In accordance with Italian Legislative Decree 13 D.Lgs. 30.6.2003 n. 196 (Privacy Code) and EU Regulation UE n. 2016/679 “GDPR”
ILC S.r.l., with registered office in Italy - Piazzale Libia, 2 - 20135 Milano (MI) - and Fiscal Code and Vat Number 09135950963 – firstname.lastname@example.org; takes all its responsibilities under data protection legislation very seriously, and respects the privacy of its customers.
This policy (together with our Terms and Conditions of Use, Conditions of sale and Return and Refund and any other documents referred to on it) sets out how we will use any personal data which you provide through BVMILANO’s website- www.bvmilano.com.
1. DATA CONTROLLER AND CONTRACTING PARTIES
ILC S.r.l., with registered office in Milano, Piazzale Libia, 2 - and Fiscal Code and Vat Number 09135950963, email@example.com - (hereinafter, "Controller and/or Processor"), as Data Controller/Processor, informs you, pursuant to art. 13 Legislative Decree 30.6.2003 n. 196 (hereinafter, "Privacy Code") and art. 13 EU Regulation n. 2016/679 (hereinafter, "GDPR"), that your data will be processed for the management, conclusion and execution of sales transactions, communication of a commercial nature and profiling activities, via this Website (the "Purpose").
Your personal data will be stored in a format that allows your identification for the time strictly necessary for the purpose for which it is collected, and subsequently processed, in any case, within the limits of the law. In order to ensure that Your personal data is always accurate, up-to-date, complete and relevant, please report any changes to the following e-mail address: firstname.lastname@example.org.
Your data may be disclosed to police forces or judicial authorities, for example in the context of Website anti-fraud services, in accordance with the law and where required. Your data will also be accessible to the Data Processors, as indicated in this section, and for the specific purposes indicated herein. Your personal data may not be transferred abroad to countries outside the European Union which do not ensure adequate levels of personal protection. If this is necessary for the achievement of the purposes, we assure You that the transfer of Your personal data to countries that do not belong to the European Union and that do not ensure adequate levels of protection, will only be performed after the conclusion of specific contracts between ILC S.r.l. and said parties, containing adequate safeguard clauses for the protection of Your personal data, in compliance with applicable law and regulations.
When You purchase an item in our online store, create an account with us, or enter into any other form of agreement with us, we will process Your personal data for that particular purpose. We may also process Your personal data if you have a query or similar that precedes Your decision to enter into an agreement with us. The purposes for which your personal data is specifically noted, on a case-by-case basis, is in the information text submitted on the page where the provision of personal data is requested.
The “Data Controller” will therefore processes all those personal data - such as name, surname, company name, address, telephone number, e-mail address, bank and payment references, etc. (hereinafter "personal data" or "data") communicated by you at the time of the conclusion of the contract for the use of the platform / application (signed with the simple use of the bvmilano’s website – www.bvmilano.com) or by filling in a contact form or by filling in the order form for purchase a product or for any other reason related with the purpose of promoting and carrying out its own services of the Data Controller itself and, for all other matters for the management – according to law - of the contract to which this information refers.
"Personal data" means the contents of Article 4 of EU Regulation no. 2016/679 (GDPR) which establishes as object of the treatment/process any information concerning an identified or identifiable person, considering identifiable the natural person who can be clearly recognized, directly or indirectly, with particular reference to an identifier which are the name, identification number, location data, an online identifier or one or more elements characteristic of its physical, physiological, genetic, psychic, economic, cultural or social identity.
3. PURPOSE OF PERSONAL DATA TREATMENT
Your personal data are therefore processed:
marketing, communication and public relations activities and/or for the promotion of the image of a specific project of the Data Controller/Processor – i.e ILC S.r.l., of its associates, subsidiaries and affiliates and/or of the product and/or services of the same and/or of partner companies, or:
We inform you that we might collect and process all, or part of, the information that You provide by filling in any forms on our websites. This includes information provided at the time of registering to use our website, or provided subscribing to our service, purchasing products, requesting for additional services, or when You enter a competition or any promotion sponsored by us, or when posting material or sign-up for e-mail newsletters and even when You report a problem with our website. In all those circumstances we might collect information such as, for example, name, home and/or business address, email address, telephone number, demographic information such as age and/or other information that may identify You as an individual.
We process any other data You may provide to us in connection with our services and/or our website, including, but not limited to information You provide when you compile wish-lists or other gift registries, email addresses of Your friends and other people, and information which You submit to us either via our social media sites or our website, i.e. each time You contact us we may keep a record of that correspondence, and we might keep record of Your visits, including, but not limited to, traffic data, location data, weblogs and other communication data, so please read carefully our Cookies Policy.
5. PROCESSING METHODS
The processing of your personal data is carried out by means of the operations indicated in section No. 2 of article No. 4 of the Privacy Code (GDPR) and precisely "processing" means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, i.e. any use or communication by transmission, diffusion or any other form of making available or of treatment by comparison or interconnection, or for any operation connected with the limitation, cancellation or destruction of Data.
6. DISCLOSURE OF DATA
Without the need for express consent (pursuant to art.24 lett. a), b), d) of Privacy Code and art. 6 lett. b) and c) of GDPR), the Data Controller/Processor may communicate user data for the purposes referred to in art. 3.A) to supervisory bodies, judicial authorities or to insurance companies for the provision of insurance services, as well as to those subjects to whom communication is by law mandatory for the purposes and for the fulfilment of these purposes. These subjects will process data acquired by right, by virtue of the above obligations, in their capacity as independent Data Controllers/Processors.
7. DATA TRANSFER
Personal data are stored on the company's servers located in Italy and/or in any case within the European Union. In any case, it is understood that the Data Controller/Processor, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller/Processor ensures - since now - that the transfer of non-EU server will take place in accordance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission.
8. DURATION OF TREATMENT
The Data Controller/processor guarantees You – according to Art. 17 of GDPR - that the retention of Your personal data will take place in paper and/or electronic/IT format and for the time strictly necessary to fulfill the purposes referred in point 3, and always and anyhow in full compliance with your privacy and current regulations.
Your personal data might be subject to different retention period depending upon different purposes of analysis, development, improvement and supply of the service, such as:
9. LINKS TO OTHER WEBSITES
If our website provides links to other websites is to facilitate the user in searching and browsing and to facilitate hypertext links on the Internet to other websites. The enabling of the links does not imply any recommendation or notification by ILC S.r.l. for accessing and browsing these websites, or any guarantee regarding their content, services or goods supplied and sold by them to Internet users.
10. FAILURE TO PROVIDE PERSONAL DATA AND ITS CONSEQUENCES
The provision of Your personal data to ILC S.r.l. and, in particular Your e-mail address, postal address, credit/debit card and bank details and telephone number is necessary to achieve the purposes. Some of this data could be indispensable to fulfil obligations pursuant to laws or regulations or the provision of other services rendered on the bvmilano,s website (www.bvmilano.com) and requested by You by using the website or purchasing a product(s).
Failure to provide certain data, identified on the website with the character (*), could make it impossible to execute the purchase contract of products or to correctly fulfil the legal and regulatory obligations. Failure to provide data may therefore constitute, according to the circumstances, a legitimate and justified reason for not executing the contract for the purchase of products on the website or for the provision of services through the website.
I.e., the provision of data for the purposes referred to in art. 3.A) is mandatory if you intend to purchase a BV Milano product. In the absence of your consent, ILC S.r.l., will not be possible to execute the obligations referred to, in the contract for the use of the service you signed and/or for the purchasing of products, of which this information is part of. Otherwise the provision of data for the purposes referred to in art. 3.B) is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, You will not be able to receive newsletters, commercial communications and advertising material relating to the services offered by the Data Controller/Processor.
Failure to give consent as indicated in art. 3.B) or the subsequent revocation will not affect the rights acquired through the stipulation of the contract or the right to receive the services referred to in art. 3.A).
11. SOCIAL NETWORKS
Our website provides You with social plug-ins from various social networks. If you choose to interact with us through a social network, Your activity on our website will also be made available to those social networks, such as Facebook, Instagram and Twitter.
If You have logged in to one of these social network sites during Your visit to our website, the social network sites may add this information to Your profile, if You are interacting with one of the social plug-ins, this information will be transferred to the social network site, if You do not want this data transfer, please log out of Your social network site before entering our website.
Since we cannot prevent this data collection and social plug-in information transfer, we invite You to read carefully the privacy policies of Your social networks for detailed information about their collection and transfer of personal data, about Your rights, and about how You can achieve satisfactory privacy settings.
12. STORAGE AND SECURITY MEASURES
Our Company as Data Controller/Processor adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of the Personal Data provided by You, fully acknowledging the protection provisions - by design and by default - defined by legislator through EU Regulation No. 2016/679 "GDPR".
Except as otherwise provided for herein, Your personal data shall not be disclosed to third parties for purposes not permitted by law or without Your express consent. Your data shall also be made available to third parties for ancillary purposes and purposes related to the provision of services requested by the user (for example, for transactions relating to purchases).
If we have provided You with, or where You have chosen, a password that enables You to access certain parts of our website, You are responsible for ensuring this password remains confidential. We kindly ask You not to share Your password with anyone.
Although we do our best to protect your personal data, the transmission of information via Internet cannot be completely secure, for this reason we reiterate that any transmission of personal data is carried out by You at your own risk.
13. YOUR RIGHTS
We remind you that if You provide us with Your personal data, this is done on an entirely voluntary basis. If You choose not to provide the requested information, various customer benefits may not be available to You. In fact, in certain cases, only those who have submitted to us the required personal data are able to order products, use certain services and in other ways avail themselves of the activities and offers available on our website.
In your capacity as an interested party, you have the rights referred to, in art. 7 Privacy Code and art. 15 GDPR, and precisely:
If You wish to withdraw Your consent to receiving promotional information and offers in general, including by postal services, email, text message, telephone or any other electronic means, You may do so at any time in writing to ILC S.r.l., or by sending a request using our contact form. Should we have misgivings regarding Your identity, we may ask You to provide identification.
14. HOW TO EXERCISE YOUR RIGHTS
You can - at any time - exercise Your rights by:
1. sending a specific communication to the Data Controller/Processor via:
15. SCOPE OF APPLICATION
All those who are subject to this Policy are defined herein as "users".
The practices described in this Policy are subject to the laws applicable in the Territory in which we operate, i.e. the activities described in this Policy are carried out in a specific state or nation only if permitted pursuant to local laws and / or international regulations, as implemented in those areas.
16. CONTROLLER/PROCESSOR, MANAGERS AND AGENTS
The Data Controller is ILC S.r.l. with registered office in Piazzale Libia, 2 - 20135 Milano (MI) - ITALY.
The updated list of Data Controller/Processors and appointees is kept - and therefore available for consultation by law - at the registered office of the Data Controller/Processor.
Last revision on 23rd of December 2019