informativa-privacy - dolorestommasiarte

Privacy Policy

Dear user/visitor, welcome to our website (hereinafter, the “Site”).

Your privacy is very important to us and to protect it as best as possible, we provide you with these notes in which you will find information about the type of information collected through the Site and the various options you have to intervene in the collection and use of such information.

Please read this document carefully (hereinafter, "Privacy Policy") which applies in any case where you access the Site and decide to browse within it and use its services, regardless of registration.

This is an information notice provided pursuant to Article 13 of the General Data Protection Regulation 2016/679 (hereinafter, "Regulation"). The notice is also inspired by Recommendation no. 2/2001, which the European authorities for the protection of personal data, gathered in the Group established by Article 29 of Directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they access web pages, regardless of the purposes of the connection, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding cookies, and the provisions of the Decision of the Italian Data Protection Authority of 8 May 2014 regarding cookies.

This information is provided only for this Site and not for other websites that may be consulted by the user via links.

Browsing the Site and/or accessing certain sections of the Site and/or any requests for information or services by users of the Site may involve the processing of personal data.

By using or consulting the Site, visitors and users explicitly approve this Privacy Policy and consent to the processing of their personal data in relation to the methods and purposes described below, including possible disclosure to third parties if necessary for the provision of a service.

The user/visitor acknowledges that any indication of personal and contact data of any third party other than the user themselves (for example, when filling in the data entry form on the Site) constitutes a processing of personal data for which they act as an independent data controller, assuming all obligations and responsibilities provided for by current legislation.

In this regard, the user guarantees that any data of third parties indicated by the user (and which will consequently be processed as if the third party had personally provided informed consent to the processing) has been obtained by the user in full compliance with applicable laws.

The user grants the broadest indemnity in this regard with respect to any dispute, claim, or request for compensation for damages arising from processing that may be made by any third party concerned due to the provision of data indicated by the user in violation of the applicable personal data protection regulations.

Data Controller and Joint Controllers

DOLORES TOMMASI ARTE by Dolores Tommasi Haute Couture, data controller, with registered office at via Scarampo, 45, Milan 20155 (MI) email address: dolores@dtommasi.it .

Therefore, your data will be processed by Dolores Tommasi Alta Moda for the purposes stated in this Privacy Policy.

What data do we collect and use?

· We collect all information provided by users when submitting contact forms. If users contact us via email, we will keep a record of such correspondence;

· We collect browsing data, information that is not collected to be associated with identified individuals, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, IP addresses or domain names of the computers used by users who connect to the Site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

The aforementioned information is processed automatically and collected exclusively in aggregate form in order to verify the correct functioning of the site and for security reasons.

For security purposes (anti-spam filters, firewall, virus detection), the IP address may be used, in accordance with current laws, in order to block attempts to damage the site itself or to harm other users, or in any case for harmful activities or those constituting a crime. Such data is never used for user identification or profiling, but only for the protection of the site and its users.

· We may also save cookies, as described in more detail in the Cookie Policy.

The processing of personal data is based on the principles of lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality, and is carried out in compliance with the rights, fundamental freedoms, and the dignity of individuals.

Purpose and legal basis of processing

According to the needs expressed from time to time by the user who accesses the various sections of the Site (and except for specific rules and notices for individual operations that involve the provision of specific personal data, published from time to time on the Site), the main purposes of processing the personal data provided directly by users or acquired automatically through browsing are indicated below:

a) subscription to the services offered by the Site (for example, the subscription or online registration service);

b) to follow up on any requests made by users themselves, for example through the spontaneous submission of applications, emails or traditional mail to the contacts indicated on the Site, which involves the subsequent acquisition of the address, including email, of the sender or the relevant telephone number necessary to respond to requests, as well as any other personal data included in the related communications;

c) direct marketing and profiling if the user has selected this option through subscription;

d) improvement of the quality of services offered through the Site after anonymization;

e) fulfill an obligation required by law, by a regulation or by community legislation;

f) to ascertain, exercise or defend our rights in court;

g) obtain anonymous statistical information on the use of the Site and to check its correct functioning;

h) management, administrative, accounting, and tax obligations.

The processing of such data information is permitted by the Regulation, as:

a) necessary to respond to requests made by the users themselves;

b) necessary for our legitimate interests in pursuing the purposes mentioned above (for example, to verify the proper functioning of the site and for security reasons, organizational and production needs to constantly improve the services provided to users, the quality and effectiveness of customer care). In any case, such interests do not conflict with users' right to privacy;

c) in some cases, necessary to fulfill a legal obligation, for example in the case of communication to authorities, governmental or regulatory bodies;

d) necessary to initiate, pursue, or defend oneself in legal actions;

e) is based on the user's consent.

We have the right to process personal data for reasons other than those stated in this privacy policy, provided that such further processing is compatible with the purpose for which the data was initially collected or with your consent and, in any case, after providing appropriate information.

Nature of data provision and consequences of refusal

The provision of personal data, which is requested on various collection occasions, may be necessary for the pursuit of the purposes identified in the specific information notice, or optional.

The mandatory or optional nature of providing information is specified by the symbol (*) placed next to the mandatory information. Where processing is based on your consent, such consent is necessary.

Any refusal to provide certain personal data marked as mandatory or to give your consent where necessary makes it impossible to pursue the main purpose of the specific collection: such refusal could, for example, make it impossible to provide the services available on the Site.

The provision of additional personal data, other than those marked as essential, is optional and does not entail any consequences regarding the pursuit of the main purpose of the collection.

Automated decision-making process

We do not make decisions solely based on automated decision-making processes, including profiling, that produce legal effects on the user or have other similar consequences. We have the ability to use automated systems/processes and also an automated decision-making procedure (such as profiling).

Processing methods

The processing of data takes place with or without the aid of electronic or, in any case, automated, IT or telematic tools, with logic strictly related to the purposes stated above. The processing of data will be carried out lawfully and fairly and, in any case, in compliance with the aforementioned regulations, using tools suitable to guarantee its security and confidentiality and may also be carried out through automated tools designed to store, manage, and transmit the data itself.

Retention period

We will retain users' personal data for the period necessary to fulfill our legal obligations. The retention period of personal information depends on the purpose for which the data is processed and the tools with which such personal information is processed. Where possible, we indicate the data retention period in the individual privacy notices.

In any case, the criteria used to determine the applicable retention period are:

(i) time necessary to achieve the related purpose,

(ii) time necessary to carry out the commercial relationship with the user,

(iii) time accepted by the user and/or

(iv) time required by applicable laws on the matter.

At the end of the retention period, the data will be deleted, that is, destroyed securely where possible, or anonymized.

Communication and dissemination of data

Users' personal data will not be disseminated, meaning they will not be made available to unspecified parties. However, they may be communicated, if such communication is necessary or functional to the performance of our activities, in the ways and for the purposes described above, to external parties who may carry out processing activities as independent controllers or as processors.

The third parties who process data on our behalf and under our authority have been adequately selected and are equipped with experience, capability, and reliability, and offer suitable guarantees of full compliance with current regulations regarding processing, including data security. They are formally appointed as data processors pursuant to Article 28 of the Regulation and are subject to contractual and regulatory obligations in order to maintain data confidentiality.

They will also have access only to the information necessary for the performance of their duties.

All employees and collaborators of the Companies who are specifically authorized may also become aware of and process the data, each within the limits of the functions and duties performed and according to the instructions indicated in the appointment document, such as, for example, persons in charge of the management and maintenance of IT systems, databases, system administrators, as well as employees of the offices entrusted with activities involving the processing of data for the purposes set out in this Privacy Policy and in the additional information provided at the data collection sections.

Transfer of data outside the European Union

Personal data may be transferred outside the EU to be stored on servers after the signing of standard contractual clauses, adopted by the European Commission, with the server providers and/or third-party service providers, or verification of the data controller's registration within the system known as "Privacy Shield".

Security measures

We adopt appropriate security measures in order to minimize the risks of destruction or loss – even accidental – of data, of unauthorized access or of processing that is not permitted or not in accordance with the purposes of collection indicated in our Privacy Policy.

The transfer, storage and processing of data collected through the Site are ensured by appropriate technical measures. However, we cannot guarantee users that the measures adopted for the security of the Site and the transmission of data and information on the Site will limit or exclude any risk of unauthorized access or data leakage from devices belonging to the user: we recommend that you ensure your computer is equipped with adequate software for the protection of data transmission over the network, both incoming and outgoing (such as up-to-date antivirus systems) and that your Internet service provider has adopted appropriate measures for the security of data transmission over the network (such as firewalls and anti-spam filters).

Your rights

Right to access and obtain a copy of personal data

You have the right to request confirmation that we are processing any of your personal data. In some cases, you may request that we provide you with an electronic copy of your data.

Right to rectification of personal data

If the data in our possession is not correct, you have the possibility to request us to update or correct such data.

Right to restriction of processing and right to be forgotten

In certain circumstances, you have the right to request a restriction of the processing of your personal data and/or the deletion of such data. You may submit this request at any time and we will assess the possibility of granting it.

However, this right is subject to legal rights or obligations and, therefore, we may need to retain the data in question. In situations where we determine that, according to the law, your request for deletion of personal data can be accepted, we will proceed to do so immediately without undue delay.

Right to object

You have the right to object at any time, for reasons related to your particular situation, to the processing of your personal data, including profiling.

In such case, we will refrain from further processing your personal data unless there are compelling legitimate reasons to proceed with the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of a legal claim in court.

You have the right to object at any time to processing for direct marketing purposes, including profiling to the extent that it is related to such marketing.

Right to portability

If certain conditions are met, you have the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you and you have the right for such data to be transmitted directly to another controller.

Right to lodge a complaint with the Supervisory Authority

You may file a complaint with the Italian Supervisory Authority if necessary, or contact them to request information regarding the exercise of your rights.

Withdrawal of consent

You may, at any time, withdraw the consents given. However, the withdrawal will not affect the lawfulness of the processing based on consent before its withdrawal.

How to exercise your rights

You may, at any time, exercise your rights by sending an email to the following address: . When we send marketing communications by email, you can choose not to receive further communications by clicking on "unsubscribe." Please note that, if you exercise your rights, we may ask you to identify yourself before proceeding with your request. Finally, we inform you that you can also exercise your rights by writing to the individual companies of the Group which, in relation to the different purposes of collection indicated in this Privacy Policy, may process your data from time to time.

Revision clause

We reserve the right to review, modify or simply update, in whole or in part, in any way and/or at any time, without notice, this Privacy Policy, also in consideration of changes in laws or regulations regarding the protection of personal data. Changes and updates will be notified on the Home Page of the Site section as soon as they are adopted and will be binding as soon as they are published on the Site itself.

We therefore ask users to regularly access this section to check for the publication of the most recent and updated Privacy Policy.

Last updated: 20/11/2020