Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes the methods of processing personal data. This information is provided pursuant to art. 13 GDPR. The information is not to be considered valid for other third-party websites, which may be consulted through links on this website, for which no responsibility is assumed.
Personal data:
any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (C26, C27, C30 GDPR).
Navigation data:
Computer systems and software procedures used to operation oh this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful, error, etc.) and other parameters related to the user's operating system and computer environment.
Personal Data provided by data subjects:
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling of data collection forms entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through the Social Media platforms:
Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Data Controller, please refer to the information provided by the latter through the respective privacy policies. Data Controller processes the personal data provided by users through the pages of dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
Specific information:
Specific information may be present on the pages of the Site in relation to particular services or data processing provided.
Cookies and other tracking systems. What are they? What are they for:
For Cookies and other tracking systems, see the cookies policy in the footer of the site and in the following link.
The Data Controller is Flou S.p.A., with registered office in Milan, via Tommaso Grossi 2, in the person of its pro-tempore Legal Representative, who can be contacted for any information by e-mail privacy@flou.it, or telephone No. +39 0362 3731.
| Purpose of processing | Legal basis | Period of data retention | Nature of data provision |
|---|---|---|---|
| A) Browsing this website. The data necessary for using the web services are also processed with the aim of:
| The processing is necessary for the pursuit of the legitimate interests of Data Controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, taking into account the reasonable expectations entertained by the data subject and the activities strictly necessary for the operation of the site and navigation itself (Art. 6, para. 1 lett. f and C47 of the GDPR). You have the opportunity to obtain, on request, information on the balance test carried out. | Until the duration of the browsing session. | The provision of data is necessary for browsing the website. |
| B) Use of cookies and similar technologies. See the cookies policy in the footer of the site. | For necessary non-technical cookies and comparable technologies, the processing is based on consent to the processing of personal data (Art. 6 para. 1 lit. a and C42, C43 GDPR). Consent is given through the banner and the cookie policy of the site. | See the cookies policy in the footer of the site. | See the cookies policy in the footer of the site. |
| C) CONTACTS,sending contact requests and information to the addresses in sections https://www.flou.it/it/contact and https://www.flou.it/it/store (by selecting the retailer) | The processing is necessary for the performance of a contract to which data subject is a party or for the execution of pre-contractual measures adopted at the request of the same; (C44) Art. 6 para. 1 lit. b) GDPR | 6 months | The provision of data is necessary. Failure to provide the necessary data will make it impossible to be contacted and receive information. |
| D) Receiving newsletter, by filling in the "newsletter" form on the home page of the Site | The processing is based on consent to the processing of personal data (C42, C43) Art. 6 para. 1 lit. a) GDPR | Until you withdraw of consent (or opt-out) | The provision is optional. Failure to provide the necessary data will make it impossible to receive the newsletter. |
| E) Request samples, by accessing the Flou reserved area for professionals, in the https://www.flou.it/it/landing/architetti, by entering the login. | The processing of data is necessary for the execution of pre-contractual measures adopted by the Data Controller at the request of the data subject (C44). Art. 6 para. 1 lit. b) GDPR | 10 years | The provision of personal data is necessary for the establishment of a pre-contractual relationship Failure to provide the necessary personal data will make it impossible to establish a pre-contractual relationship. |
| F) Direct marketing for sending promotional communications, including special sales initiatives, for the performance of market research, for the detection of the degree of satisfaction of the interested party with respect to the products offered by Flou Spa. Direct marketing will be carried out through automated tools (e-mail, SMS) and traditional means (telephone and paper mail). | the processing is based on consent to the processing of personal data (C42, C43) | Until you withdraw of consent (or opt-out) | The provision is optional. Failure to provide the necessary data will make it impossible to receive promotional communications. |
| G) Management of your requests pursuant to art. 15 et seq. of the GDPR (rights of the data subject) | The processing is necessary for compliance with a legal obligation to which the controller is subject (C45). Art. 6 para. 1 lit. c) GDPR | 5 years from the closure of the request, except for litigation. | The provision of personal data is mandatory, as it is essential to be able to execute legal obligations. |
| H) ManagemPersonnel research and selection activities for the purpose of the possible establishment of an employment relationship by filling out the form in the "work with us" section | Contract – execution of pre-contractual measures Art. 6 lit. b) GDPR | 12 months | The provision of personal data is mandatory, as it is essential to be able to implement pre-contractual/contractual measures. |
| I) To allow you to use payback services by filling in the appropriate forms on the Site | Contract-execution of pre-contractual measures Art. 6) lit. b) GDPR | For the period necessary for the disbursement of the contribution for the purchase of a new FLOU product (10 years) | The provision of personal data is mandatory, as it is essential to be able to implement pre-contractual/contractual measures. |
Personal data will be communicated to subjects who will process the data asData Controllers, or Data Processors (art. 28 GDPR) and as individuals acting (art. 29 GDPR) under the authority of the Data Controller and the Data Processors. The data will be communicated to reipients belonging to the following categories::
Personal data will not be transferred to countries outside the EEA. It should be noted, in particular, that the data will be stored in Italy for hosting, management, development and maintenance services of the site. All third parties to whom the data may be communicated are based in Italy.
Personal data will be subjected to traditional, electronic and automated manual processing. Please note that fully automated decision-making processes are not carried out
You may exercise your rights as expressed by Articles 15 et seq. GDPR, by contacting the Data Controller at the e-mail address privacy@flou.it, or at the contacts indicated above or. You have the right, at any time, to request access to your personal data (art.15), rectification (art.16), erasure of the same (art.17), limitation of processing (art.18). The Data Controller notifies (art. 19) to each of the recipients to whom the personal data have been transmitted any rectifications or deletions or limitations of processing carried out. The Data Controller shall notify the data subject of these recipients if the data subject so requests. In the cases envisaged, you have the right to the portability of your data (art.20) and in this case they will be provided to you in a structured, commonly used and readable format, by an automatic device. You have the right to object (art.21), at any time, to the processing of data based on legitimate interest, and in cases where the legal basis is consent, you have the right to withdraw the consent given without prejudice to the lawfulness of the processing based on consent before its withdrawal. To stop receiving automated direct marketing communications (e-mail, SMS messages, instant messaging) write an e-mail to the privacy@flou.it address with the subject "unsubscribe from automated" or use our automatic cancellation systems provided for e-mails only (opt-out). To stop receiving traditional direct marketing communications (phone calls with an operator and paper mail), write an e-mail to the privacy@flou.it address with the subject "unsubscribe from traditional". To stop receiving any marketing communication, please write an e-mail to the privacy@flou.it address with the subject "unsubscribe marketing". You can revoke your consent to profiling (not automated) by writing an e-mail to privacy@flou.it with the subject "no profiling". In the event that the data subject considers that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the Supervisory Authority, in particular in the Member State where he or she habitually resides or works or in the place where the alleged violation of the regulation occurred (Privacy Guarantor), or to take appropriate case before the courts.
The Data Controller reserves the right to modify, update, add or remove parts of this policy. In order to facilitate the verification and modification of the text, the information will contain the date of update.
Update date: June 2025