PRIVACY NOTICE PURSUANT TO ARTICLES 13-14 OF GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

La Perla, VAT Number 01358450110, Data Controller, hereby informs you that your data will be processed in accordance with the methods and for the purposes indicated below.

The Data Controller undertakes to protect the privacy and confidentiality of Personal Data in accordance with the principles of fairness, lawfulness, transparency, and the protection of your rights.

1) TYPES OF DATA PROCESSED

We process personal data communicated by you (name, email, company name, phone number, etc.) on occasions of requests sent spontaneously and data collected automatically from the website.

  • Data provided by you: personal, identifying, and non-sensitive data communicated by you to make requests via email, through the contact form, or by phone about our products/services.
  • Data we collect automatically: anonymous data collected using cookies or similar technologies: for further information, please refer to the Cookie Policy below.

N.B. Users under the age of 16 cannot provide any personal data without the consent of parents or legal guardians.

 

2) PURPOSES AND LEGAL BASES OF PROCESSING

We will process your personal data:

A) to fulfill our contractual obligations; provide a response to your information requests; calculate a quote you requested; execute contracts for the sale of products or for the provision of services; provide necessary assistance regarding purchased products and services.

B) to perform aggregate statistical analysis anonymously to improve our services;

C) for administrative purposes and to fulfill legal obligations such as accounting, tax obligations, or to comply with requests from the judicial authority.

D) in the case of submitting a curriculum vitae, solely for selection purposes.

 

3) IS DATA PROVIDING MANDATORY?

Providing your data is always optional, but its failure could make it impossible to proceed with some processing, such as those strictly related to the fulfillment of a contract or the provision of requested services.

4) LOCATION, METHODS OF PROCESSING, AND RETENTION PERIOD

The processing of your personal data is carried out through the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.

Your personal data is stored at the Data Controller’s premises and is subject to both paper and electronic and/or automated processing with logic strictly related to the purposes indicated and in a manner that ensures the security and confidentiality of the data. The data you send are not saved within our website.

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the cessation of the relationship for purposes under point C and for no longer than 38 months from the data collection for purposes under point B.

5) DATA ACCESS

Your data may be made accessible for the purposes indicated in point 2:

  • to employees and collaborators of the Data Controller, in their capacity as internal processors and/or administrators of the system;
  • to third-party companies or other subjects (website providers, cloud providers, e-payment service providers, suppliers, technicians responsible for hardware and software assistance, shipping agents and carriers, credit institutions, professional firms, etc.) that perform outsourcing activities on behalf of the Data Controller, in their capacity as data processors.

 

6) DATA TRANSFER

The data will not be disseminated, sold, or exchanged with subjects other than the data controller, the processors, and the appointees without your express and explicit consent.

7) YOUR RIGHTS

You have the right to know what personal data are being processed. In particular, you have the right to access, rectify, delete, as well as the right to data portability, the right to restrict processing, and the right to object to processing, where applicable.

Below is a brief explanation of the rights recognized to you regarding the processing of your personal data.

  • The right to access allows you to obtain confirmation as to whether or not your personal data are being processed by the Data Controller and, if so, to access such data and related information;
  • The right to rectification allows you to obtain the correction of inaccurate personal data concerning you without undue delay and, taking into account the purposes of the processing, to have incomplete personal data completed;
  • The right to erasure allows you to obtain the erasure of personal data concerning you without undue delay (e.g., when your personal data are no longer necessary in relation to the purposes for which they were collected), subject to exceptions provided by applicable law (e.g., when the retention of your data is necessary to comply with legal obligations applicable to the data controller). Erasure will be carried out within the technical times provided;
  • The right to data portability allows you, in certain circumstances provided by applicable law, to receive in a structured, commonly used, and machine-readable format the personal data concerning you that you have provided. You may transmit this data to another data controller, provided that this right can be recognized to you under applicable law, and except where it may result in a prejudice to the rights and freedoms of others;
  • The right to restrict processing allows you, in certain circumstances provided by applicable law, to obtain the restriction of processing of your personal data. In such cases, the Data Controller may continue to process your data only in certain cases, for example, for the exercise of the right of defense or to protect the rights of another natural or legal person;
  • The right to object to processing allows you, in certain circumstances provided by applicable law, to object to the processing of your personal data unless there are compelling legitimate grounds, rights, or freedoms that allow the Data Controller to continue processing;

For more information on the processing of your personal data or to exercise your rights, please contact us.

 

8) CHANGES TO THE PRIVACY NOTICE

This Privacy Notice may be subject to changes. It is therefore advisable to check this Privacy Notice regularly and refer to the most updated version.

Last updated: Ottobre 2023

Back To Top