Privacy policy – tolemaide

Privacy policy

Privacy Terms

Privacy Policy

Welcome to our website https://store.tolemaide.com

Please read this Privacy Policy carefully. It applies whenever you access the website, browse it and use its services, regardless of whether you purchase any products.

The information below complies with Regulation EU No. 679/2016 and with the applicable national legislation on the protection of personal data. This document is to be considered supplementary to the information notices available on the website https://store.tolemaide.com

Data Controller

The Data Controller of the data collected through this website is Tolemaide di Ethel Norcia, with registered office at Via Leonardo da Vinci 14, 40069 Zola Predosa (BO), VAT No. 01504791201, tax code NRCTHL69A46A944L, e-mail: contatti@tolemaide.com.

Data Protection Officer (DPO)

The DPO appointed by Tolemaide di Ethel Norcia can be contacted at the following address: contatti@tolemaide.com.

Types of Data Collected

For the purposes indicated in the following section, the Data Controller may collect the following types of data:

  • personal information, such as name, surname, gender, age/date of birth, nationality and other personal data;

  • contact information, such as residential address, e-mail address and telephone number;

  • payment information, such as details of payment instruments, including credit or debit cards;

  • habits and profiles, such as purchase-related data, including purchase history, points of sale where purchases were made, types of products purchased, purchasing habits and preferences, wish lists, preferred product categories and sizes of garments purchased;

  • personal data collected from third parties, such as data that the customer agrees to share with us on publicly accessible social networks;

  • information regarding the user’s use and browsing of our website, such as IP address and other device identifiers, operating system and browser type, as well as information regarding the pages of the website visited, collected through cookies or other tracking technologies.

Purposes of Processing

In general, the data are processed for the provision of the following services:

  • registration on the website, in order to use the related services;

  • subscription to specific and additional services, such as the creation of your Wish List and the sharing of its contents;

  • processing of orders and related activities;

  • management of payments; in this case, the data provided during the purchase process will be sent directly to the banking circuit, which will use the data to process your payment request;

  • management of your requests, including technical requests, commercial requests, requests relating to the status of your orders and general requests for information;

  • sending, where the user subscribes to the Newsletter section, informational material relating to the latest collections, events and brand campaigns;

  • sending, only with express consent, promotional communications by e-mail, SMS, MMS and telephone calls;

  • sending, only with express consent, personalised informational and promotional communications by e-mail, SMS, MMS and telephone calls, in line with your interests, preferences and purchasing habits, including profiling;

  • providing, where the user is registered, services and promotions relating to the loyalty programme;

  • contacting the representatives of our services, including Press Office, Business Development, Web Marketing, Purchasing Office and Customer Service;

  • evaluation of your application for possible recruitment through the submission of a CV.

Provision of Personal Data

The provision to Gaia of your personal data requested on the various data collection occasions may be necessary for the purposes identified in the relevant privacy notice, or optional.

The mandatory or optional nature of the provision is specified on each occasion, with reference to the individual information requested, at the time of the specific data collection, by marking the mandatory information with a specific symbol (*).

Any refusal to provide Gaia with certain data marked as mandatory makes it impossible to pursue the main purpose of the specific collection. Such refusal could, for example, make it impossible for the Data Controller to execute the purchase contract for products on https://store.tolemaide.com or to provide the other services available on the website.

The provision to Tolemaide of additional data, other than those marked as essential, is optional and does not have any consequence with regard to the pursuit of the main purpose of the collection.

Cookies and Tags

Our website uses automatic systems for collecting data that are not directly provided by the user, such as cookies.

A cookie is a device that is transmitted to the user’s hard disk. It does not contain understandable information, but it allows the user to be associated with the personal information released by the user on the website.

Cookies are placed on our server and no one can access the information contained in them. Only Tolemaide processes the information collected through cookies, and only in anonymous and aggregated form, in order to optimise its services and website according to the specific needs and preferences of its users.

We have set up cookies, for example, with regard to the catalogue browsing functions and the online purchase of products.

Your Internet browser allows you to delete cookies after each session. The Internet browser contains instructions on how to perform these deletion procedures. Please consult it.

Acceptance of automatic data collection procedures and the use of cookies is necessary for the use of the website and its services, including the purchase of products. If you have activated the cookie deletion procedure, Tolemaide cannot guarantee the complete display of certain web pages or the provision of certain services, such as the storage and display within the web pages of the products selected by you during online purchase processes.

Legal Basis of Processing

Tolemaide will process your personal data in accordance with Article 6 of Regulation EU No. 679/2016, on the following legal bases:

  • provision of the services offered on the website and processing of purchases;

  • performance of a contract and implementation of pre-contractual measures;

  • management of payments and related obligations;

  • performance of a contract and compliance with legal obligations;

  • responding to requests and improving the management of the website and the services offered;

  • legitimate interest of the Data Controller;

  • sending newsletters, promotional communications and/or personalised informational material;

  • consent, which you are free to withdraw at any time, without affecting the lawfulness of processing carried out before withdrawal.

Processing Methods

The Data Controller carries out the necessary processing operations in compliance with national privacy legislation and Regulation EU No. 679/2016.

Personal data are processed mainly by electronic and telematic means by Tolemaide and by other parties who, having been appropriately selected for reliability and competence, carry out operations instrumental to the purposes strictly connected with the use of the website, its services and the purchase of products through the website, as described in the following section.

We adopt appropriate security measures in order to minimise the risks of destruction or loss, even accidental, of data, unauthorised access, or processing that is not permitted or is not compliant with the collection purposes indicated in this Privacy Policy.

Communication of Personal Data

The user’s personal data may be communicated to professionals, collaborators, legal entities and third parties that provide technical and organisational services which the Data Controller may use for the processing purposes identified above.

Such parties will process the data as independent data controllers, data processors or persons authorised/appointed to process the data, depending on the case, in full compliance with the applicable legislation indicated above. They will be provided only with the information necessary to perform their respective functions.

The user’s personal data will not be disseminated in any way.

The complete and updated list of Data Processors may be obtained upon written request to Tolemaide srl.

Transfer of Personal Data

We inform you that your personal data will not be transferred abroad to non-EU countries that do not ensure adequate levels of personal data protection.

Should this be necessary in order to provide you with the services or to conclude a contract with Tolemaide for the purchase of products, we assure you that the transfer of your personal data to non-EU countries that do not ensure an adequate level of protection will be carried out only after Tolemaide has entered into specific contracts with such parties, in compliance with the applicable laws and regulations.

Links to Other Websites

This privacy notice is provided only for the website https://store.tolemaide.com and not for any other websites that the user may consult through links.

The website cannot be held responsible for personal data provided by users to external parties or to any websites linked to this website.

Interactions with Social Networks

The website allows interactions with social networks through a direct link to Facebook by means of social buttons. These are specific buttons on the website that display social network icons, such as Facebook and Twitter, and allow users browsing the website to interact with the social platforms directly with one click.

The website may use social plug-ins. Social plug-ins are special tools that allow the functions of a social network to be incorporated directly within the website, for example the Facebook “Like” function.

All social plug-ins on the website are marked with the respective logo owned by the social network platform. When a user visits a page of the website and interacts with the plug-in, for example by clicking the “Like” button, or decides to leave a comment, the corresponding information is transmitted by the browser directly to the social network platform, in this case Facebook, and stored by it.

For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, and on how to exercise your rights, please consult the Privacy Policy of the relevant social network.

Age

We do not accept consents given by persons under the age of 16 or under the age provided for by the legislation of their country of residence, 14 years for Italy, where other and different age limits are indicated, and we will not knowingly process the personal data of such persons.

You must be at least 18 years old to carry out transactions on our website. By carrying out transactions on the website, the user automatically declares that they are at least 18 years old, that they have full capacity to carry out such transactions and to be legally bound by them, and that they authorise the processing of the relevant data.

If the Data Controller becomes aware that a minor has provided their personal data through the website or in any other way, such personal data will be deleted immediately.

Retention Period

The personal data collected will be retained for the time strictly necessary to fulfil the primary purposes described in the previous sections, or in any case for the time necessary for protection in civil proceedings, or, where applicable, for longer periods provided for by the laws in force on data retention, for example 10 years pursuant to obligations relating to tax, administrative and accounting requirements under Article 2220 of the Italian Civil Code.

In any case, the user may request at any time that processing be stopped or that the data be deleted.

For marketing and profiling purposes, users’ personal data will be retained for a period not exceeding, respectively, 24 months and 12 months from the date of the last contact.

Rights of the Data Subject

At any time, pursuant to Articles 15 et seq. of Regulation EU No. 679/2016, the user may exercise the following rights:

  • the right to access personal data;

  • the right to obtain rectification or erasure of the data, or restriction of processing concerning them;

  • the right to obtain information on the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;

  • the right to object to processing;

  • the right to data portability;

  • the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal;

  • the right to lodge a complaint with the supervisory authority.

You may exercise your rights by sending a request to the postal address or e-mail address contatti@tolemaide.com

To learn more about your rights and to stay updated on the legislation regarding the protection of individuals with regard to the processing of personal data, we recommend visiting the website of the Italian Data Protection Authority at http://www.garanteprivacy.it/.

Updates and Changes

Tolemaide may amend or simply update, in whole or in part, the website Privacy Policy, also in consideration of changes to the laws or regulations governing this matter and protecting your rights.

Changes and updates to the Privacy Policy will be notified to users on the Home Page as soon as they are adopted and will be binding as soon as they are published on the website.

We therefore ask you to access this section regularly in order to check the publication of the most recent and updated Privacy Policy.