Privacy policy
PRIVACY INFORMATION NOTICE
pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”)
Centro Calzaturiero protects your privacy for the processing of the personal data acquired through the website www.modadistrict.com
1. GENERAL INFORMATION
We would like to inform users (hereinafter, also in their capacity of “data subjects”, pursuant to art. 4, para. 1 of the GDPR) of the following general profiles, valid for all processing contexts:
-
The Data Controller is Centro Calzaturiero S.r.l., in the person of its legal representative, with registered office in Gambolò (27025 - PV) - viale Industria 122, tax code and VAT no.: 01268960182 whom you can also contact at the following addresses: privacy@modadiscrict.com / tel.: +39 0381.3271 – fax: +39 0381.930002.
-
All user data directly or indirectly referring to natural persons shall be processed lawfully, fairly and transparently where the data subject is concerned, in compliance with the general principles laid down by art. 5 of the GDPR.
-
We have adopted specific security measures to prevent the loss, unlawful or incorrect uses of the data and unauthorised accesses thereto.
-
Through the website we collect, with the use of IT or paper-based systems and media (cf.: hard copy print of a computer document), solely “common” data, i.e. information that does not include “special categories of data” (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation) or “judicial data” (personal data relating to criminal sentences and to offences or related security measures).
-
The website is hosted by Centro Calzaturiero s.r.l., Viale Industria 122, 27025 Gambolò PV (Italy), VAT no. 01268960182 and is physically located at the premises of Centro Calzaturiero s.r.l., Viale Industria 122, 27025 Gambolò PV (Italy); the servers used for the purposes of managing the website, therefore, are located inside the European Economic Area; any transfers of the data to sub-processors abroad shall be covered by standard contractual clauses and/or by a related adequacy decision, in compliance with articles 45 and 46 of the GDPR.
-
The updated list of the persons authorised to perform processing operations on behalf of the Controller and that of the external data processors appointed by Centro Calzaturiero is available at the registered office of the Controller.
-
Lastly, the privacy policy of Centro Calzaturiero does not include the processing of the personal data of natural persons younger than 14 (pursuant to art. 2-quinques, para. I of (It.) Legislative Decree no. 196/03). This website, therefore, is not intended to intentionally collect personal information concerning such minors. In the event that information on minors is registered by accident, the Controller will promptly delete it, directly and/or on request of the users.
2. YOUR PERSONAL DATA
We hereby describe the methods by which the personal data, that is acquired through this site (www.modadistrict.com) and may involve interaction with the user, is managed:
-
(2.1) navigation data
-
(2.2) contacts/chat with us
-
(2.3) online shop
-
(2.4) newsletter
-
(2.5) other data
-
(2.6) cookies
2.1 Navigation data
The IT systems and software procedures used for running this website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated to identified data subjects, but may, by its very nature and through handling and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by the users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources required, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code that indicates the status of the reply given by the server (success, error, etc.) and other parameters relating to the user’s operating system and IT environment.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter c) |
This data is used for the sole purpose of retrieving anonymous statistical information on the use of the website and to control its correct operation. In addition, the data could be used to ascertain liability in the event of hypothetical computer crimes against the website (legitimate interest of the controller - GDPR recital no. 49). |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
The data shall be kept for very brief periods of time or for the time that is strictly necessary and required by the navigation. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The data shall not be provided by the data subject but they shall be acquired automatically by the website’s technological systems. |
2.2 Contact
The “contacts/contact us”, “chat with us” section and other sections of the website contain a contact request (“assistance”/“live assistance”) which allows the data subject to request contact with the staff of Centro Calzaturiero or to start a telematic conversation, whereby the Controller acquires the contact data received on the data subject’s spontaneous initiative.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter c) |
We request only the identification and contact data (name/surname/e-mail) that are necessary for us to be able to reply to the contact requests of the data subjects on fields and/or matters of interest to the user. The request is sent based on the data subject’s freely given and informed consent, expressed through a clear affirmative act (GDPR - art. 6, para. 1, letter a, recital no. 32) through the compilation of the relevant form and/or by virtue of the performance of precontractual measures adopted on request of the data subject (GDPR - art. 6, para. 1, letter b). |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
In general, the data is stored for times compatible with the purpose of the collection, in order to reply to such requests; for users who have become Customers, the retention period is equal to the duration of the contractual relationship and up to 2 months from its end; for the other categories of data subjects, the retention period may not exceed 24 months. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The provision of the data (e-mail), which happens automatically when the data subject sends a related e-mail, is necessary in order to obtain a reply from the staff of Centro Calzaturiero; other additional data contained in the body of the message or inside the telematic conversation are fully optional, in that they may facilitate the contact and/or the object of the request sent by the data subject and/or the reply thereto. |
2.3 Online shop
In the website’s e-commerce section, which can be found in the product list and/or offers, the data subject may, having registered, access the e-commerce management of the products offered by “Modadistrict”.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter c) |
The data subject’s data is requested: (i) to submit and receive the purchase order with subsequent connection to the Nexi Xpay payment systems, thus acquiring the necessary identification and contact data (name/surname/e-mail/telephone number/delivery address) and the following additional information (banking data/order-related data/returns/vouchers) and thus enabling the data subject to use the e-commerce of Centro Calzaturiero srl (hereinafter the “store”) of the Controller (to allow the data subject to register on the website, to create an account and to use the services reserved for registered users, among which, in particular, the possibility of making purchases through the store; to allow the data subject to access the store and to navigate the store as a logged-in user; to maintain and manage the account; to store data and information, including but not limited to biographical data, past orders and any returns, the preferred delivery and/or invoicing addresses, in the account; to allow the data subject to place products in the cart and to conclude the purchase contract through the store). The request is sent based on the data subject’s freely given and informed consent, expressed through a clear affirmative act (GDPR - art. 6, para. 1, letter a, recital no. 32), by checking the special check box. (ii) to fulfil the obligations assumed by the Controller and arising from the purchase contract concluded through the store, including but not limited to the delivery of the products sold; (iii) to allow the data subject to fulfil the obligations arising from the purchase contract concluded through the store, including but not limited to the (online) payment of the products acquired. The legal basis for these processing operations (ii-iii) is the performance of the contract (art. 6.1.b) of the GDPR). (iv) for generic assistance and customer care activities and, therefore, to reply to the requests for information sent by the users or to reply to complaints, reports and claims. In any case, the data subject shall be entitled to object, at any time, for reasons connected to his/her personal situation, to the processing of the personal data that concern him/her for the purposes in question (i.e. assistance and customer care). (v) to ascertain and defend the rights of the Controller in the event of a claim and/or extra-judicial and/or judicial dispute resolution and this due to a legitimate interest of the Controller or in order to protect its rights. |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed by the Controller’s internal personnel, granted due authorisation and provided with instructions on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
The registration data will be processed until the account is closed, taking into account the technical times necessary therefor; the necessary data for the stipulation of the contract will be processed until delivery of the product or, in case of non delivery, until the termination of the contract, without prejudice to the fact that, after such deadline, the Controller may retain the data for administrative, tax and accounting purposes for up to 10 years, as per the legal statute of limitations, or, for the exercise of the Controller’s rights, for the duration of the dispute and, in the case of judicial dispute, for its entire duration until the expiry of the time limits allowed for the exercise of legal remedies. |
|
Provision (GDPR - art. 13, para. 2, letter f) |
The provision of data that is necessary and/or ancillary for the aforementioned e-commerce activities is optional: that is to say, there is no legal or contractual obligation to disclose the data; however, since their processing is necessary to allow access to the store and/or the navigation of the store and/or registration with the store and/or the provisions of account management and maintenance services and for the stipulation of the purchase contract through the store, failure to disclose the data shall result in the impossibility for the user to access and/or navigate the store and/or to register with the store and to use the services reserved to registered users and/or to stipulate a purchase contract through the store. |
2.4 Newsletter
The newsletter of Centro Calzaturiero (“newsletter/register”) makes it possible to receive continuous in-depth and useful information on the reference sector (clothes/accessories) and on events organised by Centro Calzaturiero, and on offers of commercial and/or promotional activities organised by the Controller.
|
Purpose and legal basis of the processing (GDPR - art. 13, para. 1, letter c) |
We shall only request the e-mail address, for the sole purpose of sending the newsletter. The registration is subject to the acceptance of specific, freely given and informed consent (GDPR - art. 6, para. 1, letter a) |
|
Scope of disclosure (GDPR - art. 13, para. 1, letters e, f) |
The data shall be processed exclusively by personnel that has been duly authorised and instructed on the processing (GDPR - art. 29) and by duly appointed external processors (see point 1.6). |
|
Data retention period (GDPR - art. 13, para. 2, letter a) |
The data shall be stored until such time as the consent is withdrawn by the data subject, which may be done freely at any time via connection to the link “withdraw consent” at the bottom of the e-mail confirming registration, or on related request sent to the e-mail address of the Controller info@modadistrict.com |
|
Provision (GDPR - art. 13, para. 2, letter f) |
Failure to provide the e-mail address and to send the consent check box will make it impossible to obtain the newsletter service. |
2.5 Other data willingly provided by the user.
The optional, explicit and voluntary sending of e-mail and/or regular post to the other addresses indicated on this website (info@modadistrict.com) shall result in the subsequent acquisition of the sender’s address, necessary to reply to the requests, and of any other personal data entered in the message. Should the sender send his/her CV as a candidate for a job, he/she shall be solely responsible for the pertinence and exactitude of the data sent. In any case, the sender must refrain from sending information that falls under “special categories of data” or “judicial data” (see point 1.4 - General Information); in case it is received, this information will be erased and will in no way be processed by the Controller.
2.6 Cookies
You may view the cookies policy in the specific section: insert https://www.modadistrict.com/eng/cookie-policy/
3. YOUR RIGHTS
3.1 You may freely exercise the following rights in relation to the processing of data by Centro Calzaturiero:
-
Obtain confirmation that data concerning you is being processed or otherwise and, in that case, obtain access to the data and information that relates to the processing.
-
Request the rectification of inaccurate data;
-
Request the erasure of the data in the event, inter alia, that they are no longer necessary for the purposes for which they were requested; in such case, Centro Calzaturiero will cease processing the data, except in the case in which said data is necessary to ascertain, exercise or defend a right.
-
Request that the limitation of data processing be applied, in which case said data may only be processed with the previous consent of the data subject; this does not apply to the retention of said data and to its use to ascertain, exercise or defend a right, or for the protection of the rights of other natural or legal persons, or for reasons of substantial public interest of the European Union or a Member State.
-
Object, wholly or partially, for legitimate reasons to the processing of your data; in this case, Centro Calzaturiero must cease processing said data, except where it is necessary for defence against possible complaints.
-
Receive, in a structured, commonly used, machine-readable format, the data provided to Centro Calzaturiero, or request that Centro Calzaturiero transfers the data to another controller, if this is technically feasible.
-
Withdraw the consent granted, where applicable, for the purposes specified under point 2 above, without prejudice to the lawfulness of the processing based on consent provided before the withdrawal.
3.2 The aforementioned rights of access, rectification, erasure, limitation, objection and portability of the data may be exercised directly by the data subject or by his/her legal or authorised representative, by a request addressed to Centro Calzaturiero at its contact data by sending a registered letter with proof of receipt to the registered office of Centro Calzaturiero S.r.l. in Gambolò (27025 - PV) - viale Industria 122 or an e-mail to the address info@modadistrict.com or, lastly, a certified e-mail to the address centrocalzaturiero.000@pec.it.
The data subject shall be entitled to lodge a complaint with the competent Supervisory Authority.
4. POLICY UPDATE
We would like to point out that this information notice may be periodically revised, also in relation to the reference regulatory framework and case law. Any significant changes shall be shown on the website’s home page for an adequate period of time. We would, therefore, like to invite the data subjects to consult this policy periodically. This is an information notice provided pursuant to art. 13 of the GDPR; it is valid exclusively for the website www.modadistrict.com and is not valid for other websites that may be consulted by the user via links.