Privacy policy

Privacy Policy

GDPR 679/2016 – Information on Personal Data Protection

Users are hereby informed that:

their data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations outlined therein, following the principles of fairness, lawfulness, transparency, and protection of your privacy.

Legal Basis

The processing of customer data is based on the consent directly provided by the individual, as well as on the necessity of processing in order to conclude the service contract. Users consent to the processing of their personal data in relation to the methods and purposes described below, including potential disclosure to third parties when necessary for service delivery.

Art. 6 paragraph 1):

a) the data subject has given consent to the processing of their personal data for one or more specific purposes;

b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

f) processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party.

The Data Controller of your personal data is Follye srl – VAT ID IT10865031008 – Viale Parioli 160, 00197 Rome (RM), Italy. Responsible for the lawful and correct use of your personal data and can be contacted at: amministrazione@follye.it.

The Data Controller, pursuant to Art. 37 of the GDPR, has appointed its legal representative pro tempore.

Purpose of Data Processing

Fulfill presales activities and commercial information requested by the data subject.
Manage, conclude, and execute the agreed contractual relationship, including any requested ancillary services, and fulfill tax and accounting obligations.
Manage and fulfill the data subject’s contact requests and service provision requests, including through third-party communication.
Process data arising from the implicit transmission through Internet communication protocols.
Data may also be used to establish liability in case of potential cybercrimes against the IT system (legitimate interests of the controller).
Follye srl conducts profiling in accordance with legal limits, sending promotional information related to its services, marketing information, remarketing, advertising, and other information of interest based on preferences expressed at the time of data collection.

MARKETING COMMUNICATIONS (via email, SMS, WhatsApp): If you consent to receive marketing communications, the Controller will send newsletters and promotional material to your email address and/or phone number (also via SMS and WhatsApp).
CONTACT FORM: If you fill in the contact form or contact us via chat, we will ask for your name and email address.
PURCHASE: If you make a purchase, we will request your personal and contact data, including shipping address.
ABANDONED CART and WISHLIST: We will process your email address.
PRODUCT AVAILABILITY NOTIFICATION: We will process your email address.

Territorial Scope

The Data Controller informs that the data will be processed directly or through assigned third parties, primarily within the European Union.

The Data Subject

Pursuant to Article 15 of the EU Regulation 679/2016, the data subject has the right to obtain confirmation of the existence of personal data concerning them, and to obtain information about their origin, purpose, and methods of processing, as well as updating, rectification, integration, or deletion of data processed unlawfully. The data subject also has the right to object to data processing for advertising purposes.

Data Access

You have the right to request copies of the personal data you have provided in a structured, commonly used, and machine-readable format, and/or request us to transmit such data to another service provider (where technically feasible).

Data Retention Period

In general, Follye srl retains your personal data for a short period or for the time necessary to perform the contract.

We may retain some of your personal data to meet our legal and tax obligations and protect our contractual interests.
In exceptional cases, some personal data may be retained for investigation purposes as required by law.
We declare that, after 24 months from the end of the contractual obligations or the presales/commercial activities requested, personal data not otherwise required by law will be deleted.

Withdrawal of Consent and Data Processing Limitations

You may withdraw your consent to the processing of your personal data at any time by notifying us of your intent or by proceeding directly with deletion, where applicable. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

Cookie Policy

A cookie is a small text file made up of letters and numbers placed by a website on a user’s computer when they access the site. They are stored by the browser (e.g., Explorer or Chrome) on your computer, smartphone, or other device, and allow websites to store and use information regarding user preferences to recognize the user upon return and respond accordingly.

How They Are Used

Cookies are used to enhance the functionality and usability of our website. We use two types of cookies: persistent cookies and session cookies.

Persistent Cookies remain in the browser between sessions.
Session Cookies exist only while visiting our site and are not retained once the browser is closed.

No personal information is stored in the cookies.

All information collected by cookies is retained and not disclosed, transmitted, or sold to third parties.

Types of Cookies Used on the Site

PHPSESSID – Session cookie for navigation within the site
_ga / _gat / _gid – Google Analytics cookies
Cookie_ue – Cookie regarding acceptance of cookie use policy

Technical Cookies

These cookies enable the proper functioning of certain site sections.

They are divided into two categories:

Persistent: remain after the browser is closed until a preset expiry date
Session: are deleted every time the browser is closed

These cookies, always sent from our domain, are necessary to view the website properly and will always be used unless the user changes their browser settings (which may affect website display).

Analytical Cookies

These cookies are used to collect information on site usage. The site will use this data for anonymous statistical analysis to improve site usage and better tailor content to users. These cookies collect data anonymously and may be sent from the site itself or third-party domains.

Third-Party Analytics Cookies

Used to gather anonymous information on user behavior on the site such as pages visited, time spent, source of traffic, geographic origin, age, gender, and interests for marketing campaign purposes. These cookies are sent by third-party domains external to the site.

Cookies Integrating Third-Party Software/Functions

These cookies integrate features developed by third parties within the site’s pages, such as social media icons and preferences, content sharing tools, and third-party services (like map generation software). These cookies are sent by third-party domains and partner sites that offer their functionalities on the website.

Cookie Consent Methods

The Controller, according to current legislation, is not required to obtain consent for technical and analytics cookies, as they are necessary to provide requested services. For all other cookie types, consent may be expressed by the user through one or more of the following methods:

Via specific browser configurations or software used to navigate the website
By changing settings in the use of third-party services

Both options may prevent the user from using or viewing parts of the site.

Cookie Disabling

Most browsers automatically accept cookies, but you can choose not to accept them. If you prefer not to have your device receive and store cookies, you can change the security settings of your browser (Internet Explorer, Google Chrome, Safari, etc.).