INFORMATION PURSUANT TO ART. 13 - 14 OF EU REG. NO. 679/2016 ("GDPR") This Policy describes which of your personal data are collected by Chicche Venezia, for what purposes and how they are processed. Below you will also find the information you need to exercise your rights under the GDPR. In general, we collect your personal data when you create an account on the online shop https://www.chicchevenezia.com (hereinafter referred to as "Store"), when you purchase products offered for sale on the Store, when you subscribe to the newsletter, when you send us emails or contact us for assistance or information on the availability of a product. We wish to inform you that the personal data collected during these processes will be processed in order to reply to your requests, to allow you to benefit from the services offered by the Shop by means of access to the reserved areas (for example, to process your orders and carry out instrumental activities, including operations necessary for administrative and tax compliance and, where requested by you, to send you newsletters and information material) and also to provide better services, marketing and support to you and other customers, as indicated below. Who processes your data: data controllers Chicche Venezia di Chiara Clemente with registered office in Via Dei Salici, 5 - 35026 CONSELVE (PD) - C.F. and P.I. 05450320287 (hereinafter "Chicche Venezia") is the owner, pursuant to art. 26 GDPR, of the processing of your personal data necessary to: process and manage your orders, ship the products you have purchased, provide you with the necessary after-sales assistance, manage the procedure for returning purchased products, keep you informed of the availability of a product in the Store, comply with tax regulations and other legal obligations. Chicche Venezia is the autonomous controller of your personal data for the management of your registration account in the Shop, for the management and maintenance of the Shop, for the management of customer requests made through Customer Care (for purchases you have not made in the Shop or if you request information on Chicche Venezia's products) and, subject to your consent, for marketing purposes. What data do we process - Type of data processed Your contact and account details. We keep the information you provide us with (e.g. personal and contact details) when you buy a product, interact with our after-sales service or ask to be updated on the availability of a product in the Store. Chicche Venezia will also store them when you create an account in the Store, subscribe to the newsletter, participate in contests or promotions and/or contact Customer Care. Your payment and billing details. Chicche Venezia will keep the billing information you provide us with (such as personal and contact details) when you purchase a product, for the purpose of managing your purchase orders and shipping the products. Information about your use of the site and your activities on the Store. Your use of the site involves processing data about the browser and device you are using and your IP address (this is the number that identifies a specific device on the Internet and is necessary for your device to communicate with the sites). Chicche Venezia may also analyse which site you came from and what actions you have taken on the site. In order to send you commercial information about products and offers tailored to your tastes, Chicche Venezia may use your email address and your name, as well as data about your navigation and behaviour on the site to better understand which products you are interested in, provided you have given your prior consent to such processing. Where we get your data - How we collect data: Directly from you. For example, if you register to make a purchase on the Store, create an account, participate in a prize draw, ask us a question, subscribe to the newsletter or interact with Customer Care. If you do not provide us with your details, you will not be able to register on the Shop, make any purchase of the products offered for sale there or use the other services. When you register with your social media account, in particular your Facebook account, Chicche Venezia will obtain the personal data you choose to share through these social media services according to their privacy settings. We may also use social media plug-ins on the site. As a result, data will be shared with the social media service and possibly shared on your social profile. Please refer to the privacy policy of these third party social media providers to find out more about these policies. Through the use of the functionality of the Shop. Chicche Venezia uses cookies and other technologies, such as pixel tags on the site and in emails in order to collect data about your usage and better target the promotion To find out more, please see the Cookie Policy. Third party data provided directly by you. Any indication (e.g. for product shipment) of personal and contact data of any third party other than yourself represents a processing of personal data for which you are the independent data controller, assuming all the obligations and responsibilities provided for by current legislation on personal data. In this sense you warrant to Chicche Venezia that any third party data you provide has been acquired by you in full compliance with current legislation on personal data and that there is a suitable legal basis that justifies the communication of such third party personal data to Chicche Venezia, releasing the latter from any dispute, claim, request for compensation for damages that may be received by Chicche Venezia from any third party resulting from such communication. Why and for how long do we process your data - Purpose and legal basis of data processing; storage period a) To provide you with the products and services you have purchased and to send you communications relating to your order or your payments. Chicche Venezia will process your data to manage your order, confirm your purchase and manage ancillary services such as the shipment of purchased products. Without your data we will not be able to manage and process your order. The legal basis for this processing is the performance of the sales contract to which you are a party from the moment you accept the Shop's terms and conditions of sale. The storage period of your data is equal to the period necessary to process your order (it being understood that where other processing operations are applicable, for example after-sales assistance and management of the administrative position, the storage period is that indicated in relation to such processing operations in this policy). b) To allow you to register in the Shop. Chicche Venezia will process your personal data in order to allow you to create an account on the Shop, whether you make a purchase on the Shop or not. The legal basis for this processing is the performance of a contractual/pre-contractual request by you. The storage period of your data, in addition to the period necessary to process your order, will be equal to the period of activity of your account, which in any case will be deactivated after 24 months from your last access or your last action on the account. c) To update you on the availability of a product. Following your explicit request, Chicche Venezia will process your personal data in order to update you on the availability of the product you have requested in the Shop. The legal basis for this processing is the performance of a contractual/pre-contractual request by you. The storage period of your data is equal to the period necessary to process the request. d) To provide you with the necessary after-sales assistance, for example to manage returns and in compliance with applicable product warranty regulations. Chicche Venezia will process your data in order to provide you with assistance, to handle returns and/or repairs of products purchased from the Shop in compliance with applicable laws and the Shop's general terms and conditions of sale. The legal basis is the performance of the sales contract you have entered into with Chicche Venezia or the execution of pre-contractual requests. The storage period of your data in relation to this processing is equal to the time necessary to process your request (provided that if other processing operations are applicable the storage period is the one indicated in relation to such processing operations in this policy). g) For direct marketing purposes/newsletter subscription. Subject to your consent, Chicche Venezia may contact you by e-mail or other electronic means of communication with information or offers on products and services offered by the Shop, including following your subscription to the newsletter by entering your e-mail address. The legal basis for this processing is your explicit consent, which, for newsletter subscription only, consists in entering your e-mail address. The storage period for your data is 24 months from the collection of your data. h) To send commercial proposals and offer products in line with your preferences: with your consent, Chicche Venezia will analyse your personal data, your data on how you use the website and the Store, your purchasing preferences and product consumption in order to improve its approach to you and its customers in general, by means of automated processing which includes profiling. Chicche Venezia does this in order to send you personalised commercial communications and so that we can make better decisions about services, advertising, products and content based on a better understanding of how customers use the services offered on the site and to provide you with a more personalised experience. The legal basis for this processing is your explicit consent. The retention period of your data is 12 months from the collection of your data. Nature of the provision of personal data For the purposes from a) to f) referred to in the previous paragraph, the provision of data is necessary to allow you to create an account on the site, make purchases in the Shop and receive other services on the site. For the purposes from g) to h), the provision of data is optional; refusal to provide data will not affect the purposes from a) to g). The data subject may revoke his/her consent at any time, but this will not affect in any way the processing carried out by Chicche Venezia before such revocation. Where your data is processed - data transfer The data will be processed and stored at the offices and computer systems of Chicche Venezia. Personal data may also be communicated, including for the purpose of allowing you to interact with the customer care service, to companies providing services - specifically appointed as data processors pursuant to Article 28 GDPR - which are based in countries outside the European Union and, in particular, in the United States of America. Such data transfers are authorised alternatively on the basis: of an adequacy decision of the third country to which the data are transferred, adopted by the European Commission pursuant to Article 45 of the GDPR; or the appropriate or suitable safeguards provided for in Articles 46, 47 and 49 of the GDPR (such as standard contractual clauses approved by the European Commission, binding corporate rules, contractual or covenantual safeguards provided by the data controllers involved, or such as exemptions to the prohibition of transfer applicable in specific situations), as well as on the basis of the right to contact the Data Controller to obtain the contact details of the entities to whom the personal data are disclosed, from whom you may receive guidance on how to obtain a copy of the processed data or where the data have been made available. With whom we share your data - recipients of personal data Provided that, where required by law, we will obtain your prior consent and carry out any formalities required by law, we may share your data with the following third parties (including as external data processors): Our service providers We may share your data with third parties so that they can provide us with services (for example, IT service providers for the management of the Shop, marketing service providers and compliance automation providers, payment gateways and other entities that provide banking services, couriers, companies that manage warehouses and provide logistics services, legal, tax and accounting consultants) who may act as autonomous data controllers or as data processors: in the latter case we will conclude an agreement in accordance with article 28 GDPR aimed at protecting your data. These entities will only hold the data necessary to perform their functions and may only use it to perform such services on Our behalf or to comply with legal requirements. Where We believe that We must do so in order to comply with legal obligations or in order to provide legal protection to Us or to third parties. Where permitted or required by law, we may also share data requested by a government agency or other authorised person or organisation in order to protect or exercise our or a third party's rights, or in order to limit or prevent fraud (including credit card fraud or other fraud that we believe may occur during a promotion or event) and other unlawful acts. For internal administrative purposes, Chicche Venezia may disclose your information to other companies in relevant corporate groups. Minors Our Shop is not intended for children under 16 years of age, but is intended for adults. If you are a parent or guardian and you think your child has submitted data to us, you can contact us. Security measures We take the security measures required by law. We take security measures to protect your data. The standard security measures we use depend on the type of data we process and meet the requirements of the law and the standards of European government agencies. Your rights You can contact Chicche Venezia to request access to, rectification, erasure or restriction of your personal data, to object to the processing of your personal data and to request portability of your data; you can also withdraw your consent at any time (this will not affect the lawfulness of the processing based on the consent given before the revocation). When you exercise your right of access, you have the right to know whether your data are being processed, what the purpose of the processing is, what categories of data are being processed, who the recipients or categories of recipients are to whom your data are disclosed (and, if they reside in a third country, on the basis of which safeguards), the storage period of your data (or the criteria for determining the storage period), whether any automated processing is taking place (e.g. by profiling) and the logic involved in such processing, the origin of the data (if not initially collected by Us). You have the right to lodge a complaint with the Italian Data Protection Authority and to ask the data controller, at any time, for information about the data processors and the entities authorised by the data controller to process your data. You can exercise your rights by contacting Chicche Venezia (at the addresses indicated above or by sending an email to chiara@chicchevenezia.com). You can withdraw your consent to receive marketing communications including newsletters. In order to stop receiving marketing communications, you can follow the instructions indicated in the promotional message you receive. Alternatively, you may opt-out by sending an email to chiara@chicchevenezia.com. You can control and disable cookies and other tools. To find out how we use cookies and other tools, click here. You can change your preferences regarding the sending of marketing emails by using the privacy settings in your account or by emailing chiara@chicchevenezia.com What we do if we change this policy We may make changes to Our privacy policy. We will notify you of these changes as required by law. We will also post an updated version on Our site. It will have a different date and version number from those shown below. Please check the site periodically for updates. version dated 15-03-2022