INFORMATION ON the PROCESSING OF PERSONAL DATA pursuant to Regulation (EU) 2016/679 of the european Parliament and of the Council of 27 April, 2016 (“GDPR” or “Regulation”)

For Yumibio is very important to protect your privacy and for this reason our site has been adapted to european regulations provided for by c.d. “GDPR”. In this page we explain how we treat your personal data and your rights in the theme of privacy.

Summary

To thert. 1. Identity and contact information of the Feronia of Italy s.r.l.s in quality of holder of the processing of personal data.

No. 2. Data processing for the purpose of purchase of the products offered by Feronia of Italy s.r.l.s

No. 3. Data processing for the purpose of marketing generic

No. 4. The processing of data for profiling purposes

No. 5. The processing of data for the purposes of service and customer care

No. 6. Data processing for administrative and accounting purposes and tax

No. 7. The processing of data for purposes of investigation, exercise or defence of a right

No. 8. Categories of subjects to whom Feronia of Italy s.r.l.s discloses the personal data of the user (recipient)

No. 9. Transfer to third Countries

No. 10. The right of opposition

No. 11. The right of access

No. 12. Right of reply

No. 13. The right of cancellation

No. 14. Right to restriction of processing

No. 15. The right to data portability

No. 16. Gift Card

No. 17. Timing and mode of response in the event of the exercise of the rights of the person concerned

No. 18. Right to lodge a complaint to a supervisory authority

 

***

 

No. 1. Identity and contact information of the Feronia of Italy s.r.l.s in quality of holder of the processing of personal data

Feronia of Italy s.r.l.s is the holder of the processing of personal data of the users shown in the present disclosure and which was the subject of the data collected from the site www.yumibio.com (Site a) for the purposes indicated therein.

The identity and contact details of Feronia of Italy s.r.l.s are the following:

Feronia of Italy s.r.l.s with registered office in Castellammare di Stabia Traversa Fondo D'orto 11 (80053), social capital, 2.900,00 euro.v., registered with the Chamber of Commerce of Naples, P. IVA 08605841215 (Yumibio).

It is possible to contact the holder of the treatment by filling in the form on the “Contact us” page of the Site.

No. 2. The processing of data for the purposes of access and registration to the Site, and the conclusion and execution of the purchase contract

Yumibio will treat the personal data of the user for:

- allow registration on the Site and use the services reserved to registered users, including the possibility of purchasing online through the Site;

- allow for the completion of purchases through the Site;

- allow Yumibio to properly perform the obligations arising from such contracts;

- executing requests pre-submitted from the user.

The legal basis for this treatment is the fulfilment of the contract or, depending on cases, the implementation of precontractual measures taken at the request of the person concerned (art. 6.1.b) of the Regulation).

For this purpose, Yumibio will treat the data of the user for the time strictly necessary for the performance of the individual processing activities, provided that, after the expiry of the term, Yumibio may store the data for the purposes and to the maximum periods of retention referred to in other sections of this disclosure, if relevant, and/or, however, in the cases established by the Regulation and/or law.

The provision of data for the purpose in the object is optional: it does not exist any legal or contractual obligation of the communication of the data; however, because their treatment is necessary to allow the execution of the contract of purchase of the products offered or to respond to requests for pre-scan by the user - the lack of communication of the data will entail the impossibility for the user to purchase the products or receive a response to its requests the pre-contractual.

No. 3. Data processing for the purpose of marketing generic

The prior consent of the user, Yumibio will treat the personal data of the user to send via e-mail, information and promotional communications, including newsletters, related to the products and/or services and/or third parties.

The legal basis of this treatment is the express consent of the user (art. 6.1.a) of the Regulation).

The user can may at any time revoke the consent and/or oppose, at any time, to the processing of personal data for marketing purposes by contacting Yumibio at the addresses indicated in art. 1.

The provision of data for the purposes of marketing the generic is optional: there is no legal or contractual obligation assumed by the user to provide such data for such purposes and/or to provide consent to the processing of his personal data for such purposes.

Failure to consent to the processing of data for marketing purposes will make it impossible for the user to receive advertising material relating to products and/or services Yumibio and/or third parties, as well as the inability to Yumibio to send newsletters to the user.

For the purposes of marketing the generic, Yumibio will treat the data of the user until the revocation of the consent and/or the exercise of the right of opposition and, in any case, not later than 24 months from the collection of the data, reserving the right, before the expiration of that term, to ask the user for the renewal of the consent and/or updating of data.

No. 4. The processing of data for profiling purposes

Yumibio will treat the personal data of the user for the purposes of profiling, i.e. the analysis of your consumption choices through the revelation of his online behavior (also a previous purchase), as well as the type and frequency of purchases carried out, in order to send you advertising material Yumibio or any third party, is offering for sale on the Website products, in both the cases of specific interest to the user.

The legal basis of this processing is the legitimate interest of the user (art. 6.1.f) of the Regulation).

Constitutes a legitimate interest of Yumibio offer the user communications advertising and personalized services as possible relating to the interests of the latter. In this way Yumibio realizes the legitimate entrepreneurial interest and, at the same time, allows the user to view and possibly purchase the products of your specific interest, optimizing, therefore, the right time and the right economic asset.

This legitimate interest coincides, therefore, with the interest of the user to receive advertising communications of specific interest and to purchase products related to their interests.

The legitimate interest of Yumibio so identified can be considered to be so prevalent on the rights and freedoms of the data subject, also by reason of the reasonable expectations and of the relationship existing between the person concerned and Yumibio as well as in view of the nature of the treated data and the coincident interest of the interested parties themselves.

The user has, in each case, the right to oppose, at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in the object.

No. 5. The processing of data for the purposes of service and customer care

Yumibio will treat users ' data for generic tasks of assistance and customer care, and then to give feedback to requests for information originating from the user or respond to complaints, comments and complaints as well as to allow the user, if they want to release a review. The processing may be done on the Website via the instant messaging service offered by Facebook.

The legal basis of this processing is the execution of pre-contractual measures taken at the request of the person concerned (art. 6.1.b, last paragraph, of the Regulation) or, depending on cases, the legitimate interest of Yumibio (art. 6.1.f) of the Regulation).

Constitutes a legitimate interest of Yumibio respond to requests for information and/or reviews and/or reports and/or complaints and/or complaints of the users of the Site. Such a legitimate interest of Yumibio also coincides with the legitimate interest of the users of the Site who make requests and/or reports and/or complaints and/or claims in the subject and that, therefore, in the context of the relationship with Yumibio, you might feel that to reasonably expect their personal data to be used by Yumibio to give their feedback.

The legitimate interest of Yumibio so identified can be considered to be so prevalent on the rights and freedoms of the data subject, also by reason of the reasonable expectations and of the relationship existing between the person concerned and Yumibio as well as in view of the nature of the treated data and the coincident interest of the interested parties themselves.

The user has, in each case, the right to oppose, at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in the object (i.e. customer care).

No. 6. Data processing for administrative and accounting purposes and tax

Yumibio will treat the user data for the purposes of performing the obligations of the administrative and/or accounting and/or tax associated with the provision of the services and/or purchase of products offered on the Site.

The legal basis of this treatment is the fulfilment of law obligations to which it is subject Yumibio (art. 6.1.c) of the Regulation).

The provision of data for the purpose in question is required, because the treatment is necessary to allow Yumibio to fulfill the requirements of the law on the same burden. The refusal to provide the data for this purpose will result in the inability for the user to use the services of the Site.

For this purpose, Yumibio will treat the user's data until the expiry of the terms of the law for the execution of each fulfillment of administrative, accounting and tax and/or for the storage time prescribed by law for the preservation of the documentation.

No. 7. The processing of data for purposes of investigation, exercise or defence of a right

Yumibio will treat the user data for the determination, exercise or defence of a right in all the relevant fora.

The legal basis of this processing is the legitimate interest of Yumibio (art. 6.1.f) of the Regulation).

Constitutes a legitimate interest of Yumibio, in fact, seeking remedies to ensure the compliance of his contractual rights, or prove that you have complied with the obligations arising from the contract with the data subject or imposed on Yumibio by law. Such legitimate interest is in its turn foundation in the right of defence is constitutionally protected. It can therefore not be regarded as involving the fundamental rights and freedoms of the data subject, also because of the reasonable expectations of the same.

The user has, in each case, the right to oppose, at any time, for reasons related to his personal situation, to the processing of personal data concerning him for the purpose in the object (i.e. the defense of a law/legal purposes).

The user can exercise this right by contacting Yumibio at the addresses indicated in art. 1 of this privacy statement.

No. 8. Categories of subjects to whom Yumibio discloses the personal data of the user (recipient)

The personal data provided by the user can be communicated by Yumibio to the categories of recipients mentioned below.

The subjects to which Yumibio communicates the data, act as the responsible of the treatment appointed by Yumibio through a special agreement (as"data processors") or persons designated to the processing of personal data under the direct authority of Yumibio (“Designated”) or in the case of third parties which the controller uses, as “Sub-Managers”, for the purposes referred to in art. 28.4 of the Regulation.

The personal data of users may be communicated by the Yumibio to the following categories of recipients:

- companies, consultants or professionals eventually in charge of installing, maintenance, updating and, in general, the management of the hardware and software of the Site (including the platform), including providers of cloud computing services, and the third parties to which they tend;

- a company contracted by Yumibio the sending of commercial communications;

- to all those persons, including public authorities, that have access to the data by virtue of legislation or administrative;

- to companies that perform support activities, logistics and/or shipping and delivery or pickup of Products purchased on the Site and the third party which they use;

- the Payment Server Provider to allow the payment of purchases made on the Site or their refund, if any, and to the third parties which they use;

- to all those persons, including public authorities, that have access to the data by virtue of legislation or administrative;

- to all those public and/or private, natural persons and/or juridical persons (legal consultancy firms, administrative and tax), if the communication is necessary or functional for the proper fulfilment of the contractual obligations assumed in relation to the products and services offered on the Site, as well as the obligations arising from the law, that is, in the case of assessment, exercise or defence of a right.

In addition, the user's personal data may be disclosed to the company, Dm, Brain s.r.l., in quality of Responsible of the Treatment appointed by Yumibio, in order to perform the operations of profiling referred to in article 4 of this statement.

No. 9. Transfer to third Countries

With reference to the transfer to third Countries, personal data are transferred in the U. S. A. The transfer is made on the basis of decisions on the adequacy of the european Commission and of the consequent authorization of the Guarantor for the Protection of Personal Data. In particular, the transfer of data in the U. S. A. takes place on the basis of the "implementing Decision (EU) 2016/2295 of the Commission of 12 July 2016 (in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the regime of the shield, the EU and the US" [notified with the number C(2016)4176] and the resulting "Authorization for the transfer of data abroad through the agreement called the "E. U. – U. S. A. Privacy-Shield" issued by the Guarantor for the Protection of Personal Data 27.10.2016, being all of the recipients of the data incorporated in the U. S. A. recorded at the Privacy Shield; in addition, in some cases, in the contracts with such recipients shall also be included in the standard contractual clauses referred to "Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to a controller established in third countries under Directive 95/46/EC of the European Parliament and of the Council [notified with the number C(2010)/87/EU] and then on the basis of the resulting "consent for transfers to third countries through the standard contractual clauses referred to in Commission decision 2010/87/EU in the case of an importer established in third countries", issued by the Guarantor for the Protection of Personal Data with measures of 27 may 2010 and 15 November 2012.

No. 10. The right of opposition

The interested party has the right to oppose, at any time, for reasons related to his particular situation to the processing of personal data undertaken for the purposes of having as a legal basis for the legitimate interest of the data controller.

In the case in which the data are processed for the purposes of direct marketing or profiling purposes, the data subject also has the right to object at any time to the processing of personal data carried out for such purposes.

In the case of the exercise of the right of opposition, Yumibio refrain from treating further personal data, unless he demonstrates the existence of legitimate reasons, mandatory to proceed to the treatment which shall prevail over the interests, rights and freedoms of the data subject or for the determination, exercise or defence of a legal claim.

If the data subject objects to the processing for purposes of direct marketing or profiling purposes, the personal data are not processed for this purpose.

No. 11. The right of access

The interested party has the right to obtain from Yumibio confirmation as to whether or not the processing of personal data concerning him and, in this case, to obtain access to the personal data and information indicated below.

In the case of the exercise of the right of access, the user can obtain access to the personal data and the following information:

- the purposes of the processing;

- the categories of personal data concerned;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations;

- when possible, the period of retention of personal data provided or, if not possible, the criteria used to determine this period;

- the existence of the right to request to the data controller the rectification or erasure of the personal data or restriction of processing of personal data or to oppose to their treatment;

- the right to lodge a complaint with a supervisory authority;

- if the data are not collected from the data subject, any available information as to their source;

- the existence of an automated decision-making process, including profiling which produces legal effects concerning the data subject or which would affect in a similar way, significantly, on his person, and at least in such cases, meaningful information on the logic used, as well as the importance and the predicted consequences of such processing for the data subject.

Yumibio provides a copy of the personal data object of treatment. In the case of additional copies requested by the person concerned, Yumibio may charge a reasonable fee based on administrative costs. If the data subject makes the request using electronic means, and unless otherwise requested by the data subject, the information shall be provided in an electronic format in common use.

No. 12. Right of reply

The interested party has the right to obtain from Yumibio the rectification of personal data without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain completion of incomplete personal data, including by providing a declaration to the financial statements.

No. 13. The right of cancellation

The interested party has the right to obtain from Yumibio the erasure of personal data without undue delay and Yumibio has the obligation to erase, without undue delay, the personal data, if there is any one of the following reasons:

- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

- the person concerned revoke the consent on which the processing is based, if there is no other legal basis for the processing;

- the data subject opposes to the processing based on the legitimate interest of the holder of the treatment, for reasons related to his particular situation and there is no legitimate reason prevailing or oppose to the processing of his personal data for direct marketing purposes or profiling;

- the personal data are processed unlawfully;

- personal data must be deleted in order to fulfil a legal obligation laid down by the law of the Union or of the member State to which it is subject, the holder of the treatment.

No. 14. Right to restriction of processing

The interested party has the right to obtain from Yumibio the limitation of the treatment when one of the following assumptions:

- the data subject contests the accuracy of the personal data for the period of time necessary to Yumibio to verify the accuracy of such personal data;

- the processing is unlawful and the data subject opposes the erasure of personal data and instead asks that it is limited to use;

- although Yumibio are no longer required for the purposes of the processing, the personal data are necessary for the interested party to the determination, exercise or defence of a legal claim;

- the person concerned is opposed to the treatment in the case of the processing based on the legitimate interest of the owner of the processing, on grounds relating to their particular situation, pending verification as to whether the prevalence of legitimate reasons to Yumibio than those of the person concerned.

If the treatment is limited, the personal data object of the limitation are treated, except for the storage, only with the consent of the data subject or for the determination, exercise or defence of a legal claim, or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a member State.

The subject who obtained the restriction of processing is informed by the controller before the restriction to be revoked.

No. 15. The right to data portability

The interested party has the right to receive, in a structured format, and readable by the automatic device, the personal data provided to Yumibio and has the right to transmit such data to another holder of the treatment without any impediments from the part of the holder of the treatment which he has provided, if:

- the treatment is based on the data subject's consent or on a contract;

- the treatment is carried out by automated means.

In exercising his right to portability of data, the data subject has the right to obtain the direct transmission of personal data by a data controller of the processing to the other, if technically feasible.

The exercise of the right of portability is without prejudice to the right to cancellation.

The right to portability should not adversely affect the rights and freedoms of others.

No. 16. Gift Card

In the case in which the user provides to Yumibio an e-mail address to a third party for the purpose of purchasing a Gift Card and send it to the third party, the user guarantees to have the authorization to use the e-mail address of the third party. The user indemnifies Yumibio from any responsibility deriving from the improper use of the e-mail address.

No. 17. Timing and mode of response in the event of the exercise of the rights of the person concerned

Yumibio provides the data subject the information about the actions taken in relation to a request for exercise of the rights recognized by art. from 15 to 22 of the Regulation (i.e. right of access, right of rectification, right of erasure, right to restriction of processing, the right to data portability, right to object) and by this privacy notice (“Rights”), without undue delay and, in any event, within one month from the receipt of the request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests. Yumibio shall inform the person concerned of such extension and the reasons for the delay, within one month from the receipt of the request. If the data subject makes the request using electronic means, the information shall be provided, where possible, by electronic means, unless otherwise specified by the person concerned.

No. 18. Right to lodge a complaint to a supervisory authority

Without prejudice to any other administrative or judicial remedy, the data subject considers that the processing which concerns him violates the Regulation shall have the right to lodge a complaint with a supervisory authority, in particular in the member State in which he resides, works, or of the place where occurred the alleged violation. The supervisory authority to which it was proposed the complaint shall inform the complainant of the status or outcome of the complaint, including the possibility of a judicial review.