl, with its registered office at Corso Garibaldi 50 – 06049 – Spoleto (PG) (Tax Code and VAT No. 01542580541), acts as the Data Controller and can be contacted by email at [email protected]
2. TYPES OF DATA PROCESSED
User data is collected in various ways:
a. Browsing data collected automatically
Whilst browsing, the following information about users may be collected and stored in the log files of the website’s server (hosting): IP (Internet Protocol) address, browser type, parameters of the device used to connect to the website, name of the internet service provider (ISP), date and time of visit, the web page from which the visitor arrived (referrer) and the page they exited from, and, where applicable, the number of clicks.
b. Personal data provided voluntarily by users
The website may collect other personal data provided voluntarily by users when registering for the website’s e-commerce section, booking appointments, requesting information via the contact form (first name, surname, email, telephone number, address and any other information contained in the request), or requesting product information (first name, surname, email address, telephone number and any other information contained in the request), or when interacting with the Tomasini Francia virtual assistant.
c. Cookies
The website uses cookies, which are small text files that are stored on the User’s device or that allow access to information on the User’s device. Cookies enable information about visitors’ preferences to be stored; they are used to ensure the website functions correctly and to improve its functionality by customising page content according to the type of browser used, or to simplify navigation by automating certain procedures, and finally to analyse how visitors use the website.
The full list of cookies used and detailed information on the processing of data derived from cookies are available in the dedicated Cookie Policy published on this website in the relevant section.
d. Social Network Plugins
The website incorporates widgets from the main social networks. The collection and use of information by social networks are governed by their respective privacy policies, to which you are advised to refer. The website also features social buttons/widgets, i.e. specific ‘buttons’ displaying social network icons. These ‘buttons’ allow Users to access and interact directly with social networks. When you click on the social media buttons/widgets, the social network collects data relating to your visit. Apart from these instances, where you voluntarily choose to share your browsing data with your chosen social networks by clicking, the Data Controller does not share any browsing information or user data collected via the website with the social networks accessible via the social media buttons/widgets.
For further information, please refer to the privacy policies of:
Facebook at the following link: https://www.facebook.com/policies/cookies/
YouTube at the following link: https://policies.google.com/privacy?hl=it
Instagram at the following link: https://about.instagram.com/it-it/safety
Twitter at the following link: https://twitter.com/it/privacy
To prevent tracking by social media widgets, log out of all social networks you are logged into before visiting the website.
3. PURPOSE AND LEGAL BASIS OF THE PROCESSING
Browsing data is collected and processed for the purpose of carrying out all activities relating to the management and administration of the Website, including the management of IT security. It may also be used to obtain anonymous statistical information on the use of the site and to check that it is functioning correctly. Browsing data also includes cookies. The processing of so-called functional and/or necessary cookies does not require the User’s prior express consent; the User may, at any time, restrict or block cookies via their browser settings. However, should the User decide to refuse these cookies, some of the website’s services may not be displayed correctly or may not function optimally; in particular, operations that enable the User to be identified and for that identification to be maintained throughout the session may be more complex and less secure. Consent will, however, be required for the processing of third-party analytical, marketing, advertising and profiling cookies.
Personal data provided voluntarily by Users may be collected and processed for the following purposes:
a. to process and manage an appointment booking made by the data subject. The processing will be based on the request submitted by the data subject and, as such, on the need to carry out any pre-contractual measures or on the pursuit of the Data Controller’s legitimate interest in responding to the data subject’s request.
b. to respond to explicit requests from the data subject. The processing will be based on the enquiry submitted by the data subject and, consequently, on the need to carry out any pre-contractual measures at their request or on the pursuit of the Data Controller’s legitimate interest in responding to their enquiry.
d. administration and management of the website. The processing will be based on the Data Controller’s legitimate interest in ensuring that all its Users can make the best use of the website.
e. Sending emails, text messages and newsletters, and entering data into the company’s CRM system. The processing will be based on the consent given by the data subject and may be withdrawn at any time via the unsubscribe link at the bottom of the newsletters or by contacting the Data Controller at [email protected]
The processing of personal data provided voluntarily by Users via contact forms will take place in accordance with the provisions set out in the privacy notice provided when completing the aforementioned online contact forms.
4. PLACE OF PROCESSING
Data is processed at the Data Controller’s operational premises and at any other location where the parties involved in the processing are situated.
The User’s personal data may be transferred to a country other than the one in which the User is located. Should any of the transfers described above take place, the User may request information from the Data Controller by contacting them using the details provided at the beginning of this document or by writing to the email address [email protected].
5. AUTHORISED ENTITIES
The data may be processed by employees of the Data Controller designated to carry out the purposes set out above, who have been expressly authorised to process the data and who have received appropriate operational instructions from the Data Controller. Furthermore, for the purposes of carrying out security checks or optimising the website, the data may be transferred to external companies that provide Tomasini France with website maintenance and development services and, more generally, IT services, and which have been specifically appointed as Data Processors by Tomasini Francia.
6. DURATION OF THE TREATMENT
Data is processed for the time strictly necessary to achieve the purposes set out in paragraph 3 above and, in any event, for a period not exceeding 10 years. Specifically, the personal data collected will be retained by Tomasini Francia as follows: with regard to data processed for the purposes of administering and managing the website, users’ browsing data will be retained for 3 days. With regard to data processed for the purposes of registration in the e-commerce section of the website, the data will be processed for a period of 24 months following registration in the event of no purchase being made or, in the event of a purchase, from the conclusion of the last sales contract; for a period of 10 years for administrative, accounting and tax obligations. With regard to data processed for the purpose of responding to explicit requests from the User, the data provided will be retained for as long as necessary to deal with the request and will be deleted 60 days after all queries raised by the User have been resolved. With regard to data processed for the purpose of taking and managing a booking made by the User, the data provided will be retained until the time of the appointment and will be deleted (unless a contract is signed between the Parties or there is a need to carry out any pre-contractual measures) 14 days after the appointment. With regard to the data provided by the user for the sending of emails, text messages and newsletters, such data will be retained until the user withdraws their consent or until the user exercises their right to erasure of personal data. In the event of legal proceedings, the data will be retained for the entire duration of such proceedings, until the time limits for bringing appeals have expired. Once the aforementioned retention periods have elapsed, the data will be destroyed, deleted or anonymised, in accordance with the technical procedures for deletion and backup.
7. DATA SECURITY (Article 32 of the GDPR)
The Data Controller implements appropriate security measures – technical, administrative and physical – to protect personal information from unauthorised access, use and disclosure, in order to safeguard the confidentiality, integrity and availability of data subjects’ personal data, and requires its external suppliers and authorised internal staff to adopt similar security measures. Specific privacy notices are made available via links or displayed on the website pages for the particular services requested.
8. RIGHTS OF DATA SUBJECTS
Pursuant to European Regulation 679/2016 (GDPR), the User may, in accordance with the procedures and within the limits set out in current legislation, exercise the following rights: the right of access, to obtain confirmation as to whether or not personal data are being processed, as well as the right to receive all information relating to such processing; the right to rectification, to have data held by the Data Controller rectified if it is incomplete or inaccurate; the right to erasure, in certain circumstances, to have any data stored in the records erased; the right to restriction of processing, where certain conditions are met, to have the processing of the data restricted; the right to data portability, to have the data transferred to a different Data Controller; the right to object, to object to the processing of the data; the right to withdraw consent, which does not affect the lawfulness of the processing carried out whilst consent was given; the right to lodge a complaint with the supervisory authority, which in Italy is the Data Protection Authority (www.garanteprivacy.it).
9. CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER (DPO)
To obtain further information regarding their rights, Users may contact the Data Controller at the email address [email protected], or by express courier to the following address: Corso Garibaldi 50 – 06049 – Spoleto (PG).
Rolex section
When browsing the Rolex section on our website, some cookies are controlled by ROLEX SA which applies the following Cookie Policy.
