Privacy Policy

Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

PROCESSED PERSONAL DATA

Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (such as name, last name, date of birth, address, email, telephone number).

Browsing data: during their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user.

Data provided voluntarily by the user: the optional and voluntary disclosure of personal data (e.g.: sending of emails to the email addresses indicated on this website and/or the completion of a data collection form on this website) entails the collection and processing of the voluntary disclosed user’s data, necessary to reply to the request, as well as other personal data included in the email message (such as name, last name, address, telephone number, email address). COOKIES

To get more info on cookies used in this website please read our Cookie Policy.

​1. DATA CONTROLLER

Data Controller, pursuant to art. 4 and art. 24 of the Regulation (EU) 2016/679 is ONIRO Group s.r.l., with registered address in Via Montesolaro, 14/b – 22063 Cantù (CO), represented by the legal representative pro tempore. You can contact the Controller at any time at the following contacts: email <privacy@onirogroup.it>. 3. PURPOSES, LEGAL BASIS, DATA RETENTION, NATURE OF DATA PROVISION

PURPOSES

LEGAL BASIS

DATA RETENTION

NATURE OF DATA PROVISION

Browsing on this website

Controller’s legitimate interest

See cookie policy

The provision of data is necessary for the navigation of the website.

Use of cookies and similar technologies.

For non-technical cookies, processing is based on consent

See cookie policy

For technical cookies, the provision of cookies is necessary to enable browsing.

For non-technical cookies, optional; failure to consent will not affect navigation on the site

In addition to navigation, personal data will be processed for:

PURPOSES

LEGAL BASIS

DATA RETENTION

NATURE OF DATA PROVISION

A) Request for informations – contacts

Controller’s legitimate interest

1 year

The provision is optional. Failure to provide personal data may only result in the impossibility of obtaining the information or services requested provided through this website.

B) Soft spam: direct e-mailing marketing in order to promote goods or services similar to those already purchased by the data subject

Controller’s legitimate interest

Until users’ objection (opt-out)

The provision is necessary in order to provide communications relating to products purchased by the data subject

C) Subscription to the newsletter service for brands Etro, Ferre', Roberto Cavalli, Jcp, Collection (direct marketing)

Consent

Withdrawal of consent – opt out

The provision is optional. Failure to provide personal data may result in the impossibility of obtaining the services requested provided through this website.

4. PERSONAL DATA RECIPIENTS

The personal data provided will be communicated to recipients, who will process the data as processors (Article 28 of the GDPR), as persons acting under the authority of the Controller and Processor (Article 29 of the GDPR) or autonomous Data Controllers, for the purposes listed above. Precisely, the data will be communicated to: - parties that provide services for the management of the information system and telecommunications networks used by the Data Controller (including email, the web platform, newsletter platform); studies or companies in the context of assistance and consultancy relationships; competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.

5. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

The personal data provided will be not transferred outside EEA.

​7. DATA SUBJECT’S RIGHTS | COMPLAINT TO SUPERVISORY AUTHORITY

You may exercise your rights pursuant to article 15 et seq. of the GDPR, contacting the Data Controller at privacy@onirogroup.it. In particular, you have the right, at any time, to request the Data Controller to access your personal data and receive the information concerning their processing and to amend or delete your data or limit their processing. With reference to the art. 6(1) point (a) (consent), you have the right to withdraw the consent given at any time. Furthermore, you have the right to object, at any time, to processing of your personal data pursuant to art. 6(1) point (f) GDPR (Data Controller’s legitimate interest). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for this purpose, by sending an e-mail to the address privacy@onirogroup.it or by clicking on automatic removal link present in the individual communications that you received. In exercising your right to data portability. In the event that you believe that the processing of personal data violate the provisions of GDPR, you have the right to lodge a complaint to the supervisory authority or to appeal the judge.

8. CHANGES TO THIS PRIVACY POLICY

The Controller reserves the right to amend, update, supplement or remove parts of this Privacy Policy at its own discretion and at any time. We encourage you to periodically review our Privacy Policy. For your convenience, when we post changes, we will revise the “last update” date of the Privacy Policy.

Last update: 28/01/2022