PRIVACY
> Consulta in ITALIANO qui
NOTICE PURSUANT TO ART. 13 OF THE EUROPEAN DATA PROTECTION REGULATION 2016/679 (GDPR) AND PURSUANT TO THE APPLICABLE ITALIAN DATA PROTECTION LEGISLATION
This information notice provides information on the processing of users' personal data following registration and/or use of the services offered on the onlinestore.danesemilano.com, in compliance with the requirements of the European Data Protection Regulation 2016/679 (GDPR) and in accordance with the applicable national legislation on the subject, including data security and confidentiality profiles and further information provided through the Privacy Policy and Cookies Policy of the www.artemide.com website, which users are kindly requested to read.
1. PURPOSES AND METHODS OF PROCESSING PERSONAL DATA
The personal data whose compilation is required for the finalisation of the sale (Name and Surname, address, e-mail address, telephone contact), shall be processed by the company Artemide S.p.A. and/or by the subsidiaries Artemide Italia S.r.l. and Artemide Group S.p.A. (hereinafter, "Artemide Group"), for the purpose of:
a. enable you to finalise the purchase of the Products you have selected;
b. provide any services that you may have requested in connection with your purchase (e.g. transport of purchased products, possible handling of returns);
c. to fulfil legal obligations;
d. subject to your specific consent, given by ticking the appropriate box after carefully reading this information notice, to carry out activities of a commercial and promotional nature such as the sending of: newsletters, information and promotional material on Artemide products, special initiatives and/or promotions by traditional mail, e-mail, text messages such as sms and MMS and whatsapp)
2. METHODS OF PROCESSING
The processing of data for all the purposes indicated in point 1 will be carried out electronically and on paper, with automated and non-automated tools, for the time strictly necessary to achieve the purposes for which they were collected, according to principles of lawfulness, necessity and correctness.
3. CONSEQUENCES OF FAILURE TO PROVIDE DATA
The provision of the personal data marked with an asterisk is compulsory in order to proceed with the activities referred to in point 1.a), 1.b) and 1.c). If the data is not provided, it will not be possible to proceed with the sale and execution of the services requested.
However, the provision of data for the purposes indicated in point 1.d) remains optional and the processing of data is subject to your prior authorisation, which you may express using the appropriate consent form.
Where users provide personal data of third parties on the Site, they must take all necessary steps to ensure that the disclosure of such data, and its subsequent use for the purposes set out from time to time, is in accordance with applicable privacy legislation (e.g. before providing the data of third parties, such third parties must be informed and consent must be obtained if required by the European Data Protection Regulation 2016/679 (GDPR) and applicable national legislation).
4. DATA RETENTION
Your data will be processed on paper and electronically, by automated and non-automated means, for the time strictly necessary to achieve the purposes for which it was collected by Artemide. In particular, the data processed for the purposes referred to in paragraph 1, letters a) and b) of this information notice will be kept for the time strictly necessary to manage your purchase and, subsequently, will be kept for a period of no more than 10 years from the relative processing. The data processed for the purposes referred to in paragraph 1 letter c) will be kept for the period necessary for the management of tax and accounting obligations of the data controller. The data processed for the purposes referred to in paragraph 1, letter d) will be kept only for the period of time during which the service requested will be active, and in any case for a period of time not exceeding 24 months from the provision of the service.
5. SUBJECTS WHO MAY BECOME AWARE OF YOUR DATA
For the purposes indicated in point 1, within the Artemide Group's organisation, personal data can be accessed by the personnel in charge of the service you have requested and by the external Data Processors, if appointed. To obtain an updated list of the Managers appointed by the Controller and of the subjects to whom the data is communicated, please contact Artemide at the addresses indicated in art. 5 below.
For the purposes indicated in point 1, your personal data may be communicated to companies that are part of the Artemide Group, including, where applicable, subsidiary companies based outside the territory of the Italian Republic and, in certain limited cases, also outside the EU.
Your data may also be communicated to the following categories of persons:
• Public and private entities for the fulfilment of obligations under the law.
• External companies for transport services for the products you have purchased. In particular, the Artemide Group communicates the personal data of customers requesting delivery in Italy to BRT S.p.A., and of customers requesting delivery outside Italy to FEDEX, both companies acting as independent data controllers on the basis of contractual agreements, for the performance of logistics activities aimed at shipping and possible return of purchased products. The persons to whom the data are communicated undertake to use them only for the processing purposes indicated above, to keep them confidential and secure and to act in compliance with the applicable privacy regulations.
• External companies for enveloping, transmission, transport and sorting services of communications addressed to you.
• Third party companies responsible for providing support to us in the area of advertising, marketing and public relations, if you have given your consent for the purpose referred to in point 1.d.
• Third-party companies providing the online payment system. In particular, the Artemide Group uses third party payment systems to assist in the secure processing of personal payment information. The use of personal information by such third party processors is governed by their respective privacy policies which may or may not contain protective privacy protections such as this privacy policy. Payments are currently processed and handled using the third party provider selected at the time of payment, between Stripe and Paypal. Please refer to the privacy policy of the selected payment processor for more information. To access Stripe's privacy policy, click here. To access Paypal's privacy policy, please click here. Please note
• Third companies in the event of mergers, acquisitions, sale of a company or a branch of a company or other extraordinary transactions;
• professionals, self-employed collaborators, also in associated form, and business partners (i.e. third parties who provide services of a commercial, professional and technical nature for the management of the Site and the pursuit of the purposes specified in Article 1)
Your data will not be disclosed to unspecified persons.
6. DATA CONTROLLER AND RELEVANT SUBJECTS IN THE FIELD OF PRIVACY
The Data Controller is the company Artemide S.p.A. with registered office in Via Bergamo 18, 20010 Pregnana Milanese MI Italy. The person responsible for the web services offered is the pro tempore privacy contact for Marketing. Personal data may be processed by external parties appointed as Data Processors, and by internal staff, suitably trained in data processing and responsible for managing the service requested.
7. RIGHTS OF THE DATA SUBJECT
We also inform you that within the limits and under the conditions laid down in Articles 15 - 23 of the European Data Protection Regulation 2016/679 (GDPR), the Artemide Group guarantees and acknowledges your exercise of the following rights:
- the right to access personal data in their paper and/or electronic files;
- the right to request their rectification, updating and deletion, if incomplete or erroneous, as well as to object to their processing for legitimate and specific reasons;
- the right to have inaccurate personal data corrected without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration;
- the right to obtain the deletion of personal data concerning him/her without undue delay if one of the grounds set out in Article 17(1) of the European Data Protection Regulation 2016/679 (GDPR) exists;
- the right to obtain the restriction of processing when one of the cases referred to in Article 18(1) of the European Data Protection Regulation 2016/679 (GDPR) applies;
- the right to data portability within the limits and in the manner provided for by Article 20 of the European Data Protection Regulation 2016/679 (GDPR) and the Guidelines on data portability;
- the right to lodge complaints with the competent authority.
The relevant requests must be brought to the attention of the Data Controller, by post, at the address:
Artemide S.p.A.
Via Bergamo 18,
20006 Pregnana Milanese MI
Italy
or by sending an email to:
privacy@artemide.com
Users may also contact Artemide S.p.A. at any time at the addresses indicated above in order to express their preference for the means of contact preferred and/or to revoke any consent given with regard to one or all of the above methods of contact.