INFORMATION ON THE PROCESSING OF PERSONAL DATA
This Privacy Policy applies exclusively to the website www.falconfxsecuretrade.com (hereinafter the “Site”) and does not concern any third-party websites that may be referenced or linked within the pages of the Site.
1. Data Controller: The Data Controller is Falcon FX SecureTrade®, owned by Richard Sguazzin, with registered office at 33058 San Giorgio di Nogaro (UD), Via Famula No. 59/C (hereinafter also referred to as “Falcon FX” or the “Controller”) – VAT No. 03185680307. You may contact the Data Controller at the following email address: info@falconfxsecuretrade.com.
2. What data do we process?: The categories of personal data that Sguazzin may collect and process during navigation on the Site include various types of personal data concerning you, including:
• Data related to website navigation: we process data when you browse our website www.falconfxsecuretrade.com, i.e. data whose transmission is necessary for the operation of the computer systems responsible for managing the Site and Internet communication protocols. This category includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical computer crimes against the site.
• Data necessary for the purchase and installation of the software license: we process data necessary to allow the purchase of the software license and to manage its installation, including your identification data (such as first and last name), your contact details (such as email address and phone number), billing address, payment-related data (such as the payment method used and the account holder), and data relating to the purchased product.
• Data provided voluntarily by the user: we process the personal data that you freely provide when you contact us (in addition to first name, last name, and email address) in order to provide you with the requested information.
• Marketing activities (with consent): subject to your explicit consent, we may use the data you provide for marketing purposes, as well as to carry out market research and surveys to assess your level of satisfaction with our services. Such communications will be carried out exclusively by electronic and telematic means (e-mail).
• Cookies: we use cookies, i.e. small text files that the website places on devices in use—whether computers or mobile devices—stored in directories used by the user’s web browser. There are various types of cookies, some to make the use of the site more effective, others to enable certain functionalities. For more details, please consult the site’s Cookie Policy.
3. Why your data are processed and on what legal basis . Your data will be processed for the following purposes:
a) To complete the purchase of products offered on our website. When you proceed with a purchase, we request the personal data necessary for payment, invoicing, installation, and the prevention and/or suppression of fraud and abusive behavior, should you choose to pay by credit or debit card. Legal basis: the processing is lawful as it is necessary for the performance of a contract to which you are a party.
b) To comply with legal obligations (e.g., invoicing) arising from the performance of the contract referred to above. Legal basis: the processing is lawful as it is necessary for the performance of the contract and for compliance with legal obligations.
c) To provide assistance and respond to your inquiries. Legal basis: the processing is lawful as it is necessary for the performance of the contract to which you are a party.
d) To send you, by email and only following a purchase, commercial and promotional information about our products and services similar to those you have purchased. Legal basis: the processing is lawful under the so-called “soft spam” provisions pursuant to Article 130(4) of the Italian Privacy Code.
e) Only with your explicit consent, to use the data you provide to send targeted communications with discounts and offers, promotions, and commercial messages (marketing) via electronic and telematic means (email and SMS). You always have the right to withdraw your consent for this purpose and stop receiving promotional and commercial materials, even selectively—for example, choosing to receive information only via SMS and not by email. Legal basis: consent (optional and revocable at any time). If you no longer wish to receive our newsletter or commercial communications, you may unsubscribe at any time by exercising your right to object under Article 21 of the GDPR, simply by clicking the “unsubscribe here” link at the bottom of each communication or by sending an email to info@falconfxsecuretrade.com.
f) For the operation of the IT systems used to manage the website. Only browsing data are processed, i.e., data whose transmission to the website is necessary for the operation of the IT systems managing the site and Internet communication protocols. Legal basis: the processing is lawful based on the legitimate interest of the Data Controller in the technical management related to the functionality and security of the website.
g) To ascertain, exercise, or defend a right in judicial proceedings, or for purposes related to cases in which judicial authorities exercise their functions. Legal basis: the processing is lawful based on the legitimate interest of the Data Controller in exercising or defending a right.
h) To comply with personal data protection regulations (additional purposes), such as managing requests to exercise data subject rights, informing you of any security breaches involving your data, and communicating any relevant updates to this Privacy Policy.
4. Nature of data provision and consequences of refusal: The provision of the information required for the purposes indicated in points 3.a), 3.b), 3.c), 3.f), 3.g), and 3.h) is necessary to comply with legal and contractual obligations. You are free to provide such information; however, any refusal to do so will result in Falcon FX being unable to perform the contract, manage your requests, or correctly fulfill all obligations required by applicable laws.
The provision of the information required for the purpose indicated in point 3.e) (marketing) is optional. At any time, you have the right to object to this processing easily and free of charge.
5. Who will process your data: Your personal data may be processed by personnel of the Data Controller, duly trained and authorized to carry out the processing, or by third parties that provide services instrumental to the Data Controller, who typically act as data processors. These include, by way of example: internet service providers, companies specialized in IT and telematic services, customer support service providers, companies carrying out marketing activities, companies specialized in market research and data processing, physical stores, or parties acting as “independent data controllers” (such as couriers and freight forwarders, banking operators, independent professionals, or legal and tax consulting firms).
Your personal data may also be disclosed to third parties when such disclosure is required by applicable laws and regulations, to legitimate recipients of such communications, such as public authorities and public bodies that process your data as independent data controllers for their respective institutional purposes.
6. Transfer of data outside the EU: Some of the parties mentioned above may be located outside the European Union (EU) or the European Economic Area (EEA), in countries that do not guarantee an adequate level of protection of personal data in accordance with the standards established by the GDPR. Falcon FX adopts the necessary safeguards to ensure a lawful transfer of data (in particular, through the use of Standard Contractual Clauses approved by the European Commission). You may request information at any time regarding the transfer of your personal data abroad by contacting us using the contact details indicated above.
7. How long your data are retained: We retain your personal data for a limited period of time, strictly related to the purpose for which they were collected and in compliance with applicable legal or regulatory obligations. At the end of the established retention period, your personal data will be deleted or irreversibly anonymized, unless Falcon FX is required to retain the data for an additional period in order to comply with legal or regulatory obligations or to exercise or defend a right in judicial proceedings.
The retention period varies depending on the purpose of the processing, in particular:
• Data collected for the execution of the purchase contract: until the completion of administrative and accounting formalities. Data related to invoicing will be retained for ten years from the date of invoicing;
• Payment-related data: until payment is certified and the related administrative and accounting formalities are completed, following the expiration of the right of withdrawal and the time limits applicable to payment disputes;
• Data relating to your support request: retained until the request has been satisfied;
• Data used, following a purchase, for sending commercial communications for marketing purposes and data provided for newsletter activities: retained until consent is withdrawn or the right to object is exercised and in any case no longer than 2 years from the user’s last interaction of any kind with Falcon FX;
• In the event of judicial or administrative disputes: your data will be retained for the period necessary to protect a right in court by Falcon FX or a third party, or within the limits imposed by judicial or administrative authorities.
8. What are your rights: You may contact the Data Controller or the Data Protection Officer at any time, using the contact details provided in section 1, to exercise your rights under the GDPR, and in particular:
• to know whether or not personal data concerning you are being processed and, if so, to obtain access to and a copy of such personal data (right of access);
• to obtain the rectification of your personal data, i.e. the correction, modification or updating of inaccurate or no longer correct data, as well as the completion of incomplete personal data, including by providing a supplementary statement (right to rectification);
• to withdraw your consent (right to withdraw consent): you may withdraw at any time the consent you have given for the processing of your personal data, including in relation to any marketing activities;
to request the deletion of your personal data when such data, in particular:
1) are no longer necessary for the purposes for which they were collected or processed, or 2) have been unlawfully processed, or 3) must be deleted to comply with a legal obligation, or 4) you have objected to their processing (see the right to object below) and there is no overriding legitimate ground allowing the controller to continue processing (right to erasure or right to be forgotten);
• to obtain the restriction of the processing of your personal data, meaning that the controller stores such data without using them, subject to your requests and the exceptions provided by law. This right may be exercised only when:
– you contest the accuracy of the personal data, for the period necessary for the controller to verify their accuracy;
– the processing is unlawful and you request the restriction of use instead of deletion;
– although the controller no longer needs the data for processing purposes, the personal data are necessary for you to establish, exercise or defend a legal claim;
– you have objected to the processing pending verification of whether the controller’s legitimate grounds prevail over those of the data subject (right to restriction);
• to request your personal data or to transfer them to a party other than the controller (right to data portability);
• to lodge a complaint with one of the competent supervisory authorities for data protection if you believe that the processing of your personal data has been carried out unlawfully. In Italy, complaints may be submitted to the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
9. Changes to the Privacy Policy: The features, functionalities and services offered by the Website may undergo changes in the future; consequently, this Privacy Policy may be amended and supplemented over time. You are therefore invited to periodically review its contents. Any significant changes made to this Privacy Policy will be appropriately communicated.