Privacy policy

Dear user / visitor, welcome to our website (hereinafter, the "Site").

Your privacy is very important to us and to better protect it, the we provide these notes where you will find information on the type of data collected through the Site and on the various possibilities you have to intervene in the collection and use of such information.

Please read this document (hereinafter, "Privacy Policy") carefully it applies in any case in which you access the Site and decide to browse within it and to use its services, regardless of registration.

It is an information that is provided pursuant to art. 13 of General Data Protection Regulation 2016/679 (hereinafter, the "Regulation"). The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in Group established by art. 29 of directive n. 95/46 / EC, have adopted on May 17, 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, the timing and the nature of the information that the data controllers must provide users when they connect to web pages, regardless of the purpose of the connection, as well as provided by Directive 2002/58 / EC, as updated by the Directive 2009/136 / EC, regarding cookies, as well as the provisions of Provision of the Guarantor for the protection of personal data of 8 May 2014 regarding cookies.

The information is provided only for this Site and not for other websites that may be consulted by the user via links.

The navigation on the Site and / or access to certain sections of the Site and / or any requests for information or services from users of the Site may involve the processing of personal data.

With the use or consultation of the Site, visitors and users approve explicitly  this Privacy Policy and consent to the processing of their personal data in relation to the methods and purposes  described below, including any disclosure to third parties if necessary for the provision of a service.

The user / visitor acknowledges that any indication of personal and contact data of any third party other than the user himself (for example when completing the data entry form on the Site) represents a processing of personal data with respect to which he acts as an autonomous owner, assuming all the obligations and the responsibilities provided for by current legislation. .

In this sense, the user guarantees that any data of third parties who will be so indicated by the user (and will be treated accordingly as if the third party had provided consent on their own informed of the processing) was acquired by the user himself in full compliance with applicable laws.

The user confers on this point the widest indemnity with respect to any dispute, claim, request for compensation on damages from treatment that should come from any third party interested due to the provision of the data indicated by the user in violation of the applicable personal data protection rules.

Owner and Joint Controllers

DOLORES TOMMASI ARTE by Dolores Tommasi Alta Moda, data controller, with registered office in via Scarampo, 45, Milan 20155 (MI), email address: dolores@dtommasi.it

Therefore, your data will be processed by Dolores Tommasi Alta Moda for the purposes expressed in this Privacy Policy.

What data do we collect and use?

·       We collect all information provided by users when sending contact forms. If users contact us by email, we will keep trace of such correspondence;

·       We collect navigation data, information that is not collected to be associated with identified interested parties, but that for themselves nature could, through processing and association with data held by third parties, allow users to be identified. This data category include IP addresses or, for example, a domain name of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submit a request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by server (successful, error, etc.) and other parameters relating to the  operational system  and the user's IT environment.

This information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correctness operation of the site and for security reasons.

For security purposes (spam filters, firewalls, virus detection), the IP address, could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause damage to other users, or otherwise activities harmful or constituting a crime. Such data is never used for the identification or profiling of the user, but only for the purpose of protection of the site and its users.

·       We can also save cookies, as described in more detail in the Cookies Policy.

The processing of personal data is based on the principles of lawfulness, fairness and transparency; purpose limitation; minimization of the data; accuracy; limitation of conservation; integrity and confidentiality and takes place in compliance with rights and freedoms fundamental as well as the dignity of persons.


Purpose and legal basis of the processing

According to  the needs expressed from time to time by the user who accesses the various sections of the Site (and except for special rules and information for individual operations, that involve the provision of specific personal data, published from time to time on the Site), below are indicated the main purposes of the processing of personal data conferred directly by users or acquired automatically by browsing:

a) adherence to the services offered by the Site (for example the online subscription or registration service);

b) follow up on any requests made by users themselves, for example with the spontaneous sending of applications, electronic  e-mails  or traditional mail to the addresses indicated on the Site that involve the subsequent acquisition of the sender's address, including e-mail address or  the  telephone number necessary to answer the requests, as well as any other personal data entered in the related communications;

c) direct marketing and profiling if the user has selected this option by subscription;

d) improvement of the quality of the services offered through the Site after anonymization;

e) fulfill an obligation established by law, by a regulation or by EU community legislation;

f) ascertain, exercise or defend our right in court;

g) obtain anonymous statistical information on the use of the Site and to check its correct functioning;

h) management, administrative, accounting and tax obligations


The processing of such data information is allowed by the Regulation, as:

a) required to follow up on requests made by users themselves;

b) required for our legitimate interests in pursuing the purposes above (for example check the correct functioning of the site and for security reasons, organizational and production needs to constantly improve the services provided to users, the quality and the effectiveness of customer care). Such interests in any case are not in conflict with users' right to privacy;

c) in some cases, required to fulfill a legal obligation, such as example in case of communication to authorities, governmental bodies or regulation;

d) required to initiate, pursue or defend in legal actions;

e) is based on the user's consent.

We have the right to process personal data for reasons other than those specified in this privacy policy, if such further processing is compatible with the purpose for which the data were initially collected, or with your consent and, in each case, subject to the release of suitable information.


Nature of the provision of data and consequences of refusal

The provision of personal data, which are requested in different collection occasions, may be necessary for the pursuit of purposes identified in the specific information, or optional.

The mandatory or optional nature of the provision is specified by symbol (*) placed next to the mandatory information. Where the processing is based on your consent, this consent is necessary.

The eventual refusal to disclose certain personal data marked as mandatory or to give your consent where necessary, makes impossible to pursue the main purpose of the specification collection: such refusal could, for example, make  impossible to provide the services available on the Site.

The provision of further personal data, other than those marked as essential,  is optional and does not involve any consequence in relation to the pursuit of the main purpose of the collection.


Automated decision making

We don't make decisions solely on the basis of a decision-making  automated process , including profiling, which produces legal effects on the user or has other similar consequences. We have the power to use automated systems / processes and a decision-making procedure also automated (such as profiling).


Processing methods

The data processing takes place with or without the aid of electronic tools or, in any case, automated, computerized or telematic, with logic strictly related to the purposes expressed above. The data processing will be carried out in a lawful and according to correctness manner and, in any case, in compliance with the aforementioned legislation, by means of instruments suitable to guarantee their security and confidentiality and it may also be carried out through automated tools suitable for store, manage and transmission of the data.


Retention period

We will keep the personal data of users for the period necessary to comply of our legal obligations. The retention period of the personal information depends on the purpose for which data  is processed and on the tools with which such personal information is treated. Where possible, we indicate in the individual information the data retention period.  

In any case, the criteria used to determine the applicable retention period are:

(i) time required to achieve the related purpose,

(ii) time needed to complete the commercial relationship with the user,

(iii) time accepted by the user and / or

(iv) time required by applicable laws on the matter.

Upon expiry of the retention period, the data will be deleted, or destroyed in a secure manner where possible, or made anonymous.


Communication and dissemination of data

The personal data of users will not be disseminated, ie they will not be posted aware of indeterminate subjects. Instead they can be communicated, if the communication is necessary or functional to carry out our business, in the manner and for the purposes above illustrated, to external parties who may carry out activities of treatment as independent owners or as responsible.

The third parties who process data on our behalf and under ours authorities, have been properly selected and are equipped with experience, ability and reliability and offer a suitable guarantee of full compliance with the current provisions on processing, therein including the data security profile, are formally named data processors pursuant to art. 28 of the Regulation and are subject to contractual and regulatory obligations in order to maintain the confidentiality of the data.

Furthermore, they will only have access to that information necessary for the performance of their functions.

The  data could be available to all employees and collaborators of the Companies specifically authorized, each within the limits of functions and duties performed and according to the instructions indicated in the deed of designation, such as the persons in charge of the management and maintenance of information systems, databases, the system administrators, as well as employees of the offices they are in entrust activities that involve the processing of data for the purposes set out in this Privacy Policy and in the additional information provided in correspondence with the data collection sections.


Transfer of data outside the European Union

Personal data may be transferred outside the EU to be stored on the servers subject to the stipulation of standard contractual clauses, adopted by the European Commission, with the providers of the servers and / or services entrusted to third parties, or verification of the registration of the data controller in the 'scope of the system called "Privacy Shield".


Security measures

We adopt adequate security measures in order to minimize the risks of destruction or loss - even accidental - of data, not authorized access or treatment not permitted or not in accordance with the purposes of data collection, as  indicated in our Privacy Policy.

The transfer, storage and processing of collected data through the Site are insured through suitable technical measures. However we cannot guarantee users that the measures taken for the security of the Site and the transmission of data and information on the Site limit or exclude any risk of non-access permitted or leakage of data by devices adopted by the user: we recommend that you make sure that your computer is equipped with adequate software to protect the network transmission of data, both inbound and outbound (such as systems updated antivirus) and that your internet service provider has adopted suitable measures for the security of data transmission in network (such as firewalls and spam filters).


Your rights

Right to access and obtain a copy of personal data,

You have the right to request confirmation that we are processing any of your personal data. In some cases you may require us to provide you with an electronic copy of their data.


Right to rectify personal data

In the event that the data in our possession is incorrect, you have the possibility of requesting the update of such data or theirs correction.


Right to limitation of processing and right to be forgotten

In some circumstances you have the right to request a limitation of processing of your personal data and / or the cancellation of the same. You have the right to submit this request at any time and we will evaluate the possibility of welcoming it.

However, this right is subject to legal rights or obligations and, therefore, we may need to keep the data.

In situations where we ascertain that, in accordance with the law, your request for cancellation of personal data can be accepted, we will immediately do so without undue delay.


Right to object

You have the right to object at any time, for reasons related to the your particular situation, to the processing of your personal data, including profiling.

In that case, we will refrain from further processing your personal data unless there are compelling legitimate reasons to proceed with the treatment that prevail over your interests, rights and freedoms or for the assessment, exercise or defense of a right on site judicial.

At any time direct you have the right to object to processing for marketing purposes, including the profiling connected to such marketing.


Right to portability

In case of certain conditions, you have the right to receive, in structured, commonly used format  and readable by automatic devices, the personal data concerning you and you have the right that such data be transmitted directly to another holder.


Right to lodge a complaint with the Supervisory Authority

You can file a complaint with the Italian Supervisory Authority where necessary, or contact the same to request information regarding the exercise of their rights.


Revocation of consent

You can, at any time, revoke the consent given. However, the revocation will not affect the lawfulness of the treatment based on consent before the revocation of the same.


How to exercise rights

You may, at any time, exercise your rights by sending an e-mail message to the e-mail address indicated in the Site. When we send marketing communications via e-mail, you can decide not to receive further communications by informing us of your decision to "unsubscribe".

We inform you that, in case of exercise of your rights, we may ask you to identify yourself before proceeding with your request.


Review clause

We reserve the right to review, modify or simply update, in whole or in part, in any way and / or at any time, without notice, this Privacy Policy, also in consideration of changes in laws or regulations regarding the protection of personal data. Changes and updates will be notified in the Home Page section of the Site as soon as they are adopted and will be binding as soon as they are published on the Site.

We therefore ask users to regularly access this section to check the publication of the most recent and updated Privacy Policy.


Last updated: 12/19/2020