The Companies enter into different contracts with selected third parties, who provide different services, for example maintenance of the Site, management of the communications with the customers and other services. The services provided by third parties are: hosting, processing orders, anti-fraud checks, placing order and managing returns, elaboration of payments, customers service, shipment and delivery, correspondence and web marketing. Data collected through the Site can be accessed by said third parties, and only on behalf of the companies. In any case, those service providers are not allowed by law to use personal data of the users for other purposes. The Companies may also communicate Data to financial institutions or other third parties in relation to payment operations. Data of the users will not be communicated to other third parties, except if it is required by law, in relation to a legal claim or a legal proceeding, or when they are necessary to protect the rights and interests of the Companies.
Data can be freely transferred outside the national territory to other European countries, but they may also be transferred to shops belonging to the Zanotti Group , which are located outside the European Union, and in particular in the USA and in China. Any transfer of Data outside the European Union, will be carried out by taking reasonable and appropriate safeguards to keep the Data safe, according to art. 44 of the Privacy Code and articles 45 and 46 of the European Privacy Regulation. You will have the right to obtain a copy of the Data held abroad and to receive information on the place where the Data are kept, by asking directly to Giuseppe Zanotti and Giuseppe Online, through the contact details provided in paragraph 9 of this document.
You will always, and with no additional charge, have the right to: (a) obtain confirmation as to whether or not Data concerning you are being processed, and if this is the case, have access to the Data; (b) know the origin of the data, the purposes and the way in which they are processed and the logic applied to processing by automated means; (c) ask for the update, rectification or, if you are interested, the integration of the Data; (d) ask the erasure, the anonymization or the blocking of Data unlawfully processed or to object to the processing for legitimate reasons; (e) object, fully or partially, to the processing for purposes of direct marketing carried out either through automated or more traditional ways; (f) withdraw your consent at any time, without affecting the lawfulness of processing based on consent before the withdrawal.
At any time and in the manner set out in paragraph 9 above, you may (a) request the restriction of personal data processing in the event that (i) you contest the accuracy of your personal data, for the period necessary to verify the accuracy of such personal data; (ii) the processing is unlawful and you object to the erasure of your personal data and request instead that its use be restricted; (iii) although the company no longer needs them for the purposes of processing, personal data are necessary for you to establish, exercise or defend a right in court; (iv) You have objected to processing pursuant to article 21, paragraph 1, of the GDPR pending verification of whether the legitimate reasons of the data controller prevail over those of the data subject; (b) object at any time to the processing of personal data based on a legitimate interest; (c) request the deletion of personal data relating to you without undue delay; (d) obtain portability of personal data relating to you; (e) lodge a complaint with the Data Protection Authority where applicable.
At any time you may exercise the above rights, modify the contact methods, notify the companies of any updates of your data, request the removal of your personal data communicated by third parties, or to obtain further information about the use thereof by the Companies, by contacting them respectively at email@example.com.
The Companies have appointed a Data Protection Officer, who can be contacted at the following address: DPO@giuseppezanotti.com.
The Companies will process Data for the time necessary to fulfil the purposes for which they were initially collected. In any case, the following retention periods shall apply to the processing of Data for each specific purpose:
• Data collected for Contractual Purposes will be retained for the duration of the contract, and then for 10 years after its termination to exercise/defend a right of Company, both in court and outside, where a claim should arise relation to the contract ;
• Data collected for Legal Purposes will be retained in accordance with the specific limitation periods defined by law;
• Data collected for Marketing Purposes of Company, for Profiling Purposes and for Legitimate Interest for Profiling Purposes will be retained for 7 years from the last contact we have with you (e.g. last purchase, last newsletter opened)
• Data collected for Legitimate Interest for Business Purposes will be retained for 10 years from the moment of their collection.
If you have doubts, questions or complaints with regard to the collection and processing of your Data, you may contact the Companies through the contacts section on the Site.