We are committed to protecting your privacy and the personal data you entrust to us according to the principles of transparency, fairness and equity.
Written in accordance with Articles. 13 and 14 of EU Regulation 679/2016 (GDPR) and in replacement of the previous notice provided pursuant to art. 13 of Legislative Decree no. 196/2003 c.d. Privacy Code.
This notice is based on the principle of transparency as provided for in art. 12 of EU Regulation 679/2016 (GDPR) and, therefore, has been designed to be concise, transparent, intelligible and easily accessible in order to make its content “understandable” to all the persons concerned, namely users of the services of our site provided via internet at the following address: www.ilfotoalbum.com.
Our services are aimed at a general public and are not specifically aimed at children and/or under 18 years of age.
This notice is provided only for ilFotoalbum website and not for other websites that may be consulted by the user through external links currently published, or possibly published in the future, on the very same.
Why are you reading this notice?
The New Regulation defines as personal data any information concerning an identified or identifiable natural person (“data subject”) and is considered identifiable the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as personal details (name, surname, date of birth), or even data relating to the location, an online identifier or to one or more elements characteristic of the physical, physiological, genetic, psychic, economic, cultural or social identity, bank data, data relating to the telephone number, address, place and type of work, photographs, videos depicting you, sites visited, – which indirectly can say a lot about themselves, such as preferences, habits, tastes, etc.
Personal data have a great value in our time and therefore the new legislation entrusts the notice not only a central role, but also a dynamic, changing and constantly updated nature to ensure that data subjects are properly and promptly informed about the processing of personal data.
The controller shall be the natural or legal person, public authority, agency or other entity which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by the European Union or Member State law, the controller or the specific criteria applicable to his designation may be determined by the Union or Member State law.
The controller is:
With registered office in Via De Chirico, 1 42124 Reggio Emilia (RE)
p. VAT/ TAX CODE 01560330357
telephone: +39 0522 175 1800
Subject of the notice
The information contained in this notice concerns your personal data – both those collected before now, and those that will be acquired in the future in relation to the contractual relationship and that you have provided voluntarily by purchasing products and/or services provided by us upon payment or by participating in our promotional initiatives – which is processed by ilFotoalbum S.r.l. which also assumes responsibility for the treatment being, as specified above, the data controller, in compliance with the aforementioned legislation and confidentiality obligations which inspire our activity.
In particular, therefore, it is clarified that your personal data are collected as contact data, in order to be able to provide specific services, in general, to customers and/or users.
It is specified that the processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, cancellation or destruction.
ilFotoalbum S.r.l. processes various categories of personal data, in particular:
Data generated from the access to the site
Every time you visit our website, we collect some personal data:
the use of the website and the device used to access it, domain names, IP addresses, operating system used, type of browser used for the connection
the transactions you have completed with us: the type of product purchased and how much you have spent on the purchase itself.
This data is not accompanied by any additional personal information and is used for:
i) to obtain anonymous statistical information on the use of our website;
ii) to manage needs of control of the modalities of use of our website;
iii) ascertain responsibility in the event of hypothetical computer crimes.
The legal basis that legitimizes the processing of such data is the need to make the functionality of the site usable after the access by the user.
Data provided voluntarily by the user
This category includes personal information that you decide to provide us by visiting the site www.ilfotoalbum.com, and/or contacting us at the addresses above, by email or telephone. The data that we will process (and which we will certainly take care of as required and prescribed by the aforementioned European legislation) are those relating to your identity, the company on whose behalf you may contact us, the geographical location (and how to contact you and/or the company (email address and/or phone number).
We collect the personal data you provide when you complete a form to receive a discount coupon, sign up for an account, buy something or contact us. For example, if you subscribe to our website, we will collect your name, surname, email address, password, if you are a professional photographer and which products you are interested in.
If you order something from us, we collect the personal information you provide such as shipping information, phone number, type of product purchased.
Even if you contact our Customer Service, you can provide personal data that will be collected and processed.
Sometimes, we give you the opportunity to participate in surveys by email. If you participate, we will collect some of your personal information. Participation in these surveys is completely voluntary, therefore you can always decide whether or not to respond.
If you take the opportunity to review our products, we will collect personal information that appears in each of these reviews. These reviews are public and you should therefore be careful before posting personal information online (which is still good practice in general).
Finally, we process and protect any data you provide us with by sending applications to positions that may be open in ilFotoalbum or spontaneous applications and, in general, by sending personal CVs (collected and stored exclusively to consider any application and deleted, at most, 12 months after we have received it).
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
Purpose of data processing
The legal basis for processing is the performance of a contract to which the data subject is related or the performance of pre-contractual measures taken at the request of the data subject. In the cases expressly mentioned, the legal basis is the consent freely given by the data subject.
The processing of the data provided, personally (by filling in and sending the forms presented during the provision of our services, and in the other ways outlined above), will be for institutional purposes, related to our business and in compliance with legal obligations.
How do we use the data collected?
In particular, due to the activity carried out by ilFotoalbum, the aforementioned personal data will be processed lawfully and correctly for the following purposes:
a) for the creation of the account on our e-commerce platform for the exclusive supply of the printing and delivery service;
b) for the periodic sending, by email, of newsletters (promotional communications, reports on the publication of posts on our blog, special promotions, updates on our activities, ideas and suggestions, news and previews of new products, invitations to events or to participate in analysis and market research);
c) to carry out the activities of relationship with the customer according to contractual agreements;
d) for administrative purposes and for the fulfillment of legal obligations such as those of accounting, tax or to comply with requests from the judicial authorities;
e) to personalize your online experience and ensure that the content is presented in the best possible way for you;
g) to measure and understand the effectiveness of the advertisements we offer and to make our marketing activities more effective;
h) to administer, maintain and improve our website and for internal operations such as: problem solving, data analysis, research purposes, tests, statistics;
i) if you use our Online Designer software, the data may be used to directly verify your experience of using the e-commerce platform.
Nature of the provision
The processing of functional data for the performance of these obligations is necessary for proper management of the relationship and their provision is required to implement the purposes mentioned above. The data controller also informs that any non-communication, or miscommunication, of any of the mandatory information, may cause the impossibility of the controller to ensure the adequacy of the processing itself, the impossibility of establishing or continuing the relationship and, if they technically prevent the provision of the specific service requested.
Apart from that specified for navigation data, the provision of data with respect to the purposes referred to in letters a), b), c) and d) indicated in the section “How do we use the data collected?” is optional, but any refusal will make it impossible for ilFotoalbum to fulfill its contractual obligations.
Failure to give your consent prevents you from registering on the site and creating an account to use the services of ilFotoalbum.
Some data are also collected, with your specific consent, to send our newsletters and commercial communications relating to events, products, offers and, in general, for direct marketing purposes. We specify that, in these cases, you can always, at any time, unsubscribe from our newsletter or change the settings of reception by following the instructions in all emails by ilFotoalbum or by sending an email to email@example.com
We remind you that for those processings that require your consent, the latter can be collected in various ways, such as by filling in the form ‘required information’ on the site, or by acknowledgement and signing the notice.
Methods of data processing
Personal data are processed by automated and electronic means (but also in manual mode and subsequently stored in “physical” archives) for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized accesses.
The personal data you have provided us with, stored on electronic media, are kept and stored on servers owned by ilFotoalbum located in Italy and servers located within the European Union owned by OVH, protected against the risk of intrusion and unauthorized access.
Data concerning the sending of newsletters are also stored on the MailChimp platform.
These data include or may include your name, contact details, interests and preferences, shopping history, public information about social profiles and technical data such as IP addresses, cookies, and navigation data. Data residing on MailChimp servers can be located anywhere in the world and are managed with robust and documented security procedures that meet the requirements of the Privacy Shield, a protocol recognized and approved by the EU Commission.
We have adopted appropriate security measures to ensure the integrity and availability of data and the protection of areas relevant to their custody and accessibility.
Personal data will be processed by ilFotoalbum’s collaborators and/or employees as processors, within the scope of their respective functions and in accordance with the instructions given by the data controller, as well as by external processors specifically selected by ilFotoalbum.
ilFotoalbum does not have access to confidential information relating to credit cards, bank transfers and PayPal payments, which will be processed by intermediaries and card issuers in accordance with the Privacy Code.
ilFotoalbum member account
You can create your account at https://www.ilfotoalbum.com by entering your personal data. You can update your personal profile at any time, modify and delete your data via this link https://www.ilfotoalbum.com by clicking on the ‘My Account’ button. If you encounter any difficulties you can always contact us at firstname.lastname@example.org or at +39 0522 175 1800.
Subscribing to the site and creating an account implies acceptance by each new member to receive by email the path to know and discover the world of ilFotoalbum, consisting of sending an email confirmation of registration and two newsletters in the first 15 days after registration.
The indication ‘which products you are interested in’ is optional. If you specify the products of interest, you will receive newsletters regarding promotional communications dedicated to the type selected or similar types of products.
In case of non-specification you will receive newsletters of promotional/general commercial nature.
You can always exercise your right not to receive this type of communication at any time after giving your consent:
- by means of a special link at the bottom of any promotional e-mail sent by ilFotoalbum ‘Cancel Newsletter’;
- by sending an email to: email@example.com requesting the removal of your email address from the contact list of newsletters;
- contacting customer service at +39 0522 175 1800 requesting the removal of your email address from the contact list of newsletters.
If you wish to stop all processing of your personal data and cancel your account, ilFotoalbum will not be able to provide the products or services requested, unless you request to stop only sending promotional communications (newsletters) following the procedure described above.
The interruption of all processing of personal data can be requested by sending an email to firstname.lastname@example.org.
The removal of the account and all related data will take place in a maximum of 6 working days.
Please note: your personal data may remain in our archives even after your account has been deactivated, but will not be kept longer than the time necessary for the purposes indicated in the appropriate paragraph called “Processing duration”.
Place of data processing
The processing operations connected to the web services of this site take place at the aforementioned headquarters of ilFotoalbum S.r.l. and are processed by internal personnel specifically appointed to process the data, or by persons appointed to perform occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided by users who request dispatch of informative material, requests for availability or commercial quotations are used only to perform the service or provision requested and are communicated to third parties only in the event that this is necessary for the fulfillment of the request.
Communication and dissemination
ilFotoalbum S.r.l, i.e. the data controller, undertakes not to disclose personal data to third parties, except, in certain cases, in order to comply with legal obligations and to perform pre-contractual and contractual measures it will be necessary to communicate your data to:
1) banks and credit institutions, for the execution of payments;
2) professionals and professional firms (lawyers, accountants, auditors, etc.)
3) other companies, entities and/or natural persons that carry out activities that are supportive or functional to the execution of the contracts or services requested;
These subjects will process and, in turn, communicate to third parties the data as “owners” or “external managers”, as well as subjects who collect data through technical and navigation cookies.
We may also communicate the data of our customers to specific parties, appointed by ilFotoalbum to provide services that are instrumental or necessary for the performance of obligations related to the registration to the site www.ilfotoalbum.com and the online purchase, within the limits and in accordance with the instructions given.
In particular, the data may be communicated to:
1. persons, companies or professional firms that provide assistance, advice or collaboration with the data controller in accounting, administrative, legal, tax, financial and marketing matters;
2. subjects delegated and/or appointed by ilFotoalbum to carry out the activities or part of the activities related to the provision of sales services, such as: Customer Service; carriers responsible for the delivery of products purchased; any other external collaborator to whom communication is necessary for the proper fulfillment of the obligations assumed by ilFotoalbum in relation to the contract for the provision of its services;
3. we reserve the right to disclose personal information in other circumstances as required by law and where disclosure is necessary to cooperate with investigations of activities deemed illegal, to enforce our Terms and Conditions.
The updated list containing the names of the data processors is available at the headquarters of the data controller, which can be requested by e-mail by writing to email@example.com.
This list may subsequently be supplemented and/or updated as necessary.
Processing duration – Data retention
The processing of personal data will have a duration equal to that necessary for the performance of the services requested, to which will be added the additional period provided for by law in accordance with the obligations of a civil, fiscal and tax in force (maximum 10 years). At the end of the period of data processing, we will proceed to their cancellation, or we will make them anonymous permanently.
Personal data will also be stored in such a way that they cannot be modified without leaving a trace:
for the duration of the service or until requested by the user, until the revocation of the consent of the person concerned if provided;
even after the termination of service or the user’s request, if required for legal reasons;
for marketing or processing purposes for profiling purposes, they will be kept in accordance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until – if previously – the revocation of specific consent by the person concerned takes place (and for a maximum period equal to that provided for by applicable law (24 and 12 months respectively);
in the case of exercising the right to be forgotten through a request for expressed cancellation of personal data processed by the owner, please note that such data will be kept, in a protected form and with limited access, solely for purposes of investigation and prosecution of crime, for a period not exceeding 12 months from the date of the request and subsequently will be deleted safely or anonymized in an irreversible manner.
At the time of termination of the contractual relationship with ilFotoalbum S.r.l. the data will be kept for the time strictly necessary and functional to their possible future use if required by law and connected to the specific service requested by the customer.
At the time of cancellation, it is possible that the data will still be kept but anonymized.
Personal data are not stored for longer than is necessary to achieve the purposes of processing the specific data described herein, unless there are more or less long retention periods under the laws in force.
Security of processed data
In order to protect the security and confidentiality of your personal data we adopt – and require each service provider and/or third party responsible for processing personal data on our behalf to take, as instructed by us – technical and organisational measures to prevent the loss and destruction, even accidental, of data, unauthorised access and unlawful or abusive use of data. In addition, computer systems and software programs are configured so that personal and identification data are used only when necessary to achieve the specific purposes of processing from time to time provided.
We use a wide range of technologies and advanced security procedures to help protect personal data against the risks described above. For example, personal data provided by users are stored on secure servers located in controlled locations.
What are cookies?
Cookies are short fragments of text (letters and/or numbers) that allow the web server to store on the client (the browser) information to be reused during the same visit to the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to the user’s preferences, by the individual browser on the specific device used (computer, tablet, smartphone). Similar technologies, such as web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behaviour and use of services. In the following, we will refer to cookies and all similar technologies simply by using the term “cookie”.
Types of cookies and how to manage your preferences
We only use technical and analytical types of cookies.
Technical cookies are necessary for the proper functioning of certain areas of the site. They include both persistent and session cookies. Without these cookies, the site or parts of it may not function properly. Cookies in this category are always sent from our domain.
Analytical cookies are used to collect information about your use of the site. They are the basis for statistical analysis, for actions to improve and simplify functionality, for monitoring the proper functioning. This type of cookie collects anonymous information about your activity on the site and how you arrived at the site and the pages visited.
Our site also contains third party cookies, i.e. cookies from other sites and contained in various elements hosted on our pages (social network that allow visitors to interact with it, images, videos). Cookies in this category are sent from the domains of the sites that offer the functionalities present in the site, and are therefore not inserted or read by ilFotoalbum. Third parties may use the data collected for their own purposes. For more information about these cookies and how each third party uses them, you can use the links below.
ilFotoalbum uses the Google Analytics service of Google, Inc. to understand how visitors interact with the content of the site. Google Analytics uses a set of cookies to collect information and generate site usage statistics without personally identifying individual visitors.
We have activated the advertising functions of Google Analytics: reports on demographic data and interests of Google Analytics.
Google provides ilFotoalbum with data in an aggregate form that is never linked to the identity of users, through reports and other IT services. Google will not transfer this information to third parties unless required to do so by law or where such third parties process the information on Google’s behalf.
ilFotoalbum uses the Google Analytics cookie to inform, optimize and serve ads based on your previous visits to the site.
You can disable Google Analytics for display advertising and customize Google Display Network ads in this way:
Using ad settings: https://www.google.it/settings/ads
Through the components currently available for the deactivation of Google Analytics for the web: https://tools.google.com/dlpage/gaoptout
Click on the links below to read the different notices and to evaluate whether or not to give your consent:
YouTube: https://policies.google.com/privacy?hl=en (Google’s privacy also applies to YouTube services)
Please note: after unsubscribing, MailChimp will still keep your former members’ details to avoid forcing them back into the mailing list.
However, if you want to have your data permanently deleted, please write to firstname.lastname@example.org
By using ilFotoalbum website in a conscious manner, you consent to the processing of your data in the manner and for the purposes set out in the policy.
However, you have the option of denying consent for the use of the various cookies.
Navigation of our site may continue on a regular basis, but since some features are no longer active, you may encounter problems in other situations, for example in the use of the part dedicated to electronic commerce.
To disable the use of different types of cookies, select the appropriate setting on your browser that allows you to refuse or delete them at the end of each session. You can find links to how to disable cookies for popular browsers below.
Google Chrome: https://support.google.com/chrome/answer/95647
Policy validity and updating
In accordance with article 7 of the Privacy Code (as far as it is still compatible with Legislative Decree 101/20185) and with articles 13, paragraph 2, letters (b) and (d), articles 15- 22 of the Regulations, we inform the interested parties that, by entrusting ilFotoalbum with their personal data, it is possible to exercise the following rights, the exercise of which is not subject to any form constraint and is free of charge.
The Privacy Code and the Regulations give the data subject a series of rights which, pursuant to the WP 260 Guidelines on Transparency, must be summarised in the main content of this notice. These rights are summarised below:
a. Right to ask the data controller for access to personal data, rectification or cancellation of the very same or limitation of the processing that concerns them or to oppose to their processing, in the cases provided;
b. Right to lodge a complaint with a competent European Privacy Authority located in the place of habitual residence or domicile in Europe of a person claiming a violation of their rights, following the procedures and indications as appropriate;
c. Any rectification or cancellation or restriction of processing carried out at the request of the data subject – unless this proves impossible or involves a disproportionate effort – will be communicated to the Data Controller to each of the recipients to whom the personal data have been transmitted. The Data Controller may notify the data subject of such recipients if the data subject so requests.
d. Right to data portability: Article 20 of the GDPR introduces the new right to data portability. This right allows the data subject to receive the personal data relating to him provided to a Data Controller (e.g. if he intends to transfer it to another Data Controller) in a structured, commonly used and readable format, and – under certain conditions – to transmit it to another Data Controller without hindrance by the data controller of the previous Data Controller;
e. Right to object: the data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them carried out by the data controller;
f. Right not to be subject to automated decisions, including profiling: the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way.
The exercise of rights shall not be subject to any formal constraints and shall be free of charge.
All the above rights may be exercised by the data subject by writing an email to email@example.com
For further information or to exercise your rights under this law, you can contact the data controller (ilFotoalbum S.r.l.) at the following addresses:
Requests should be addressed in writing to ilFotoalbum Via De Chirico, 1 42124 – Reggio Emilia.