INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
Pianoforte Holding S.p.A. (Yamamay), and Triboo Digitale Srl would like to provide you with complete and transparent information on the processing of your personal data (hereafter “Personal Data”) provided to and/or collected by the www.yamamay.com website (hereafter the “Site”).
1. Who collects your Personal Data
The subjects collecting and processing Personal Data in their capacities as Data Controllers (hereafter collectively “Data Controllers”) are:
-Pianoforte Holding Spa, with registered office in Milan, Corso Magenta 74
-Triboo Digitale Srl, with registered office in Milan, Viale Sarca 336
Pursuant to art. 29 of Legislative Decree no. 196/2003 as amended, the Data Controllers may appoint one or more chief data processors to process the Personal Data on their behalf (hereafter collectively the “Chief Data Processors”). At present, one of the Chief Data Processors appointed by Triboo Digitale Srl to the processing of your personal data is Thun Logistic S.r.l., who will process the data required to ship the merchandise and manage any returns you may make.
A complete updated list of the Chief Data Processors appointed by the Data Controllers can be obtained by request to the above addresses or by email to privacy@triboo.it.
2. Why do we process Personal Data
Personal Data will be processed by Triboo Digitale Srl for the following purposes:
a. administrative and accounting purposes:
(i) execution of the sales contract, fulfilling of accounting and legal requirements, after-sales services;
(ii) upon your consent, to allow you to register with the Site;
(iii) upon your consent, to process any requests for information and assistance you make via the Site.
Personal Data will be processed by Pianoforte Holding S.p.A for the following purposes:
b. upon your consent, for marketing purposes: more specifically, the sending of advertising or direct sale material, market research or commercial communications, also personalised with automated contact methods (email, other distance communication systems via communication networks such as, by way of example only: sms, mms, Whatsapp) and traditional methods (printed materials) and the proposal of personalised sales services of the Pianoforte Holding S.p.A. Group.
c. upon your consent, for profiling purposes, more specifically for analyses on your consumer preferences consisting in automated processing of Personal Data including the data related to purchases made via the online store. Such processing aims to provide analytical knowledge or foresee shopping preferences with the view of creating customer profiles.
For the purposes listed in point a. Triboo Digitale Srl may collect and process the following Personal Data:
- name, surname, email, date of birth, gender, address, telephone number, civil status, number of family members, profession, education
3. What happens if you do not consent to the collection of your Personal Data
Certain Personal Data we will highlight each time during the registration or shopping processes are essential to conclude the purchase contract, to fulfil administration and accounting requirements and/or process your requests for information or support and/or complete the Site registration procedure (Paragraph 2 letter a. )
The processing of Personal Data for profiling and marketing purposes (Paragraph 2 letters b. and c.) is optional and therefore such details will only be recorded to our Customer Relationship Management (CRM) systems for processing of Personal Data for marketing and profiling purposes when you grant your consent.
You are entitled, at any moment in time, to revoke your consent to the processing of your details for marketing and/or profiling purposes (Paragraph 2 letters b. and c.) sending a request to Pianoforte Holding S.p.A at the addresses provided above. Failure to confer your Personal Data and/or grant your consent to the processing of the same, will make it impossible to pursue profiling and marketing activities but will in no way affect your shopping activities on the Site.
4. How we process Personal Data
Personal Data conferred and/or collected by the Data Controllers is processed using automated systems and, in some cases, hard copies may also be processed and retained. More specifically, the processing of Personal Data for profiling and marketing purposes shall be recorded to the Customer Relationship Management (CRM) systems for processing of Personal Data for marketing and profiling purposes by Pianoforte Holding SpA. You hereby acknowledge that Personal Data can also be transferred abroad, also to Non-EU member states and the Public authorities in such states may have the right to access Personal Data.
Personal Data collected for administration-accounting purposes (Paragraph 2 letter a.) shall be retained for time required to execute the contract and/or process your request for information and support submitted via the Site, in accordance with the retention periods foreseen by applicable local rules and regulations.
The Personal Data collected for marketing and profiling purposes (Paragraph 2 letters b. and/or c.) shall be retained until the customer requests erasure of the same or revokes the consent to the processing of his/her Personal Data.
The Personal Data regarding the details of the purchases made on the Site used for profiling and/or marketing purposes shall be retained for the retention period foreseen by the provisions issued by the Guarantor Authority for the protection of personal data (hereafter: the “Authority” on 24 February 2005 or, if consent is granted, for the number of years foreseen by the provision regulating any preliminary verification request which may be presented by Pianoforte Holding S.p.A and adopted by the Authority where applicable.
When the aforementioned retention time elapses, the Personal Data shall be automatically erased or rendered permanently anonymous.
5. Who will process your Personal Data
Your Personal Data will be processed by:
- employees and collaborators of the Data Controllers appointed as designated officers;
- employees and collaborators of the Chief Processors designated by the Data Controllers to provide such processing services including (i) the companies that manage the physical stores and the online store and can view, amend and update the Personal Data on the CRM systems through which Pianoforte Holding S.p.A performs the processing activities for marketing and profiling purposes (ii) the companies that manage the retention of the Personal Data of the Data Controllers according to agreements or local regulations;
- third-parties established in the European Union and also outside the EU, Chief Data Processors appointed by the Data Controllers to provide, in particular, services regarding data entry and acquisition, deliveries, mailing of promotional materials, after-sales and customer care support, market research, management and maintenance of the CRM systems used by Pianoforte Holding S.p.A. performs its processing activities for profiling and marketing purposes and the other corporate IT systems.
You can receive the complete list of the Chief Data Processors designated by the Data Controllers sending a request to this email address privacy@triboo.it or to the postal addresses above. Personal Data can also be communicated to third parties, autonomous data processors, particularly to professionals or enterprises providing legal or tax assistance and advice and to companies managing credit or debit card payments. Personal data shall not be subject to any form of dissemination. Personal Data may be transferred to Countries outside the EU, Countries that do not provide adequate levels of data security, only in accordance with the guarantees established by the applicable laws in force.
6. Your rights
Pursuant to art. 7 of Legislative Decree no. 196/2003 of CHAPTER III of Regulation (EU) 2016/679, you are entitled, at any moment in time, to receive information on your Personal Data subject to processing by the Data Controllers (access right) and request the integration, rectification, erasure or opposition of the same. In addition to the aforementioned rights, as of 25 May 2018 (when Regulation (EU) 2016/679 comes into force), you can also exercise the following rights: processing restrictions, portability of data and claim proposals to be transmitted to the Supervisory Authority;
In particular, you are entitled to oppose, wholly or in part, the processing of personal data for the sending of advertising or direct sale material, market research or commercial communications, with automated contact methods (email, other distance communication systems via communication networks such as, by way of example only: sms, mms, Whatsapp) and traditional methods (mailing of hard copies).
If you prefer your personal data be processed using traditional contact methods only, you can oppose the processing of your personal data using automated contact methods.
In order to exercise your rights, you can send a request to the Data Controllers to this email address privacy@triboo.it or to the postal addresses above.
Art. 7 of Legislative Decree 196/2003. Rights of the Data Subject
1. The Data Subject has the right to request confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form.
2. In particular, the Data Subject has the right to obtain indications on :
a. the source of the personal data;
b. the purposes and methods of the processing;
c. the logic applied to processing if the same is carried out with the use of electronic means;
d. the personal data of the Data Controller, the persons in charge and the designated representatives pursuant to Art.5 paragraph 2;
e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as Representatives for the Country, Chief Processors or Designated Officers.
3. The Data Subject has the right to obtain indications on :
a. updating, rectification or, where interested therein, integration of the data;
b. erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. The Data Subject is entitled to oppose, totally or partially:
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
|
