Introduction and regulatory framework
The following Privacy Statement describes the operating methods of this website with reference to the processing of personal data of users who browse there.
It consists of a statement that describes the protection of personal data of those who interact with its web services, accessible electronically at the address: https://www.flokysocks.nl/
The statement complies with Article 13 of Regulation (EU) 2016/679 (hereinafter: the "Regulation") of the European Parliament and of the Council of 27 April 2016 EC (General Data Protection Regulation, published on 4 May 2016 in the Official Journal of the European Union, effective as of 24 May 2016), to Recommendation No. 2/2001 that the European authorities for the protection of personal data, meeting in the Group established by art. 29 of Directive 95/46/EC, adopted on 17 May 2001 to identify several minimum requirements for collecting personal data online, and in particular, the methods, timeframe and nature of the information that data controllers must provide to users when they connect to web pages, and in view of the Provision issued by the Italian Data Protection Authority for the protection of personal data on 8 May 2014 containing the "Identification of simplified methods for the statement and acquisition of consent for the use of cookies" (hereinafter, the "Provision") and in compliance with the current privacy legislation.
This statement is made only for this website of which Floky Socks Benelux is the Data Controller and not for other websites which may be related to and found on this same website
DATA CONTROLLER
The data controller of data collected through the website is Floky Socks Benelux with headquarters in Hattem, The Netherlands, 8052AD.
GENERAL PRINCIPLES ON THE PROCESSING OF THE USER’S PERSONAL INFORMATION
The user’s personal information will be collected, stored, processed and sent in accordance with the criteria established by Floky Socks Benelux and data processing laws, rules and regulations in effect.
The principles regarding the processing of the user’s Personal Information are as follows:
(1) The user’s personal information will be processed correctly and lawfully;
(2) the user’s personal information will be collected for specific, explicit and legitimate purposes and subsequently processed in a manner compatible with these purposes;
(3) the user’s collected personal information will be relevant, complete and proportionate to the purposes for which it is collected;
(4) the user’s collected personal information will be accurate and, if necessary, updated to the best of our ability;
(5) the user’s personal information will be protected against unauthorised access and processing through commercially and technically reasonable technical and organizational security measures and controls; and
(6) the user’s collected personal information will be stored as personal data no longer than is necessary to pursue the purposes for which the Personal Information was collected.
TYPE OF COLLECTED DATA
The website may collect different types of information when the user logs in or uses the Website:
"Personal Information" means any information that directly identifies the user or information otherwise defined as "personally identifiable" in accordance with current legislation. This includes, but is not limited to, information such as first name and surname, billing and shipping address, tax code; e-mail address, telephone number, history and information on purchases, etc., etc.
No operations are called for by the Data Controller for processing particular categories of personal data (ex-SENSITIVE DATA: personal data capable of revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership in parties, trade-unions, associations or organizations of a religious, philosophical, political or trade-union nature, as well as personal data capable of revealing the state of health and sex life) or judicial data.
Unless explicitly requested or invited, we ask you not to send us or to disclose sensitive personal information on or through the Website or in any other manner. In cases where we may request or urge you to provide sensitive information, we must obtain your explicit consent.
The systems used to supply the Website may automatically record additional information related to the user’s use of the Website. This data is used for the sole purpose of obtaining anonymous and aggregated statistical information on the use of the website and to check its proper functioning and is deleted immediately after processing. The data could be used to verify responsibility in the event of hypothetical and eventual computer crimes against the website.
PROCESSING PURPOSES
We collect, store and process your personal data to provide you with the services offered on our website, or for legal obligations.
The collected data will be used exclusively for the following purposes:
To fulfil legal obligations due to fiscal and accounting regulations and any other legislation in effect;
To provide the offered services and manage everyday corporate needs;
To allow users to carry out registration procedures to access particular sections of the Website;
For effective management of the Website and the services it offers;
To verify that the information provided for the transaction is valid, complete and non-fraudulent;
To provide customer assistance services;
To contact customers regarding any issues related to the handling of orders or subsequent requests regarding the order;
To provide users with requested or purchased Offers.
To process orders and payments made through the Website.
PROVISION OF DATA
Aside from what is described specifically for browsing data, you are free to provide any personal data requested and appearing in the various request forms for signing a contract for services offered by the website.
Failure to provide it will make it impossible to obtain what has been requested.
PROCESSING METHODS AND DATA SECURITY
The use of your personal data will be done with the support of paper, computer or telecommunications means for the purposes indicated below, for the time strictly necessary to achieve the aims for which they were collected, or, where possible, until the data controller receives a request from you to delete the data whose consent for processing is optional and not obligatory.
Your personal data will be stored in secure databases on our servers, or on the servers of our trusted providers acting as data controllers, and will be processed primarily in automated ways.
In any event, your personal data will be processed in compliance with the provisions relating to the privacy of personal data contained in the Code, the Regulation and the Provisions issued by the Italian Data Protection Authority.
The collected data will be handled only by authorised personnel. All personnel with access to your data have been appointed to process personal data, in compliance with current legislation.
The collected data may be updated periodically with information acquired during the established relationship.
We use commercially reasonable technical and organizational measures and controls to protect the user’s Personal Information from loss, abuse, and unauthorised access. Unfortunately, data that is sent or is accessible through the Internet cannot be 100% secure. Consequently, even if we protect all Personal Information, we cannot ensure or guarantee that said Personal Information will be completely protected from unlawful use by hackers or other malicious criminal activities or in the event of a hardware or software malfunction of the computer or telecommunications network. The data controller will inform the user should they becomes aware of a security breach regarding your personal identification information (as established and provided for in cases of what are known as "Data Breach" episodes, in compliance with current legislation) in our possession.
If the user decides to communicate their email address to us for any reason, they expressly agree to receive electronic notices in the event of a security breach.
When you register on the Website, choose a user ID and password with which you can access the Website and your data. When choosing your password, we recommend that you not use words that can be easily traced to you. A password is more secure when it consists of at least 8 alphanumeric characters, with upper and lower case and special characters (example: #, *, ^, etc.). Furthermore, we recommend that you possibly change your password at regular intervals, that you not send it by e-mail or disclose it in any way to others. You are solely responsible for all acts conducted by use of your user ID and password. If you lose control of your password, you may lose control of your personal information and legally binding actions may be made on your behalf. Therefore, should your password prove to be in any way jeopardized, change it immediately.
DISCLOSURE OF PERSONAL DATA
Notwithstanding disclosures made in compliance with a legal, regulatory or European Community legislation obligation, your data may be disclosed to:
a) natural and/or legal persons we use to perform services and for activities related to them;
b) persons delegated by us and/or in charge of carrying out professional and technical maintenance activities (including maintenance of internet equipment and electronic communication networks of websites where data is published).
In any event, solely necessary and pertinent data will be disclosed to the abovementioned persons pertinent to the purposes of processing to which they are entrusted as External Data Controllers/ Persons in charge, appointed by the Data Controller as required by current legislation.
Personal data will therefore not be disclosed.
The Data Controller will collaborate with law enforcement authorities and other public entities and authorities to make sure its users obey the law, respect the rights of other users and third parties, including their intellectual property rights. Therefore, your personal data may be disclosed to, but not limited to, public entities, in the event that this is necessary for the purposes of defence, national security, prevention, investigation or repression of crimes, in compliance with the rules governing this matter.
Said public entities will have the right to request and obtain personal information which regards you should it be deemed necessary or appropriate for investigations or inquiries relating to committing scams, computer fraud, infringement of intellectual property rights, acts of hacking or other illegal activities, which could expose either us or our users to legal, civil or criminal responsibilities.
RIGHTS OF INTERESTED PARTIES AND THE EXERCISE OF RIGHTS
In compliance with current legislation, at any time you may request:
Confirmation of the existence of your personal data or the lack thereof;
To know the content and origin, purposes and methods of processing;
The logic applied in the event of processing done with the aid of electronic instruments;
The identification details of the controller, managers and persons or categories of persons to whom your personal data may be disclosed.
Furthermore, it is your right to obtain:
Updating, rectification, integration, the right to data portability;
The deletion, transformation into anonymous form or barring of your data processed in violation of the law;
For legitimate reasons, opposition in any event, to the processing of data pertinent to the purpose of collection.
Opposition to data processing for commercial aims.
Pursuant to the Regulation, you will also have the right to lodge a complaint with a supervisory authority.
You may contact the Data Controller to exercise these rights:
Floky Socks Benelux
Waalstraat 65, Hattem The Netherlands.
Tel. +31 6 83570358
E-mail: info@flokysocks.nl
If the user contacts us asking to access their Personal Information or delete it from our systems and records, in compliance with this Privacy Policy and legal obligations, we will fulfil this request as soon as possible, within the established timeframe.
We inform users that, however, due to technical constraints and because of our system backup, their Personal Information may continue to remain there even after deletion for a certain period of time and in part of our systems.
The data controller reserves the right to refuse requests for access to or deletion of Personal Information if disclosure or deletion of the requested information is not permitted by law.
In order to protect against requests of unlawful access, we reserve the right to request sufficient information to verify the identity of the requesting party before allowing access or making corrections.
Registered Persons Area
If you are registered, and should your personal data change, we invite you to change it online in the reserved area.
You can register on the website and create a personal account to use some of the services available, such as management of the personal data records, orders and billing.
To create an account, you must provide identification and contact details; data marked as obligatory is essential to complete the registration and, in the absence thereof, it will not be possible to successfully complete the request.
Online Purchases
Online purchases may be made as a guest or as a registered user.
By purchasing online, you provide your addresses, telephone contacts, electronic contacts, identification and payment data. If you do not provide all the necessary data, the purchase process cannot be successfully completed.
During the purchase process, obligatory and optional data will be clearly indicated, and you can choose not to provide optional data and still continue to use the website and shop on it.
ADDITIONAL PROVISIONS
Use of the website by minors
The website is not aimed at persons under the age of 18 and we do not intentionally collect or request personal information about minors.
Data transfer
Your personal data will be stored in databases on our servers, or on the servers of our trusted providers acting as data controllers, on Dutch territory where approved contractual provisions are in force for the secure transfer of data.
