Privacy policy

Privacy Policy

Introduction

Ceramica Flaminia S.p.A. (hereinafter, also the “Company”) has adopted company rules and policies in line with the General Data Protection Regulation of the European Union (GDPR – Regulation /EU) 2016/679) with the aim to guarantee high security standards and rules designed to ensure that Personal Data are processed appropriately.

In particular, the term “Personal Data” is used according to the definition given in article 4(1) of the GDPR, i.e., “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”. (hereinafter, the “Personal Data” or the “Data”). 

In accordance with the applicable regulations, Ceramica Flaminia intends to guarantee protection and security in the processing of the personal data of each user, also with respect to the access to its website “www.flaminiahome.com” (hereinafter, the “site”). Unless otherwise specified or governed by a specific privacy statement made pursuant to Article 13 of the GDPR (bottom of page), this Privacy Policy shall also be construed as a document designed to provide indications as per articles 13 and 14 of the GDPR to persons navigating the site and interacting with the data controller via the services offered by the site.

The Data Controller

Company Ceramica Flaminia S.p.A. with registered office in via Flaminia km 54,630 - Civita Castellana (VT) 01033 is the Data Controller, i.e., the person that determines the purposes and means of the processing of personal data, including security aspects. The Controller may be contacted to request information on processing methods, to report an issue or to exercise a right, by sending an e-mail to the following address: “privacy@ceramicaflaminia.it”.

Types of data processed

During a user’s navigation in a website, it is possible to acquire information about him/her in the following manner:

- Navigation data: during the course of their normal use, the information systems and the software procedures employed to operate the site acquire personal data whose transmission is implicit in the use of Internet communication protocols. This data category includes: IP address, type of browser used, operating system, domain name, and addresses of the websites used to access or leave the site, information on the pages visited by the users within the site, time of access, time of stay on individual pages, analysis of internal route and other parameters relating to the user’s operating system and IT environment.  

Such data of a technical/information nature are collected and used exclusively in aggregate and de-identified form and could be used to ascertain liability in the event of hypothetical computer crimes against the site.

-  Data supplied voluntarily by the visitor, i.e., all the personal data freely provided by a person visiting a site in order to register, to purchase and/or request information on a specific product or to receive our newsletter/promotions via specific forms in the respective dedicated areas of the website. The processing of such personal data will be carried out on the basis of all the information contained in the specific disclosures made, pursuant to Article 13 of the GDPR, at the time the personal data is supplied and during the registration process.

-  Data collected by tracking (cookies): cookies are text files containing packets of information that are stored in your computer or mobile device every time you visit an online site through a browser. With regard to the purpose of tracking and the management of consent, please refer to the specific "Cookie policy" section of our site.

Processing methods

Personal data are processed primarily by making use of electronic procedures and supports for the time strictly necessary. Personal data shall be processed by the Data Controller only to the extent necessary to fulfil the main purpose of the processing. In particular, personal data shall be processed for a period of time equal to the minimum time necessary, i.e., until the expiration of the existing contractual relationship between the data subject and the data controller, except for a further storage period that may be imposed by law. 

Persons authorised to process the data

The Data are processed in-house and outside the Company by resources duly identified and trained and working as authorised data processing staff or as a data processor.

Rights of the data subjects

As provided for in Article 15 of the GDPR, the data subject may exercise his/her rights toward the data controller, and namely:

At any time, you may request to: 

•      Object to the processing of your personal data if your data are processed on a legal basis other than consent. Further details on the right to object are described in the following section;

•      Access your data. A User has the right to obtain information on the data of his/hers processed by the Controller and on specific aspects of the processing, and has the right to receive a copy of the data processed;

•      Verify your data and ask that your data be rectified. The User has the right to verify his/her data and ask that the data be brought up to date or rectified;

•      Obtain restriction of processing of your data. When certain circumstances apply, the User may request the restriction of the processing of his/her data. In this case, the Data Controller shall not process the data for any purpose other than their storage;

•      Obtain the erasure of your personal data. When certain circumstances apply, the User may request the erasure of his/her data by the Controller;

•      Revoke your consent at any time. The User has the right to revoke the consent given previously to the processing of his/her personal data;

•      Receive your data or have them transferred to a different Controller. The User has the right to receive his/her data in a structured, commonly used and machine-readable format and, when technical feasible, have the data transmitted to a different Controller without any impediment. This provision applies when the processing is carried out by automated means, and when the processing is based on a contract the User is a party to or on contractual clauses relating to it;  

•      Lodge a complaint. The User has the right to lodge a complaint with the competent Data Protection Authority as well as take legal action and/or have recourse to the other protection measures provided for by the applicable regulations.

To exercise the rights listed above, as well as for any request concerning the processing of your Data, you may write to the following e-mail address “privacy@ceramicaflaminia.it”.

Individual Privacy Policies

The individual corporate privacy policies, which can be easily consulted to make the reading quicker, easier and more intuitive, are listed below.

Site Navigation Policy 

Dear visitor, this page has been designed to provide all the indications as per art.12 of Regulation (EU) 2016/679 (hereinafter, the “GDPR”) concerning the processing of the personal data of persons visiting the website of Ceramica Flaminia S.p.A. at address “www.flaminiahome.com” (hereinafter, the “site”). 

The information and the personal data acquired during your visit to the site shall be processed according to the provisions of the GDPR and the confidentiality obligations provided for therein. 

This policy statement is intended solely for those who interact with site “www.flaminiahome.com” and does not apply to other websites, pages, or online services that may be reached through the hypertext links published in the site. 

The Data Controller 

The Controller of the personal data supplied by customers via site “www.flaminiahome.com” is Ceramica Flaminia S.p.A., a company with registered office in via Flaminia km 54,630 - Civita Castellana (VT) 01033 – VAT no. 0006172056. The Controller may be contacted at the following e-mail address: “privacy@ceramicaflaminia.it”.

Personal data

During the course of their normal use, the information systems and the software procedures employed to operate the site acquire personal data whose transmission is implicit in the use of Internet communication protocols. In particular, navigation data are processed. This data category includes: IP address, type of browser used, operating system, domain name, and addresses of the websites used to access or leave the site, information on the pages visited by the users within the site, time of access, time of stay on individual pages, analysis of internal route and other parameters relating to the user’s operating system and IT environment. Such data of a technical/information nature are collected and used exclusively in aggregate and de-identified form and could be used to ascertain liability in the event of hypothetical computer crimes against the site.  

Purposes of the processing

Once a visitor has consulted this site, it becomes possible to process data concerning identified or identifiable persons. The personal data obtained during a visit to the site are processed for the following purposes:

- obtains anonymous statistical information on the use of the site (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);  

- monitor the proper functioning of the site and ensure the protection of company information and its business activities; 

- fulfil obligations provided for by EU and national regulations.

The legal basis for the acquisition and subsequent processing of the data is to pursue a legitimate interest as per art. 6.1(f) of the GDPR, which is to guarantee the security of the site and the information exchanged therein, i.e., the ability of the site to withstand, at a given level of security, unforeseen events or illegal or malicious acts that may compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted via the site.

How will you process my data?

Navigation data are collected by the system automatically when a user uses the functions of the site. 

Personal data are processed with the aid of electronic equipment. The data are stored in electronic archives also with a view to permitting the identification and selection thereof in aggregate form. In any event, data processing takes place according to a logic strictly related to the aforementioned purposes and according to modalities that ensure the security and confidentiality of the data through the adoption of measures designed to prevent the alteration, erasure, destruction, unauthorized access to the data, or processing that is not permitted or does not match the purposes for which the data were originally collected.

With whom will you share my data?

The processing of data relating to web services is carried out exclusively by personnel authorised to process personal data. A user's personal data may be disclosed to the following categories of recipients:

-  Employees and/or collaborators of the Controller entrusted with specific tasks and processing activities, who have been specially authorized and duly trained and instructed to this end;

- Third party companies or other entities performing outsourced activities on behalf of the Controller to enable the operation of the site (e.g., site maintenance services and software and hardware assistance);

- Subjects for which a disclosure obligation exists under the law or disclosure is required to exercise and defend one’s rights in legal proceedings. 

The user's personal data will not be disseminated under any circumstances.

Nature of data collection 

The collection of navigation data is necessary and non-optional and takes place automatically during the navigation when a user uses the functions of the website.  

The data subject may decline to provide the Controller with cookie-related data. To do so, he/she can disable the cookies by following the instructions provided by the browser in use and as detailed in the cookie policy.

Transfers of data to foreign countries

The processing of data relating to the web services offered by this site are not transferred to countries outside the EU. Should it become necessary to transfer the data of a data subject to countries outside the Union, the recipients of the data will be placed under protection and security obligations equivalent to those guaranteed by the Data Controller and in any event provided for in Chapter V of the GDPR. 

Rights of the data subject

In the cases provided for, data subjects have the right to obtain access to, rectification, erasure of their personal data or restriction of processing, as well as the right to object to the processing (arts. 15 et seq. of the GDPR). The user may exercise his/her rights at any time by writing to the following e-mail address “privacy@ceramicaflaminia.it”. 

If you believe that your personal data have been processed in violation of the provisions set out in the GDPR, you have the right to lodge a complaint with the competent Data Protection Authority at the following address www.garanteprivacy.it.

Data retention

The data collected by the site during its operation are retained for the time strictly necessary to perform the activities described above. After that, the data will be deleted or anonymised, unless there are other reasons to retain them.

Additional information

For further information on this policy or any privacy issue, or if you wish to exercise your rights, you can contact us at our e-mail address: “privacy@ceramicaflaminia.it”.

CUSTOMER PRIVACY POLICY OF SITE flaminiahome

Ceramica Flaminia S.p.A. (hereinafter, also "Ceramica Flaminia") considers the protection of its Customers' Personal Data of fundamental importance, and makes sure that processing is carried out in full compliance with the protective measures and the rights provided for in Regulation (EU) 2016/679 (hereinafter, the "GDPR") and any other applicable regulation on the processing of personal data.

This policy statement, provided in accordance with art. 13 of the GDPR, is intended solely for those who purchase Ceramica Flaminia S.p.A. products via the company website "www. flaminiahome.com" (hereinafter, the "site") and does not apply to other websites, pages or online services that may be reached through the hypertext links published in our site. 

The policy explains who we are and for what purposes we may use and manage the data supplied by a customer for the establishment and performance of the sales contract. 

The Data Controller

The entity that processes the personal data supplied by the customers in its capacity as Data Controller is Ceramica Flaminia S.p.A., a company with registered office in via Flaminia km 54,630 - Civita Castellana (VT) 01033 – VAT no. 0006172056. The Controller may be contacted at the following e-mail address: “privacy@ceramicaflaminia.it”.

Personal data and data processing 

Personal data are processed by the Data Controller to enable the customer to purchase the chosen products via the site www.flaminiahome.com. 

In order to ensure the proper performance of its contractual relationship with the customer, Ceramica Flaminia collects, uses, consults and, more generally, processes the following categories of personal data.

a)   Data supplied voluntarily by the customer, such as:

•      Personal and identification data (e.g., name and surname or company name, tax code, etc.)

•      Contact data (e.g., shipping address, e-mail address, telephone numbers, etc.)

•      Administrative/accounting data (tax code, VAT number, SDI code, billing address, etc.)

•      Data on the credit cards used (card number; name and surname, validity date, etc.)

b)   Navigation data: during the course of their normal use, the information systems and the software procedures employed to operate the site acquire personal data whose transmission is implicit in the use of Internet communication protocols. This data category includes: IP address, type of browser used, operating system, domain name, and addresses of the websites used to access or leave the site, information on the pages visited by the users within the site, time of access, time of stay on individual pages, analysis of internal route and other parameters relating to the user’s operating system and IT environment. Such data of a technical/information nature are collected and used exclusively in aggregate and de-identified form and could be used to ascertain liability in the event of hypothetical computer crimes against the site. 

c)    Data collected by tracking (cookies): tracking is accomplished by means of a code operating in the site. For more information on the purpose of tracking and the management of consent, please see the specific "Cookie policy" section of our site. 

Purposes and legal bases of the processing

A customer’s personal data are used to receive and manage purchase orders, process the payments, despatch the products and provide information on orders, products and promotional offers. 

In particular, the personal data of customers are used to: 

a)       Meet pre-contractual and contractual obligations arising from the purchase of products;

b)       Receive and/or respond to customer requests for information and assistance from Customer Service;

c)       Carry out communications between the parties in connection with the purchase contract;

d)       Fulfil obligations of an administrative, accounting and taxation nature;

e)       Send promotional offers/newsletters, only with the customer's prior consent;

f)        Enforce and/or defend the rights and/or the legitimate interests of the Controller and/or of third parties, e.g., when handling purchase-related complaints, litigation or pre-litigation proceedings; 

g)       Meet obligations provided for by the law and other applicable national or EU regulations, or comply with orders issued by authorities empowered to do so by law, including orders issued by state bodies in connection with official requests arising from legal obligations; 

Should Ceramica Flaminia intend to process the personal data for purposes other than those for which they were originally collected, prior to undertaking such processing, it will provide the Client with information on the specific purposes pursued and any further relevant information required by the GDPR.

The legal basis of the processing as per letters a), b), c), d) is the performance of a contract between the parties.

The legal basis of the processing as per letter e) is the consent given by the data subject.

The legal basis of the processing as per letter f) is the pursuit of a legitimate interest of the Controller.

The legal basis of the processing as per letter g) is compliance with specific legal requirements and obligations.

The provision of data 

Except for navigation data, the provision of data by the customer for the purposes specified above is optional. However, failure to enter the data makes the sales contract partly or totally impossible to perform.

Processing methods

Customer data are collected and recorded in a legitimate and fair manner for the pursuit of the aforementioned purposes. Data processing is performed by means of procedures designed to safeguard the confidentiality of personal data and consists of collecting, recording, organizing, storing, processing, modifying, selecting, extracting, comparing, using, interconnecting, blocking, communicating, deleting and destructing the data, as well as performing two or more of the said activities combined. Personal data are processed primarily using automated and computerised methods, as well as manually. Physical, electronic and procedural measures are adopted in keeping with the sensitivity of the information held. 

The data are stored in electronic and/or paper files for as long as necessary to pursue the purposes described in this Privacy Policy, as required by law (e.g., for taxation and accounting purposes). 

Disclosure

The Data are not susceptible to dissemination, i.e., they are not disclosed to unspecified persons, in any possible form, including making the data available or merely accessible for consultation. 

However, the data may be disclosed to specified persons, such as:

•      Duly trained employees and/or collaborators of the Controller who have been entrusted with specific tasks and/or several processing activities, within the limits of their responsibilities and in compliance with the instructions imparted to them;

•      Third parties that carry out processing activities and/or activities related to and instrumental to processing, in their capacity as independent data controllers, including forwarding companies, payment service providers, banks, debt recovery agencies; 

•      Persons, companies, associations or professional firms that carry out part of the processing activities or activities related and instrumental to the same on behalf of the Data Controller, such as, for instance, technical, management and administrative-accounting activities or, in general, consultancy services, on the basis of a contract or a professional assignment. 

These subjects act, where applicable, as Data Processors pursuant to Article 28 of the GDPR;

•      Natural or legal persons entitled to have access to the data by virtue of provisions of the law, regulations, EU legislation, such as public bodies or judicial authorities.

Third-party service providers have access to the personal data they need to carry out their activities, but they may not process any data that come to their knowledge for other purposes. 

Payments through PayPal are processed through the PayPal payment service provider. All payment data are entered directly into the PayPal system and may neither be read nor saved by Ceramica Flaminia. Data of payments made via credit cards through banks and outside the PayPal system are likewise not accessible to Ceramica Flaminia.

Transfers of personal data to foreign countries

Personal data are processed within the European Union. Should it become necessary to transfer personal data outside the European Community, the Controller undertakes to comply with the provisions set out in Chapter V of the GDPR and to take all necessary measures to ensure full protection of personal data. 

Data retention

Personal data are retained for the time strictly necessary for the performance and management of the contractual relationship established, and furthermore they will be retained to comply with legal requirements and applicable provisions, for administrative purposes and/or to enforce and/or to defend the rights and/or the legitimate interests of the Controller or those of third parties, even in the case of complaints, litigation or pre-litigation proceedings, pursuant to the applicable regulations, without prejudice to any further retention period that may be imposed or permitted by law. 

Rights of the data subject 

At any time, the customer may exercise his/her rights. In particular, the data subject has the following rights:

•        Right of access: the right to access his/her personal data being processed in order to ascertain whether or not the data are being processed according to the applicable regulations. 

•        Right to rectification: the right to obtain the rectification of any inaccurate or incomplete data concerning him/her with a view to guaranteeing the accuracy of the data as a function of the purposes of the processing.

•        Right to erasure: the right to ask the Controller to erase the personal data concerning him or her and stop processing such data, in the circumstances envisaged by the GDPR.

•        Right to restriction of processing: the right to obtain from the controller restriction of processing where his/her data are concerned.

•        Right to data portability: the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format and to transmit such data to another controller, if technically feasible.

•        Right to object: the right to object to the processing of his/her personal data in the cases provided for by the GDPR, at any time and without having to justify the decision.

•        Right not to be subject to a decision based solely on automated processing: the right not to be subject to a decision based solely on the automated processing of his/her data, including profiling, which may produce legal effects concerning him/her or similarly may have significant effects on him/her.

The customer may exercise his/her rights at any time by writing to the following e-mail address “privacy@ceramicaflaminia.it”.

Furthermore, if he/she believes that the rights held pursuant to the GDPR, or any other applicable regulation, have been violated, the customer may lodge a complaint with the competent Data Protection Authority, according to the modalities described in the website of the Data Protection Authority at the following address; www.garanteprivacy.it. 

PRIVACY POLICY – Newsletter Registration Form

Pursuant to art. 13 of European regulation (EU) 679/2016 (GDPR), hereby we provide information on the methods and purposes of processing the Personal Data supplied by the users who wish to register in the Newsletter area of our website www.flaminiahome.com.

Data Controller: for your personal data, the Data Controller is Ceramica Flaminia S.p.A., with registered office in via Flaminia Km 54,630 - Civita Castellana (VT), which you may contact at e-mail address “privacy@ceramicaflaminia.it” for all matters to do with the processing of your personal data and/or the exercise of your rights.

Purposes and legal bases for processing your personal data: we process your personal data to send you our Newsletters containing news, events and offers and, in general, advertising and promotional material about our products (marketing purposes).

The legal basis for processing your data is the consent you provide pursuant to art. 6.1 letter a) of the GDPR.

Types of data processed: the personal data we process are those you enter freely for the aforementioned purposes in the registration form provided in the Newsletter area of our website. The data required consist of your e-mail address.

Processing methods: Your Data will be processed manually and/or with the support of computers or electronic equipment after the adoption of appropriate security measures designed to reduce the risks of destruction or loss of the data, even accidentally, or of unauthorised access, or of processing that is not permitted or does not match the purposes for which the data have been collected.

Optional provision of Data: entering your e-mail address, as requested in the data collection form, is required. Failing this, it will not be possible to process your Personal Data and we will not be able to send you our Newsletter. 

Scope of communication and disclosure of your data: for the processing described above, your personal data may be disclosed to our employees and/or collaborators specifically authorised to process the data pursuant to article 29 of the GDPR, for the purposes specified herein and in compliance with the applicable regulations. Moreover, third parties may also become aware of your data, in their capacity as external data processors (e.g., service providers, professionals and consultants) adequately selected and endowed with experience, capacity and reliability, and guarantors of compliance with the provisions in force on the processing of personal data. In any event, your data will not be disseminated.

Transfers of your data to foreign countries: your personal data shall not be transferred to third countries outside the European Union. Should it become necessary in the future to transfer your data outside the European Community, such transfer would take place in accordance with the applicable legal provisions, taking all necessary measures to ensure the most complete protection of personal data. 

Data retention: your personal registration data, processed for the purposes detailed above, will be retained for a period not to exceed 5 years from their registration and, in any case, until you revoke your consent or exercise your right to object, without prejudice to any further retention period that may be imposed or permitted by law. 

Rights of the data subject: at any time, you may exercise the rights granted to you in connection with your Personal Data (arts. 15 et seq. of the GDPR), to the extent that the conditions provided for by law are met.

In particular, you may request to:

•      Object to the processing of your personal data. A user may object to the processing when his/her data are processed on a legal basis other than consent. Further details on the right to object are described in the following section;

•      Access your data. A User has the right to obtain information on the data of his/hers processed by the Controller and on specific aspects of the processing, and has the right to receive a copy of the data processed; 

•      Verify your data and ask that your data be rectified. The User has the right to verify his/her data and ask that the data be brought up to date or rectified;

•      Obtain restriction of processing of your data. When certain circumstances apply, the User may request that the processing of his/her Data be restricted. In this case, the Data Controller shall not process the data for any purpose other than their storage;

•      Obtain the erasure of your Personal data. When certain circumstances apply, the User may request the erasure of his/her data by the Controller; 

•      Revoke your consent at any time. The User has the right to revoke the consent given previously to the processing of his/her personal data; 

•      Lodge a complaint. The User has the right to lodge a complaint with the competent Data Protection Authority as well as take legal action and have recourse to the other protection measures provided for by the applicable regulations

To exercise the rights listed above, as well as for any request concerning the processing of your Data, you may write to the following e-mail address “privacy@ceramicaflaminia.it”.