Privacy Policy

 

The Internet site www.fabric-house.eu collects some Personal Data from its Users.

This information is prepared on the basis of the legislation regarding the protection of personal data, including articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, GDPR).

 

Data Controller

Fabric House s.r.l. (later, Owner), with registered office in Prato (PO), via delle Viottole, 7 - tel. +39 0574871610 - email: info@fabric-house.eu


1) Types of Data collected and Purpose of processing

a) E-commerce. The Data Controller processes personal data, (such as name, surname, company name, address, telephone number, e-mail address, bank and payment details - hereinafter "personal data" or even "data") that have been communicated when making contracts for services asked by the Owner. Unless otherwise specified, has the purpose of providing the requested service by the User.

a.1) Account registration

This section describes the data that the Data Controller may collect at the time the account is created on the website and how data are processed.

You can create a personal account on the Website to use the "Shop-eCommerce" feature, to order and purchase online samples and fabrics. Creation of an account is not mandatory and, if you decide to create it, you can cancel it at any time by contacting the owner.

- Source of personal data and mandatory data

When creating the account on the Website, the user provides contact details and identifiers to the Data Controller. You acknowledge that some of the information that you are required to provide are essential to complete the registration process and, in the absence of such information or refusal to provide it, will prevent us from following up your request. On the Website you will find clearly stated which are the essential data.

The additional information is optional and, if provided, can be used by the Data Controller to avoid homonymy cases.

You further acknowledge that, by using some of the services provided on the Website, the Data Controller collects additional information related to the ways in which it interacts with us (for example, the products included in the shopping cart and not deleted before leaving the website) or preferences on the use of the Website through the functionalities available on the Website itself.

Please make sure that your data are correct and, if the personal data you gave us are subject to change, please contact us as soon as possible at the opening email or directly modify the data online in the reserved area, if registered. In this way we will be able to keep your personal data up-to-date.

- Personal data use method

The Data Controller will only use these data to provide services related to your account, which may include services related to online purchases, unless you have also consented the use of your personal data to improve your online shopping experience and in our stores. In the latter case, the Data Controller may then associate the personal data contained in your account with other information collected under other circumstances and use them in the manner described in relation to the relationship marketing activities, obviously obtained behind your specific, informed and free consent. Your personal data will be stored and used mainly through an automatic process.

-Mode of sharing personal data

Your personal data will be processed by our specifically authorized personnel and by the controllers responsible for managing your account. The Data Controller will not disclose your personal data to third parties for direct marketing purposes without your express, specific and free consent or will not sell your personal data

b) Newsletter. The Data Controller, upon your informed, specific consent (through the dedicated form) will process your data for the purpose and in the manner specified in the dedicated information in the appropriate section of the website, to which you should refer.

c) Contacts. It is possible to contact the Owner to request information and for any request concerning our services. The purpose of processing your data is to fulfill your requests, and the legal basis of the processing lies in the implementation of pre-contractual measures.

 

a) Method and processing place of collected data

The processing is carried out through IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated and, in particular, through the adoption of appropriate security measures as per EU Regulation 679/2016. In addition to the Data Controller, in some cases, other parties involved in the organization of this application (personnel authorized by the Data Controller) or external subjects (such as third party technical service providers, hosting providers, IT companies) may also have access to data if necessary, nominated by Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.


b) Legal basis of data processing

Data Controller processes Personal data relating to the User, for the purposes of:

-point 1, letter a): the processing of your data is necessary for the execution of the contract with the Owner (online purchase and sale). In this case, your data will also be processed for the fulfillment of consequent legal obligations of an accounting-fiscal-administrative nature.

-point 1, lett. b): the processing of your data will only take place upon your specific consent, issued in the manner specified in the specific information on the newsletter section on the website to which you are referred.

-point 2, lett. c): the processing of your data is necessary for the execution of pre-contractual measures (request for information on the products and services of the Data Controller). In any case it is always possible to ask the Owner to clarify the concrete legal basis of each treatment.

 

c) Place and scope of communication of your data

The data are processed at the registered office of the owner and in any other place where the parties involved in the treatment are located.

Personal data is stored on servers located within the European Union. In any case, it is understood that Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of standard contractual clauses provided by the European Commission.

Your data may be disclosed to third parties belonging to the following categories: subjects who provide services of information system for the management used by the Data Controller and by the communication networks (including e-mail); studies or companies in the context of assistance and consultancy relationships; competent authorities for the fulfillment of legal obligations and / or provisions of public authorities, upon request.

The subjects belonging to the aforementioned categories act as Data Processing Managers or operate independently by the Data Controller.

The User can request information, constantly updated, on the list of data controllers to the Controller by contacting him at the reported address.

 

d) Nature of data and consequences of a refusal to respond

The provision of data for the purposes referred to in point 1, lett. a) and c) is functional to take advantage of the services requested, therefore any refusal to provide them implies the impossibility for the owner to perform these services. Regarding the purpose referred to in point 1, lett. b), the interested party may decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, he / she will not be able to receive newsletters, commercial communications and advertising material concerning offered services by the Data Controller.

 

Data are processed and stored for the required time by the purposes for which they were collected.

Therefore:Personal Data collected for purposes related to the execution of a contract or the execution of pre-contractual measures between the Owner and the User will be retained until the execution of this contract is completed and, in any case, in compliance with the current legislation.

Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or an order of an authority.

Data Controller will process personal data for the time necessary to fulfill the aforementioned purpose and in any case for no more than 2 years from the collection of data for Marketing purpose.

At the end of the retention period, personal data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be claimed.

 

7) Rights of the User

Users have rights referred to data processed by the Data Controller.

Under the GDPR, the User has the right to:

- revive consent at any time;

- oppose processing of personal data;

- access data;

- verify and request rectification;

- get treatment limitation;

- obtain delete or removal of personal data;

- receive data or have them transferred to another holder;

- propose complaint.

 


8) How to exercise the rights

To exercise their rights, the Users can make a request at the Owner contact details indicated in this document.

 

9) Specific information

In addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data. Specially, regarding use of data for marketing purposes (Newsletter), please refer to the specific dedicated information section.

 

10) System logs and maintenance

For needs related to operation and maintenance, this application may collect system logs, which are files that record the interactions and that may also contain personal data, such as the IP address of the user.

 

11) Information not contained in this policy

Further information regarding the processing of Personal Data may be requested at any time to Data Controller using contact details.

The Internet site www.fabric-house.eu collects some Personal Data from its Users.

This information sheet is prepared according to the legislation on the protection of personal data, including articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter, GDPR).

 

Note for the processing of customers personal data

 

This information is provided pursuant to articles 13 and 14 of European Regulation no. 679/2016 (hereinafter, GDPR).

According to the law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

According to the aforementioned articles, the following information note is provided:

1. The Data Controller is Fabric House s.r.l. (later, Owner), with registered office in Prato (PO), via delle Viottole, 7 - tel. +39 0574871610 - email: info@fabric-house.eu.

 

2. The processing of your data will take place for the following purposes:

Providing services purpose. It also includes the satisfaction of needs connected with, or instrumental to, our business. Including operational, management and customer assistance needs. The legal basis therefore resides in the need of processing your data for pre-contractual measures (example: request for a quote), prior to the conclusion of a possible contract with the Controller, and in the execution of the contract concerning the services requested to the Owner.

Purpose of providing our services. It also includes the satisfaction of needs connected with, or instrumental to, our business. Including operational, management and customer assistance needs. The legal basis therefore resides in the need of processing your data for pre-contractual measures (example: request for a quote), prior to the conclusion of a possible contract with the Controller, and in the execution of the contract concerning the services requested to the Owner.

Marketing purposes. Your personal data communicated by you is only processed with your specific and distinct consent (article 7 GDPR), for the following Marketing Purpose:

• receiving commercial and / or promotional communications by e-mail, telephone, fax, SMS, MMS, automatic systems without intervention of an operator and similar, including electronic platforms and other telematic means; invitations to events. The legal basis of the processing is therefore your consent, expressed by completing informed and freely the specific section at the bottom of this statement.

Administrative purpose. The Data Controller will also process your data in compliance with legal obligations (legal basis of processing), tax-accounting-administrative, to which it is subject.

 

3. Data communication is mandatory for the purposes related to the execution of pre-contractual measures or the contract is functional to take advantage of the services requested, therefore any refusal to provide them implies the impossibility for the owner to perform such services. The provision of data for marketing purposes is optional, and your refusal will make it impossible to receive our commercial and / or promotional communications.

 

4. The recipients of the processing are the controllers (including third parties to the owner) and the persons within the organization and authorized by the owner. Personal data will not be disclosed, but may be disclosed to third parties, exclusively for technical and operational needs strictly related to the purposes set out above. Specifically, to third parties involved in the fulfillment of accounting and tax tasks, to companies or professionals appointed as data controllers for the evasion of accounting and / or tax duties.

 

5. Data are processed and stored at the registered office of the Owner and in any other place where the parties involved in the treatment are located. Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

 

6. Personal data will be kept for the necessary time to fulfill the aforementioned purposes, and in any case, in compliance with current legislation.

 

7. You can, at any time: access your personal data; obtain their correction or delate or the limitation of the processing that concerns with them; oppose the treatment; exercise the right of portability of your data; withdraw consent; propose a complaint to the Supervisory Authority (Guarantor for the protection of personal data - Privacy Guarantor). The exercise of your rights can be done by sending a request via email to info@fabric-house.eu.

 

Information for the processing of personal data of suppliers

 

This information is provided pursuant to articles 13 and 14 of European Regulation no. 679/2016 (hereinafter, GDPR).

This treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

According to the aforementioned articles and s.m.i., therefore, the following information is provided:

 

1. The Data Controller is Fabric House s.r.l. (later, Owner), with registered office in Prato (PO), via delle Viottole, 7 - tel. +39 0574871610 - email: info@fabric-house.eu.

 

2. The data you provide will be processed for the following purposes:

a) to perform the obligations arising from the contract between you and the Holder (for example, completion of orders) and to carry out the consequent accounting and tax requirements; as regards the first purpose, the legal basis of the processing lies in the performance of obligations arising from a contract; as regards the second, in the need to fulfill a legal obligation to which the Data Controller is subject;

b) for the creation of databases for managerial-administrative-accounting purposes.

 

3. Data communication is mandatory for the contractual and fiscal management of the relationship, under penalty of non-execution of the contract or non-continuation of the relationship itself.

 

4. The recipients of the processing are the controllers (including third parties to the owner) and the persons within the organization and authorized by the owner. Personal data will not be disclosed, but may be disclosed to third parties, exclusively for technical and operational needs strictly related to the purposes set out above. Specifically, to third parties involved in the fulfillment of accounting and tax tasks, to companies or professionals appointed as data controllers for the evasion of accounting and / or tax duties.

 

5. Data are processed and stored at the registered office of the Owner and in any other place where the parties involved in the treatment are located. Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

 

6. Personal data will be kept for the time necessary to fulfill the aforementioned purposes, and in any case, in compliance with current legislation.

 

7. You can, at any time: access your personal data; obtain their correction or delate or the limitation of the processing that concerns with them; oppose the treatment; exercise the right of portability of your data; withdraw consent; propose a complaint to the Supervisory Authority (Guarantor for the protection of personal data - Privacy Guarantor). The exercise of your rights can be done by sending a request via email to info@fabric-house.eu.

 

Note for the processing of customers personal data

 

Fabric House s.r.l. (later, Owner), with registered office in Prato (PO), via delle Viottole, 7 - tel. +39 0574871610 - email: info@fabric-house.eu informs you that pursuant to articles 13 and 14 of European Regulation no. 679/2016 (hereinafter, GDPR) your data will be processed as following:

 

1.Object and purpose of the processing

Your personal data (email address) communicated by you is only processed with your specific and distinct consent (article 7 GDPR), for the following Marketing Purpose:
• send you newsletters via e-mail, commercial communications and / or advertising material on products or services offered by the Data Controller and recording of the quality satisfaction on services. The legal basis of the processing is therefore your consent, expressed in a free, specific and informed way by entering your email address in the form and clicking the appropriate box of consent.

 

2. Treatment Methods

Personal data are subjected to paper and electronic and / or automated processing.

The Data Controller will process personal data for the necessary time to fulfill the aforementioned mind and, in any case, for no more than 2 years from the data collection for the Marketing objective.

 

3. Data access

Your data may be made accessible, for this purpose, to authorized persons by the Data Controller in their capacity as persons in charge and / or system administrators and any external data processors

 

4. Data communication

Your information will not be disseminated.

 

5. Data transfer

Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

 

6. Nature of the Provision and Consequences of a Refusal to Reply

The provision of data for the purposes mentioned above is optional. You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller.

 

7. Rights of the interested party

As an interested party, you have the right referred to in the GDPR and to the current legislation regarding the protection of personal data:

• obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an Understandable form;

• obtain the indication: a) of the origin of personal data; b) of the processing purposes and methods; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or agents;

• obtain: a) updating, rectification or, when interested, integration of data; b) the delate, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to attention, also as regards to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is impossible or involves a manifestly disproportionate use of means to protect the right;
• object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication. Where applicable, it also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.

 

8. How to exercise rights

You may exercise your rights at any time by sending an e-mail to info@fabric-house.eu. Further information about the processing of your data is available in the Privacy Policy found on this site.

 

9. Holder, manager and agents

Fabric House s.r.l., with registered office in Prato (PO), via delle Viottole, 7 - tel. +39 0574871610 - email: info@fabric-house.eu. The updated list of the data processors and the authorized persons to process the data is kept at the registered office of the Data Controller and may be made available to you by requesting it at the aforementioned contact address.