Privacy Policy

1. Data Controller
1.1 The data controller is BRANDINIENTE.
BRANDINIENTE – and the service providers acting on its behalf – determines the purposes, technical and legal means of data processing and undertakes to adopt all necessary measures to ensure that the processing complies with the provisions of the Personal Data Protection Code (Legislative Decree 196/2003) and Regulation (EU) 2016/679 of 26 April 2016, General Data Protection Regulation (hereinafter "GDPR").

1.2. BRANDINIENTE is free to choose any natural or legal person to process the User's personal data at its request and on its behalf (hereinafter "the data processor"). BRANDINIENTE undertakes to select data processors providing sufficient guarantees regarding the technical and organizational security measures for the processing of personal data.

2. Processing of Personal Data
2.1. The use of the Website, access to certain pages and/or all information or services requested by the User of the Site may involve the communication of personal data. The processing of such data by BRANDINIENTE, as the data controller, and/or by data processors acting on behalf of BRANDINIENTE, will comply with the Personal Data Protection Code and the GDPR Regulation.

2.2. The purpose of this Privacy Policy is to inform the User, before accessing specific pages of the Site and communicating their personal data, on how BRANDINIENTE processes their data. The User must be aware of this Privacy Policy before providing personal data by filling out the forms provided for this purpose on the various pages of the Website.

2.3 Personal data will be processed predominantly automatically, in ways related to the purposes described in point 3.
BRANDINIENTE is careful that the User's personal data is processed securely and confidentially and adopts all necessary measures to avoid loss, misuse, deterioration or deletion of personal data.

2.4. BRANDINIENTE also collects specific personal data of the User in order to recognize them and offer an optimal and personalized user experience. This collection also aims to correct any errors on the Website. The data collected concerns the User's connection (IP address, geographical area, day and time of connection, pages visited and/or used, etc.) as well as the tools from which the connection was made.

2.5 This Site uses cookies in order to better meet the User's needs and offer a personalized experience. The purpose of cookies is to signal the User's visit to the site.

2.6. The omission, incompleteness or inaccuracy of personal data marked with an asterisk and therefore necessary for the execution of the requested service, will make the service itself impossible. On the other hand, the omission, incompleteness or inaccuracy of optional personal data will have no consequences.

3. Purposes of Personal Data Processing
The User's personal data is processed in order to process and deliver their orders.
The ordering process on the Website www.brandiniente.com requires the creation of a Customer account where information is stored and protected by a password chosen by the Customer.
Subject to validation with an "opt-in" from the Customer, personal information (personal data, email address, gender, etc.) may also be used by BRANDINIENTE and/or its partners for marketing purposes, such as sending newsletters or requests.

4. Personal Data Likely to be Processed
The information provided by the User when filling out forms or creating their account is collected and processed. This information includes the User's name, gender, size, address, email and phone number.

5. Consent
The User may withdraw their consent at any time. The withdrawal of consent does not call into question the legality of the process already carried out, based on the consent given before the withdrawal. This right can be exercised via email at info@brandiniente.com.

6.Duration of Personal Data Retention
In accordance with the Personal Data Protection Code and the GDPR Regulation, BRANDINIENTE stores the User's personal data only for a period of time reasonably necessary to achieve the purposes for which they were collected.

7. Communication of User's Personal Data for Internal Purposes
7.1. Personal data may be provided to employees and personnel of BRANDINIENTE who, acting under the direct authority of BRANDINIENTE, are considered data controllers or processors and receive appropriate operational instructions. Employees or appointees of the data controller, appointed by BRANDINIENTE, may become aware of personal data, provided that the data is collected in relation to the purposes pursued.

7.2. BRANDINIENTE ensures that the appointees, employees or personnel guarantee the same level of protection as BRANDINIENTE and ensures that such appointees, employees or personnel process personal data only for the purposes pursued, with the required confidentiality and security.

7.3. Personal data communicated directly by Users through online forms may be communicated and collected by external suppliers acting on behalf of BRANDINIENTE.

7.4 The data is not subject to transfer to a third country outside the European Union.

8. User Rights
8.1. BRANDINIENTE guarantees fair and lawful processing of the User's personal data.

8.2. BRANDINIENTE guarantees the User the right to access their personal data.
Pursuant to Article 15 of the GDPR, the User has the right to obtain from BRANDINIENTE the following information (non-exhaustive):

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the User concerned.

8.3. BRANDINIENTE guarantees the User the right to access their personal data.
Pursuant to Article 16 of the GDPR, incorrect or inaccurate data can be rectified or deleted at any time. First, the User will independently make the necessary changes from their user account, then the User must ask BRANDINIENTE to make the changes, if necessary.
The User has the right to obtain the erasure of their personal data in the cases listed in Article 17 of the GDPR.

8.4. BRANDINIENTE guarantees the right to restriction of processing
The User has the right to obtain restriction of processing where one of the cases referred to in Article 18 of the GDPR applies.

8.5. BRANDINIENTE guarantees the right to data portability
Pursuant to Article 20 of the GDPR, the User has the right to receive from BRANDINIENTE the personal data concerning them, in a structured, commonly used and machine-readable format.
The User will also have the right to transmit those data to another controller without hindrance from BRANDINIENTE, in the cases described in the GDPR.

8.6. BRANDINIENTE guarantees the right to object to processing
The User has the right to object at any time, on compelling legitimate grounds relating to their particular situation, to processing of personal data concerning them. In this case, BRANDINIENTE will not process the personal data unless there are valid legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

8.7. BRANDINIENTE guarantees the right to lodge a complaint
The User has the right to lodge a complaint regarding the processing of their personal data by BRANDINIENTE with the Italian Data Protection Authority, the competent supervisory authority in the Italian territory.

8.8. The User can exercise the rights listed above, at any time, via email at info@brandiniente.com.

9. Limitation of Liability of the Controller
The Website may contain hyperlinks to websites controlled and operated by third parties not affiliated with BRANDINIENTE. In this case, BRANDINIENTE cannot be held responsible for the content of these websites or for the practices of these third parties regarding the protection of personal data.

BRANDINIENTE cannot be held responsible for the loss, damage to data or identity theft, which may be caused in particular, but not limited to, by the presence of viruses or computer attacks.

10. User Data Modification Process
The User can, at any time, modify the personal data communicated via email at info@brandiniente.com.

11. Cookies
Cookies are used on the site to improve your browsing experience. The cookie identifies your computer and allows the site to remember your personal settings. Cookies are also used for statistical purposes.
You can set your browser to receive a warning when a cookie is to be activated. This allows you to refuse the use of the cookie in question or to have the browser delete the cookie at the end of your visit. The online boutique cannot be used if cookies are not allowed.
Users who log in will be assigned a user ID, which allows anonymous tracking of the Website across multiple devices (tablet, desktop, mobile, etc.). No personally identifiable data is collected or linked to the user ID and you can opt-out by contacting: info@brandiniente.com.

12. Modification of the Privacy Policy
BRANDINIENTE reserves the right to modify this Privacy Policy to comply with privacy laws and regulations or to adapt it to its practice. Therefore, the User is invited to consult it regularly to be aware of any changes and adaptations.