Privacy and cookie policy

Subject of the notice

The information contained in this notice concerns your personal data – both those collected before now, and those that will be acquired in the future in relation to the contractual relationship and that you have provided voluntarily by purchasing products and/or services provided by us upon payment or by participating in our promotional initiatives – which is processed by ilFotoalbum S.r.l. which also assumes responsibility for the treatment being, as specified above, the data controller, in compliance with the aforementioned legislation and confidentiality obligations which inspire our activity.

In particular, therefore, it is clarified that your personal data are collected as contact data, in order to be able to provide specific services, in general, to customers and/or users.

It is specified that the processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, cancellation or destruction.

ilFotoalbum S.r.l. processes various categories of personal data, in particular:

Data generated from the access to the site

Every time you visit our website, we collect some personal data:

• the use of the website and the device used to access it, domain names, IP addresses, operating system used, type of browser used for the connection

• the transactions you have completed with us: the type of product purchased and how much you have spent on the purchase itself.

This data is not accompanied by any additional personal information and is used for:
i) to obtain anonymous statistical information on the use of our website;
ii) to manage needs of control of the modalities of use of our website;
iii) ascertain responsibility in the event of hypothetical computer crimes.

The legal basis that legitimizes the processing of such data is the need to make the functionality of the site usable after the access by the user.

Data provided voluntarily by the user

This category includes personal information that you decide to provide us by visiting the site www.ilfotoalbum.com, and/or contacting us at the addresses above, by email or telephone. The data that we will process (and which we will certainly take care of as required and prescribed by the aforementioned European legislation) are those relating to your identity, the company on whose behalf you may contact us, the geographical location (and how to contact you and/or the company (email address and/or phone number).

In particular:

• We collect the personal data you provide when you complete a form to receive a discount coupon, sign up for an account, buy something or contact us. For example, if you subscribe to our website, we will collect your name, surname, email address, password, if you are a professional photographer and which products you are interested in.

• If you order something from us, we collect the personal information you provide such as shipping information, phone number, type of product purchased.

• Even if you contact our Customer Service, you can provide personal data that will be collected and processed.

• Sometimes, we give you the opportunity to participate in surveys by email. If you participate, we will collect some of your personal information. Participation in these surveys is completely voluntary, therefore you can always decide whether or not to respond.

• If you take the opportunity to review our products, we will collect personal information that appears in each of these reviews. These reviews are public and you should therefore be careful before posting personal information online (which is still good practice in general).

Finally, we process and protect any data you provide us with by sending applications to positions that may be open in ilFotoalbum or spontaneous applications and, in general, by sending personal CVs (collected and stored exclusively to consider any application and deleted, at most, 12 months after we have received it).

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

Purpose of data processing

The legal basis for processing is the performance of a contract to which the data subject is related or the performance of pre-contractual measures taken at the request of the data subject. In the cases expressly mentioned, the legal basis is the consent freely given by the data subject.
The processing of the data provided, personally (by filling in and sending the forms presented during the provision of our services, and in the other ways outlined above), will be for institutional purposes, related to our business and in compliance with legal obligations.

How do we use the data collected?

In particular, due to the activity carried out by ilFotoalbum, the aforementioned personal data will be processed lawfully and correctly for the following purposes:

a) for the creation of the account on our e-commerce platform for the exclusive supply of the printing and delivery service;

b) for the periodic sending, by email, of newsletters (promotional communications, reports on the publication of posts on our blog, special promotions, updates on our activities, ideas and suggestions, news and previews of new products, invitations to events or to participate in analysis and market research);

c) to carry out the activities of relationship with the customer according to contractual agreements;

d) for administrative purposes and for the fulfillment of legal obligations such as those of accounting, tax or to comply with requests from the judicial authorities;

e) to personalize your online experience and ensure that the content is presented in the best possible way for you;

f) to update you on changes regarding: our services, our website, our terms of use and this privacy policy;

g) to measure and understand the effectiveness of the advertisements we offer and to make our marketing activities more effective;

h) to administer, maintain and improve our website and for internal operations such as: problem solving, data analysis, research purposes, tests, statistics;

i) if you use our Online Designer software, the data may be used to directly verify your experience of using the e-commerce platform.

Nature of the provision

The processing of functional data for the performance of these obligations is necessary for proper management of the relationship and their provision is required to implement the purposes mentioned above. The data controller also informs that any non-communication, or miscommunication, of any of the mandatory information, may cause the impossibility of the controller to ensure the adequacy of the processing itself, the impossibility of establishing or continuing the relationship and, if they technically prevent the provision of the specific service requested.

Attention!

Apart from that specified for navigation data, the provision of data with respect to the purposes referred to in letters a), b), c) and d) indicated in the section “How do we use the data collected?” is optional, but any refusal will make it impossible for ilFotoalbum to fulfill its contractual obligations.

Failure to give your consent prevents you from registering on the site and creating an account to use the services of ilFotoalbum.

Some data are also collected, with your specific consent, to send our newsletters and commercial communications relating to events, products, offers and, in general, for direct marketing purposes. We specify that, in these cases, you can always, at any time, unsubscribe from our newsletter or change the settings of reception by following the instructions in all emails by ilFotoalbum or by sending an email to info@ilfotoalbum.com

Consent

We remind you that for those processings that require your consent, the latter can be collected in various ways, such as by filling in the form ‘required information’ on the site, or by acknowledgement and signing the notice.

Methods of data processing

Personal data are processed by automated and electronic means (but also in manual mode and subsequently stored in “physical” archives) for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized accesses.

The personal data you have provided us with, stored on electronic media, are kept and stored on servers owned by ilFotoalbum located in Italy and servers located within the European Union owned by OVH, protected against the risk of intrusion and unauthorized access.
Data concerning the sending of newsletters are also stored on the MailChimp platform.
These data include or may include your name, contact details, interests and preferences, shopping history, public information about social profiles and technical data such as IP addresses, cookies, and navigation data. Data residing on MailChimp servers can be located anywhere in the world and are managed with robust and documented security procedures that meet the requirements of the Privacy Shield, a protocol recognized and approved by the EU Commission.
We have adopted appropriate security measures to ensure the integrity and availability of data and the protection of areas relevant to their custody and accessibility.
Personal data will be processed by ilFotoalbum’s collaborators and/or employees as processors, within the scope of their respective functions and in accordance with the instructions given by the data controller, as well as by external processors specifically selected by ilFotoalbum.
ilFotoalbum does not have access to confidential information relating to credit cards, bank transfers and PayPal payments, which will be processed by intermediaries and card issuers in accordance with the Privacy Code.

ilFotoalbum member account

You can create your account at https://www.ilfotoalbum.com by entering your personal data. You can update your personal profile at any time, modify and delete your data via this link https://www.ilfotoalbum.com by clicking on the ‘My Account’ button. If you encounter any difficulties you can always contact us at info@ilfotoalbum.com or at +39 0522 175 1800.

Subscribing to the site and creating an account implies acceptance by each new member to receive by email the path to know and discover the world of ilFotoalbum, consisting of sending an email confirmation of registration and two newsletters in the first 15 days after registration.
The indication ‘which products you are interested in’ is optional. If you specify the products of interest, you will receive newsletters regarding promotional communications dedicated to the type selected or similar types of products.
In case of non-specification you will receive newsletters of promotional/general commercial nature.
You can always exercise your right not to receive this type of communication at any time after giving your consent:

• by means of a special link at the bottom of any promotional e-mail sent by ilFotoalbum ‘Cancel Newsletter’;
• by sending an email to: info@ilfotoalbum.com requesting the removal of your email address from the contact list of newsletters;
• contacting customer service at +39 0522 175 1800 requesting the removal of your email address from the contact list of newsletters.

If you wish to stop all processing of your personal data and cancel your account, ilFotoalbum will not be able to provide the products or services requested, unless you request to stop only sending promotional communications (newsletters) following the procedure described above.

The interruption of all processing of personal data can be requested by sending an email to info@ilfotoalbum.com.

The removal of the account and all related data will take place in a maximum of 6 working days.

Please note: your personal data may remain in our archives even after your account has been deactivated, but will not be kept longer than the time necessary for the purposes indicated in the appropriate paragraph called “Processing duration”.

Place of data processing

The processing operations connected to the web services of this site take place at the aforementioned headquarters of ilFotoalbum S.r.l. and are processed by internal personnel specifically appointed to process the data, or by persons appointed to perform occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided by users who request dispatch of informative material, requests for availability or commercial quotations are used only to perform the service or provision requested and are communicated to third parties only in the event that this is necessary for the fulfillment of the request.

Communication and dissemination

ilFotoalbum S.r.l, i.e. the data controller, undertakes not to disclose personal data to third parties, except, in certain cases, in order to comply with legal obligations and to perform pre-contractual and contractual measures it will be necessary to communicate your data to:

1) banks and credit institutions, for the execution of payments;

2) professionals and professional firms (lawyers, accountants, auditors, etc.)

3) other companies, entities and/or natural persons that carry out activities that are supportive or functional to the execution of the contracts or services requested;

These subjects will process and, in turn, communicate to third parties the data as “owners” or “external managers”, as well as subjects who collect data through technical and navigation cookies.

We may also communicate the data of our customers to specific parties, appointed by ilFotoalbum to provide services that are instrumental or necessary for the performance of obligations related to the registration to the site www.ilfotoalbum.com and the online purchase, within the limits and in accordance with the instructions given.

In particular, the data may be communicated to:

1. persons, companies or professional firms that provide assistance, advice or collaboration with the data controller in accounting, administrative, legal, tax, financial and marketing matters;

2. subjects delegated and/or appointed by ilFotoalbum to carry out the activities or part of the activities related to the provision of sales services, such as: Customer Service; carriers responsible for the delivery of products purchased; any other external collaborator to whom communication is necessary for the proper fulfillment of the obligations assumed by ilFotoalbum in relation to the contract for the provision of its services;

3. we reserve the right to disclose personal information in other circumstances as required by law and where disclosure is necessary to cooperate with investigations of activities deemed illegal, to enforce our Terms and Conditions.

The updated list containing the names of the data processors is available at the headquarters of the data controller, which can be requested by e-mail by writing to info@ilfotoalbum.com.

This list may subsequently be supplemented and/or updated as necessary.

Processing duration – Data retention

The processing of personal data will have a duration equal to that necessary for the performance of the services requested, to which will be added the additional period provided for by law in accordance with the obligations of a civil, fiscal and tax in force (maximum 10 years). At the end of the period of data processing, we will proceed to their cancellation, or we will make them anonymous permanently.

Personal data will also be stored in such a way that they cannot be modified without leaving a trace:

• for the duration of the service or until requested by the user, until the revocation of the consent of the person concerned if provided;

• even after the termination of service or the user’s request, if required for legal reasons;

• for marketing or processing purposes for profiling purposes, they will be kept in accordance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until – if previously – the revocation of specific consent by the person concerned takes place (and for a maximum period equal to that provided for by applicable law (24 and 12 months respectively);

• in the case of exercising the right to be forgotten through a request for expressed cancellation of personal data processed by the owner, please note that such data will be kept, in a protected form and with limited access, solely for purposes of investigation and prosecution of crime, for a period not exceeding 12 months from the date of the request and subsequently will be deleted safely or anonymized in an irreversible manner.

At the time of termination of the contractual relationship with ilFotoalbum S.r.l. the data will be kept for the time strictly necessary and functional to their possible future use if required by law and connected to the specific service requested by the customer.

At the time of cancellation, it is possible that the data will still be kept but anonymized.

Personal data are not stored for longer than is necessary to achieve the purposes of processing the specific data described herein, unless there are more or less long retention periods under the laws in force.

Data transfer

The management and storage of personal data will take place on servers located within the European Union owned by ilFotoalbum (Italy) and OVH. Currently OVH’s servers are located in France (in Gravelines and Strasbourg). The data will not be transferred outside the European Union. Here you can read the privacy policy of OVH.

The newsletter is managed by MailChimp, and your name and email address are stored on MailChimp‘s servers (i.e. also outside the European Union). Here you can read the privacy policy of MailChimp.

Security of processed data

In order to protect the security and confidentiality of your personal data we adopt – and require each service provider and/or third party responsible for processing personal data on our behalf to take, as instructed by us – technical and organisational measures to prevent the loss and destruction, even accidental, of data, unauthorised access and unlawful or abusive use of data. In addition, computer systems and software programs are configured so that personal and identification data are used only when necessary to achieve the specific purposes of processing from time to time provided.

We use a wide range of technologies and advanced security procedures to help protect personal data against the risks described above. For example, personal data provided by users are stored on secure servers located in controlled locations.

Cookies

What are cookies?

Cookies are short fragments of text (letters and/or numbers) that allow the web server to store on the client (the browser) information to be reused during the same visit to the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to the user’s preferences, by the individual browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behaviour and use of services. In the following, we will refer to cookies and all similar technologies simply by using the term “cookie”.

Types of cookies and how to manage your preferences

Our site uses cookies to provide you with a better browsing experience. Cookies are small files of information placed on your browser while you are browsing, where they are stored and then retransmitted to our site each time you make a subsequent connection. They allow us to count visits anonymously and do not allow us to identify you directly in any way.

We only use technical and analytical types of cookies.

Technical cookies are necessary for the proper functioning of certain areas of the site. They include both persistent and session cookies. Without these cookies, the site or parts of it may not function properly. Cookies in this category are always sent from our domain.

Analytical cookies are used to collect information about your use of the site. They are the basis for statistical analysis, for actions to improve and simplify functionality, for monitoring the proper functioning. This type of cookie collects anonymous information about your activity on the site and how you arrived at the site and the pages visited.

Our site also contains third party cookies, i.e. cookies from other sites and contained in various elements hosted on our pages (social network that allow visitors to interact with it, images, videos). Cookies in this category are sent from the domains of the sites that offer the functionalities present in the site, and are therefore not inserted or read by ilFotoalbum. Third parties may use the data collected for their own purposes. For more information about these cookies and how each third party uses them, you can use the links below.

ilFotoalbum uses the Google Analytics service of Google, Inc. to understand how visitors interact with the content of the site. Google Analytics uses a set of cookies to collect information and generate site usage statistics without personally identifying individual visitors.

We have activated the advertising functions of Google Analytics: reports on demographic data and interests of Google Analytics.

Google provides ilFotoalbum with data in an aggregate form that is never linked to the identity of users, through reports and other IT services. Google will not transfer this information to third parties unless required to do so by law or where such third parties process the information on Google’s behalf.

ilFotoalbum uses the Google Analytics cookie to inform, optimize and serve ads based on your previous visits to the site.

To view Google’s privacy policy regarding the Google Analytics service, you can visit the website: http://www.google.com/intl/en/analytics/privacyoverview.html

You can disable Google Analytics for display advertising and customize Google Display Network ads in this way:

• Using ad settings: https://www.google.it/settings/ads

• Through the components currently available for the deactivation of Google Analytics for the web: https://tools.google.com/dlpage/gaoptout

In addition to Google Inc., Facebook, Twitter, Google+, YouTube, LinkedIn and Instagram may also use cookies if you consent to the processing of your data to enable you to experience social networking features and services and track our paid advertising activity. We use the data collected by these cookies to determine on which channel our ads are most effective online.

Click on the links below to read the different notices and to evaluate whether or not to give your consent:

Facebook: Our website uses the Facebook pixel to retarget you, i.e. to show you on Facebook advertising that is consistent with the pages of our website you have already visited. Retargeting uses cookies, and your browsing data is not linked to your identity or personal data: https://www.facebook.com/policies/cookies

Twitter: https://help.twitter.com/en/rules-and-policies/twitter-cookies

Google+: https://policies.google.com/privacy?hl=en

YouTube: https://policies.google.com/privacy?hl=en (Google’s privacy also applies to YouTube services)

Linkedin: https://www.linkedin.com/legal/cookie-policy

Instagram: https://help.instagram.com/1896641480634370

Bing: https://privacy.microsoft.com/en-us/privacystatement

The newsletter is managed with MailChimp and your name and email address are stored on MailChimp’s servers (i.e. also outside the European Union). Here you can read the privacy policy of MailChimp. Mailchimp, like any newsletter management platform, provides information on who opens the newsletter and clicks on the links. This allows us to understand if we are sending interesting content and/or offers. We will continue to send you newsletters until you close your subscription by following the procedure indicated in the section: ilFotoalbum member account.

Please note: after unsubscribing, MailChimp will still keep your former members’ details to avoid forcing them back into the mailing list.

However, if you want to have your data permanently deleted, please write to info@ilfotoalbum.com

By using ilFotoalbum website in a conscious manner, you consent to the processing of your data in the manner and for the purposes set out in the policy.

However, you have the option of denying consent for the use of the various cookies.

Navigation of our site may continue on a regular basis, but since some features are no longer active, you may encounter problems in other situations, for example in the use of the part dedicated to electronic commerce.

To disable the use of different types of cookies, select the appropriate setting on your browser that allows you to refuse or delete them at the end of each session. You can find links to how to disable cookies for popular browsers below.

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/chrome/answer/95647

Mozilla Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox

Safari: https://support.apple.com/en-gb/HT201265

Opera: https://www.opera.com/help/tutorials/security/cookies

Policy validity and updating

This information relates to the use of cookies, both own and from third parties, as recorded at the date of preparation of the current version. The controller guarantees the commitment to periodically check the contents of this information, in order to keep it updated with technological and regulatory developments.

Your rights

The following points are useful to draw your attention to a number of rights that the Privacy Policy – personal data protection reserves for you in order to better protect your personal data.

In accordance with article 7 of the Privacy Code (as far as it is still compatible with Legislative Decree 101/20185) and with articles 13, paragraph 2, letters (b) and (d), articles 15- 22 of the Regulations, we inform the interested parties that, by entrusting ilFotoalbum with their personal data, it is possible to exercise the following rights, the exercise of which is not subject to any form constraint and is free of charge.

The Privacy Code and the Regulations give the data subject a series of rights which, pursuant to the WP 260 Guidelines on Transparency, must be summarised in the main content of this notice. These rights are summarised below:

a. Right to ask the data controller for access to personal data, rectification or cancellation of the very same or limitation of the processing that concerns them or to oppose to their processing, in the cases provided;

b. Right to lodge a complaint with a competent European Privacy Authority located in the place of habitual residence or domicile in Europe of a person claiming a violation of their rights, following the procedures and indications as appropriate;

c. Any rectification or cancellation or restriction of processing carried out at the request of the data subject – unless this proves impossible or involves a disproportionate effort – will be communicated to the Data Controller to each of the recipients to whom the personal data have been transmitted. The Data Controller may notify the data subject of such recipients if the data subject so requests.

d. Right to data portability: Article 20 of the GDPR introduces the new right to data portability. This right allows the data subject to receive the personal data relating to him provided to a Data Controller (e.g. if he intends to transfer it to another Data Controller) in a structured, commonly used and readable format, and – under certain conditions – to transmit it to another Data Controller without hindrance by the data controller of the previous Data Controller;

e. Right to object: the data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them carried out by the data controller;

f. Right not to be subject to automated decisions, including profiling: the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way.

The exercise of rights shall not be subject to any formal constraints and shall be free of charge.

All the above rights may be exercised by the data subject by writing an email to info@ilfotoalbum.com

For further information or to exercise your rights under this law, you can contact the data controller (ilFotoalbum S.r.l.) at the following addresses:

tel. +39 0522 175 1800
email: info@ilfotoalbum.com
PEC: ilfotoalbum@legalmail.it

Requests should be addressed in writing to ilFotoalbum Via De Chirico, 1 42124 – Reggio Emilia.