DATA CONTROLLER

FAMAC LTD

Address: Arch. Makarios III, n. 36, 1065 Nicosia, Cyprus  

 

DATA PROTECTION OFFICER (DPO)

E-mail address: cr@annasa.eu

  

PERSONAL DATA PROCESSED

Identity data*. Contact details*. Details relating to purchase(s).

 

PURPOSE OF PROCESSING LEGAL BASIS FOR PROCESSING DATA PERIOD FOR WHICH PERSONAL DATA WILL BE STORED
The data provided by completing the form will be processed by the Company to respond to requests for information on the Company itself and/or its products/services. Execution of the contract involving the data subject. For the duration of the contract and/or for the time required to process the request. After this time, your data will be stored for an ordinary period of 10 years in compliance with the applicable law.

 

 

OBLIGATORY PROVISION OF DATA

Your data (your name, telephone number, email address, address, pictures, data of the purchased order) must be provided to be able to provide the information requested, therefore if these information are absent the Company will not be able to process the request.

 

 

RECIPIENTS OF THE DATA

Personal data may be communicated to parties acting as data controllers (such as supervisory bodies and authorities and public organisations authorised to request data) or processed on behalf of the Company by parties appointed as data processors, who are provided with suitable operating instructions.  These parties include the following categories:
a)    FAMAC LTD and its affiliates and subsidiaries offering support services to Data Controller for organizational matters;
a)    companies that manage/maintain the company website;
b)    companies that provided Costumer Service Management (i.e. call center);
c)    supervisory and control authority and any public entity entitled to request the Data.

 

 

THIRD PARTIES AUTHORISED TO PROCESS DATA

Your personal data may be processed by company employees tasked with the pursuit of the goals set out above, who are expressly authorised to process data and have received appropriate data processing guidelines.

 

 

PERSONAL DATA TRANSFERS OUTSIDE THE EU

The company does not transfer your Data to non-EU countries

 

 

DATA SUBJECTS’ RIGHTS – COMPLAINT TO THE SUPERVISORY BODY

By contacting the privacy office via e-mail sent to cr@annasa.eu, data subjects may ask the Controller or the DPO for access to personal data, or the rectification of inaccurate personal data and the completion and the deletion of personal data, and also have the right to restrict  processing  of the data in the cases set out in article 18 GDPR, and object to processing in the case of legitimate interests of the controller.
Where processing is based on consent or is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract, and the processing is carried out by automated means, the data subjects have the right to receive the personal data concerning them in a structured, commonly used, machine-readable format, and, if technically feasible, the right to have their personal data transmitted to another controller without hindrance
Data subjects have the right, at any time, to withdraw consent given for marketing and/or profiling purposes, and to object to the processing of personal data for marketing purposes, including any profiling connected with direct marketing. This will not prejudice the possibility available to any data subject who prefers to be contacted for the aforementioned purposes exclusively by traditional means to indicate his/her objection only to the receipt of communications by electronic means.

 

 

Notice in relation to the processing of the personal data of online customers COOKIE policy pursuant to regulation (eu) 2016/679 (“GDPR”) https://annasa.eu/cookies-policy/

 

Cookie Policy: Ensure compliance with EU ePrivacy Directive by clearly outlining categories of cookies and gaining explicit consent.

Newsletter: Add opt-in and opt-out procedures for users, aligning with GDPR Article 7.

Privacy Policy: Expand on lawful bases for processing, data retention periods, and third-party data sharing practices.

Terms and Conditions: Include dispute resolution via the European Online Dispute Resolution platform as per EU Regulation 524/2013.

Terms of Sales: Clarify refund timelines and highlight user rights under the EU Consumer Rights Directive 2011/83/EU.