Privacy

PRIVACY POLICY - CHANCES SITE

Elisa Tricoli, owner of the Chances brand, recognizes the importance of maintaining the confidentiality, integrity and security of your non-public Personal Data (hereinafter the "Personal Data") and informs you that the Personal Data you provide through the Website www.chancesitaly.com, will be treated in compliance with the current European privacy legislation, Regulation (EU) 2016/679 (hereinafter the "Regulation") and the specific local regulations applicable from time to time for the treatments carried out at outside the European Union, as well as the principles and general rules of conduct contained in the Code of Ethics adopted by Chances.

1. Data Controllers

The Data Controller is:

• Elisa Tricoli based in via palazzo, Formia, Italy.

The Data Controller or Data Protection Officer (DPO) appointed by the Data Controller, can be contacted at the email address info@chancesitaly.com.

The responsibilities of the Data Controllers regarding compliance with the obligations deriving from the Regulation, as defined in Article 26, have been determined by means of an internal agreement available to you upon written request.

2. Type and source of the data

I. Navigation data

During their normal operation, the IT systems and software procedures used to operate the Site acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified natural persons, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes IP addresses (Internet Protocol, a numeric label that uniquely identifies a device called host, which can be a computer or PDA or smartphone, etc., connected to a computer network that uses the Internet Protocol as the network), or the domain names of the computers used by users who connect to the Site, the addresses in URI notation (Uniform Resource Identifier, a sequence of characters that uniquely identifies a generic resource.) of the requested resources, the date and time of the request, the method used to forward the request to the server (high performance computer that in a network provides a service to the other connected computers, called clients), the size of the file (digital information container) obtained in response, the code numeric indicating the status of the response given by the server (successful, error, etc.), the geographical position of the user and other re parameters related to the user's operating system and IT environment. Localization takes place in non-continuous mode when the user allows automatic detection of the position.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site (frequency of access, duration of stay, information on the items displayed, moved to the cart, or included in the wish list) and to check its correct functioning.

To improve the service offered and monitor user behavior, cookies will be sent to them when the user visits the site.

Cookies are small text files that the Site visited by the user sends to his terminal (usually to the browser, a program that allows you to browse and view the web pages and the material contained therein: images, videos, texts, and other multimedia elements ), where they are stored before being retransmitted to the same site on the next visit by the same user. Cookies is the means on which browsing data is saved.

For more information, to know the cookies used on the Site and possibly disable them and / or deny consent, please refer to the Cookie Policy.

II. Personal data provided voluntarily

Chances will collect and process the Personal Data you directly and knowingly provided through the chancesitaly.com website

Personal Data can be: name, surname, postal address and country, email address, password chosen by you to access your account, telephone number, date of birth, gender, a billing address and one or more postal shipping addresses , the identification data of one or more of your credit cards and the tax code.

In addition, the optional, explicit and voluntary sending of e-mail via the Site to Customer Service entails the subsequent acquisition of the email address, necessary to respond to requests, as well as any other personal data included in the message sent.

3. Purpose of the processing of Personal Data

Personal Data will be used for the following purposes:

I. Subscription to the Chances newsletter and loyalty program

Chances collects the Personal Data you directly and knowingly provided when registering for the Chances newsletter.

II. Customer profiling

Only following a possible explicit consent, and provided that you have subscribed to the Newsletter Chances, the personal data you provide and the data relating to your online and offline purchases can be processed for profiling activities, which consists in automated processing and anonymized customer data, in order to divide it into groups according to their behavior, with the aim of creating personalized contents and offers. It is emphasized that the offer of goods and services is not directed to minors; Chances undertakes to verify and, if necessary, cancel the consents for profiling issued by customers who are under the age of 16.

III. Online purchase

The Personal Data provided will be processed for the purpose of managing the purchase order with reference, by way of example, to payment, shipping, fraud prevention, taking charge of any returns, customer support, litigation, execution of administrative and accounting activities, fulfillment of obligations under current legislation. Chances does not collect information relating to the payment methods you intend to use but these are collected directly from the relative suppliers as well as from the supplier of the e-commerce platform and the companies in charge of anti-fraud control.

IV. Direct Marketing

Only following an explicit consent, the Personal Data you provide may be used to send you commercial and promotional communications, newsletters, messages, advertising material on our latest collections, products, campaigns, as well as catalogs and invitations to events through communication tools. traditional and automated both in digital and paper format (mail, mail, calls, chat, SMS and MMS).

You always have the right to prevent the use of your personal data for marketing purposes: to do this, simply click on the unsubscribe link at the bottom of the e-mails received or write to info @ chancesitaly. com. It is emphasized that the offer of goods and services is not directed to minors; Chances undertakes to verify and, if necessary, delete the data of customers who are under the age of 16 used for marketing activities.

V. Management of the relationship

Sending by you a request for assistance to the Customer Service (via email, livechat, form, telephone) allows Chances to acquire your email address or telephone number, as well as any other Personal Data and other information entered therein .

YOU. Compliance with legal obligations:

The personal data you provide may be processed for:

a) satisfy legal, administrative, financial and accounting duties imposed by applicable laws and regulations (for example in terms of tax documentation);

b) carry out activities of an organizational and / or functional nature for the fulfillment of contractual obligations.

4. Legal basis for the processing of personal data

Your Personal Data are collected by Chances only if and to the extent that one of the following conditions exists:

a) You have given your consent to the optional processing of your Personal Data for marketing and profiling purposes. Any lack of consent will make it impossible for Chances to send you commercial and promotional communications direct and / or in line with your preferences.

b) The processing of your Personal Data is mandatory for the execution of a contract of which you are a part, as in the cases of: online purchase of one or more products and relationship management. For example, in the case of online purchase, any failure to provide your data makes it impossible for Chances to proceed with the establishment, management, execution and / or conclusion of the online sales contract, therefore the impossibility of managing the purchase order with reference, by way of example, to payment, shipping, fraud prevention, taking charge of any returns, customer assistance, litigation, carrying out administrative and accounting activities, fulfillment of obligations under current legislation.

c) The processing of your Personal Data is mandatory to fulfill a legal obligation to which Chances is subject as the Data Controller, as in the case of tax documentation obligations. Failure to provide your data will make it impossible for Chances to perform a task performed in the public interest or for the exercise of public powers.

d) The processing is necessary for the pursuit of the legitimate interest of Chances, as in the case of: - verifying that your Personal Data are not associated with an illegal use of the credit card or with an excessive charge on the credit card.

The aforementioned legal bases could, depending on the case, be in whole or in part joined together.

You have the right to withdraw your consent. said revocation does not, however, affect the lawfulness of the treatment based on consent before the revocation.

d) The processing is necessary for the pursuit of the legitimate interest of Chances, as in the case of: - verifying that your Personal Data are not associated with an illegal use of the credit card or with an excessive charge on the credit card.

The aforementioned legal bases could, depending on the case, be in whole or in part joined together.

You have the right to withdraw your consent. said revocation does not, however, affect the lawfulness of the treatment based on consent before the revocation.

5. Processing methods

Personal Data will be processed by means of paper, IT and telematic tools, according to logic strictly related to the purposes indicated above, for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the principle of necessity and proportionality, avoiding to process Personal Data if the operations can be carried out through the use of anonymous data or through other methods.

All the measures deemed necessary and / or appropriate will be put in place so that they are treated in a lawful, correct and transparent manner towards you, and to prevent their loss, even accidental, as well as illegal access.

In particular, the Personal Data processed for profiling and marketing purposes will be entered and stored in the CRM (Customer Relationship Management) system at the Aruba dedicated server for the Chances website.

6. Duration of treatment and retention period of Personal Data

Your Personal Data will be processed and stored for the time necessary for the execution of the purposes for which they were collected.

Therefore:

• Personal Data collected on the basis of your consent for marketing and profiling purposes or for the pursuit of the legitimate interest of Chances will be processed and stored for the period in which you interact with Chances in an active way, meaning having visited in the last three years on our Site or until you withdraw your consent. They will then be made anonymous;

• The Personal Data collected for the execution of a contract of which you are a part will be processed and stored until the execution of this contract has been completed;

The Personal Data collected to fulfill a legal obligation will be processed and stored for the period provided for by the current law. Chances may be obliged to keep your Personal Data for a longer period than those respectively indicated above by order of an authority.

At the end of the retention period, your Personal Data will be permanently deleted or anonymized. Therefore, at the end of this term you can no longer exercise the right of access, the right of rectification, the right to erasure, the right to limitation of treatment, and the right to portability of Personal Data.

7. Communication and transfer of personal data abroad

Personal Data will be processed by Chances internal staff, if necessary authorized for processing within the scope of the assigned job duties, designated as processor, and possibly, as necessary and / or instrumental for the execution of the aforementioned purposes. , by external subjects who perform specific technical and organizational services for Chances connected to the Site and the management of marketing and communication activities that will act on behalf of Chances as Data Processors (e.g. service provider, digital agency, shippers, technicians who they maintain the IT services, companies which Chances will be able to use for the creation and / or management of promotional campaigns for its products or services, consultants, etc.).

The processing by each Data Processor will be governed by a contract or other legal act that binds it to Chances and which also defines the duration, nature and purpose of the processing, the type of Personal Data and the categories of interested parties, the obligations and rights of Chances.

Your Personal Data will not be used for promotional purposes of third parties or referring to products, services or initiatives not coming from Chances and will in no case be disclosed to indeterminate subjects. In the event that it is specifically required by applicable law, your Personal Data may be provided to regulatory authorities, judicial authorities, law enforcement agencies, tax authorities and other authorities to which investigative powers are assigned.

The updated list of Data Processors may be requested from the Data Controller at the addresses indicated in paragraph 1.

You will have the right to obtain a copy of the Data held abroad outside the European Economic Area and to obtain information about the place where such Data is stored by making an express request to the address referred to in paragraph 1 of this information.

8. Your rights

You have the right, at any time, to exercise the following rights towards the Data Controller:

a) Obtain, in accordance with Article 15 of the Regulation, confirmation that a processing of your Personal Data is in progress, and in this case, access to them and to the following information: a) the purposes of the processing; b) the categories of Personal Data in question; c) the recipients or categories of recipients to whom the Personal Data have been or will be communicated, in particular if recipients from third countries or international organizations d) the retention period of the Personal Data provided, or if it is not possible, the criteria used to determine that period.

b) If Personal Data is transferred to a third country or to an international organization, be informed of the existence of adequate guarantees pursuant to Article 46 of the Regulation.

c) Obtain a copy of the Personal Data being processed.

d) Obtain, in accordance with Article 16, the correction of inaccurate Personal Data concerning him without justified delay; taking into account the purposes of the processing, you have the right to obtain the integration of Personal Data also by providing an additional declaration.

e) Obtain, pursuant to Article 17, the cancellation of Personal Data concerning you without justified delay. The Data Controller has the obligation to delete Personal Data without justified delay if one of the reasons indicated in paragraph 1 of article 17 exists.

f) Obtain, pursuant to Article 18, the limitation of treatment when one of the hypotheses governed by paragraph 1 of Article 18 occurs.

g) Revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

h) Obtain, pursuant to Article 20, data portability, i.e. to receive the Personal Data concerning him / her provided to Chances in a structured format, commonly used and readable, by automatic device. You also have the right to transmit such data to another Data Controller without impediments from Chances to whom you have provided them if the conditions indicated in Article 20 paragraph 1 apply. Finally, you have the right to obtain the direct transmission of the Data Personal from one Data Controller to another, if technically feasible.

i) Oppose at any time, pursuant to Article 21, to the processing of personal data concerning you.

j) Oppose at any time, pursuant to Article 21, to the processing of Personal Data if they are processed for direct marketing and profiling purposes when certain conditions set out in Article 21 of the Regulation occur.

k) Oppose, pursuant to Article 22, to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you personally, according to the conditions set out in the Article 22 of the Regulation.

l) Propose a complaint to a Guarantor for the protection of Personal Data if it believes that the processing that concerns you violates the Regulation.

m) Acting in court.

Full descriptions of your rights are given in articles 6/15/16/17/18/20/21/22/57 of the Regulation.

9. Contacts

Any request relating to your personal data relating to this information and for the exercise of your rights may contact, free of charge, the Data Controllers or the Data Protection Officer (DPO), at the addresses indicated in paragraph 1 .

10. Changes to this Privacy Policy

The owners reserve the right to modify this Privacy Policy at any time by advertising it on the Site. The version published on the Site is the one currently in force.

Last updated: January 21, 2020