Overview
1. Data processed, purposes of processing and legal basis of processing
2. Processing methods
3. Data retention
4. Nature of the provision of data and consequences in case of failure to provide it
5. Categories of subjects to whom the data may be communicated
6. Rights of the interested party
7. Changes to the information
Saveone Srl, with registered office at Via Biagio Petroncelli 226, 00173 Rome (RM), operating in the fashion, beauty, and lifestyle sectors, in its capacity as data controller, a list of which is available by writing to support@saveone.it, informs you of the following regarding the processing of your personal data ("data") pursuant to applicable privacy laws ("Privacy Laws").
1. Data processed, purposes of processing and legal basis of processing
Saveone Srl processes common data (identification, personal data, contact details, financial information, location data, and navigation data) for:
a) fulfillment of contractual obligations or execution of pre-contractual measures towards the interested party, namely:
- to manage the sale of Saveone Srl products and services and related after-sales services (for example exchanges, returns and warranties, customer care and customer service, product delivery, etc.);
- to manage e-commerce and related after-sales services, registration and interaction with our sites and apps and the use of services reserved for registered users (for example, Wish List, My Orders, Quick Purchase, etc.);
b) fulfillment of legal or regulatory obligations: i.e., to manage legal obligations relating to sales activities (such as issuing and storing invoices), to manage requests to exercise rights regarding the processing of personal data, and to communicate any data breaches;
c) legitimate interest of the data controllers: i.e., the prevention and suppression of fraud and abusive behavior (including by third parties) in violation of applicable laws (for example, intellectual property laws), contractual provisions, and the rules of fairness and good faith, as well as the management of any complaints and defense in court.
Saveone Srl also processes common data for:
d) upon your prior consent:
- for marketing purposes: i.e., to send you informative communications about Saveone Srl's products, services, events, and promotions. Marketing activities are carried out using the contact methods you have chosen from those listed below, which you can change at any time;
- For analytical purposes: i.e., to analyze, including automatically, your preferences, habits, and lifestyle, as well as the details of your purchases. The data is used to create group and/or individual profiles ("analysis"), market and statistical analyses, including with anonymous data, organized in aggregate form. If you also provide consent for marketing purposes, we will send you personalized communications based on the analysis of your preferences and interests;
- for location purposes: that is, to allow you to share your geographic location and book a product online at Saveone Srl stores (“click & reserve”), as well as discover the nearest Saveone Srl store (“Store Locator”).
2. Processing methods
The data is processed with and without the aid of electronic tools, based on logic and procedures consistent with the purposes indicated above and in compliance with Privacy Laws, including confidentiality and security requirements. Processing occurs through the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. More specifically, regarding the analysis process, we inform you that the data is organized into group profiles in aggregate and/or individual form based on the preferences and interests you have communicated.
3. Data retention
Data is retained for the time strictly necessary to achieve the purposes for which it was collected and to fulfill applicable legal and regulatory obligations. The retention period varies depending on the processing purpose, in particular:
- For the activities necessary to execute the contract relating to the provision or sale of our goods and services referred to in point 1, letter a) of this policy, the data is retained for administrative and accounting purposes for ten years from the conclusion of the contract, except for registration on the Site ("My Account") and the use of services reserved for registered users (for example: Wish List, My Orders, Quick Purchase, etc.), in relation to which your personal data will be retained until you request deletion of your account and in any case for no longer than seven years. Retention for longer periods occurs if authorized by law and in the event of legal proceedings;
- For the marketing and analysis purposes referred to in point 1, letter d) of this notice, the data is retained for a period of seven years;
- for the localization purposes referred to in point d), the data are stored for the time necessary to use the service;
- for the activities necessary to fulfill the legal obligations referred to in point 1, letter b) of this notice, the data is retained for the time necessary to achieve the purposes and in any case no longer than ten years;
- For the activities necessary to prevent and suppress fraud and abusive behavior as per point 1, letter c) of this notice, the data is retained for the time necessary to pursue the data controller's legitimate interest and in any case no longer than ten years.
We remind you that you may withdraw your consent at any time in the manner indicated below to exercise your rights. Upon expiration of the periods indicated above, the data will be automatically deleted or permanently and irreversibly anonymized, unless Saveone Srl is required to retain the data for a further period to comply with legal or regulatory obligations.
4. Nature of the provision of data and consequences in case of failure to provide it
For the purposes referred to in point 1, letters a), b), c), and d) above, providing data is necessary, and any refusal to provide it would prevent the indicated activities from being carried out. Providing data for the purposes referred to in point 1, letter d) above is optional, and any refusal will have no impact on the ability to purchase Saveone Srl products and services.
5. Categories of subjects to whom the data may be communicated
The data is accessible to Saveone Srl companies, where necessary, and to our duly authorized personnel. The data is also shared with our service providers, for example for technical and organizational services functional to the purposes indicated above, including joint ventures, shipping, marketing, and payment processing companies, who act as our data processors based on our instructions.
Data is disclosed to third parties in the following cases: (i) when disclosure is required by applicable laws and regulations with respect to legitimate third-party recipients of communications, such as authorities and public bodies, who act as independent data controllers for their respective institutional purposes; (ii) disclosure to third parties (such as current or proposed assignees, transferees, participants, or sub-participants in rights or our business), independent data controllers, in the event of extraordinary transactions (e.g., mergers, acquisitions, business transfers, etc.). The data is not disclosed, except in the case of specific initiatives (e.g., online), for which we will provide you with specific information during these initiatives.
Saveone Srl and some of our service providers who have access to your data may be located abroad in third-party countries. Saveone Srl assesses the level of protection offered by the importing country and adopts the necessary precautions, contractual and otherwise, for the legitimate transfer of data and to ensure an equal level of protection for data transferred abroad. You can request information on Saveone Srl's list, the list of service providers, and information on data transfers abroad by contacting Saveone Srl or Saveone Srl's Data Protection Officer at the contact details indicated in paragraph 11.
6. Rights of the interested party
You may contact Saveone Srl, including other Saveone Srl companies, at any time to exercise your rights under applicable Privacy Laws (such as: obtaining confirmation of the existence or otherwise of your data, accessing the data, verifying its content, origin, and accuracy, requesting its integration, updating, rectification, deletion, or anonymization, requesting data portability, and limiting its processing) through any channel, preferably at info@saveone.it. You may at any time lodge a complaint with the competent authority pursuant to Article 77 of the GDPR.
7. Changes to the information
Saveone Srl reserves the right to modify this privacy policy at any time. The modified policy will be posted on our website, our intranet, or sent via email or other means of communication.