Home - Privacy Policy

Privacy Policy

PRIVACY POLICY 

Information provided pursuant to Art. 13 of European Regulation No. 2016/679 (GDPR) 

 

  1. REASON FOR THIS NOTICE 

This page describes the processing carried out by our company on personal data relating to any type of data subject (hereinafter “data subjects” pursuant to Art. 4, p. 1 of GDPR). The purpose is to illustrate the corporate policy implemented to guarantee compliance with the provisions of GDPR 2016/679 L.D. 196/2003, relevant national measures, guidelines issued by the European Data Protection Board as well as EC directives on the protection of the data of natural persons. 

It is intended to provide information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) to those who enter into any form of relationship with our company. 

 

The Privacy Policy of this website does not refer to other processing carried out or described as a result of browsing internet sites through links that may be present in the above mentioned website. 

 

  1. DATA CONTROLLER 
  • the Data Controller is the undersigned Company: 

Davines S.p.A. 

Registered Office 

Via Don Angelo Calzolari 

43126 Parma (PR) 

Telephone: 0521 965611 

Fax: 0521 292597 

Mail:info@davines.it 

 

Headquarters 

Via Don Angelo Calzolari 

Località Roncopascolo  

43126 Parma (Sezione Golese) 

 

  • The Data Controller has appointed a Data Protection Officer (DPO) that can be contacted to exercise all the rights provided for by Articles from 15 to 21 of the GDPR: right of access, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object, as well as to revoke consent previously granted or to file a claim with the Personal Data Protection Authority; should the data subjects fail to have their requests followed up, they can file a complaint with the competent Personal Data Protection Authority (pursuant to Art. 13, paragraph 2, letter d of the GDPR). 

DPO contact details:privacydpo@davines.it  

  • All data are processed lawfully, fairly and in a transparent manner in relation to the data subject, in compliance with the general principles provided for by Article 5 of the GDPR; 
  • specific security measures are implemented in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data. 

 

  1. TYPES OF DATA PROCESSED 

 

  1. DATA FOR REQUESTING CONTACT 

The optional, explicit and voluntary provision of the personal data necessary to request contact through the forms on this website, or through any email addresses indicated on this website, results in the subsequent acquisition exclusively of the data necessary to respond to the requests sent.  

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

These data are used exclusively for the purpose of responding to the information requests sent by filling out the forms. 

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

Your data will be processed only by internal staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. They may be disclosed to competent authorities only in the event of an investigation. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Personal data are processed using automated instruments, for the time strictly necessary to attain the purposes for which the data were collected. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

The data are usually stored for short periods of time, exclusively to fulfil the requests received. 

Provision 

(GDPR, Art.13, par, 2, f) 

The data is provided by the data subjects on an optional basis.  

Legal basis 

(GDPR - Art.6, par. 1). 

The processing is necessary to fulfil the requests received, and therefore consent is expressed by filling out the forms. 

 

Even though our website has nowhere contents that cannot be seen by minors, we would like to specify that when filling out the Request form under “CONTACT US”, no personal data must be typed in by minors without the prior consent of parents or guardians. DAVINES SpA invites all parents and guardians to instruct children on the safe and responsible use of their persona data on the Internet. DAVINES SpA commits not to save or knowingly use personal data that may have been provided in the form by minors for any purpose, including disclosure to third parties.  

 

  1. DATA FOR SUBMISSION OF APPLICATIONS 

The personal data provided by data subjects voluntarily sending their CV via the e-mail addresses specified or acquired through specific forms will be processed for purposes connected with the applying for, selecting and managing any future employment relationship.   

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR, Art.13, par. 1, letter c) 

The personal data sent by the data subjects via their curriculum vitae or filling out the relevant fields.   Data are processed as a pre-contract measure prior to the signing of a possible employment contract and legal obligations connected thereto. 

Scope of communication 

(GDPR, Art.13, par. 1, letters e and f) 

Your data will be processed only by internal staff of the Human Resources Office who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Retention period 

(GDPR, Art.13, par. 2, letter a) 

Data are stored for two years. 

Provision 

(GDPR, Art.13, par. 2, letter f) 

The provision of data is optional, however failure to provide data and consent to data processing may make it impossible for the company to carry out an appropriate assessment of the position for the selection process, and thus to manage the application.  

 

  1. DATA OF CONSUMERS/END USERS, REPRESENTATIVES OF CLIENT COMPANIES, REPRESENTATIVES OF SUPPLIER COMPANIES 

The personal data provided by the above data subjects or collected during the performance of contract-related activities, derive from the need to carry out the activities organized by the parties.   

For more information, write to the relevant e-mail address or to info@davines.it  

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

Data is collected and used in order to: 

  • enter into contractual/professional relationships;  
  • fulfil pre-contractual, contractual and tax-related obligations deriving from existing relationships, as well as to manage the associated communications; 
  • comply with legal  obligations, regulations, EU standards or with the orders of the Authority; 
  • exercise a legitimate interest or right of the Data Controller (e.g. the right to defence in Court, the protection of credit positions; ordinary internal requirements in the areas of operations, management and accounting). 

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

Your data will be processed only by internal staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Your personal data will be processed by automated systems and on paper. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

Data are normally stored for short periods of time, as strictly needed for fulfilling contractual or regulatory obligations. 

Provision 

(GDPR - Art.13, par. 2, f) 

They are requested by our company for the purposes indicated.  

Legal basis 

(GDPR - Art.6, par. 1). 

Processing is necessary for entering into contractual relationships and therefore consent is not required. 

 

  1. DATA FOR INFORMATION NEWSLETTER SUBSCRIPTION  

The personal data provided by the interested data subjects by voluntarily entering the contact details in the online form, will be processed for purposes connected with the sending of the newsletter.   

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

The information collected identifies the data subjects in order to carry out the information activity by sending a newsletter or otherwise as described in the relevant form with regards to products/services.   

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

The categories of people in charge of processing data for the above purposes are the people in charge of managing the site, the customer service, the IT systems, as well as third companies (GDPR Art. 28) that process the relevant data on behalf of our company (such as, by way of example, companies providing IT maintenance services, etc.); the data collected may be communicated to the authorities entitled to receive them. 

Your data will be processed only by staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Your personal data will be processed by automated systems. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

The data is normally stored until consent is withdrawn. 

Provision 

(GDPR - Art.13, par. 2, f) 

The data are provided by the data subjects on an optional basis with regards to the subscription to information newsletters.  

Legal basis 

(GDPR - Art.6, par. 1). 

Processing is optional for sending information, therefore consent must be given to carry this out.  

 

  1. DATA FOR MARKETING NEWSLETTER SUBSCRIPTION 

The personal data provided by the interested data subjects by voluntarily entering the contact details in the online form, will be processed for purposes connected with the sending of the newsletter.   

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

The information collected identifies the data subjects for marketing purposes and for carrying out promotional activities by sending a newsletter or otherwise as described in the relevant form with regards to the products/services purchased or other than these, new items and promotions of the company. 

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

The categories of people in charge of processing data for the above purposes are the people in charge of managing the site, the customer service,  the marketing activities, the IT systems, as well as third companies that process data on behalf of the company (GDPR Art. 28); data may be communicated to the authorities entitled to receive them. 

Your data will be processed only by staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Your personal data will be processed by automated systems. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

Data are stored up to 24 months following collection, then consent must be renewed if data subjects are interested to do so.  

Provision 

(GDPR - Art.13, par. 2, f) 

The data are provided by the data subjects on an optional basis with regards to the subscription to promotional/marketing newsletters.  

Legal basis 

(GDPR - Art.6, par. 1). 

Processing is optional for receiving promotional/marketing information, therefore consent must be given to carry this out. 

 

  1. BROWSING DATA 

The information systems and software procedures required for the proper functioning of this site will acquire, during normal operation, some personal information whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers used by the users that connect to the website, URI (Uniform Resource Identifier) addresses of the resources requested, request time, method used to submit the request to the server, size of the response file, numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the user’s IT environment.  

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR, Art.13, par. 1, letter c) 

These data are used only to obtain statistical information on website use and to check that is functioning properly. Data could be used to ascertain  responsibility in case of alleged computer fraud against the website (legitimate interest of Data Controller). 

Scope of communication 

(GDPR, Art.13, par. 1, letters e and f) 

Your data will be processed only by internal staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. They may be disclosed to competent authorities only in the event of an investigation. Any other case will be specified in the relevant form. 

Retention period 

(GDPR, Art.13, par. 2, letter a) 

Data are normally retained for brief periods of time, except for possible extensions connected with investigation activities. 

Provision 

(GDPR, Art.13, par. 2, letter f) 

Data in a non-identifying form are collected autonomously and without consent.  

Data in an identifying form are provided voluntarily by the data subjects after giving consent.   

 

  1. DATA FOR REGISTRATION TO ONLINE SHOP 

The personal data provided by the data subjects when filling out specific forms for activating accounts are subject to processing with the purpose of registering users with the online shop site.  

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR, Art.13, par. 1, letter c) 

Personal data are requested to data subjects to follow up the registration on the online shop site.  The provision of data in the registration form and/or in the form for purchasing products, as well as other personal data that may be requested for payment and delivery of the goods, is aimed at fulfilling the order and signing the agreement. 

Scope of communication 

(GDPR, Art.13, par. 1, letters e and f) 

The categories of people authorised to process data for the above purposes are the people in charge of managing the site, the accounting, the customer service, the IT systems, as well as third companies that process data on behalf of Davines SpA (such as, by way of example, companies providing IT maintenance services, shipping companies and carriers, legal consultants, companies carrying out and/or managing promotional campaigns, etc.); data may be communicated to the authorities entitled to receive them. 

To have the full list of people processing the data collected, data subjects are invited to contact the Customer Service. 

The data collected shall not be notified to external subjects, disclosed or transferred to countries outside the EU. Any other case will be specified in the relevant form. 

Retention period 

(GDPR, Art.13, par. 2, letter a) 

The data collected are stored solely for the time necessary to allow us to provide the requested services. 

Provision 

(GDPR, Art.13, par. 2, letter f) 

The provision of personal data is mandatory for the purposes given above to be able to provide the requested services.  

 

  1. PROFILING DATA 

The personal data collected from data subjects are subject to processing for profiling purposes with regards to purchasing habits and/or preferences fo services and/or products supplied by the company.   

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR - Art.13, par. 1, c) 

The information collected identifies data subjects for profiling purposes, that is, in relation to their purchasing habits and/or preferences, browsing or other identifying data generated by the devices, applications, tools and protocols used, such as IP addresses, temporary markers (cookies) or other identifiers, in order to analyse this data and propose marketing and remarketing services.   

 

Scope of communication 

(GDPR - Art.13, par. 1, e, f) 

The categories of people in charge of processing data for the above purposes are the people in charge of managing the site, the customer service, the marketing activities, the IT systems, as well as third companies that process data on behalf of the company (GDPR Art. 28); data may be communicated to the authorities entitled to receive them. 

Your data will be processed only by staff who have been duly authorized and trained for processing (GDPR, Art.29) and they will not be disclosed to external persons, disseminated or transferred to non-EU countries. Any other case will be specified in the relevant form. 

Processing methods 

(GDPR C. 39) 

Your personal data will be processed by automated systems. 

Specific security measures have been deployed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data, 

Retention period 

(GDPR - Art.13, par. 2, a) 

Data are stored up to 12 months following collection, then consent must be renewed if data subjects are interested to do so. 

Provision 

(GDPR - Art.13, par. 2, f) 

The data are provided by the data subjects on an optional basis for profiling purposes with regards to promotional/marketing activities.  

Legal basis 

(GDPR - Art.6, par. 1). 

Processing is optional for activating the profiling service, therefore consent must be given to carry this out. 

Focus: Retargeting / Remarketing / Advertising Information   

This website uses remarketing technologies to communicate, optimize and process advertising based on the visit of the data subjects to this website. In particular, the information collected (IP address and email address) is transmitted to the following partners with whom the remarketing activities are associated in order to classify the users of the website into user groups. Based on the different user groups, personalized advertisements for DAVINES SpA products and services are proposed to users on other websites or applications. 

The processing is carried out on the legal basis of the user's consent (art. 6 c. 1 letter a of the GDPR), which can be revoked at any time. Users may also opt out of certain advertising features through the corresponding device configuration options, such as the mobile advertising configuration options or the general advertising configuration. 

  • Google Customer Match   

The Customer Match function allows advertising messages to be displayed to the user even after visiting this website and authenticating (logging in) to Google services, as well as searching Google, YouTube or using Gmail through the Google Adwords service. The user information provided to Google is stored as part of the Google Adwords service and is only used to provide the service to DAVINES SpA. Users can disable the use of cookies by Google by installing the plug-in provided at the following link:www.google.com/settings/ads/plugin. 

  • Facebook Pixel  

This website uses Facebook counting pixel to measure conversion. Tracking pixels are small, pixel-sized pieces of software on this website that create a connection between the user's visit to the website and Facebook. When the pixel is loaded, Facebook installs a so-called "fr" biscuit on the user's computer, which helps Facebook to offer more personalised advertising, but also to measure and improve advertising. When the "fr" biscuit is installed, Facebook can track the user's browsing behaviour through other websites that have used a Facebook Pixel or a Facebook Social plugin. For more information, please visit the following links:https://www.facebook.com/policies/cookies/ andhttps://it-it.facebook.com/help/568137493302217. To deactivate, please visit the following link:https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (after logging in). 

 

For further information, please refer to the Cookie Policy. 

 

  1. DATA FOR REGISTRATION AT EVENTS  

The personal data provided by the data subjects when filling out specific forms for registering at events of various form and interest are subject to processing with the purpose of registering users with these events. 

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR, Art.13, par. 1, letter c) 

Personal data are requested to data subjects to follow up the request for registration at the event concerned. The email address will be used solely to complete registration in the events you have chosen, as well as to send you reminders related to the event you have registered in. The other data collected are requested to complete the subscription and registration at the event concerned, and to receive any items intended for participants.  

Scope of communication 

(GDPR, Art.13, par. 1, letters e and f) 

The categories of people authorised to process data for the above purposes are the people in charge of organizing and managing the events, customer service, IT systems, as well as third companies who provide support in some specific cases, such as, by way of example, IT maintenance services, event organization, etc.); data may be communicated to the authorities entitled to receive them. 

The data collected shall not be notified to external subjects, disclosed or transferred to countries outside the EU. Any other case will be specified in the relevant form. 

Retention period 

(GDPR, Art.13, par. 2, letter a) 

The collected data shall be stored solely for the time necessary to allow us to provide the requested services associated with the digital events. 

Provision 

(GDPR, Art.13, par. 2, letter f) 

The provision of personal data is mandatory for the purposes given above solely to be able to complete the registration at the events proposed by the company. 

 

  1. DATA FOR JOINING THE UGC SERVICE 

The personal data provided by the data subjects when filling out specific forms for registering and authorising the posting of images on Social Networks are subject to processing for this purpose. 

For more information, write to the relevant e-mail address or to info@davines.com  

Purpose and legal basis for processing 

(GDPR, Art.13, par. 1, letter c) 

Personal data are requested to data subjects to follow up the authorisation to post images of the data subjects on Social Networks by Davines SpA, as well as provided by the data subjects for this purpose (UGS).  

Scope of communication 

(GDPR, Art.13, par. 1, letters e and f) 

The categories of authorised persons who will process the data for the aforementioned purposes are those responsible for managing Davines SpA Social Networks and those responsible for managing the information systems, as well as any third-party companies that carry out data processing on our behalf (for example, maintenance of information services or other data processing means). 

The data collected shall not be notified to external subjects, disclosed or transferred to countries outside the EU. Any other case will be specified in the relevant form. 

Retention period 

(GDPR, Art.13, par. 2, letter a) 

The collected data shall be stored solely for the time necessary to allow us to post the images associated with Davines SpA’s UGC service. 

Provision 

(GDPR, Art.13, par. 2, letter f) 

The provision of your data is necessary for the purposes of sharing images by Davines SpA’s UGC service. 

 

  1. COOKIES 

For further information on cookies and how to enable and disable them, go to section Cookies and Advertising on the websitedavines.com/pages/cookie-policy 

 

  1. RIGHTS OF THE DATA SUBJECT (GDPR Articles 15--22) 

At any time, the data subject may exercise the right to: 

  • ask for confirmation of the existence or otherwise of their personal data; 
  • obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and, where possible, the period of time for which the data will be stored; 
  • obtain the rectification or erasure of the data; 
  • obtain restriction of processing. 
  • obtain data portability, i.e. receive them from one data controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance; 
  • object to the processing at any time, including in the case of processing for direct marketing purposes; 
  • object to an automated decision-making process relating to individuals, including profiling; 
  • file a claim with the Italian Data Protection Supervisor. 

 

Requests must be sent to the Data Controller by writing to the e-mail addresses that refer to the specific data processing purposes.  

Every effort will be made to make the functions of this site as interoperable as possible with automatic privacy control mechanisms available in some of the products utilised by users. 

 

This information document is updated as at 06/01/2023.