PRIVACY POLICY

DONNA ECO’ PRIVACY POLICY

PERSONAL DATA

 

Introduction

We take your privacy very seriously and are committed to protecting it. We believe you should be able to easily know what personal data we collect and use, as well as know your rights in relation to your personal data.

This privacy policy (“Privacy Policy”) explains our policies and practices regarding how we collect, use, and disclose the personal data we collect through our e-commerce site, our social channels, or during our events.

We recommend that you read this Privacy Policy carefully as it provides important information about your personal data.

Who we are

“Donna Eco’”, “we”, “us” and “our” refer to Donna Eco’ as the data controller of personal data, unless otherwise specified in our Privacy Policy.

Donna Eco’ is a limited liability company with registered office in Via Savona, 5 int 2 Castelvolturno (CE), Italy.

Donna Eco’ is a brand of the company Giuma s.r.l.s. – Registered Office: Via Cicori, 18 – 80010 Quarto (NA)

What personal data we collect and how it is collected

Personal Data means information concerning an identified or identifiable natural person. For example, this may include a person's name, address, and gender.

We may collect personal data directly from you (for example, when you participate in one of our events or when you purchase online on our e-commerce site) or indirectly (for example, through the interaction of your electronic devices with our website, electronic forms, or mobile applications).

Information You provide to us

You may provide us with information:

–    when you create an online account;

–    when you subscribe to our newsletter;

–    when you interact with our social channels;

–    when you participate in one of our events.

 

Depending on what you provide to us, such information may include:

–    Your identity (including Your name, surname, gender, image, nationality);

–    Your contact details (including Your postal address, e-mail address, telephone numbers);

–    Your marital status (including Your title);

–    Your purchases (including purchase history, order details);

–    Your preferences;

–    certain payment information (including billing information,

payment type or method, debit or credit card number);

–    other information you may provide by filling out forms or contacting us (including Your feedback).

 

We will inform you when Your information is necessary to process your request, answer Your

questions or provide You with our products and services. If you do not provide us with this information, there may

be delays or a failure to fulfill Your request, answer Your questions, and provide

products or services intended for You.

 

We want to ensure that the personal data we hold is always accurate, and therefore we invite you to update Your information if there are any changes. We may also ask you to update Your information from time to time.

We advise you to provide only the data requested or necessary for Your request, with the exception of any

sensitive information relating to racial or ethnic origin, political opinions, religious

or philosophical beliefs, data relating to health, sexual life or sexual orientation.

 

Information collected indirectly:

We may collect information when you use our Digital Platforms, such as your IP address or

other navigation information (including browser, operating system, device model), through cookies

or similar technologies stored on your device. Some cookies are necessary for the proper functioning of our e-commerce site, and others are used for analytical purposes that help us provide personalized and tailored services and a better digital experience. For more information on cookies and how to change your preferences, please read our Cookie Policy.

 

We may also collect information about you from third parties, for example, if your spouse contacts us on your behalf or from your friends who provide us with information about you to invite you to events that may interest you.

If you provide us with third-party personal data, you must ensure that you are authorized to communicate such information to us and be aware that, without us taking further measures provided for by data protection laws, we may collect, use, and disclose such information for the purposes described in our Privacy Policy. For example, you must ensure that the data subject is aware of the various aspects described in this Privacy Policy. The data subject must also provide the consents illustrated in our Privacy Policy in relation to how we will process their personal information.

Minimum age limit

We remind you that we do not collect, directly or indirectly, personal data of persons under 16 years of age, subject to any local law establishing a different minimum age. We therefore ask you not to provide us with personal data of persons who do not meet this requirement.

How personal data is collected and why it is used

We collect and use Your personal data based on one or more of the following legal bases:

–    we have obtained Your prior consent (for example, when you subscribe to our newsletter). We remind you that for this specific legal basis, you have the right to withdraw Your consent at any time (see below "What rights do you have over Your personal data?");

–    processing is necessary in relation to any contract between Donna Eco’ and You (for example, when you make a purchase);

–    we have a legitimate interest in carrying out the processing, and such legitimate interest is not overridden by Your interests, fundamental rights, or freedoms (for example, to prevent payment fraud);

–    we must process Your personal data to comply with applicable laws and regulations.

Depending on the context, we may use Your personal data to:

–    provide You with the requested products or services;

–    conduct checks to identify You and verify Your identity;

–    send marketing communications – with Your prior consent (see the "Marketing Communications" section);

–    provide You with after-sales services and manage refunds;

–    answer Your questions, suggestions, and requests, including the exercise of Your rights as a data subject;

–    manage complaints and disputes;

–    manage the events you have registered for and/or attended;

–    detect, prevent, and combat any fraudulent or illegal activity, including protecting Your transactions from

payment fraud, acting against counterfeiting and against the resale of our products in violation of our terms

and conditions of sale and/or outside our distribution network;

–    manage the stock of certain types of limited edition products to allow for an equitable distribution of the products we sell;

–    monitor and improve our e-commerce site;

–    conduct statistical analyses, in particular to adapt our product offering (including the use of Your nationality after anonymization);

–    improve our products and services;

–    provide information to regulatory bodies when required by law, in particular to comply with our legal obligations in terms of warranty, prevention, and fight against fraud, money laundering, and terrorist financing.

 

Marketing communications (newsletter, invitations, etc.)

With Your prior express consent (usually by sending your information through the form on our e-commerce site), you can receive information on offers, services, products, or events sent by Donna Eco’

We rely on Your consent to the processing of personal data that you provide to us for this purpose. Therefore, if you no longer wish to receive such information, you can withdraw Your consent at any time (see the "What rights do you have over Your personal data?" section below).

We may ask you to confirm or update Your marketing preferences if you ask us to provide other products and/or services in the future, or if there are changes in law, regulation, or the structure of our business.

How long we keep Your personal data

Your personal data is processed for the period necessary for the purposes for which it was collected, to fulfill legal and regulatory obligations, and for the duration of any period necessary to establish, exercise, or defend any right.

 

In order to determine the most appropriate retention periods for your personal data, we have taken into particular consideration the quantity, nature, and sensitivity of the personal data, the reasons why we collected it, the service you deserve and expect from us jointly with the applicable legal requirements.

For example:

–    regarding our potential customers (prospects): your data is archived for three years from your last action and then deleted or archived to comply with legal retention obligations;

–    regarding our customers: your data is kept for the duration of our business relationship and up to ten years, after which it will be deleted or archived to comply with legal retention obligations;

–    regarding the cookies used on our e-commerce site: they are kept for a maximum of 13 months from the moment they were installed on the device.

 

How we disclose and transfer Your personal data

We may disclose Your personal data only to the parties indicated below and for the following reasons:

–    We disclose Your personal data to Donna Eco’ employees who need to access Your personal data and are authorized to process it in order to achieve the aforementioned purposes and who undertake to maintain its confidentiality.

–    We may disclose Your personal data to the departments responsible for customer relations, distribution, e-commerce, communication, legal affairs, finance, internal control, IT management, and security for the purposes indicated in our Privacy Policy and to provide You with an adequate level of service. This

may include providing the requested products and services, improving the services provided, and – with Your consent – sending marketing communications relating to offers, services, products, or events (for this purpose, you can withdraw your consent at any time – see the "What rights do you have over Your personal data?" section below).

–    We may also disclose personal data to third-party providers acting on behalf of Donna Eco’. and approved by Donna Eco’. All such processing is based on our prior instructions established in a binding contract that complies with the requirements of applicable law. Such disclosures are made for various purposes including:

o    IT development and support;

o    hosting and conducting commercial and marketing studies and marketing campaigns;

o    verifying Your data, authenticating payments and fulfilling orders and payments, to third parties providing payment or order fulfillment services;

o    delivery services.

These providers are committed to confidentiality and are not authorized to use personal data for other purposes. We also require them to use appropriate security measures to protect Your personal data.

 

–    We may be obliged by the binding requirements of an applicable law, or for the purpose of responding to legal proceedings or other legitimate requests, to disclose personal data to authorities or third parties.

–    We may also disclose or otherwise process Your personal data, in accordance with applicable law, to defend our legitimate interests (for example, in civil or criminal legal proceedings). For example, we may disclose such personal data as necessary to identify, contact, or bring legal action against a person or entity who may be violating our Terms and Conditions of Sale and Use, or who may be causing injury to or interfering with other users of our e-commerce site and our social channels.

 

 

How your data is protected

All your personal data is strictly confidential and will be accessible, on a strictly need-to-know basis, to duly authorized personnel of Donna Eco’ and third-party providers acting on our behalf with adequate technical and organizational security guarantees.

Donna Eco’ has implemented security measures to protect personal data from unauthorized access and use. We follow appropriate security procedures in the storage and disclosure of personal data to prevent unauthorized access by third parties and to prevent accidental loss of

your data. We limit access to your personal data only to those who have a genuine business need. Those who access your data will be subject to a confidentiality obligation towards Donna Eco’.

 

We also have procedures in place to deal with any suspected data security breach. We will notify you or any relevant regulatory authority where we are legally required to do so.

We also require the parties to whom we transfer your personal data to comply with the same procedure. However, unfortunately, transmitting information via the Internet is not completely secure. Therefore, we cannot guarantee the security of personal data transmitted by you via the Internet.

Any such transmission is at your own risk, and you acknowledge and agree that we will not be responsible for any unauthorized use, distribution, damage, or destruction of your information, except where we are legally required to accept such responsibility. Once we receive your personal data,

we will use the security measures mentioned above.

 

What rights you have over your personal data

In accordance with applicable data protection laws, you may, at any time, request access, rectification, erasure, and portability of personal data or restrict and object to its processing. A summary of these rights is provided below:

The right of access : the right to obtain a copy of Your personal data.

The right to rectification : the right to request the correction of any errors in Your data or to complete Your information.

The right to erasure : the right to request the deletion of personal data in certain situations.

The right to restriction of processing : the right to request the restriction of the processing of Your personal data, in certain circumstances, for example if you dispute the accuracy of the data.

The right to object to processing : the right to object:

—    at any time to the processing of Your personal data for direct marketing (including profiling);

—    in certain other situations, to the continued processing of Your personal data, e.g., processing carried out for our legitimate interests.

 

When the processing of Your personal data has consent as its legal basis, you can decide at any time to withdraw it. If Your consent is withdrawn, this will not affect the processing of Your personal data justified by other legal bases, such as the fulfillment of Your orders and the retention of order-related data, as required by applicable law.

If you no longer wish to receive our marketing/promotional information, we remind you that you can withdraw Your consent to direct marketing at any time directly from the unsubscribe link included in each electronic marketing message we send to you. In this case, we will promptly update our databases and take all reasonable steps to fulfill the request as soon as possible, but we may continue to contact You where necessary in relation to any product or service you have requested.

To exercise Your rights, you can contact us using the contact details provided in the "How to contact us" section below.

Please note that when exercising one of the rights listed above, you will be asked to let us know which right you wish to exercise and to provide information (copy of an identity card, passport, or other legally recognized identity document) for identification purposes in order to process Your request and protect You against fraudulent requests from third parties.

How to contact us

For matters related to your account, to withdraw your consent, to ask general questions, or to submit a complaint, please contact our Customer Service:

–    By e-mail: info@donnaeco.it

–    By phone: +39 351 574 0422

–    By mail: Donna Eco’, 24, Via Savona, 5 int 2 – 81030 Castelvolturno (CE)

 

For matters specifically related to marketing e-mails, we remind you that you can, at any time, unsubscribe directly via the "unsubscribe" link present in any electronic marketing message we have sent you.

If you have any questions or concerns about our Privacy Policy or data processing, you can contact our Group Data Protection Officer at info@donnaeco.it.

Changes to our Privacy Policy

This privacy policy reflects our current practices and is subject to change and update from time to time. When we post changes to this Privacy Policy, we will change the "Effective Date" at the top of this Privacy Policy to indicate when such changes have become effective.

If we materially modify this Privacy Policy, we will inform you through a notice indicating such modification at the beginning of this Privacy Policy and on the home page of the "donnaeco.it" website.