PRIVACY POLICY IN COMPLIANCE WITH THE UE 2016/679 REGULATION (GDPR). 
ARTICLES 13 E 14 E FOLLOWING NATIONAL ADEQUATION RULES.

This disclosure aims to provide you adjournments regarding the processing of informations ,as specified below, given by you to the company FUMIDEA SRL after navigation on the site www.crystalcbd.eu/shop/ , through the compilation of the forum contacts, the creation of the account or email sent to the company. 
The above information will be processed by it for the purposes indicated below.
Identity and contact details of the data controllers.
The data controller is FUMIDEA SRL with registered office in Via di Torrenova 321 00133 Rome. Contact details of the data Protection Officer (c.d. RPD).
In reference to issues concerning the handling of personal data, Fumidea Srl nominated a manager of the data Protection who is Mr Manili Antonio, traceable at the following e-mail address: fumidea@gmail.com e/o tel. 06.20840072.
Categories of personal data processed
Within the limits of the purposes and methods described in this disclosure, processed information may be considered as "Simple personal data", which include your personal details, your bank details, your contact details (such as, for example, number of mobile phone, e-mail address, hereinafter referred to as "Personal Data").

Moreover, the computer systems and software procedures used to make this site functional acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (such as for example IP addresses, navigation, hereinafter referred to as "Navigation Data"). This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
Purpose and legal bases of treatment.
The Personal Data collected will be processed for the purposes and on the legal bases reported :
a) For the management of your contractual relationship that means to execute pre-contractual measures (such as, for example, the request for information or the estimate) and post-contractual (such as for example administrative-accounting purposes).
In this case, you are free to provide your Personal Data and Navigation; however, failed confermet will not allow you to establish the aforementioned relationship and satisfy your request.
The treatment is necessary in relation to the execution of a business relationship of which you are a part.

b) Previo Suo specifico consenso, per il compimento e successivo utilizzo di sondaggi e/o ricerche di mercato effettuate nell’interesse della società stessa, e contattarLa, ai recapiti forniti, al fine di verificare la qualità del servizio reso nei Suoi confronti ed il Suo grado di soddisfazione.
c) Previo Suo specifico consenso, per inviarLe reminders e comunicazioni promozionali relative a prodotti ed iniziative proprie.
d) Subject to your specific consent, your Personal Data may be used directly by the company to satisfy market and statistical inquiries.
Data processing methods.

Personal Data will be processed using manual, computerized or telematic tools, suitable for guaranteeing security and confidentiality and will be carried out by personnel duly trained to comply with current legislation.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Communication of personal data.

Personal data will not be disclosed to other parties except for third-party companies that provide services related to the activity of the company Fumidea Srl, such as informatic, transport and shipping services.

The communication of personal data to countries belonging to the EU or non-EU takes place through the express courier data system.
Data retention period.
The retention of personal data will have the following duration:

a) For the part concerning the management of the commercial relationship (article 4.a), they will be kept for the duration of the relationship and for the following 10 years;
b) For the part related to surveys and research (article 4.b), they will be kept for 3 years after the collection, except for the possibility for the data subject to modify and / or revoke their will at any time;
c) For promotional and market purposes (articles 4.c and 4.d), they will be kept for 3 years following the collection, without prejudice to the possibility for the data subject to modify and / or revoke their will at any time.
Rights of the interested parties.
The interested parties may exercise the rights recognized by the GDPR including, by way of example, the right to access their Personal Data, to request correction, cancellation (so-called oblivion) ​​if no longer necessary or incomplete or erroneous or collected in violation of law, to request that the processing be limited to a part of the information concerning him, to be guaranteed the so-called portability of information concerning him and that the subject himself has voluntarily provided and finally to be recognized the right to revoke, at any time, his consent.
The revocation of consent will not affect, in any case, the lawfulness of the treatment based on the data used prior to the revocation.
It is always possible, even in case of revocation, to send communications or the possibility, by Fumidea Srl, to contact the interested parties to communicate critical situations concerning products and / or services provided.
Right to propose a complaint.
It is the right of data subjects who are not satisfied with their requests concerning the management of Personal Data, to contact the Guarantor in the manner provided by the GDPR.