Personal Data Protection

Last update: 1/9/2024

Spezieri is committed to being a reliable and responsible partner for every customer or user who comes into contact with us. This means that we are committed to paying the utmost attention to the collection and management of personal data that the customer/user provides to us or that we automatically acquire, adopting specific measures to guarantee their security, confidentiality, and integrity, in compliance with the provisions of Regulation (EU) 679/2016 (hereinafter the "Regulation").

This Privacy Policy specifies, among other things, which personal data we process regarding our customers and for what purposes. This policy also specifies the customer's rights with regard to such personal data.

1. DATA CONTROLLER

The Data Controller (hereinafter also referred to as the "Controller") is Profumatoria Srl (hereinafter also referred to as "Spezieri"), with its registered office in Italy, in Conegliano (TV), at Via Cristoforo Colombo n. 50, tax code/ VAT number (IT) 05480940260, which can be contacted by e-mail at info@spezieri.com.

2. TYPES OF PERSONAL DATA WE COLLECT AND PROCESS
• Spezieri may manage personal data of its customers or individuals who come into contact with us for various reasons, including users who browse and/or purchase products and services on our website: www.spezieri.com (the "Website").
• Data automatically acquired on the Website:

• Browsing data, data that the computer systems and software procedures used to operate the Website acquire during their normal operation and whose transmission is implicit in the use of Internet communication protocols.
• These are information that are not collected to be associated with the user but, due to their nature, could, through processing and association with data held by third parties, allow their identification. This category of data includes IP addresses or domain names of computers used to connect to the Website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server, and other parameters related to the operating system and computer environment. These data are not disclosed but are used solely for the purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning and are kept for the time defined by the relevant legal regulations.

The data could, however, be used to ascertain responsibility in case of hypothetical computer crimes against the Website. Except for this eventuality, such data shall be kept for 24 months.

To learn more, we invite you to view the "Cookie Policy" section at the following Internet address: https://spezieri.com/cookie-policy.

• Geolocation data. The internal search system on the Website collects, exclusively when used and after confirmation, data related to the geographical location, in order to obtain the appropriate search results (e.g., when searching for the boutique closest to you through the dedicated feature).
• Data voluntarily provided by the person:

1. Personal data: name, surname, date of birth, gender, tax code, and similar data;
2. Contact data: e-mail address, phone number, address of residence or domicile;
3. Data related to purchases made: date, quantity, and type, product code, sale amount, VAT number if applicable, shipping/billing address, data related to the payment method used, information on complaints, returns, warranties, refunds, and other information related to the sale of products;
4. Information about personal interests or preferences: Spezieri services, events, or initiatives that the person has joined, or expressions of appreciation for products or initiatives of the various brands marketed by Spezieri.
5. Username and password: when purchasing goods or services on the Website, joining one of the services provided through the Website, or activating a Personal Account on our website.
• Personal data collected through social media pages.

We may also collect some personal data when interacting with our social media pages. Some information is communicated directly by the person when they decide to share images published on our social media pages, comment on our posts, and/or express their appreciation for a product, one of our initiatives, or one of our events by selecting the appropriate features, as well as when they decide to write to us via private chat or other channels made available on social media.

We may also become aware of some information indirectly collected as a result of their interaction with our social media pages; for example, we may know the time and day when they express their appreciation for one of our posts or send a request via a message.

The knowledge of many of their personal data depends on the social media settings chosen by the person and the content they choose to make public. Among these personal data, their name, surname, some contact data, the image associated with their social profile, and the related information collected through login to these social media may be included. Therefore, we remind all individuals who come into contact with Spezieri that some of their data may be visible to us if they decide to follow our social media pages. For this reason, we invite them to take note of the privacy policy of the various social media and to check the privacy settings.

3. HOW WE USE PERSONAL DATA

Every time we acquire and process personal data of individuals who come into contact with us through various means, this will be done exclusively in compliance with the principles of lawfulness provided for by the regulations. Personal data will be processed based on the following principles of lawfulness of processing:

1. Consent, for the purpose of:
1. carrying out marketing activities, both through automated electronic means (e-mail, SMS, and similar) and through traditional channels (paper mail, telephone, and others);
2. analyzing personal aspects to identify consumption preferences.

The communication of personal data is entirely voluntary, but the failure to provide some of them may result in the partial or total impossibility of being involved in our marketing initiatives.

We point out that if you decide not to give your consent to the processing of your personal data for marketing purposes, this will prevent us from being able to involve you in our promotional initiatives, including our periodic updates via the newsletter service.

If you decide not to give your consent to the processing of your personal data for profiling purposes, this will not have any impact on your subscription to our promotional communications plan, but it will simply determine our inability to send you personalized promotional communications.

1. Fulfillment of contractual or pre-contractual obligations, for the purpose of:
1. allowing the purchase of products on the Website and fulfilling the related contractual obligations incumbent upon us;
2. creating a Personal Account on the Website for the use of the related dedicated services;
3. responding to contact requests and allowing us to provide the necessary assistance;
4. providing the services of the Website that the person has joined.
2. Fulfilling regulatory obligations to which Spezieri is subject, such as tax and administrative obligations.
3. Exercising a legitimate interest pursuant to Article 6, paragraph 1, letter f) of the Regulation, to pursue a legitimate interest of ours or of third parties, such as preventing fraud, improving management processes, or defending a right.

4. HOW WE PROTECT PERSONAL DATA

The processing will be carried out using computerized, paper-based, and electronic tools and is based on the principles of correctness, lawfulness, transparency, and protection of the rights of the person and their confidentiality.

In particular, the processing of your data, also for profiling purposes, may take place through automated processes and through the analysis of the type and number of your requests for information on products made within a predetermined time frame.

The data will be processed in such a way as to minimize the risks of destruction, loss, unauthorized access, or processing that is not authorized or not in accordance with the purposes of collection.

5. WITH WHOM WE SHARE PERSONAL DATA

The personal data of individuals who come into contact with Spezieri for various reasons will not be disclosed or sold.

To the extent permitted by law, their personal data may be accessible, for each processing purpose, to:

1. our service providers, who carry out technical, administrative, or organizational activities on our behalf;
2. public authorities, in response to formal and legitimate requests or in execution of legal obligations;
3. third parties, in the event of reorganization, merger, sale, joint venture, assignment, transfer of our business or part of it (also in relation to bankruptcies or similar proceedings);
4. persons authorized by Spezieri to process personal data, necessary to carry out activities strictly related to the provision of services, who have undertaken to maintain confidentiality or have an adequate legal obligation of confidentiality (e.g., Spezieri employees).

6. WHERE PERSONAL DATA ARE STORED

As a rule, the personal data of the user will be processed by Spezieri only in Italy and within the European Economic Area (EEA). However, in the course of our ordinary activities, we may use some providers (mostly IT service providers, e.g., hosting providers, cloud storage, e-mail server providers) that operate outside the EEA. We inform the user that, in this case, the transfer of data will only take place if there are adequate guarantees provided for by the applicable law.

7. HOW LONG WE KEEP PERSONAL DATA

The personal data of individuals who come into contact with Spezieri will be processed by Spezieri for varying periods of time, depending on the different purposes of the processing. In any case, for the sole period strictly necessary to achieve the purposes for which the data were collected and processed.

For the following processing purposes, the processing and storage of personal data will be as follows:

1. Purposes based on Consent:
2. Marketing activities: until consent is withdrawn;
3. Profiling activities: 7 (seven) years from the date of consent, with automatic renewal in case of new purchases at a Spezieri point of sale or on the Website.
4. Purposes based on contractual or pre-contractual obligations:
5. Purchase of products on the Website: until all contractual obligations related to the sale have been fulfilled;
6. Provision of services dedicated to the holders of a Personal Account on the Website: until the Personal Account is closed, at the request of the holder or at the request to close the specific service;
7. Provision of assistance services to users of the Website: until all commitments undertaken following the request for assistance, support, or recontact have been fulfilled;
8. Purposes of fulfilling regulatory obligations: varying depending on the different regulations in force in the country.
9. Purposes of legitimate interest: until such interest is achieved.

8. WHAT ARE THE RIGHTS OF THE PERSONAL DATA OWNER

The person who, for various purposes, comes into contact with Spezieri and whose personal data are retained, at any time, has the right to know what personal data we hold and the related processing, to request their update or correction, and, in the cases provided for by the applicable regulations, to obtain their cancellation, limitation of processing, or to object to their processing or to revoke the consent given previously.

They may also request the blocking of one or more of the communication channels used by Spezieri to contact them.

To this end, it is possible to contact Spezieri at the e-mail address: info@spezieri.com