Pursuant to Regulation (EU) 2016/679 (“GDPR”), this document explains how personal data collected through the website of Elisa Fanti is processed.
1. Data Controller
The Data Controller is:
E.F.B. srl
Registered office: Largo Amendola 14, Sant’Agata sul Santerno (RA), Italy
VAT number: 02629890399
Email: info@elisafanti.it
2. Types of Data Collected
The website collects and processes the following personal data:
- Information voluntarily provided through the contact forms (Catalogue Request, Showroom), such as name, surname, email, phone number, and any message content;
- Data provided for newsletter subscription;
- Browsing data (e.g., IP address, access logs, technical and tracking cookies).
3. Purpose and Legal Basis of Processing
Personal data are processed for the following purposes:
- Managing requests via contact forms (Catalogue Request, Showroom): legal basis → pre-contractual measures at the request of the data subject (Art. 6.1(b) GDPR);
- Newsletter subscription and dispatch: legal basis → explicit consent (Art. 6.1(a) GDPR);
- Meeting legal obligations (e.g., requests from authorities): legal basis → legal obligation (Art. 6.1(c) GDPR);
- Statistical analysis and marketing via third-party cookies and pixels (Google Analytics, Meta Pixel): legal basis → consent (Art. 6.1(a) GDPR).
4. Processing Methods
Data are processed using electronic and IT tools, with appropriate security measures to ensure confidentiality and integrity.
5. Data Retention
- Data from forms are kept as long as necessary to process the request, and no longer than 24 months.
- Newsletter data are retained until consent is revoked.
- Browsing data are retained as specified in the Cookie Policy.
6. Communication and Disclosure
Data may be processed by authorized internal staff and third-party providers (e.g., IT service providers, email marketing platforms) acting as Data Processors under Art. 28 GDPR. Data will not be publicly disclosed.
7. Transfer Outside the EU
Use of tools such as Google Analytics and Meta Pixel may involve transferring data to countries outside the EU (e.g., USA). Such transfers occur under appropriate safeguards as per Arts. 44–50 GDPR (e.g., Standard Contractual Clauses).
8. Data Subject Rights
Users may exercise their rights under Arts. 15–22 GDPR at any time, including:
- access to data,
- rectification or deletion,
- restriction of processing,
- objection,
- data portability,
- withdrawal of consent (without affecting the lawfulness of prior processing).
Requests may be sent to info@elisafanti.it.
Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante Privacy).
9. Cookies
The site uses technical cookies and, with consent, analytical and profiling cookies (Google Analytics, Meta Pixel).
For details on cookies and how to manage them, see the Cookie Policy.