Privacy Policy | Dondup Store
NEWSLETTER PRIVACY POLICY
Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), we inform you that your personal data will be processed electronically by ARCADIA S.r.l., as Data Controller, for the purposes and in the manner described below.
1. Purposes of Processing and Type of Data Collected
Your personal data will be processed for the following purposes:
a) Marketing purposes – newsletter subscription
Your email address and any preference indicated during registration (WOMEN/MEN) will be processed in order to fulfill your request to subscribe to the newsletter and send you commercial and promotional communications, advertising material, information on updates, products and services, offers, promotions, and invitations to Company events (“Marketing Communications”).
b) Newsletter tracking purposes
Marketing Communications sent by the Company contain tracking tools called tracking pixels (small graphic elements generally invisible to the recipient), as well as link-monitoring technologies embedded within the emails.
These tools allow the Company to collect information regarding recipients' interactions with the communications received, specifically:
Date and time the email communications were opened;
Information regarding clicks on links within the communications;
IP address used when interacting with the communications.
Data collected through these tools will be processed to analyze how recipients interact with commercial communications, evaluate their effectiveness, and optimize the service offered by the Company.
Interaction data may be associated with the recipient's email address to pursue the above-mentioned purposes.
The data collected will not be used for additional or incompatible purposes.
The processing does not involve automated decision-making producing legal effects concerning the data subject or similarly significantly affecting them pursuant to Article 22 GDPR.
2. Legal Basis and Nature of Data Provision
The legal basis for processing personal data for marketing purposes and tracking activities described above is the consent of the data subject, pursuant to Article 6(1)(a) of the GDPR, in compliance with Article 122 of Legislative Decree 196/2003 as amended, and the Guidelines of the Data Protection Authority (Garante per la protezione dei dati personali) on tracking pixels in email communications.
Consent is expressed through the voluntary entry of your email address and the selection of the newsletter subscription button, after having read this privacy policy and the information regarding the use of tracking tools.
Providing your personal data is free and optional; however, failure to provide your email address will make it impossible for the Company to fulfill your request to subscribe to the newsletter.
3. Retention Period
Personal data relating to the newsletter subscription will be kept for the duration of your subscription to the service, unless consent is withdrawn.
Data relating to email opens and content interactions are retained for the duration of the commercial communications subscription in order to allow interaction analysis and communication personalization, and in any case within the limits necessary to achieve such purposes, unless deleted earlier.
In the event of unsubscription, data will be erased or anonymized within seven days, unless further retention is necessary to comply with legal obligations or to establish, exercise, or defend a legal claim.
After this period, the data will be permanently erased or irreversibly anonymized so as to no longer allow direct or indirect identification of the data subjects.
The data subject retains the right to withdraw consent to tracking at any time and to request the erasure of personal data in cases provided for by applicable law.
4. Withdrawal of Consent
The data subject may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In particular, it is possible to withdraw consent solely for the use of tracking pixels and interaction monitoring tools while continuing to receive the Company's Marketing Communications.
To do so, the data subject may use the dedicated privacy preferences management feature included in the communications received or contact the Controller at the contact details provided below.
It is also possible to withdraw consent to receive commercial communications and completely unsubscribe from the newsletter service via the designated link included in all communications.
5. Processing Methods, Recipients, and Data Transfers
Personal data will be processed by personnel authorized by the Data Controller, using electronic and telecommunication tools, in compliance with the principles of lawfulness, fairness, transparency, and security provided by applicable regulations.
Data will not be disseminated and will not be used for purposes other than or incompatible with those stated above.
Data may be communicated to third parties performing specific services on behalf of the Controller related to managing and sending newsletters and analyzing interactions. Where necessary, these third parties are appointed as Data Processors pursuant to Article 28 GDPR. An updated list of such parties is available upon request from the Controller.
Personal data will be processed and stored exclusively within the European Union and will not be transferred to third countries or international organizations.
6. Rights of the Data Subject
Pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, access their personal data, request its rectification, integration, erasure, or restriction of processing, as well as exercise the right to data portability, where applicable.
The data subject also has the right to withdraw consent at any time, including withdrawal limited specifically to newsletter tracking activities.
To exercise these rights, you may contact the Data Controller:
Arcadia S.r.l.
Via Morimondo, 30 - 20143 Milan (Italy)
Tax Code and VAT No. 06710600963
Email: privacy@dondup.com
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali) or bring an action before the competent judicial authorities, pursuant to Articles 77 and 79 GDPR.
