Privacy Policy
The Data Controller is Giuseppe Zanotti S.p.A. (VAT No.: 02067600409), with registered office in San Mauro Pascoli (FC), Via dell'Artigianato No. 28 (hereinafter “Giuseppe Zanotti” or the “Company”), which may be contacted by ordinary mail at the above address or by email at info@giuseppezanotti.com.
Giuseppe Zanotti has appointed a Data Protection Officer (DPO), who may be contacted by ordinary mail at the Company’s address or by email at dpo@giuseppezanotti.com.
Giuseppe Zanotti collects and processes Personal Data in connection with browsing the website www.giuseppezanotti.com, purchasing products through the website or at stores, and interacting with the customer center or the Company’s pages on social media platforms (Facebook, Instagram, Twitter, etc.).
In other cases, Data are collected through dedicated web forms (for example, when participating in a specific social media activity or registering online for an event) or in paper form, for example when sharing a business card.
Our Privacy Policy does not apply to services provided by other companies acting on their own behalf. These companies have their own privacy policies. In such cases, the protection of the Personal Data provided will be governed by their rules and not by ours.
ATTENTION:
In the event of electronic payment (by credit/debit card, Apple Pay, PayPal or similar instruments), the user is redirected to the secure website of the payment processor/authorized institution to enter payment details. Although we work exclusively with authorized and reliable payment processors and institutions, we are not responsible for and provide no guarantee regarding the processing of data in connection with the payment. Before providing Personal Data, please read and accept the terms of service, including the privacy policies.
Where processing is carried out by payment processors or institutions, we cannot be
held responsible in the event of a breach, loss, destruction, unauthorized disclosure or similar incident involving the Data.
Furthermore, in the event of payment by credit card on the website, Giuseppe Zanotti will transmit such information to Riskified Ltd. for anti-fraud verification purposes. Riskified will process such data as an independent Data Controller. Before placing an online order, Users are therefore invited to read Riskified’s Privacy Policy, available here: https://www.riskified.com/terms/#privacy.
We process your Personal Data for:
a. Purchasing a product through the e-commerce website in accordance with the terms and conditions of sale, including the possibility of using the services made available through the Website, including customer assistance services (i.e. warranties and returns), as well as asserting and defending our rights against users and third parties (“Contractual Purposes”). The processing is necessary for the performance of a contract to which the data subject is a party and concerns the following Personal Data: purchaser’s first name, last name, email address, telephone number and, if different, the recipient’s details, shipping and billing addresses, cart contents, purchase, price and payment method.
b. Creating a personal account on www.outseason.giuseppezanotti.com or any other touchpoint (“Contractual Purposes”). The processing is necessary for the performance of a contract to which the data subject is a party, and the data subject has given consent to the processing of their Personal Data for one or more specific purposes. We process the following Personal Data: first name, last name, email address and list of products saved in the wishlist.
c. Requesting information or a service, including by completing a form on www.outseason.giuseppezanotti.com or interacting with the customer center (“Contractual Purposes”), for the purpose of carrying out the actions requested by the user, providing assistance and product maintenance, and managing requests, correspondence, questions or complaints. The processing is necessary for the performance of a contract to which the data subject is a party and concerns all Personal Data provided when using the Service, including, by way of example and without limitation, first name, last name, email address, telephone number, subject of the request, which may in turn contain information relating to transactions, billing, delivery and contact details, account management, etc.
d. Carrying out activities relating to transfers of companies and business units, acquisitions, mergers, demergers or other corporate transformations and executing such transactions (“Legitimate Business Interest Purposes”). Processing for Legitimate Business Interest Purposes is carried out pursuant to Article 24(1)(d) of the Italian Privacy Code and on the basis of the Company’s and its counterparties’ legitimate interest in carrying out the economic transactions indicated above ursuant to Article 6(f) of the Privacy Regulation, appropriately balanced against users interests, as the processing is limited to what is strictly necessary for the execution of such transactions.
e. Complying with legal and regulatory obligations or orders issued by Authorities. We process all Personal Data collected to comply with obligations arising from applicable legislation or orders issued by authorities, including accounting, tax and product warranty obligations (“Legal Obligations”).
We also process your Personal Data for:
f. Sending promotional communications exclusively by email (soft spam) concerning products or services similar to those previously purchased (“Marketing Purposes”). The legal basis is the legitimate interest of the Data Controller within the limits set out in Article 130(4) of the Privacy Code and concerns: first name, last name and email address. The user may object to receiving such communications at any time by clicking the appropriate link included in the communications.
g. Sending satisfaction surveys exclusively by email, aimed at assessing the service provided and the user experience (“Legitimate Interest Purposes”). The legal basis is the legitimate interest of the Data Controller, appropriately balanced against users’ interests, as the processing is limited to what is strictly necessary for carrying out such activities, and concerns: first name, last name and email address.
h. Send Profiling-based marketing communications through electronic means (such as e-mail, SMS and MMS), ordinary mail, social networks and applications, based on an analysis of the User’s preferences and interests, as well as all other Personal Data collected during interactions with the Company, on the basis of the Data Controller’s legitimate interest pursuant to Article 6(1)(f) of the GDPR, appropriately balanced against the interests of Users, since the processing is carried out for the purpose of providing personalised and non-redundant communications. The processing is subject to the express consent of the Data Subject, who may withdraw such consent at any time by clicking on the appropriate link provided in such communications.
i. Analysis and statistics based on anonymous and aggregated data relating or relevant to our business, and improving our products and services, ensuring the quality of customer service, and internally managing and controlling our activities
(“Legitimate Interest Purposes”).
When interacting with the website, certain data are collected automatically from the user’s devices or browser. Further information on these practices is available in the “Cookie Policy” section. The above data include: device ID, call status, network access, memory and battery information; cookies, IP addresses, data identifying the browser and the version in use, web beacons, tags and interactions with the Website.
No health data or, in general, special categories of Personal Data within the meaning of Article 9 of the GDPR are processed.
The processing of Personal Data required for Contractual Purposes is necessary in order to fulfil the user’s request. The processing of Personal Data required by law is mandatory under applicable legislation. Refusal to provide such data, in whole or in part, may make it impossible for the Company to provide the requested Service or sell the product.
The processing of Personal Data for soft-spam marketing purposes is carried out pursuant to Article 130(4) of the Privacy Code and does not require the data subject’s consent, who nevertheless has the right to object to receiving such communications at any time by clicking the appropriate link included in the communications. The processing of Personal Data for Profiling Marketing Purposes is carried out xclusively on the basis of the data subject’s prior consent. The data subject may object to receiving such communications at any time by clicking the appropriate link included in the communications or by contacting the Company using one of the methods indicated above. Failure to provide consent means that Giuseppe Zanotti will be unable to keep you updated on new products or services, promotions, personalized offers, or send communications or other informational material that may be relevant to your interests.
The processing of Personal Data for Legitimate Interest Purposes is necessary to pursue Giuseppe Zanotti’s legitimate interest in improving its services and processes, appropriately balanced against users’ interests in light of the limitations applicable to such processing. Failure to provide consent or any subsequent withdrawal of consent will in no way affect the pursuit of the other purposes specified above or the purchase of products.
Personal Data are processed using electronic and/or paper-based means and are protected through appropriate security measures designed to ensure the confidentiality and security of Personal Data. In particular, the Company adopts appropriate organizational and technical measures to protect the Personal Data in its possession against loss, theft, and unauthorized use, disclosure or modification.
Giuseppe Zanotti anonymizes Personal Data and removes identifying data where there is no need to process Personal Data in identifiable form for the processing purposes, and upon expiry of the retention period indicated in the relevant section.
The Data provided will be processed by Giuseppe Zanotti’s data processors and authorized personnel as indicated in this policy and will under no circumstances be disclosed to the public.
Personal Data may be transferred to the following third parties that perform activities related to those under the contract and are located within the European Union:
a. Third-party service providers providing assistance and consultancy services to Giuseppe Zanotti, including, by way of example, website hosting, order processing, fraud checks, fulfilment of orders and returns, payment processing, customer service, shipping and delivery, correspondence, web marketing, etc.;
b. The Company may also disclose the data to financial institutions or other third parties in connection with payment transactions, specifically for fraud prevention purposes. The User’s Personal Data will not otherwise be disclosed to third parties, except where required by law, in connection with legal actions or proceedings, or where otherwise necessary to protect the rights or interests of the Companies. Personal Data may also be transferred to prospective purchasers of Giuseppe Zanotti and to other entities resulting from a merger or any other form of corporate transformation involving Giuseppe Zanotti.
Such recipients process the data of the data subjects and the Company as independent data controllers, data processors or authorized personnel. A complete list of the external data processors appointed by Giuseppe Zanotti is available upon request using the methods indicated in this Privacy Policy.
The Personal Data of data subjects will not be transferred to countries outside the European Economic Area.
If Giuseppe Zanotti transfers the data of data subjects to countries outside the European Union, it will in any event do so in compliance with appropriate and suitable safeguards for the transfer, such as standard contractual clauses for data protection, in accordance with applicable legislation and, in particular, Articles 45 and 46 of the Privacy Regulation.
Personal Data will be retained for the period necessary to pursue the purposes for which they were collected. In any event, the following retention periods apply to the processing of Personal Data for the purposes indicated below:
a. Data collected for Contractual Purposes are retained for the entire duration of the contract and for 7 years following its expiry for the purposes of defending and/or enforcing the Companies’ rights in judicial and/or extrajudicial proceedings in the event of disputes relating to the performance of the contract, without prejudice to cases in which retention for a longer period is required due to pending disputes, requests from competent authorities or applicable law;
b. Data collected to comply with Legal Obligations are retained for the period prescribed by law for each type of data;
c. Data collected for Marketing and Profiling Marketing Purposes are retained for a period of 7 years from the date of the last contact (e.g. last purchase made, last newsletter opened, etc.) or until consent is withdrawn (which can be managed through the preference center of the relevant account). Consent to receive newsletters may be withdrawn independently using the unsubscribe button in the footer of each newsletter;
d. Data collected for the creation of an account are processed until the account is deleted (which may be requested by sending an email to dpo@giuseppezanotti.com);
e. Data collected for Legitimate Business Interest Purposes are retained for a period of 7 years from the time of collection. In case of any doubt, the Company invites Users to send an email to dpo@giuseppezanotti.com.
The Service is not intended for minors.
The data subject may exercise their rights at any time and free of charge by sending an email to dpo@giuseppezanotti.com and, in particular: (i) obtain confirmation asto whether or not Personal Data concerning them exist and be informed of theircontent and source, verify their accuracy and request their integration,updating or modification; (ii) obtain the erasure, anonymization or blocking ofany data processed in violation of applicable law; (iii) object, in whole or inpart, on legitimate grounds, to the processing, except where Giuseppe Zanottihas overriding legitimate grounds or where it is necessary to assert or defenda right in judicial proceedings; (iv) withdraw, at any time, consent to theprocessing of the Data (in relation to processing for which such consent may berequired), without affecting the lawfulness of processing based on consentgiven before its withdrawal; (v) request Giuseppe Zanotti to restrict theprocessing of their Personal Data where: the accuracy of their Personal Data iscontested, for the period necessary for Giuseppe Zanotti to verify the accuracyof such Data; the processing is unlawful and the data subject opposes theerasure of their Personal Data and requests restriction of their use; althoughGiuseppe Zanotti no longer needs the Data for processing purposes, the Data arerequired for the establishment, exercise or defence of a legal claim; or thedata subject has objected to processing pursuant to Article 21(1) of thePrivacy Regulation pending verification of whether Giuseppe Zanotti’scompelling legitimate grounds override those of the data subject for continuingthe processing. In addition, the data subject may request the erasure ofPersonal Data concerning them without undue delay; obtain portability of thePersonal Data concerning them; and lodge a complaint with the Italian DataProtection Authority.
This Privacy Policy is effective as of the effective date indicated below. Giuseppe Zanotti may nevertheless make changes and/or additions to this Privacy Policy, including as a result of subsequent changes and/or additions to applicable legislation.
If you have any questions, comments or complaints regarding the methods used to collect or use your Personal Data, please contact the Company through the Contact section of the Website or by sending an email to dpo@giuseppezanotti.com.
