INFORMATION NOTICE FOR USER WEBSITE REGISTRATION
Personal Data Protection Code
UNDER ART. 13 of Legislative Decree no. 196 of 30.06.2003
Under the provisions of art. 13 of Legislative Decree no. 196/2003 as amended, the company Roberto Cavalli S.p.A., with registered office in (20122) Milan, in Piazza San Babila no. 3, in its capacity as Data Controller, hereby informs all users requesting registration on the www.robertocavalli.com and www.robertocavalli.it websites, in their capacity as Data Subjects on the scope and purposes of the processing of the collected personal data, the relative communication and dissemination, and the nature of their conferral.
PURPOSE OF THE PROCESSING
1) Registration: the personal data and, more specifically, the data indicated on the registration form (name, surname, email address, telephone number, etc.) related to the Data Subject and provided voluntarily by the same during registration on the Roberto Cavalli S.p.A site, are processed pursuant to the request of the Data Subject to create a personal account and exploit the services provided by the Data Controller via the site and access the online portal. It should be noted that such data may also be used for purposes referred to as “soft spam”.
2) Access to services via the portal: the personal data acquired, including the computer related data (e.g. the IP address), are processed to allow access to the services provided by the Data Controller via the corporate website and reserved to registered users only; i.e. by way of example only, online shopping and payments as illustrated in full in the online platform Terms and Conditions available via the following link.
3) Sending of advertising materials, direct marketing, statistics and market research: when consent is granted, personal data, such as email address and telephone number, are also processed to send information messages and commercial and promotional communications on the activities and services provided by the Data Controller, via automated mechanisms (such as email and text messages) and also traditional methods (such as telephone contact with or without and operator), in full compliance with the principles of fairness and lawfulness and any provisions foreseen by the laws in force.
In any case, processing shall take place in accordance with the principle of fairness and lawfulness and the provisions of the laws in force.
The processed personal data is sent to the Data Controller's server or servers managed by third parties (appointed for the purpose as Chief Data Processors under art. 29 of Legislative Decree no. 196/2003 as amended). Personal data is processed using electronic and telematic systems by specifically designated officers and/or chief data processors inside and outside the company. Data is stored in electronic archives whose security levels comply with the minimum measures endorsed by the legislature in force.
In particular, for the purpose of sending advertising materials, direct marketing, statistics and market research, commercial and promotional communications on the activities and services provided by the Data Controller the same shall take place (again according to the provision of art. 130m par. 1 and 2 of Legislative Decree no. 196/2003 as amended) by means of:
- automated contact methods, using automated calling or call communication means without the intervention of an operator, email, facsimile, MMS- or SMS-type messages or other means for the purposes referred to therein;
- traditional methods (such as mailing of hard copies and/or operator controlled calls).
COMMUNICATION AND DISSEMINATION
No Personal data collected will be disseminated, sold, exchanged or communicated to third-parties other than the Data Controller without the express consent of the Data Subject. Dissemination to third-parties, other than the Data Controller, the Chief Data Processors, inside and also outside the corporate structure, and the Designated Officers assigned to the relative processing and appoint under arts. 29 and 30 of Legislative Decree no. 196/2003 as amended, is foreseen, where necessary to fulfil the above illustrated scope and purposes, to: individuals and third-party enterprises providing technical and IT support, marketing companies, who undertake to pursue the illustrated scopes and purposes in a correct and transparent manner. In any case, processing by third-parties shall only take place in accordance with the principle of fairness and lawfulness and the provisions of the laws in force.
Data shall be retained for the time required to process the purpose of the account created by the Data Subject to access the services provided by the Data Controller via the corporate website. In any case, the data shall be retained until the Data Subject requests the cancellation of the account, or until the same is closed by the Data Controller under the portal terms and conditions.
As regards the processing for purposes related to the sending of commercial and promotional communications on the Data Controller's services and the sending of information messages regarding its business activities, the data will be retained for a maximum of two years from first contact, unless the Data Subject opposes the processing of the same. The Data Subject may oppose the processing independently for one or the other sending methods (traditional or automatic), in particular, for telephone numbers included in phone books, opposition of such processing can be effected by referring to the Public Register of Oppositions, whilst for email addresses, opposition can be effected by cancellation via a specific link. In any case, the cancellation can be requested by email at the following address firstname.lastname@example.org.
RIGHTS OF THE DATA SUBJECT
The Data Subject is entitled to execute his rights as illustrated in Arts. 7, 8, 9 and 10 of Legislative Decree no. 196/2003 as amended, by contacting the Data Processor. In particular, according to art. 7 you are entitled to obtain confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form. The Data Subject has the right to obtain indications: a) on the origin of the personal data; b) on the purpose and processing methods; c) on the logic used in the case where the data is processed using electronic equipment; d) on the personal data of the Data Controller, the Chief Data Processors and the designated representative pursuant to Art, 5 paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representatives for the Country, Chief Data Processors or designated officers. The Data Subject has the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The Data Subject is entitled to oppose, totally or partially: a) processing of personal data, for legitimate reasons, despite them being relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
DATA CONTROLLER, CHIEF DATA PROCESSOR AND PRIVACY COMMUNICATIONS
The Data Controller is Roberto Cavalli S.p.A., with registered office in (20122) Milano (MI), in Piazza San Babila no. 3. Pursuant to art. 29 of Legislative Decree 196/2003 the Data Controller has appointed Triboo Digitale S.r.l. with registered office in Viale Sarca, 336 - 20126, Milan (MI) Italy, as the Chief Data Processor in charge of the processing of personal data for purposes related to the managing the sales and transactions on the website www.robertocavalli.com and www.robertocavalli.it, for instance, the management of product orders, sales and deliveries, returns and warranty management and all other activities related to the sales of products via the Sites, in addition to the activities related to the creation, ordinary and extraordinary management, and maintenance of the Sites themselves. An updated list of the Chief Data Processors, appointed by the Data Controller under art. 29 of Legislative Decree no. 196/2003, is available at the registered office of the latter. For all communication under art. 7 et seq. of Legislative Decree no. 196/2003 as amended, please contact the Data Controller at email@example.com.
CONFERRAL OF DATA
Conferral of data is optional, but essential, as refusal to such conferral will make it impossible for the Data Controller to create the personal account required to provide the services provided by the latter via the corporate website and reserved to registered users.
As regards the conferral of data for marketing purposes, this is optional and refusal to such conferral will not effect or compromise the main processing operations, although it will be impossible for the Data Processor to perform the ancillary operations.
Under art. 23 and 24 of Legislative Decree no. 196/2003 as amended, the consent to the processing of personal data to create a personal account so as to exploit the services provided by the Data Controller via the corporate website reserved to registered users, is not required as the same is collected to process the obligations arising from the contract that the Data Subject has entered into.
Under art. 23 and 24 of Legislative Decree no. 196/2003 as amended, the consent to the processing of personal data for the sending of commercial and promotional communications on the services provided by the Data Controller and the sending of information messages regarding the activities of the same, is however required. Under the Guidelines regarding promotional and anti-spam activities, the Guarantor for the protection of personal data clearly states that no consent is required for what is referred to as “soft spam”.
Please note that your consent is deemed freely granted when you tick the "I grant my consent" boxes.