The company Stefano Ricci S.p.A. – registered office in Via Faentina 171, Fiesole (FI), Italy, email@example.com (hereinafter the “Company”) – informs you that it is the Data Controller – in accordance with Article 4, no. 7 and Article 24 of Regulation (EU) 2016/679 “General Data Protection Regulation” (hereinafter the “Regulation” or “GDPR”) – of the personal data which you may wish to provide by means of this website.
Such data include your identification details (first and last name, date of birth), your email address and, in relation to the purchasing purpose, also the information relating to your credit card or to another payment method (altogether, the “Data”).
The Company informs you that it will proceed to the processing of your data for the following purposes, manually and/or with the aid of electronic or telematic means.
The Data will be acquired and processed in keeping with the Regulation for the following purposes: 1) purchase of products through the www.boutique.stefanoricci.com website; 2) marketing, including the sending via electronic mail of promotional news, newsletters, and invitations to promotional events; 3) profiling; and 4) transfer of the Data within the Stefano Ricci Group, with your consent.
The Data are acquired and processed by the Company on the basis of your consent, in accordance with Article 6, paragraph 1, letter a) of the Regulation. There is no obligation to provide the data but if you do not, the Data Controller will be unable to proceed with the aforesaid activities. Your Data will be stored in keeping with the principle of proportionality for a maximum period of 24 months for marketing purposes and 12 months for profiling purposes. At the end of these periods, your data will be anonymized or in any case stored in aggregate form for statistical purposes relating to consumer choices.
The Data may be communicated to any other third party when said communication is obligatory by law, including in the framework of the prevention/repression of any illicit activity.
Your Data will not be disseminated in any way. The Data Controller may communicate your Data, for the sole purposes described above, to third parties (e.g., suppliers) duly appointed as Data Processors in accordance with Article 28 of the GDPR. In addition, the Data may be communicated to any other party if said communication is compulsory under the law. Finally, the Data may be made known to persons authorized for such processing purposes by the Data Controller.
You may modify the Data related to your account at any time by accessing your “Account” page. In addition, you may exercise in relation to the Data Controller the rights set forth in Articles 15 et seq. of the GDPR which are applicable to you, among which the right to ask the Data Controller at any time for access to the Data, their rectification, erasure or limitation of the processing, as well as to oppose their processing. In addition, we remind you that you may always address complaints to the Italian Data Protection Authority or to any other competent control body.
Any request regarding the Data processed by the Data Controller may be sent to the Data Protection Officer (DPO) of Stefano Ricci S.p.A. by sending an email to the address firstname.lastname@example.org and/or by letter to the following postal address: Stefano Ricci S.p.A., Via Faentina 171, 50014 Fiesole (FI), Italy.
In the dedicated form it will be possible to express your consent in relation to the purposes indicated in the section “Purposes of the Processing”. The consent of the concerned party is necessary in accordance with Article 6, paragraph 1, letter a) of Regulation (EU) 670/2016 and the harmonizing Italian legislation. Such consent must be expressed in specific form for each of the purposes indicated below: