Flavio Lombardi, with P.IVA 09191580969 and registered office in Via Pascoli, 45 Bollate 20021 - Milan, as the owner of the processing of personal data of users who navigate and use the services available on the website www.flaviolombardi.it, and as the owner of the Site, operates in accordance with the regulations on the protection of the Privacy of Personal Data set forth in Article 13 of EU Regulation 2016/679 of April 27, 2016 (hereinafter: the “Regulations”, or also the “Applicable Regulations”). This Site and the Services are restricted to persons who are eighteen years of age or older. Therefore, the Data Controller does not collect personal data relating to persons under the age of eighteen. Upon the request of Users, the Data Controller will promptly delete all unintentionally collected personal data relating to persons under eighteen years of age.

The Data Controller gives the utmost consideration to the right to Privacy and the protection of personal data of its Users. For any information regarding this Privacy Policy, Users may contact the Data Controller at any time using the following methods:

• By sending a registered letter with return receipt to:
  Flavio Lombardi – Via Pascoli, 45 Bollate 20021 – Milan
• By sending an e-mail to info@flaviolombardi.it

1. Purpose of data processing

Users' personal data will be legally processed by Flavio Lombardi in accordance with Article 6 of the Regulation for the following purposes:

1. contractual obligations and provision of the Services, to enable navigation on the Site or for the implementation of the terms of use of the Site, which are accepted by the User during registration on the Site and/or during the use of the Services and fulfill specific requests of the User. User data collected by Flavio Lombardi for the purposes listed above include: first name, last name, city of residence/domicile, telephone number, e-mail address, and any personal information of the User that may be voluntarily published. Unless the User gives Flavio Lombardi specific and optional consent to the processing of their data for additional purposes, the User's personal information will be used by Flavio Lombardi for the sole purpose of ascertaining the User's identity (including by validating the e-mail address), avoiding possible fraud or abuse, and contacting the User solely for reasons related to the provision of the Services (e.g. sending notifications regarding the Services). Notwithstanding the other provisions contained in this Privacy Policy, under no circumstances will Flavio Lombardi make Users' personal data accessible to other users and/or third parties.
2. administrative-accounting purposes, or to carry out organizational, administrative, financial and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contracts and pre-contractual obligations;
3. legal obligations or to fulfill the obligations required by law, authority, regulation or European legislation.
   The provision of personal data for the purposes of the above processing is optional but necessary, as failure to provide such data will make it impossible for the User to navigate the Site, register on the Site and use the Services.
   The personal data necessary for the pursuit of the processing purposes described in this paragraph 1 are indicated with an asterisk in the contact forms of the Site.

2. Additional processing purposes: marketing (sending of advertising material, direct sales and commercial communication)

With the free and optional consent of the User, some of the User's personal data (i.e. first and last name and email address) may be processed by the Owner for marketing purposes (sending advertising material, direct sales and commercial communication), or in order to allow the Data Controller to contact the User by mail e-mail, telephone (fixed and/or mobile, with automatic communication or call systems with and/or without the intervention of an operator) and/or SMS and/or MMS to propose to the User the purchase of products and/or or services offered by the Owner and/or third parties, to present offers, promotions and business opportunities.

In case of lack of consent, the ability to register on the Site will not be affected in any way.
In case of consent, the User may at any time revoke the same by making a request to the Owner in the manner indicated in paragraph 7 below.
The User may also easily object to further sending of promotional communications via email by clicking on the relevant consent revocation link, which is present in each promotional email. Once consent has been revoked, the Data Controller will send an email to the User to confirm the revocation of consent. If the User wishes to revoke his or her consent to receive promotional communications by telephone while still continuing to receive promotional communications by email, or vice versa, please send a request to the Owner in the manner set forth in Section 7 below.
The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications by e-mail, it is possible that, for technical and operational reasons (for example, the formation of contact lists already completed shortly before the receipt by the User of the request for objection), the User continues to receive further promotional messages. If the User continues to receive promotional messages after 24 hours have elapsed since the exercise of the right to object, please report the problem to the Data Controller, using the contact details set out in Section 7 below.

3. Additional processing purposes: newsletter

With the free and optional consent of the User, some of the User's personal data (e.g., first name, last name, address and e-mail address) may be processed by the Data Controller for the purpose of sending the newsletter. Therefore, the User will receive a periodic newsletter from the Owner that will contain information in relation to news on the site and/or the Owner's initiatives.

In case of non-consent, the ability to register on the Site will not be affected in any way.
In case of consent, the User may at any time revoke the same by making a request to the Owner in the manner indicated in paragraph 7 below.
The User can also easily object to the further sending of promotional communications by clicking on the relevant link for revocation of consent, which is present in every e-mail containing the newsletter. Once consent has been revoked, the Data Controller will send an e-mail to the User to confirm the revocation of consent.

4. Additional processing purposes: profiling

With the User's free and optional consent, the User's personal data (i.e. personal and contact data, information related to the Services in which he/she has expressed interest) may also be processed by the Data Controller for the purpose of profiling, or reconstructing the User's tastes and consumption habits, identifying his/her consumer profile, in order to send the User commercial offers consistent with the identified profile.
If consent is not given, the ability to register on the Site will not be affected in any way.
In case of consent, the User may at any time revoke the same by making a request to the Owner in the manner indicated in paragraph 7 below.

5. Processing methods and data retention times

The Data Controller processes Users' personal data with manual and computerized tools, with purposes strictly related to the purposes themselves and, in any case, in order to ensure the security and confidentiality of the data.
The personal data of the Users will be kept for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or otherwise as long as necessary for the protection of the interests of both the Users and the Owner in compliance with the law.
In the cases referred to in paragraphs 2, 3, and 4, the personal data of the Users will be retained for the time strictly necessary to fulfill the purposes described therein and, in any case, for no longer than twenty-four (24) and twelve (12) months respectively.

6. Scope of communication and dissemination of data

The personal data of the Users may be disclosed to employees and/or collaborators of the Data Controller in charge of managing the Site and all services related to the provision of the Service. These individuals, who have been entrusted by the Data Controller pursuant to Article 29 of the Regulations, process Users' data exclusively for the purposes indicated in this statement and in compliance with the provisions of applicable law.
Users' personal data may also be disclosed to third parties who may process personal data on behalf of the Data Controller as “external processors,” such as IT and logistics service providers functional to the operation of the Site and/or Services, outsourcing or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of the data controllers appointed by the Data Controller by making a request to the Data Controller in the manner set forth in Section 7 below.
In addition, Users' personal data may be disclosed by the Data Controller, to the extent necessary and essential for the performance of contractual obligations, to third parties who are independent data owners, such as payment service providers and logistics services necessary for the delivery of goods sold through the Site. Such independent data owners process the User's data solely for the purpose of the proper execution of orders related to the services.

7. Rights of interested parties

Users may exercise their rights recognized by the relevant law by contacting the Data Controller in the following ways:

• By sending a registered letter with return receipt to:
  Flavio Lombardi – Via Pascoli, 45 Bollate 20021 – Milan
• By sending an e-mail to info@flaviolombardi.it

The Data Controller will comply with Users' requests regarding the processing in paragraph 1, in addition to responding to Users' requests regarding the processing in paragraphs 2, 3, and 4.
Pursuant to current regulations, the Data Controller informs that Users have the right to obtain information on (i) the origin of the personal data; (ii) the purposes and methods of processing; (iii) the logic applied in case of processing carried out with the aid of electronic instruments; (iv) the identification data of the Data Controller and the persons in charge; (v) the subjects or categories of subjects to whom the personal data may be communicated or who may come to know them as managers or agents.
In addition, users have the right to obtain:

1. access, update, rectify or, when concerned, supplement the data;
2. the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which the data was collected or subsequently processed;
3. The certification that the actions referred to in points a) and b) have been brought to the attention, including in terms of their content, of those to whom the data has been communicated or disclosed, except in cases where this requirement is impossible or would require means that are clearly disproportionate to the protected right.

Additionally, users have:

1. The right to withdraw consent at any time if the processing is based on their consent.
2. (if applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used, and machine-readable format), the right to restrict the processing of personal data, and the right to erasure (“right to be forgotten”);
3. The right to object:
   1. in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purposes of the collection;
   2. in whole or in part, to the processing of their personal data for the purpose of sending advertising material, direct sales, market research, or commercial communication;
   3. If personal data is processed at any time for direct marketing purposes, individuals have the right to object to the processing of their data for such purposes, including any analysis to the extent that it is related to direct marketing;
4. If they believe that the processing concerning them violates the regulation, they have the right to file a complaint with a supervisory authority (in the member state where they usually reside, where they work, or where the alleged violation occurred).

The Italian supervisory authority is the Data Protection Authority (Garante per la protezione dei dati personali), located at Piazza di Monte Citorio 121, 00186 – Rome.

The Owner is not responsible for updating all the links that may be displayed in this notice; therefore, whenever a link is not functional and/or up-to-date, Users acknowledge and agree that they should always refer to the document and/or section of the Site referenced in this Link.