Privacy

Privacy policy

Privacy Policy Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), Wivian’s Factory, hereafter provides its customers, including potential customers, as well as third parties in general (e.g. proxies, legal representatives, etc.) who come into contact with it on behalf of or on behalf of its customers, including potential customers (the “Data Subjects”), with the information required by the Regulation regarding the processing of their personal data (“Personal Data”).

1.- Data Controller and Data Protection Officer

Wivian’s Factory (c.f.-p.iva 07847380966), with registered office in Via dell’Aprica 14a, 20158,Milano (MI), in the person of its legal representative pro tempore is the entity that processes the data of the Data Subjects and, for the purposes of the Law, is considered the Data Controller. In this capacity, it is responsible for ensuring the application of appropriate organisational and technical measures for the protection of data in compliance with the provisions of the regulations in force.

Wivian’s Factory has appointed a Data Protection Officer (DPO), in charge of ensuring compliance with the rules for the protection of Privacy, who can be contacted, for matters relating to the processing of Personal Data, at the following address: info@wiviansfactory.com

2.- Methods of collecting Personal Data

The Personal Data subject to processing activities by the Data Controller may be acquired from the Data Subject, including through the remote communication techniques that the Data Controller uses (e.g. websites, apps for smartphones and tablets, call centers, etc.);

3.- Categories of Personal Data processed

The Personal Data processed by the Data Controller include, by way of example:

  1. browsing data (e.g. IP addresses or domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, logs);
  2. personal data (e.g. first name, last name, tax code, address, date and place of birth, nationality)
  3. contact data (e.g. telephone numbers, landline and/or mobile, email address);
  4. profiling and marketing data (e.g. interests and passions);
  5. other data that fall into the above categories.

4.- Purpose and legal basis of processing

Personal Data will, under the specified conditions, be processed for the purposes set out below:

  • website registration and handling of contact requests and/or information material

The processing of the data subject’s personal data is carried out in order to carry out the activities preliminary and consequent to the request for registration to the website, if any, as well as for the management of requests for information and contact and/or the sending of informative material, and for the fulfilment of any other obligation arising.

The legal basis for such processing is the fulfilment of the services inherent in the request for registration, information and contact requests and/or the sending of informative material and the fulfilment of legal obligations.

The provision of data is optional, but any refusal on the part of the interested party to provide such data will make it impossible for the Data Controller to provide the service requested.

  • performance of the contract

Personal data will be processed for the management of the contractual relationship (e.g. for the invoicing of fees, for the management of payments or complaints that you may forward to us) and for the provision of the requested services accessible via the website.

The legal basis for such processing is the fulfilment of services inherent to the contractual relationship and compliance with legal obligations.

The provision of data is optional, however, any refusal on the part of the data subject to provide such data will make it impossible for the Data Controller to provide the services requested.

  • fulfilling legal obligations, defending a right in or out of court and preventing fraud

Personal Data will be processed for the fulfilment of legal obligations, as well as to ascertain, exercise or defend a right of the Data Controller and/or to defend against the claims of others, in or out of court. In particular, the Data Controller may process Personal Data for the fulfilment of accounting and tax obligations and for the fulfilment of judicial authority orders aimed at preventing and repressing crimes.

The legal basis for such processing is the pursuit of the legitimate interest of the Controller, taking into account the balancing of the rights of the latter and of the Data Subject.

  • promotional activities on services/products similar to those purchased

The processing of the Data Subject’s personal data is carried out for the purpose of sending communications relating to promotions and offers of the Controller’s Services/Products that are identical and/or similar to those covered by the contract in force with the Data Subject, unless the latter has objected to such processing initially or on the occasion of subsequent communications.

The legal basis for such processing is the legitimate interest of the Controller to promote products or services to which the customer may reasonably be interested, taking into account the balancing of the rights of the latter and the Controller.

The Data Subject has the right to object at any time, on grounds relating to his or her personal situation, to the processing of personal data concerning him or her for the purpose in question.

  • Promotional activities on services/products offered by Wivian’s Factory

The processing of the data subject’s personal data is carried out for the purpose of sending, subject to specific consent, notices of promotions and offers of the Controller’s Services/Products by means of traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated methods (e.g. e-mail, SMS, MMS, fax, pre-recorded telephone calls).

The legal basis for such processing is the consent given by the Data Subject prior to the processing itself, which may be revoked freely at any time, without prejudice to the lawfulness of the processing previously carried out.

If the data subject refuses to give consent, it will be impossible for him/her to use the relevant services, without this entailing detrimental consequences for the contractual relationship with the data controller.

  • marketing purposes relating to products or services of Wivian’s Factory

The processing of the data subject’s personal data is carried out for the purpose of sending, subject to specific consent, notices of promotions and offers of Services/Products of Wivian’s Factory partners by means of traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated methods (e.g. e-mail, SMS, MMS, pre-recorded telephone calls).

The legal basis for such processing is the consent given by the data subject prior to the processing itself, which may be revoked freely at any time, without prejudice to the lawfulness of the processing previously carried out.

If the data subject refuses to give consent, it will be impossible for him/her to use the relevant services, without this entailing any detrimental consequences for the contractual relationship with the data controller.

  • profiling

The processing of the Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the Data Subject is carried out, subject to specific consent, for profiling purposes such as the analysis of transmitted data and purchased Services/Products in order to propose advertising messages and/or commercial proposals in line with the choices expressed by the users themselves. This activity will be carried out in aggregate and anonymised form by implementing models for analysing customer data using statistical algorithms, predictive models and aggregations only for the time strictly necessary for the purposes pursued, the type of goods marketed or services rendered.

In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or that affect the data subject in a similar significant way.

The legal basis of such processing is the consent given by the Data Subject prior to the processing itself, which may be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.

If the data subject refuses to give consent, it will be impossible to use the relevant services, without this having any detrimental consequences for the contractual relationship with the data controller.

5.- Recipients of personal data

The personal data collected may be communicated to subjects who will act as autonomous Data Controllers or Data Processors, as the case may be, for the purposes set out above, in fulfilment of legal, regulatory and/or EU obligations or because they have a legitimate interest.

In particular, Personal Data may be made available to:

  • subjects in charge of carrying out activities related and instrumental to the processing (storage service companies, IT service companies, social media management service companies, marketing companies, insurance companies, banking institutions)
  • business partners of Wivian’s Factory;
  • Public Administrations, Authorities and other entities in compliance with legal obligations;
  • Personal Data will not be disseminated (made available to unspecified parties).

6.- Transfer of data to third countries

The Personal Data of the Data Subject are stored in archives located in countries of the European Union. Where necessary for the pursuit of the stated purposes, the Data Subject’s Data may be transferred abroad, to countries/organisations outside the European Union that ensure a level of protection of personal data deemed adequate by the European Commission in its decision, or on the basis of other appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or the consent of the Data Subject. The Data Subject has the right to obtain a copy of any Data transferred abroad, as well as a list of the countries/organisations to which the data have been transferred, by writing to info@wiviansfactory.com

7.- Personal data retention period

The Data shall be kept in a form that enables the identification of the Data Subject for a period of time not exceeding that necessary to achieve the purposes for which it was collected, taking into account the laws applicable to the activities and sectors in which the Data Controller operates. Once the terms thus established have elapsed, the Data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfil obligations (e.g. tax and accounting) that remain even after the termination of the contract (art. 2220 of the Italian Civil Code) or to comply with orders issued by Public Authorities and/or Supervisory Bodies.

The duration of cookies used on the site can be found in the relevant Cookie Policy:

In the event of litigation, the retention time indicated above may be extended up to 10 years from the settlement of the litigation.

8.- Treatment modalities

The processing will be carried out by authorised personnel who need to have knowledge of it in the course of their work, with the aid of electronic instruments, in accordance with principles of lawfulness and correctness, so as to protect the confidentiality and rights of the data subject at all times in compliance with the provisions of current legislation.

Marketing-related profiling (analysis of consumption habits and choices) is carried out by means of an automated process for the purpose of studying and analysing behavioural profiles and aspects characterising the customer base in order to optimise promotional activities for products and services.

9.- Rights of the data subject

The Data Subject has the right to request from the Controller

  1. confirmation as to whether or not any Personal Data relating to him/her is being processed and, if so, to obtain access to it (right of access);
  2. the rectification of inaccurate Personal Data or the integration of incomplete Personal Data (right of rectification);
  3.  the deletion of the Personal Data if one of the reasons provided for in the Privacy Regulation applies (right to be forgotten)
  4. limitation of the processing of Personal Data when one of the cases provided for by the Privacy Regulation applies (right of restriction);
  5. to receive in a structured, commonly used and machine-readable format the Personal Data to be provided to the Controller and to transmit such data to another Controller (right to portability)
  6. to object at any time in whole or in part to the processing carried out in pursuit of a legitimate interest of the Controller and for marketing and profiling purposes (right to object)
  7. to withdraw any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

Consent given for the performance of marketing activities with automated contact methods (e.g. sms, mms, fax, phone, e-mail, web applications) also extends to traditional contact methods (paper mail or telephone call with operator). Similarly, the objection to marketing activities using automated contact methods also extends to traditional contact methods. This is without prejudice to your right to provide consent or to exercise your right of objection in relation to only one of the two ways of performing marketing activities.

To exercise their rights, the data subject may send a message to the e-mail box info@wiviansfactory.com or a written communication to the Data Controller at the registered office of Wivian’s Factory

The Data Subject also has the right to lodge a complaint with the competent supervisory authority on the Italian territory (the Italian Data Protection Authority) or with the authority that performs its duties and exercises its powers in the Member State where the breach occurred, as provided for in Article 77 of the Regulation, as well as to take appropriate legal action pursuant to Articles 78 and 79 of the Regulation.

10.- Cookie

Regarding the use of Cookies, please see the relevant Cookie Policy