PRIVACY POLICY | First Down

PROCESSING OF PERSONAL DATA (PRIVACY)
Personal data protection legislation (GDPR - EU Regulation 2016/679 of 27 April 2016).

Dear interested party, we wish to inform you that the "European Regulation 2016/679 relating to the protection of natural persons with regard to the Processing of Personal Data, as well as the free movement of such data" (hereinafter "GDPR") provides for the protection of persons and other subjects with respect to the processing of personal data. We therefore provide you with the following information:

CATEGORIES OF DATA: We will process personal and/or sensitive data that will be included in the purchase or registration form.
SOURCE OF PERSONAL DATA: The personal data that we will possess are collected directly from the interested party when completing the form.

WHAT PERSONAL DATA IS COLLECTED?

Data you provide to us directly: we receive and store any data you provide us when completing the purchase or registration form. You can choose not to provide certain data but, if you do, you may not be able to use our services.
Data that is collected automatically: Like many other websites, we use "cookies" and other unique identifiers.

PURPOSE OF DATA PROCESSING AND LEGAL BASIS
The processing of your data, collected and stored in relation to the completion of the sales forms, has your consent as its legal basis and is carried out for the following purposes:

Purchase and delivery of products and services. We use your personal data to receive and manage orders, provide products and services, process payments and communicate with you regarding your orders, products, services and promotional offers.

Communicating with you We use your personal data to communicate with you regarding the services we offer through various channels (for example: via telephone and email).

DATA PROCESSING METHODS
The personal data provided by you will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the Data Controller's activity. The data will be processed both with IT tools and on paper supports and on any other type of suitable support, in compliance with adequate technical and organizational security measures required by the GDPR.

STORAGE PERIOD
The data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", art.5, GDPR) or according to the deadlines established by law. Verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

WHETHER OR NOT THE PROVISION OF DATA IS MANDATORY
We inform you that the provision of data is optional for some fields and mandatory for others (indicated by an asterisk) and failure to provide the mandatory data will make it impossible to proceed with the purchase or other services.

RECIPIENTS OF THE TREATMENT
The recipients are subjects specifically appointed by the owner and responsible for processing and may receive personal data to carry out processing on behalf of the owner, or to achieve their own specific purposes.

TRANSFER OF COLLECTED DATA TO THIRD PARTIES
The data collected by the site is generally not provided to third parties, except in specific cases: legitimate request by the judicial authority and only in the cases provided for by law; if it is necessary for the provision of a specific service requested by the User; for carrying out security or site optimization checks.

TRANSFER OF DATA ABROAD
The data collected will not be transferred abroad.

RIGHTS OF THE INTERESTED PARTY
At any time, you may exercise, pursuant to articles 15 to 22 and 34 of the GDPR, the right to:

Request the Data Controller to access your data, confirm the existence or otherwise of your personal data, verify the use of the data and a copy of the same.
Obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period; obtain the rectification and deletion of data;
Obtain limitation of treatment;
Obligation to notify in case of rectification or deletion of personal data or limitation of processing.
Obtain data portability, i.e. the right to obtain your data in a structured, commonly used and readable format for transmission to another data controller without previous impediments.
Object to data processing at any time if the data no longer needs to be processed for the original reason for which it was collected.
Objection to automated data processing, proliferation and direct marketing.
When the violation of personal data is likely to present a high risk for the rights and freedoms of natural persons, the Data Controller communicates the violation to the interested party without unjustified delay.