Privacy policy
The Storesnet - Rete di Imprese. Via Fonteiana 85 00152 Roma - P. IVA 17247361003 Information notice pursuant to Art. 13 and Art. 14 of the European Regulation 679/2016 on the protection of personal data [GDPR]) In compliance with the requirements set by the General Data Protection Regulation, the Data Controller provides the data subject with the following information regarding the processing of personal data carried out.
| DATA CONTROLLER | |
| Data Controller | The Storesnet |
| Address | Via Fonteiana 85 00152 Roma |
| VAT / Tax Code | 14510591002 |
| Contacts | info@iamstores.com |
| Legal representative | 2.0 Rappresentanze srl |
| Privacy contact person | 2.0 Rappresentanze srl (info@iamstores.com) |
| Data Protection Officer | Not present |
| Joint Data Controllers | · LDA Fashion srl |
| If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can apply in writing directly to the Privacy Contact Person indicated above. | |
| CATEGORIES OF DATA SUBJECTS | |
| List of categories of data subjects | Customers or Users, Potential customers, Shareholders, associates and members, Minors |
| PROCESSING CARRIED OUT | |
| Online commercial activities with or without customer loyalty programs | |
| Description | Activity relating to the processing of personal data for the production, distribution and sale of goods or services online. It may include customer loyalty initiatives through subscription to a loyalty program. |
| SOURCE, PURPOSE, LEGAL BASIS AND NATURE OF DATA PROCESSED | |
| Source | The data is partly collected from the data subject and partly collected from third parties. Description of the source: data can be collected through our website(s) or third-party websites managed by us and through our management software. The data comes from a publicly accessible source |
| Purpose | 1. Mail or telephone order sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, mail or telephone order sales will not be carried out. 2. Online or radio/television sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, online or radio/television sales will not be carried out. 3. Customer management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 4. Compliance with tax and accounting obligations - Acquisition of data for printing and sending invoices in both paper and digital format. 5. Litigation management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 6. Monitoring of contractual compliance - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 7. Activity planning - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 8. Marketing (market analysis and surveys) - Consent not required when communications, for the purpose of direct sale of own products/services or for satisfaction analysis or market surveys, use the email addresses collected from the data subject in the context of the sale of a product or service similar to those object of the sale and without the express refusal by the data subject to such use, initially or on the occasion of subsequent communications. In each communication, information is given on the possibility to object to the processing at any time (so-called opt out). 9. Advertising - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 10. Promotional activities - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, profiling for promotional purposes of the data subject will not be carried out. 11. Customer satisfaction surveys - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 12. Radio-television information - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 13. Customer information on new services/products - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 14. Sending of informative and/or advertising material also via telephone or internet and instant messaging applications such as WhatsApp, Messenger, Telegram and similar - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, the sending of informative and/or advertising material will not be carried out. 15. Electronic information - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 16. Consulting activities - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 17. Service provision - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed |
| Legal basis | For purposes 1, 2, 3, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 16, 17: Consent of the Data Subject. For purpose 4: The processing is necessary to comply with a legal obligation to which the data controller is subject. For purpose 8: The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties. |
| Personal data processed | Topics of interest, Tax code and other personal identification numbers, Telephone contact, Bank details, Contact and communication data, Behavioral data, user profiles, consumers, taxpayers, etc., Residence address, Email address, Name, address or other personal identification elements, Declared profession, Video surveillance video recordings, Sex m/f |
| "Particular" data (sensitive data) are those defined by Arts. 9 and 10 of Regulation 2016/679/EU ("GDPR"). Such data are processed in compliance with the provisions of the GDPR as well as in light of the General Authorizations issued by the Data Protection Authority. | |
| Particular data processed | - |
| Legal basis art. 9 | |
| RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA | |
| Categories of recipients | The communication of your personal data, carried out on the legal bases provided for by Art. 6 of Regulation 2016/679/EU, is envisaged towards the following third parties: |
| Judicial offices, Consultants and professionals also in associate form, Companies and enterprises, Armed forces, Police forces, Employers, Associations of entrepreneurs and enterprises, Parent companies, Subsidiaries and affiliates, Associations and foundations, Shareholders, associated and registered members, Judicial authority, Revenue Agency, Internal processors, External processors, Authorized subjects, Private subjects (natural or legal persons), maintenance or supply companies of goods and services | |
| These entities, bodies, companies and professionals act as Data Processors appointed by The Storesnet or they are themselves Data Controllers of the personal data transmitted to them. | |
| Your personal data, or the personal data of third parties in your ownership, may also be communicated to external companies, identified from time to time, to which The Storesnet entrusts the execution of obligations deriving from the assignment received, to which only the data necessary for the activities requested of them will be transmitted. All employees, consultants, temporary workers and/or any other "natural person" who, authorized to process data, carry out their activity based on the instructions received from The Storesnet, pursuant to Art. 29 of the GDPR, are designated as "Persons in charge of processing" (hereinafter also "Persons in Charge"). The Storesnet provides adequate operational instructions to the Persons in Charge or to any Processors appointed, with particular reference to the adoption of and compliance with security measures, in order to guarantee data confidentiality and security. Precisely in reference to personal data protection aspects, you are invited, pursuant to Art. 33 of the GDPR, to report to The Storesnet any circumstances or events from which a potential "personal data breach (data breach)" may arise, in order to allow an immediate assessment and the adoption of any actions aimed at countering such an event, by sending a communication to The Storesnet at the contact details indicated above. The obligation of The Storesnet to communicate data to Public Authorities upon specific request remains unaffected. | |
| TRANSFER ABROAD | |
| Transfers to foreign countries (extra EU) or to international organizations | ·Arizona ·Transfer subject to appropriate safeguards (Art. 46) ·Code of conduct approved pursuant to Article 40, together with the binding and enforceable commitment by the data controller or data processor in the third country to apply the appropriate safeguards, including regarding data subjects' rights ·personal data are transmitted to a country of the United States of America through the use of a CRM software owned by a third party established in the U.S.A. |
| The transfer of your personal data abroad may take place if it is necessary for the management of the assignment received. For the processing of information and data that may be communicated to these subjects, the equivalent levels of protection adopted for the processing of personal data of its employees will be required. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory instruments provided for by Chapter V of the GDPR will be applied. | |
| METHODS, LOGIC OF PROCESSING AND RETENTION PERIODS | |
| Duration of processing | Data for loyalty purposes in the strict sense, i.e., necessary to allow membership in the loyalty program and for the management of the fidelity card, will be processed and stored for the administrative duration of the relative program, or in any case until cancellation and/or termination by the member occurs. In the event of withdrawal, deactivation due to non-use within a specific timeframe, expiration or return of the card (based on the provisions of the separate Loyalty Program Regulation), the retention period of personal data for exclusive administrative purposes (and not for profiling or marketing) will not exceed a quarter (without prejudice to any specific legal obligations on the conservation of accounting documentation). In such cases, the Data Controller has implemented suitable automatic data deletion mechanisms, also by third parties to whom the data may have been communicated. For other purposes, the processing will have a duration no longer than necessary for the purposes for which the data were collected. Video recordings data are stored for a maximum duration of 24 hours, with subsequent automatic deletion. |
| Your data are collected and recorded lawfully and fairly for the purposes indicated above in compliance with the principles and prescriptions of Art. 5 par. 1 of the GDPR. The processing of personal data is carried out using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee their security and confidentiality. | |
| NATURE OF DATA PROVISION | |
| The processing of personal data will be carried out for the following purposes: | |
| Purposes that do not require consent | - Compliance with tax and accounting obligations - Acquisition of data for printing and sending invoices in both paper and digital format. - Marketing (market analysis and surveys) - Consent not required when communications, for the purpose of direct sale of own products/services or for satisfaction analysis or market surveys, use the email addresses collected from the data subject in the context of the sale of a product or service similar to those object of the sale and without the express refusal by the data subject to such use, initially or on the occasion of subsequent communications. In each communication, information is given on the possibility to object to the processing at any time (so-called opt out) |
| Purposes that require consent | - Mail or telephone order sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, mail or telephone order sales will not be carried out. - Online or radio/television sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, online or radio/television sales will not be carried out. - Customer management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Litigation management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Monitoring of contractual compliance - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Activity planning - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Advertising - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Promotional activities - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, profiling for promotional purposes of the data subject will not be carried out. - Customer satisfaction surveys - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Radio-television information - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Customer information on new services/products - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Sending of informative and/or advertising material also via telephone or internet - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, the sending of informative and/or advertising material will not be carried out. - Electronic information - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Consulting activities - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. - Service provision - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed |
| Only subject to your explicit consent to be expressed at the bottom of this privacy notice, the data, whose purposes require consent, will be processed. The provision of data is however optional and will not cause prejudice in relation to the contractual relationship in place with the Data Controller | |
| For data collected and used for needs attributable to the execution of activities inherent to the contractual relationship and compliance with the indicated legal obligations, your consent is not required. Failure to communicate the personal data mentioned above will make it impossible to follow up on the relationship in question. For data collected and used for the legitimate interest of the Data Controller, your consent is not required (letter f, Art. 6, of the GDPR). The communication of the personal data mentioned above is optional but necessary for the execution of the services offered by the Controller. Any refusal to communicate such data will make it impossible to provide the requested services in whole or in part. | |
| RIGHTS OF DATA SUBJECTS (Arts. from 15 to 22 of the GDPR) | |
| Right of access | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to request access to their personal data from the controller. |
| Right to rectification | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to request the rectification of their personal data from the controller. |
| Right to erasure | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to request the erasure of their personal data from the controller. |
| Right to restriction | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to request the restriction of data concerning them from the controller. |
| Right to object | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to object to their processing. |
| Right to portability | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to exercise their right to data portability. |
| Right to withdraw consent | The data subject has the right, in accordance with the provisions of Arts. from 15 to 22 of the GDPR, to exercise their right to withdraw consent. |
| Right to lodge a complaint | The data subject has the right, pursuant to Art. 77 of the GDPR, to exercise their right to lodge a complaint before the supervisory authority. |
| AUTOMATED PROCESS | |
| Does an automated process exist? | YES |
| Automated processes or profiling methods | Without prejudice to the fact that even in the case of consent of the data subject we will not proceed with the processing (in any case prohibited for profiling purposes) of data suitable to reveal the state of health and sex life, we inform you that the methods of processing will in any case be relevant and not excessive with respect to the type of goods commercialized or services rendered. Profiling activity may concern "individual" personal data or "aggregated" personal data deriving from detailed individual personal data. Such processing may be carried out using personal data that are also aggregated according to predefined parameters depending on business needs. Such data may include personal information of various kinds, including data of a contractual nature and data relating to consumption made, purchases made, spending habits and volumes, levels of supply of goods and/or services, etc., from which it is possible to deduce further indications referable to each data subject (for example, consumption bracket, level of expenditure incurred at regular intervals, etc.). We recall with particular attention the fact that the provision of personal data and consent to disclosure to third parties for the purposes illustrated above are absolutely optional and voluntary (and in any case revocable without formalities even after provision), and failure to provide them will not determine consequences other than the impossibility for the data controller to proceed with the mentioned profiling. Even where you have given consent to authorize the Data Controller to pursue profiling purposes, you will still remain free at any time to withdraw it, sending a clear communication to this effect without any formality. Following receipt of this opt-out request, it will be the care of the Data Controller to promptly proceed with the removal and deletion of your data from the databases (the latter however not interconnected or a source of intertwining and comparison of data with those used for loyalty in the strict sense) and inform for the same purposes of deletion any third parties to whom the data have been communicated. Simple receipt of your deletion request will automatically count as confirmation of deletion. |
| Legal basis | Explicit consent of the data subject |
The Controller reserves the right to make all changes deemed appropriate or made mandatory by current regulations to this personal data processing notice, at its sole discretion and at any time. On such occasions, users will be appropriately informed of the changes made.
LDA FASHION S.R.L. Via delle Genziane, 13/E 00012 Guidonia Montecelio (RM) PEC ldafashionsrl@pec.gocciagroup.it P. IVA 14345861000 Information notice pursuant to Art. 13 and Art. 14 of the European Regulation 679/2016 on the protection of personal data [GDPR]) In compliance with the requirements set by the General Data Protection Regulation, the Data Controller provides the data subject with the following information regarding the processing of personal data carried out.
| DATA CONTROLLER | |
| Data Controller | Mr. Ravicini Andrea |
| Address | Via delle Genziane 13/E – 00012 Guidonia Montecelio (Roma) |
| VAT / Tax Code | RVCNDR82P05L182C |
| Contacts | PEC: ldafashionsrl@pec.gocciagroup.it |
| Legal representative | Ravicini Andrea |
| Privacy contact person | Ravicini Andrea (ldafashionsrl@pec.gocciagroup.it) |
| Data Protection Officer | Not present |
| Joint Data Controllers | · No joint data controller present |
| If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can apply in writing directly to the Privacy Contact Person indicated above. | |
| CATEGORIES OF DATA SUBJECTS | |
| List of categories of data subjects | Customers or Users, Potential customers, Shareholders, associates and members, Minors |
| PROCESSING CARRIED OUT | |
| Online commercial activities with or without customer loyalty programs | |
| Description | Activity relating to the processing of personal data for the production, distribution and sale of goods or services online. It may include customer loyalty initiatives through subscription to a loyalty program. |
| SOURCE, PURPOSE, LEGAL BASIS AND NATURE OF DATA PROCESSED | |
| Source | The data is partly collected from the data subject and partly collected from third parties. Description of the source: data can be collected through our website(s) or third-party websites managed by us and through our management software. The data comes from a publicly accessible source |
| Purpose | 1. Mail or telephone order sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, mail or telephone order sales will not be carried out. 2. Online or radio/television sale - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, online or radio/television sales will not be carried out. 3. Customer management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 4. Compliance with tax and accounting obligations - Acquisition of data for printing and sending invoices in both paper and digital format. 5. Litigation management - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 6. Monitoring of contractual compliance - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 7. Activity planning - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 8. Marketing (market analysis and surveys) - Consent not required when communications, for the purpose of direct sale of own products/services or for satisfaction analysis or market surveys, use the email addresses collected from the data subject in the context of the sale of a product or service similar to those object of the sale and without the express refusal by the data subject to such use, initially or on the occasion of subsequent communications. In each communication, information is given on the possibility to object to the processing at any time (so-called opt out). 9. Advertising - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 10. Promotional activities - Consent received from the data subject during the personal data collection phase through acceptance included in the privacy notice. In case of non-consent, profiling for promotional purposes of the data subject will not be carried out. 11. Customer satisfaction surveys - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 12. Radio-television information - Consent explicitly acquired from the data subject, stored in our management software and specific assets, without which the described activities will not be performed. 13. Infor |