ACT OF INFORMATION PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679

Party Monster S.R.L., (C.f. and P.IVA: 14704161000) (infra "FAYYIA "), in the person of its legal representative pro tempore, with registered office in Rome (RM), Via dei Tamarindi, 48, as Data Controller pursuant to Articles 4 n. 7) and 24 of EU Regulation No. 2016/679 (GDPR), informs you, pursuant to Article 13 of the GDPR, that your personal data described in Article 1 below will be processed for the purposes illustrated in Article 2 below.

1. Category of personal data subject to processing.

1.1. The Data Controller will process your personal data pursuant to art. 4 n. 1) of the GDPR (e.g. name; surname; e-mail address (ordinary and/or certified); so-called financial/banking data).

2. Purpose and legal basis of processing.

2.1. In compliance with Article 6 paragraph 1 letters b) and c) and Recitals no. 44 and 45) of the GDPR (as well as in accordance with EDPB Guidelines no. 2/2019), your personal data will be processed, by FAYYIA , for the execution of the following purposes:

Execution of your request to register on the website www.fayyia.com (infra "Site");

Execution of a purchase order and consequent conclusion of the relative sales contract (including what is necessary and expected in the context of a normal contractual relationship: e.g. correction of delays, errors or defects in the execution of a contract; return of a good or payment received) between you and FAYYIA concerning one or more goods offered for sale by FAYYIA on the Site;

Execution of a pre-contractual measure formulated by you on the Site (e.g., contact; request for information);

Fulfillment of one or more regulatory obligations related, directly or indirectly, to the pre-contractual or contractual relationship between you and FAYYIA (e.g. fraud prevention; accounting, fiscal or administrative burdens).

In this regard, FAYYIA specifies that, in accordance with art. 2 quinques of the new D.Lgs. n. 196/2003 (Privacy Code), registration to the Site is only permitted to persons over 14 years of age or, failing that, to the holder of parental responsibility of the relative minor. Furthermore, FAYYIA specifies that, in compliance with art. 13 paragraph 2 letter e) of the GDPR, any failure to communicate your personal data in order to carry out the purposes of the processing referred to in art. 2.1. determines the impossibility of a correct and complete execution of any pre-contractual or contractual relationship between you and FAYYIA , including the consequent fulfillments referred to in art. 2.1. above.

2.2. In compliance with art. 6 paragraph 1 letter f) and Recital n. 47) of the GDPR and in accordance with art. 130 paragraph 4 of the Privacy Code, your personal data will be processed by FAYYIA for the following purposes:

Direct marketing activities (soft spam), to be carried out via electronic mail.
2.3. In compliance with art. 6 paragraph 1 letter a) of the GDPR, your personal data will be processed, by FAYYIA , for the execution of the following purposes:

Marketing activities (intended as commercial communication, advertising and promotional or market research), to be performed by means of automated (eg email) and / or traditional (eg mail);
Profiling ex art. 4 n. 4) of the GDPR having as its object the analysis of personal preferences and interests, to be performed on the basis of products purchased by you and/or selected within the Site.
In accordance with art. 13 paragraph 2 letter c) of the GDPR, FAYYIA informs you of your right to revoke, at any time, any consent given for one or more of the processing purposes indicated in art. 2.3., without this event affecting the lawfulness of the processing based on consent given before revocation.

3. Target Audience.

3.1. In compliance with art. 13 paragraph 1 letter e) of the GDPR, FAYYIA specifies that your personal data may be subject to communication to one or more recipients ex art. 4 n. 9) of the GDPR (which belong, in general, to the following categories: subsidiaries, parent companies or otherwise related to FAYYIA; IT companies, including those that provide hosting services, mail service or computer storage; professional consultants of various kinds (eg. (e.g. fiscal, legal); transport and/or shipping companies; analysis companies; marketing and/or communication companies), in order to correctly execute the processing purposes described in articles 2.1., 2.2. and 2.3.

3.2. FAYYIA also specifies that your personal data will not be subject to any dissemination.

4. Conservation Period.

4.1. In compliance with art. 13 paragraph 2 letter a) of the GDPR, FAYYIA informs you that: i) the storage period of your personal data, processed to fulfill the purpose of art. 2.1. letter a), will last until you decide to irreversibly delete the account created on the Site or until FAYYIA decides to delete your account if there is a violation of the documents illustrated on the Site (this term may be extended in order to comply with regulatory and/or judicial requirements); ii) the retention period of your personal data, processed for the purposes of art. 2.1. letters from b) to d), will coincide with a period not exceeding the pursuit of the underlying purposes (identifiable, approximately, up to the term of n. 10 years, starting from the final termination of the contractual relationship between you and FAYYIA or starting from the last request for pre-contractual measures made by you to FAYYIA), which may be extended in order to comply with regulatory and/or judicial requirements; iii) the storage period of your personal data, processed for the purposes of art. 2.2., will last until you decide to communicate your opposition pursuant to art. 21 of the GDPR; iv) the storage period of your personal data, processed for the execution of the purposes referred to in art. 2.3. letters a) and b), will last until you decide to communicate the revocation pursuant to art. 17 of the GDPR to one or more consents that may have been given previously.

5. Transfer.

5.1. FAYYIA specifies that your personal data will be stored in archives (telematic and/or paper) located at one or more locations of the Owner (or companies directly or indirectly related to them), but in any case within the EU.



6.Rights of the interested party.

6.1. In relation to your personal data, FAYYIA informs you that, in accordance with the Guidelines no. 260/2018 of WP Art. 29 (now EDPB), you are entitled to exercise the following rights: right of access pursuant to art. 15 of the GDPR: right to obtain confirmation as to whether or not personal data concerning the relevant data subject are being processed, as well as the information referred to in art. 15 of the GDPR (e.g. purpose of processing, storage period); right of rectification pursuant to art. 16 of the GDPR: the right to correct, update or supplement personal data; the right to erasure under Art. 17 of the GDPR: the right to obtain the cancellation or destruction or anonymization of personal data, where, however, the conditions listed in the same article; the right to restriction of processing under Art. 18 of the GDPR: a right with a markedly precautionary connotation, aimed at obtaining the limitation of processing where there are the cases governed by the same art. 18; right to data portability ex art. 20 of the GDPR: right to obtain personal data, provided to the Data Controller, in a structured, commonly used and machine-readable format (and, where required, to transmit them directly to another Data Controller), where the specific conditions indicated by the same article exist (e.g. legal basis of consent and/or execution of a contract; personal data provided by the data subject); right to object ex art. 21 of the GDPR: right to obtain the cessation, on a permanent basis, of a specific processing of personal data; right to lodge a complaint with the Control Authority (i.e., Italian Privacy Guarantor) ex art. 77 of the GDPR: right to lodge a complaint where it is believed that the processing under analysis violates national and EU legislation on the protection of personal data.

6.2. In accordance with Article 12 paragraph 1 of the GDPR, FAYYIA undertakes to provide the communications referred to in Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, easily accessible form and with simple and clear language: this information will be provided in writing or by other means possibly electronic or, at the request of the interested party, will be provided orally provided that the identity of the interested party is proven by other means.

6.3. In compliance with art. 12 paragraph 3 of the GDPR, the Data Controller informs that it undertakes to provide the information relating to the action taken in respect of a request pursuant to articles 15 to 22 of the GDPR without undue delay and, in any case, at the latest within one month of receipt of the request; this term may be extended by n. 2 months if necessary, taking into account the complexity and number of requests (in this case, the Data Controller undertakes to inform the data subject of such extension and the reasons for the delay, within one month of receipt of the request).

6.4. You may exercise, at any time, the above-described rights (except for the right under Art. 77 of the GDPR) through the use of the contact data illustrated in Art. 7 below.

7.Contact data.

7.1. FAYYIA can be contacted at the following address: partymonster.italy@gmail.com.

7.2. The Data Protection Officer (DPO) ex art. 37 of the GDPR, appointed by FAYYIA, can be contacted at the following address: partymonster.italy@gmail.com.


Correggio (RE), there 18.12.2020 (date of last update)


FAYYIA S.R.L..

(in the person of its legal representative pro tempore)