Privacy Policy

Pursuant to Article 13 of European Regulation 2016/679 on the protection of personal data (hereinafter also "GDPR"), FD Srl wishes to inform you that the personal data you provide as a user or otherwise acquired when requesting the supply of goods and services will be processed in compliance with applicable legislation and the principles of fairness, lawfulness, transparency, and protection of confidentiality set forth therein, as well as guaranteeing the integrity and confidentiality of the same.

1. Data controller

The Data Controller (for the sake of brevity also “the Controller”) is FD Srl, in the person of its legal representative pro tempore, with registered office in via San Giovanni 6, I-39034 Dobbiaco (BZ).

Owner's email address: info@farmaciadobbiaco.it . The Owner can be contacted for any information or clarification requests.

2. Browsing data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the Site and to monitor its correct functioning, to allow – given the architecture of the systems used – the correct provision of services, for security reasons and to ascertain liability in the event of hypothetical computer crimes against the Site or third parties.

2.1. Personal data provided voluntarily by the user

The Site offers users the opportunity to voluntarily and completely optionally provide Personal Data through, for example, requests for information, sending complaints, or using contact forms, or by sending service requests or emails to the addresses indicated on the Site.

2.2. Cookies

For information on the use of cookies through the Site, please consult our Cookie Policy .

3. Purpose of the processing, legal basis and mandatory or optional nature of the provision

Your Personal Data may be processed with your consent where necessary, for the following purposes:

a) Fulfill obligations established by national or community laws, regulations or imposed by administrative authorities.

  • The legal basis on which this processing is based is the fulfillment of legal obligations.

b) Allow the provision of requested services (including, for example: purchasing and delivering products and services; receiving and managing orders, providing products and services, processing payments, and communicating with you about orders, products, services, and promotional offers; providing and improving services and resolving any related issues; correcting errors and improving the usability and efficiency of services; responding to your requests for information; providing you with customer support, etc.; hereinafter also referred to simply as "Service Provision").

Providing the user's Personal Data as described above is entirely optional, but failure to provide it will make it impossible to provide the above-mentioned services.

  • The legal basis for the above processing is Art. 6(1)(b) of the GDPR, i.e., the performance of a contractual obligation or pre-contractual measures adopted at the user's request, as the processing is aimed at providing services of the Dobbiaco Pharmacy.

c) With your prior consent, Personal Data may be used to conduct marketing activities, such as conducting market research and surveys, including through online polls, and sending you informational and promotional material relating to our activities, products, and services ("Marketing"). These communications may be sent via email, text message, social media, postal mail, and/or telephone calls with an operator. Please note that the Data Controller collects a single consent for Marketing purposes pursuant to the General Provision of the Italian Data Protection Authority "Guidelines on Promotional Activities and the Fight against Spam" of July 4, 2013, and pursuant to Article 6(1)(a) of the Regulation, as well as the Guidelines on Cookies and applicable tracking tools .

Should the user wish to object to the processing of their Personal Data for Marketing purposes, they may do so at any time by contacting the Data Controller at the contact details provided in this policy or by using the unsubscribe mechanism found in the footer of marketing emails. This will not affect the lawfulness of processing based on consent before its withdrawal. Furthermore, the user may also object to the use of some of the contact methods used (selective opt-out).

Providing Personal Data for these purposes is therefore entirely optional and does not affect the provision of Services, except that in this case the user will not receive marketing communications.

  • The legal basis for this processing is the freely given consent of the interested party, which may be revoked at any time.

d) Allow the user, if he or she is not yet registered among the FD Dolomites customers subscribed to newsletters and promotions, to register, thus allowing him or her to enjoy the benefits provided therein.

  • The legal basis for this processing is the data subject's consent, freely given and revocable at any time.

e) Allow us to analyze customer purchasing habits by recording, identifying, and profiling data relating to purchase volumes, consumption habits, and choices, including through automated processes, possibly also using information provided by third parties and legitimately acquired and processed, to improve our commercial offerings to registered customers, with dedicated offers ("Service Personalization"). This Service Personalization purpose may also be achieved through the use of cookies for targeted advertising (see the Cookie Policy) and by analyzing your interaction with social media channels (such as Instagram, Facebook, LinkedIn, Twitter, etc., "Social Media Pages"). In these cases, the processing of your Personal Data is carried out by FD Srl as joint data controller with the provider of the social network used (in accordance with the EDPB (European Data Protection Board) Guidelines No. 8/2020 on the use of social networks); therefore, the privacy policies of these providers also apply, which we encourage you to consult.

  • This processing is based on the user's consent pursuant to art. 6(1)(a) GDPR, which you may express or revoke via the banner present upon your first visit to the Site regarding the Personal Data collected from your browser and device, and the data collection forms in which you are asked to express your preferences regarding the Personal Data provided.

Providing Personal Data for this purpose is therefore entirely optional and does not affect the provision of Services. If you do not wish to receive personalized services or useful content, you may withdraw your consent at any time by contacting the Data Controller at the contact details provided in this Policy. To withdraw your consent to the use of third-party cookies and targeted advertising, please consult the Site's Cookie Policy.

f) Allow subscription to the newsletter service to receive information and updates on the institutional work of the Joint Controllers or on commercial communications relating to products similar to those previously purchased or on products for which the customer has expressed consent to receive commercial or personalized offers.

  • The legal basis for this processing is the freely given consent of the interested party, which may be revoked at any time.

g) Prevent fraud and abuse in the use of the Site and allow FD srl to defend its rights and legitimate interests ("Abuse/Fraud"). This processing is based on the Data Controller's legitimate interest pursuant to art. 6(1)(f) of the Regulation to prevent and detect fraudulent or potentially illegal activity.

  • The legal basis for this processing is the legitimate interest of the Data Controller, which does not prevail over the personal rights and freedoms of the data subject, as it is exercised only when necessary and with the implementation of appropriate precautionary and safeguard measures and in compliance with applicable laws.

h) Improve and increase the effectiveness of the services provided and increase the efficiency of the security measures implemented to protect the personal data processed.

  • The legal basis for this processing is the legitimate interest of the Data Controller, which does not prevail over the personal rights and freedoms of the data subject, as it is exercised primarily anonymously and with the implementation of appropriate precautionary and safeguard measures and in compliance with applicable laws.

i) Comply with legal obligations (e.g., tax-related) to which FD srl is subject ("Compliance with Legal Obligations"). The provision of Personal Data may be mandatory (e.g., because it is necessary for invoicing purposes).

  • The legal basis for this processing is Art. 6(1)(c) of the GDPR.

j) Perform statistical purposes, without being able to trace the user's identity ("Statistics"). This activity does not involve the processing of Personal Data as FD srl is unable to trace your identity.

4. Recipients of Personal Data

FD srl shares the Personal Data collected with the following categories of subjects (“Recipients”):

- persons authorized by FD srl: these are FD Srl employees and collaborators who have signed a confidentiality agreement and specific rules for the processing of Personal Data;

- FD srl's Data Processors: these are external parties to whom the Data Controller entrusts certain processing operations. For example, this category includes IT platform or system security providers, consultants, accountants, hosting providers, and providers of email technology platforms, etc.;

- law enforcement agencies or other competent authorities : this occurs, for example, when the data controller must comply with a judicial order, a legal obligation or when it is necessary for the data controller's defense in court;

Please note that this Privacy Policy does not apply to data processing activities carried out by third-party websites accessible via links on the Site. For these websites, please consult the privacy policies published there.

5. Transfer of Personal Data

FD srl may transfer some Personal Data to Recipients who may be located outside the European Economic Area. It ensures that the processing of Personal Data by these Recipients complies with the Regulation. Indeed, transfers may be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission, or on another appropriate legal basis. Further information is available from the Data Controller by writing to the contact details indicated in the relevant section of this policy.

6. Retention of Personal Data

Personal Data processed for the purpose of Service Provision will be retained for the time strictly necessary to achieve those purposes. In any case, since the processing is carried out for the provision of services, FD srl will retain the Personal Data for the period permitted by Italian law to protect its interests (Article 2946 et seq. of the Italian Civil Code).

Personal Data processed for Marketing and Personalized services will be retained, as a general rule, until you revoke your consent.

For more information on cookies, please refer to the Site's Cookie Policy .

Personal Data processed for the purposes of fulfilling legal obligations will be retained until the time required by the specific obligation or applicable law.

Your Personal Data processed for the purpose of Abuse/Fraud will be retained for the time necessary to achieve the aforementioned purpose and therefore until FD Srl is required to retain them to protect itself in court and communicate said data to the competent authorities in the event of Abuse/Fraud.

Further information regarding the retention period of Personal Data and the criteria used to determine this period can be requested by writing to the Data Controller at the contact details indicated in this policy.

7. Rights of interested parties

Interested users (hereinafter "Data Subjects") may exercise their rights as provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR; in particular, the Data Subject has the right to obtain the following information from the Data Controller:

  • confirmation as to whether or not personal data concerning him or her is being processed;
  • in this case, to obtain access to personal data and the following information:

1. the purposes of the processing;

2. the categories of Personal Data in question;

3. the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, in particular if recipients are in third countries or international organizations;

4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

5. the existence of the right of the Data Subject to request from the Data Controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to such processing;

6. the right to lodge a complaint with the supervisory authority;

7. where the data are not collected from the data subject, any available information on their source;

8. the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

9. the adequate guarantees provided by the third country (outside the EU) or an international organization to protect any transferred data.

  • The right to obtain a copy of the Personal Data undergoing processing, provided that this right does not adversely affect the rights and freedoms of others. For further copies requested by the data subject, the Data Controller may charge a reasonable fee based on administrative costs.
  • The right to obtain from the Data Controller the rectification of inaccurate Personal Data concerning him or her without undue delay, pursuant to art. 16 of the GDPR.
  • The right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, if the grounds set forth in Article 17 of the GDPR apply, including, for example, when the data is no longer necessary for the purposes of the processing or if the processing is deemed unlawful, and provided that the legal requirements are met; and in any case, if the processing is not justified by another equally legitimate ground.
  • The right to obtain from the Data Controller restriction of processing, in the cases provided for by Art. 18 of the GDPR, for example, where the accuracy of the personal data has been contested, for a period enabling the Data Controller to verify its accuracy. The Data Subject must also be informed, within an appropriate timeframe, when the suspension period has expired or the reason for the restriction of processing has ceased to exist, and therefore the restriction has been lifted.
  • The right to obtain communication from the Data Controller of the recipients to whom requests for any rectification, erasure, or limitation of the processing carried out have been transmitted, unless this proves impossible or involves a disproportionate effort.
  • The right to receive the Personal Data concerning him or her in a structured, commonly used, and machine-readable format and the right to transmit that Data to another controller without hindrance from the controller to which the personal data have been provided, in the cases provided for by Art. 20 of the GDPR, and the right to have the personal data transmitted directly from one controller to another, where technically feasible.

For any further information or to send a request, you can contact the Data Controller at info@farmaciadobbiaco.it .

In order to ensure that the above-mentioned rights are exercised by the Data Subject and not by unauthorized third parties, the Data Controller may request the Data Subject to provide any additional information necessary for this purpose.

The right to object (Article 21 GDPR)

For reasons relating to the Data Subject's particular situation, the Data Subject may object at any time to the processing of his or her Personal Data if it is based on legitimate interest or if it occurs for commercial promotion purposes, by sending a request to the Data Controller at the address indicated in the previous point.

The Data Subject has the right to have their personal data erased if there is no legitimate reason from the Data Controller that prevails over the reason for the request, and in any case if the Data Subject has objected to the processing for commercial promotion activities.

Please remember that to withdraw your consent (for marketing purposes and to personalize our services), you can write an email to info@farmaciadobbiaco.it

The right to lodge a complaint (Article 15 GDPR)

Without prejudice to any other administrative or judicial action, the interested party may lodge a complaint with the competent supervisory authority in Italy (the Italian Data Protection Authority), or with the authority performing its duties and exercising its powers in the Member State where the violation of the GDPR occurred.

All useful information and guidance on this matter is available on the website of the Italian Data Protection Authority: https://garanteprivacy.it .

8. Changes

The possible entry into force of new industry regulations, as well as the ongoing review and updating of services, may require changes to the terms and conditions described in this Policy. This document may therefore be subject to change over time. We therefore encourage you to consult this page periodically. We will publish any changes to this Policy on this page and, if the changes are significant to your rights and freedoms, we will notify you using additional methods and contact you directly using the Personal Data held by FD Srl.

9. Contacts

To exercise the above rights or for any other request regarding the processing of your Personal Data, you can contact the Data Controller at any time:

FD Srl via San Giovanni 6, I- 39034 Dobbiaco (BZ) Tel: + 390474 972165 – info@farmaciadobbiaco.it

 

Details on the processing of personal data

Personal Data is collected for the following purposes and using the following services:

  • Contact the User

Mailing list or newsletter (this Website)

By registering for the mailing list or newsletter, the User's email address is automatically added to a contact list to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User's email address may also be added to this list as a result of registering for this Website or after making a purchase.

Personal Data processed: last name; Usage Data; email address; first name; Tracking Tools.

  • Managing contacts and sending messages

This type of service allows you to manage a database of email contacts, telephone contacts, or contacts of any other type, used to communicate with the User.
These services may also allow us to collect data relating to the date and time the messages were viewed by the User, as well as the User's interaction with them, such as information on clicks on links included in the messages.

    Google Tag Manager

    Google Tag Manager is a tag management service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data.

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

    • Interaction with social networks and external platforms

    This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
    The interactions and information acquired from this Website are in any case subject to the User's privacy settings relating to each social network.
    This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
    It is recommended to log out of the respective services to ensure that the data processed on this Website are not linked to the User's profile.

    Facebook Like button and social widgets

    The “Like” button and Facebook social widgets are services of interaction with the Facebook social network, provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data,

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

    • Location-based interactions

    Geolocation (this Website)

    This Website may collect, use, and share User location data in order to provide location-based services.
    Most browsers and devices provide default tools to opt out of geographic tracking. If the User has expressly authorized this option, this Website may receive information on the User's actual geographic location.

    Personal Data processed: geographic location; precise location.

    • Remarketing and behavioral targeting

    This type of service allows this Website and its partners to communicate, optimize, and serve advertisements based on the User's past use of this Website.
    This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities.
    Some services offer a remarketing option based on email address lists.
    Services of this type generally offer the option to disable this tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can learn more about how to disable interest-based advertising in the "How to disable interest-based advertising" section of this document.

    Google Ads Remarketing

    Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the data processing, which connects the activity of this website with the Google Ads advertising network and the DoubleClick Cookie.

     

    To understand Google's use of data, please see Google's partner policy .

     

    Users may opt out of using Google Tracking Tools for ads personalization by visiting Google's Ads Settings .

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .

    • Platform and hosting services

    These services are intended to host and operate key components of this website, enabling the provision of this website from a single platform. These platforms provide the Owner with a wide range of tools, such as analytics, user registration management, comment and database management, e-commerce, payment processing, etc. The use of these tools involves the collection and processing of Personal Data.
    Some of these services operate through servers geographically distributed in different locations, making it difficult to determine the exact location where the Personal Data is stored.

    Shopify (Shopify International Limited)

    Shopify is a platform provided by Shopify Inc. that allows the Owner to develop, operate, and host a website dedicated to e-commerce.

    Personal Data processed: billing address; device information; email address; first name; last name; payment information; phone number; Usage Data; Trackers.

    Place of processing: Ireland – Privacy Policy .

    • Statistics

    The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

    Meta Ads Conversion Tracking (Meta Pixel)

    Meta ads conversion tracking (Meta pixel) is a statistics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects data from the Meta advertising network with actions performed within this Website. The Meta pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads.

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy – Opt out ; Ireland – Privacy Policy – Opt out .

    Google Analytics 4

    Google Analytics is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages data processing, (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.
    Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
    In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. To learn more, you can consult Google's official documentation .

    Personal Data processed: city; browser information; device information; latitude (of the city); longitude (of the city); number of Users; session statistics; Trackers; Usage Data.

    Place of processing: United States – Privacy Policy – Opt Out ; Ireland – Privacy Policy – Opt Out .

    Meta Events Manager

    Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited or by Meta Platforms, Inc., depending on how the Data Controller manages the processing of the Data. By integrating the Meta pixel, Meta Events Manager can provide the Data Controller with information on traffic and interactions on this Website.

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: Ireland – Privacy Policy – Opt out ; United States – Privacy Policy – Opt out .

    Google Ads Conversion Tracking

    Google Ads conversion tracking is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which connects data from the Google Ads advertising network with actions performed within this Website.

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .

    • Viewing content from external platforms

    This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
    This type of service may still collect web traffic data relating to the pages where the service is installed, even when users do not use it.

    Google Fonts

    Google Fonts is a font display service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, which allows this Website to integrate such content within its pages.

    Personal Data processed: Usage Data; Tracking Tools.

    Place of processing: United States – Privacy Policy ; Ireland – Privacy Policy .