Privacy policy
1. Nature of the data processed and purpose of the processing.
The data controller is Raffaele Iannello Originals Srl, with registered office in Milan (MI), via Giulio Uberti 29 (VAT IT08697280967), share capital of Euro 10,000.00 fully paid up, PEC: info@pec.raffaeleiannello.com, in relation to the personal data provided by users when accessing and/or registering on the site shop.rafz.com (Site) or when purchasing the products offered for sale on the latter. The Data Controller is Raffaele Iannello Originals Srl, e-mail: privacy@rafz.com
2. Purpose of the treatment.
Raffaele Iannello Originals Srl will process the personal data provided by users for the following purposes:
(a) to allow registration on the Site and use the services reserved for registered users, as well as to allow compliance with the obligations deriving from the law or regulations in force, in particular, in the administrative, accounting and public safety fields. The legal basis of the processing is the need for Raffaele Iannello Originals Srl to carry out pre-contractual measures adopted at the request of the interested party or to fulfill a legal obligation;
(b) in the case of placing an online purchase order, to allow the conclusion of the purchase contract and the correct execution of the operations connected to the same (and, if necessary according to sector legislation, to fulfill tax obligations). The legal basis of the processing is the obligation of Raffaele Iannello Originals Srl to execute the contract with the interested party or to fulfill legal obligations;
(c) subject to the express consent of the user, for Raffaele Iannello Originals Srl to send information and promotional communications (including the newsletter) relating to the products offered for sale on the Site as well as for carrying out market research also aimed at assessing the degree of user satisfaction (customer satisfaction), by means of email and/or the postal service (so-called "marketing" purposes). The legal basis of the processing is the consent of the interested party;
(d) subject to the user's consent, for the analysis of his consumption choices and purchasing habits (so-called "profiling"), by Raffaele Iannello Originals Srl through the detection of the type and frequency of purchases made online in order the sending of informative and/or advertising material of specific interest to the user in the manner described in point (c) above. The legal basis of the processing is the consent of the interested party;
(e) limited to the e-mail coordinates provided by the user in the context of the purchase of a product offered on the Site, to allow the direct sale of similar products without the need for the express and prior consent of the user and on condition that the user does not exercise the right to object in the ways described in art. 3 below (so-called "soft spamming"). The legal basis of the processing is the legitimate interest of Raffaele Iannello Originals Srl to send this type of communication. This legitimate interest can be considered equivalent to the interested party's interest in receiving "soft-spam" communications;
(f) to respond to user requests. The legal basis of the processing is the legitimate interest of Raffaele Iannello Originals Srl to execute the user's requests;
(g) in the event that the user who has not logged in to the Site abandons the purchase process without completing the order, for the sending of an email aimed at reminding the user of the possibility of completing the purchase. The legal basis of the processing is the execution of pre-contractual measures;
(h) to share personal data necessary to allow interaction with social network platforms, such as Facebook, Pinterest and Instagram. The legal basis of the processing is the legitimate interest of Raffaele Iannello Originals Srl to carry out this type of activity.
Sensitive data
Sensitive or judicial data of users are not processed by Raffaele Iannello Originals Srl.
IP addresses and log files
Raffaele Iannello Originals Srl will keep, within the terms of the law, the log files and IP addresses used when making an online purchase, in order to prevent and ascertain any fraud in online transactions.
3. Provision of data and consequences in case of non-consent to treatment
The provision of data for the purposes referred to in points (a) and (b) of the art. 2 above is merely optional. However, since this processing is necessary to allow registration on the Site and the execution of the online purchase service, any refusal by the user to provide the data in question will make it impossible to register on the Site and conclude an online purchase.
With reference to the purposes of the processing referred to in point (c) (so-called "marketing" purposes) of the art. 2 above, consent to the processing of personal data is purely optional. Failure to consent will not have any consequence on the possibility of registering on the Site and/or making purchases on the same but will only imply the impossibility of receiving, from Raffaele Iannello Originals Srl, information and promotional communications relating to the products offered for sale on the Site - including the newsletter - in relation to its own or third party products and services, as well as for carrying out market research also aimed at assessing the degree of user satisfaction (customer satisfaction), by means of email and the postal service.
The user's consent to the processing of data for profiling purposes is purely optional. Failure to consent to the processing of personal data for the purposes referred to in art. 2, lit. (d) above (so-called "profiling" purposes) will make it impossible for Raffaele Iannello Originals Srl to carry out the detection of the type and frequency of purchases made online by the user in order to send the latter information material and/or advertising of your specific interest.
The provision of data for the purpose referred to in point (f) of the art. 2 is purely optional, but any failure to provide it will prevent Raffaele Iannello Originals Srl from responding to user requests.
The provision of data for the purpose indicated in letter (h) of the art. 2 is purely optional but failure to provide it will not allow the user to interact with the related social network platforms through the Site.
Without prejudice to the foregoing, it is understood that Raffaele Iannello Originals Srl may in any case use the user's personal data for the sole purpose of correctly fulfilling the obligations established by the laws in force and the obligations deriving from the contractual relationships existing between the user and Raffaele Iannello Originals Srl.
In any case, the user may revoke any consent given for the purposes described in points (c) (so-called "marketing" purposes) and (d) (so-called "profiling" purposes), or oppose the processing for purposes referred to in letter (e) ("soft spamming") as well as (g):
- by contacting Raffaele Iannello Originals Srl at the addresses indicated in art. 1 preceding;
- through the appropriate link at the bottom of any e-mail with promotional content sent by Raffaele Iannello Originals Srl. The opposition expressed in these ways also extends to the sending of communications via the postal service.
4. Method of treatment
The processing of the user's personal data will mainly be carried out with the aid of electronic or automated means, according to the methods and with the tools suitable for guaranteeing its security and confidentiality in accordance with the GDPR.
The information acquired and the methods of treatment will be pertinent and not excessive with respect to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.
Scope of data communication
The personal data provided by the user, for the purposes described in art. 2 above, may be brought to the attention of or communicated to the following subjects:
- to employees and/or collaborators of Raffaele Iannello Originals Srl for the performance of administration, accounting and IT and logistic support activities who act, respectively, as managers and persons in charge of processing;
- to subjects who manage online payment transactions through the Site;
- to all those public and/or private subjects, natural and/or legal persons (legal, administrative and tax consultancy firms), if the communication is necessary or functional for the correct fulfillment of the contractual obligations assumed in relation to the services provided through the Site , as well as the obligations deriving from the law;
- to all those subjects (including the Public Authorities) who have access to the data by virtue of regulatory or administrative provisions;
- to companies or persons in charge of printing, enveloping, shipping and/or delivery services and/or collection of products purchased through the Site;
- to the company that sends, on behalf of Raffaele Iannello Originals Srl, the newsletters and other information communications sent on behalf of the latter.
All personal data provided by users in relation to registration on the Site and/or purchase through the Site are not subject to disclosure. The updated list of data processors and persons in charge of processing can be consulted at the headquarters of the Data Controller.
6. Data retention
The user's data will be kept only for the time necessary to guarantee the correct provision of the services offered and in any case no later than the terms of the law.
Personal data will be stored according to the following logics:
for marketing and profiling purposes, until consent is revoked. For inactive users, personal data will be deleted one year after the sending of the last viewed email;
for the purpose of executing the sales contract, for 10 years from the date of receipt of the purchase order;
for purposes of defense in court, until the final judgment becomes final;
for the purpose of complying with the law, for the time necessary for this purpose;
for the purpose of performing any service requested through the Site, for the time necessary to execute the request.
In the event of closure of the Site account on the user's initiative, the data contained therein will be kept for a period not exceeding one quarter, without prejudice to any specific legal obligations on the conservation of accounting documentation or for public safety purposes.
Right of access to personal data
The user has the right to:
a) obtain confirmation of the existence or not of personal data concerning him and their communication in an intelligible form; as well as to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
b) get directions:
- on the origin of personal data, on the purposes and methods of treatment, on the logic applied in case of treatment carried out with the aid of electronic instruments;
- on the identification details of the Data Controller;
- on the subjects or categories of subjects to whom the data may be communicated or who can become aware of them in their capacity as designated representative on the territory of the state, managers or agents;
c) get:
- updating, rectification or integration of data concerning him;
- the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is necessary for the purposes for which the data were collected or subsequently processed;
- the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
- data portability;
d) oppose, in whole or in part:
- for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection;
- to the processing of personal data concerning him, envisaged for the purposes of commercial information or the sending of advertising material or direct sales or for carrying out market research or commercial communication.
The above rights may be exercised with a request to the Data Controller, at the addresses indicated in art. 1.
Changes
Raffaele Iannello Originals Srl reserves the right to make changes to this information at any time, giving suitable publicity to the users of the Site and guaranteeing in any case adequate and similar protection of personal data. In order to view any changes, the user is invited to regularly consult this information.
--------------------------------------------------------------------------------------------------
INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
Premise
This disclosure is provided by Raffaele Iannello Originals Srl, with registered office in Milan (MI), via Giulio Uberti 29 (VAT IT08697280967), share capital of Euro 10,000 fully paid up.
In this information Raffaele Iannello Originals Srl acts as Data Controller pursuant to art. 13 of the GDPR of personal data.
Definitions in the singular also include those in the plural, and vice versa.
***
In compliance with the GDPR, with this disclosure the Data Controller intends to inform you that the company will process the personal data provided through this platform under the following conditions.
Art. 1. Purpose and legal basis of the processing. Compulsory or optional provision. Consequences of refusal to treatment.
The processing of personal data through the Platform is aimed at:
a. subject to the user's express consent, for the Data Controller to send information and promotional communications (including the newsletter) relating to the products offered for sale by the Data Controller as well as for carrying out market research also aimed at evaluate the degree of user satisfaction (customer satisfaction), by means of email and/or text messages and/or the postal service (so-called "marketing" purposes). The legal basis of the processing is the consent of the interested party;
b. subject to the user's consent, for the analysis of his consumption choices and purchasing habits (so-called "profiling"), by the Data Controller through the detection of the type and frequency of purchases made for the purpose of sending material information and/or advertising of specific interest to the user by email and/or sms and/or the postal service. The legal basis of the processing is the consent of the interested party.
The consent to the processing of your data for marketing and profiling purposes is purely optional. Failure to consent will only imply the consequences described below.
Failure to consent to the processing of data for marketing purposes will make it impossible for you to receive advertising material relating to the Data Controller's products as well as the impossibility for the Data Controller to carry out market surveys, also aimed at assessing the degree of user satisfaction, as well as to send you newsletters.
Failure to consent to the processing of your personal data for profiling purposes will make it impossible for the Data Controller to carry out the detection of the type and frequency of purchases made by the user for the purpose of sending the latter information material and / or advertisement of your specific interest.
We remind you that you may also object to the processing of your personal data via the appropriate link at the bottom of any promotional email sent by the Data Controller and/or by replying "STOP" to the communication sent by the Data Controller.
Sensitive/judicial data
The Data Controller does not process sensitive or judicial data.
Art. 2. Processing methods
The processing of personal data concerning you will mainly be carried out with the aid of electronic or automated means, according to the methods and with the tools suitable for guaranteeing the security and confidentiality of the data in compliance with the GDPR.
The information acquired and the methods of treatment will be pertinent and not excessive with respect to the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.
Art. 3. Communication and dissemination of data
Your data may be communicated:
- to all those subjects (including the Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions;
- to employees and/or collaborators of the Data Controller who may be in charge of installing, maintaining, updating and, in general, managing the hardware and software of the Data Controller or which the latter uses for the provision of its services;
- to the employees and/or collaborators of the Data Controller;
- to the company that sends the newsletters on behalf of the Data Controller;
- to all those public and/or private subjects, natural and/or legal persons (legal, administrative and fiscal consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional to the correct fulfillment of the obligations deriving from the law.
The data concerning you will not be disclosed, except in anonymous and aggregated form, for statistical or research purposes.
Art. 4. Point of contact
The Data Controller of personal data can be contacted at the following email address: privacy@rafz.com
Art. 5. Retention of personal data
The Data Controller will keep your data:
to. for marketing and profiling purposes, until consent is revoked. For inactive users, personal data will be deleted one year after the sending of the last email viewed.
b. for the time necessary to execute user requests.
c. for purposes of defense in court, until the sentence becomes final.
d. for the purpose of complying with the law, for the time necessary for this purpose.
In any case, the Data Controller will keep your personal data for the other purposes indicated in this information in the terms permitted by law.
Art. 6. Rights of the interested party
Pursuant to art. 13 of the GDPR, the Data Controller informs you that you have the right to:
- ask the Data Controller to access your personal data and correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
- revoke the consent to the Data Controller at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
- propose a complaint to a supervisory authority (e.g.: the Guarantor for the protection of personal data).
In particular, the right to portability implies that you have the right to receive the personal data concerning you provided to the Data Controller in a structured, commonly used and automatically readable format and you have the right to transmit such data to another data controller of the processing without impediments by the Data Controller.
Art. 7. Modifications
The Data Controller reserves the right to make changes to this information at any time, giving suitable publicity to users of the Platform and in any case guaranteeing adequate and similar protection of personal data. In order to view any changes, you are invited to regularly consult this information.