Phitofilos Privacy Policy

Information provided pursuant to Articles 13-14 of EU Regulation 2016/679

This page describes how we process and manage the personal data you voluntarily provide or request by accessing the services available on our website: www.phitofilos.it .

This information applies only to the www.phitofilos.it website and not to other websites that may be accessed via links.

·         The Data Controller is “PHITOFILOS SRL” via delle Antille 29/A 00071 - Pomezia (RM) PI and CF 09764321007 e-mail: info@phitofilos.it

·         Personal data subject to processing
Personal Data, understood as any information that allows us to identify you directly or indirectly provided in relation to the purpose e.g. Name, Surname, Address, Email address, photo (only in the case of specific product consultancy service, through the Typeform section, with voluntary submission by the user). Browsing data: IP addresses, device identifiers, login data, URIs of requested resources, access times. Browsing data: IP addresses, device identifiers, login data, URIs of requested resources, access times.

·         Browsing data

§  The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified.

§  This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning, and is deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical cybercrimes against the site.

·         Data provided voluntarily by the user

§  The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the site pages dedicated to particular services upon request.

·         Cookies

§  The site uses technical cookies and, with your consent, third-party profiling and/or analytics cookies (e.g., Google Analytics). For more information, please refer to the Cookie Policy available at the following link: https://phitofilos.myshopify.com/pages/cookie-policy

·         Treatment methods
Your data will be processed lawfully, fairly, and transparently, ensuring that they are accurate, adequate, relevant, and limited to what is necessary.

·         Purpose
The purposes, from time to time pursued, may consist of:

1. Ensure the proper functioning and security of the website.

2.     Perform anonymous statistical analyses to improve the site and the services offered.

3.     Email assistance on products and services provided by the Company (CONTACT SECTION).

4.     Personalize your browsing experience (e.g., language, preferences).

5. Manage profiling cookies for marketing purposes (upon obtaining consent).

·         Legal basis
The legal basis for data processing will be:

1.     The owner's legitimate interest in ensuring the security and proper functioning of the site.

2.     User consent to the use of profiling cookies.

3.     Fulfillment of pre-contractual or contractual measures (for purposes under no. 3 of the previous paragraph).

We inform you that the provision of personal data is necessary for purposes no. 1, 2, and 3 of the previous paragraph.

For the purpose referred to in point 3 of the previous paragraph, providing data is optional; where provided, specific consent is required. This consent may be revoked at any time without affecting the lawfulness of the processing carried out prior to such revocation. However, if consent is refused, the Data Controller will not be able to provide the newsletter service.

Processing Methods and Communication to Third Parties

Personal data is processed using computerized tools and/or manually (e.g., on paper) for the time strictly necessary to achieve the purposes for which it was collected.

Specific security measures are implemented to prevent data loss, illicit or improper use, and unauthorized access. Personal data will be processed exclusively by Phitofilos Srl staff and by collaborators or companies appropriately appointed as External Data Processors by the Data Controller, such as IT service providers, technical support companies, and communications service providers. Some services (e.g., Google Analytics, Meta/Facebook, MailUp, Shopify) involve the transfer of data outside the European Economic Area. Such transfers are carried out in compliance with Articles 44 et seq. of the GDPR, using Standard Contractual Clauses (SCCs) approved by the European Commission. Outside of these circumstances, the data will not be disclosed to third parties or disseminated, except as specifically provided for by national or European Union law.

Data processing does not involve automated decision-making, including profiling, pursuant to Art. 22 of the GDPR.

Data retention

• Your collected personal data will be retained for the time strictly necessary to achieve the purposes for which it was collected, or as required by law. Data collected for purposes related to the Data Controller's legitimate interest will be retained until such interest is fulfilled. Upon expiration of the retention period, the data will be deleted or anonymized, unless required by law. From that point, it will no longer be possible to exercise the rights under Articles 15–22 of the GDPR regarding such data.

Rights of interested parties

At any time, you may exercise your rights under Articles 15-22 of the Regulation against the Data Controller. Specifically, you have the right to request:

• Access to your personal data, rectification if inaccurate, erasure, restriction of processing, objection to processing, and the right to withdraw your consent at any time for the purposes for which it is necessary, as well as the right to data portability, i.e., the right to request and receive your personal data in a structured, commonly used, and machine-readable format.

We inform you that you may exercise your rights by sending the Data Controller a duly completed form (downloadable from the website of the Italian Data Protection Authority) to the following addresses:

·         Email: info@phitofilos.it

·         Phitofilos srl via delle Antille 29/A 00071 - Pomezia (RM)