WHO IS THE CONTROLLER?
The Website www.guyamariani.com is managed by MARIANI GUYA ALLEGRA MARIA VITTORIA, a company with sole ownership with registered office at via Manzoni, 2 – Monza 20900. GUYA MARIANI, which acts as an independent controller of personal data for all sales-related activities, such as order registration and completion, the management of payments, any returns and post-sales customer care services. GUYA MARIANI also acts as an independent data controller for the purposes of marketing, profiling and data sharing, whenever you provide your consent to such processing. Below is the main information regarding how GUYA MARIANI processes your personal data. For any clarification, request or requirement related to your privacy and to the processing of your personal data, you may contact us at any time by sending a request to our Customer Care at firstname.lastname@example.org.
WHAT DATA DO WE PROCESS AND WHY?
The personal data that GUYA MARIANI processes is the information that you provide when you complete an order and purchase items and the information that we collect while you navigate or when you use the services offered on www.guyamariani.com. GUYA MARIANI may thus collect data concerning you, for example, contact information such as first and last name, shipping address and billing address, data relating to payment, and navigation data. GUYA MARIANI processes, with your consent, the data that you provide to us when you wish to receive promotional information or communications from GUYA MARIANI. The Website also processes data related to your purchases, when you provide your express consent to record your buying practices, preferences, and lifestyle so they can be used to create group and individual profiles (“profiling”) which may be used to send personalised communications, and to conduct market research and statistical research with anonymous data, organised in aggregate form. Your personal data is processed for the following purposes:
- to enter into and perform a contract to purchase items offered on www.guyamariani.com;
- to provide you with the services of www.guyamariani.com, such as registration for the newsletter;
- to allow you to register for the Website and use the services that are limited to registered users;
- to manage your requests sent to our Customer Care.
In the aforementioned cases, the processing of your personal data is lawful to the extent needed to perform a contract entered with you or to provide you with the service you have specifically requested. However, we will only process your personal data with your express consent for:
- carrying out sales communications activities;
- analysing your purchase practices to create individual or group profiles;
- personalising the Website based on your interests.
WHO WILL PROCESS YOUR DATA?
Your personal data is processed by personnel who have been duly instructed by GUYA MARIANI and, for organisational and functional requirements related to the provision of services on www.guyamariani.com, by our Providers. The latter have been evaluated and selected by GUYA MARIANI. Some of these parties may also be based in non-EU countries and, in these cases, the transfer of your personal data in these countries is carried out in compliance with the guarantees provided by law.
FOR WHAT PERIOD OF TIME DO WE KEEP YOUR DATA?
We keep your personal data for a limited period of time, which depends on the purposes for which it was collected; after such period, your personal data will be deleted or nevertheless rendered irreversibly anonymous. The retention period is different depending on the purpose of the processing: for example, the data collected during the purchase of items on www.guyamariani.com is processed until all of the administrative and accounting formalities have been completed and is then archived in accordance with the local tax legislation (ten years). For further information please contact us at email@example.com.
WHAT ARE YOUR RIGHTS?
At any time, depending on the specific processing, you may: revoke your consent to processing, find out what personal data is in our possession, its source and how it is used, ask that the data be updated, corrected or supplemented as well as, in the cases provided for by the current provisions, have it deleted, limit its processing, or oppose it. If you believe that the processing of your personal data has been carried out illegally, you can submit a claim to one of the supervisory authorities responsible for compliance with the rules on personal data protection. In Italy, you may submit a claim to the Personal Data Protection Authority [Garante per la Protezione dei Dati Personali] (http://www.garanteprivacy.it/). This information may be subject to changes and additions over time, so we ask that you periodically check the contents. Where possible, we will try to immediately inform you of any changes made.
MARIANI GUYA ALLEGRA MARIA VITTORIA (“GUYA MARIANI”) as data controller informs you as follows regarding the processing of your personal data pursuant to Art. 13 of EU Regulation 2016/679 on personal data protection (“Regulations”).
1. PURPOSES OF PROCESSING AND CONSEQUENCES SHOULD YOU REFUSE TO PROVIDE YOUR PERSONAL DATA
a) Purposes that require data processing to perform a requested service GUYA MARIANI processes the personal data you provide to allow you to use the services on the Website, which include requesting information about our products and their availability, requesting assistance, being recontacted, or reserving an appointment at a store. For such purposes, GUYA MARIANI processes your data such as title, first and last name, e-mail address, data relating to your residence (city, country), and date of birth. For the purposes indicated above, providing your personal data is necessary and a refusal to do so will prevent your from using the requested service.
b) Additional purposes: GUYA MARIANI uses your personal data for marketing purposes, i.e. to send you promotional newsletters, sales, or advertising communications on events, promotional and sales initiatives of GUYA MARIANI, market research and satisfaction surveys, in addition to performing statistical analyses with anonymous data that has been organised in aggregate format. The marketing activities are completed by e-mail, newsletter, telephone call via operator, sms, mms, chat, instant messaging, social networks and traditional mail, including the sending of invitations to events organised by GUYA MARIANI or in which GUYA MARIANI participates. You may at any time indicate the contact method you prefer of those noted above, or may oppose receiving promotional communications through all or just some of the aforementioned communication methods. With your consent (which is optional), GUYA MARIANI, at its own point of sale and online through websites or GUYA MARIANI accounts on social media, collects information relating to your preferences, practices, lifestyle, as well as the details for purchases made, in order to use it to create group and individual profiles (“profiling”) which are used to send personalised communications and to perform market research and statistical research with anonymous data, which is organised in aggregate form. The personalised marketing activities are completed by e-mail (newsletter), phone, sms, mms, chat, instant messaging, social network and traditional mail, including invitations to events. You may at any time indicate the contact method you prefer from among those noted above and you may oppose receiving promotional communications through any or all of the communications methods listed above. For the marketing, profiling and data sharing activities GUYA MARIANI uses data such as your title, first and last name, e-mail address, data relating to your place of residence (city, country), your date of birth, data relating to interactions with our digital initiatives (websites, social media), products viewed, requested and/or purchased, participation in events organised by GUYA MARIANI, or in which GUYA MARIANI participates. It is optional to provide your personal data for the aforementioned purposes of marketing, profiling and data sharing, and any refusal to do so shall have no effect on your registration with the website.
2. METHODS AND LEGAL BASIS FOR THE PROCESSING
GUYA MARIANI processes your personal data with or without the aid of electronic instruments, based on logic and procedures that are consistent with the purposes indicated below and in accordance with the Regulations, including the confidentiality and security terms. You may provide the data when registering with the website www.guyamariani.com when making purchases, when visiting our boutique, when you interact with our digital initiatives (websites, social media), or during events that are organised by GUYA MARIANI or in which GUYA MARIANI participates. In accordance with the Regulations, the personal data concerning you that is acquired from you in each instance or from authorised third parties is used to update and correct the information that was previously collected. GUYA MARIANI processes your personal data based on the following criteria of legitimacy:
- Your consent
- GUYA MARIANI’s legitimate interest in performing its activity;
- the performance of a specific request from you;
- the fulfilment of legal obligations
3. COMMUNICATION OF YOUR PERSONAL DATA TO THIRD PARTIES
The personal data is accessible to our duly authorised personnel based on criteria of need and is communicated to third parties in the following cases: (i) when the communication is required by law and applicable regulations with respect to legitimate third parties who receive the data, such as public entities and authorities for the respective institutional purposes;(ii) communication to third parties in case of extraordinary operations (eg. mergers, purchases, disposal of business, etc.)Your personal data is also shared with our service providers, e.g. for services of a technical and organisational nature which are functional for the purposes indicated above, such as independent associates, including partners, e.g. companies that manage our website, companies specialised in market research or data processing, advertising companies, etc. We provide these parties with the data needed to perform the services agreed to and they act as Data Processors, based on the instructions they receive from GUYA MARIANI. GUYA MARIANI does not disclose your data to third parties for them to be able to use it for their own marketing or profiling purposes.
4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Some of the aforementioned parties may also be established outside the European Union, in countries that do not provide an adequate level of personal data protection according to the standards established by the Regulations. GUYA MARIANI takes the necessary precautions for data to be lawfully transferred (e.g. through implementation of the Standard Contractual Clauses approved by the European Commission).
5. MAINTAINING OF PERSONAL DATA
The personal data processed to respond to a specific request from you is kept for the time needed to perform the requested service. For the purposes of marketing, profiling and data sharing, the data is kept for the period of time that is strictly necessary to achieve the aforementioned purposes within the limits granted by the Regulations. In particular, your data will be processed for a period of 12 months for profiling purposes and 24 months for marketing purposes. You may request that your data be deleted for such purposes and oppose the processing of data for marketing purposes at any time.
6. DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller and Data Protection Officer is GUYA MARIANI, with registered office at Via Manzoni, 2 – 20900 Monza, Italy and may be contacted at the following e-mail address: firstname.lastname@example.org
7. YOUR RIGHTS
You may contact GUYA MARIANI in its capacity as Data Controller and Data Protection Officer at the addresses indicated above for an updated list of our data processors (i.e. our service providers), the parties to whom the data is disclosed and to exercise your rights per Art. 15 et seq. of the Regulations at any time; to obtain confirmation of whether or not your data exists, to check its content, source, accuracy, to request that it be supplemented, updated, corrected, deleted, anonymised, to request that it be transferred, that processing be limited, to oppose processing for legitimate reasons, e.g. opposing marketing activities, or to submit a claim to the Supervisory Authority (the Personal Data Protection Authority).