Grevi mode sas with registered office in Signa (Florence) (Italy), recognizes the importance of maintaining the confidentiality, integrity and security of your non-public personal data (hereinafter "Personal Data") and hereby inform you that any Personal Data you have provided to Grevi through the www.grevi.it and www.grevishop.it websites, as well as any Personal Data which you may provide to a GREVI store, will be processed in compliance with current European privacy laws (Regulation (EU) 2016/679 – “GPDR”) and with any specific local regulations applicable from time to time for the processing of data outside the European Union, together with the principles and general rules of conduct contained in the Code of Ethics adopted by the GREVI mode sas.
Type and source of data
During their normal operation, the IT systems and software procedures used to operate the Site acquire some personal data (called log files) whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request. to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning.
Personal Data voluntarily provided by the data subject
GREVI collects and will process the Personal Data you directly and knowingly provided through the Site on the occasion of your online purchase order, and / or your registration on the Site and / or the GREVI newsletter service, and / or a request to our Customer Service, as well as those possibly provided by filling in the customer card (Customer Card467/5000 ) at our store in Florence. Such data include, for example, name and surname, postal address and email address, telephone and date of birth. In addition, the optional, explicit and voluntary sending of e-mails through the Site and / or to the addresses indicated on the Site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message sent.
2. Purpose of the processing
Your Personal Data may be processed based on the necessity for the provision of the services for the following purposes:
(a) to respond and satisfy all your requests and therefore to manage the relationship between you and GREVI;
(b) to process your online purchase order and therefore to carry out all order management activities (including the administrative management of the contract, the shipment of products, the management of payments, credits and any disputes and the fraud prevention), as well as in fulfillment of all obligations imposed by applicable laws and regulations.
Furthermore, with your prior consent, Personal Data may be entered in the database of GREVI customers and processed, together with the detailed data of your purchases, for the following purposes:
(c) profiling purposes: for the preparation of individual or group studies, surveys, analyzes and statistical and / or market research, in relation to your preferences for our products, in order to offer a personalized service to your needs and Promote cultural and recreational initiatives and activities that may interest you
(d) marketing purposes: to contact you and / or send you (by post, telephone, email and other forms of electronic communication) informative and promotional communications, including commercial ones, newsletters, advertising material, catalogs and invitations to events, relating to GREVI products and services.
3. Processing Methods
Your Personal Data will be processed by suitable electronic or automated means and computerised tools, or manually and on hard copy, exclusively for the purposes for which they have been collected and guaranteeing the security and confidentiality of any processed information. Your Personal Data will be processed only by the Grevi's internal staff duly authorised to do so under their respective job duties. Your Personal Data may also be processed by third parties to the extent necessary and/or instrumental for the above purposes. These third parties will act on behalf of GREVI as data processors (e.g. service providers, carriers, IT technicians or any other suppliers appointed by GREVI to carry out and/or manage any promotional campaigns for GREVI’s products and services, etc.).
We also inform you that if you consent to the processing of your Personal Data for the purposes referred to in letters (c) and (d) of paragraph 2, in your data they will be automatically visible and / or shared with our store, adopting all suitable and appropriate security and confidentiality measures required by the relevant applicable legislation.
4. Nature of the provision of personal data
The provision of your Personal Data is optional.
However, if you wish to make a purchase order for the products offered on the Site and / or receive information on Grevi's products and services and / or contact our Customer Service and / or take advantage of other services, you must complete all the fields indicated as mandatory. in the relevant Personal Data collection forms.
The processing of your data for the purposes referred to in letters (c) and (d) of paragraph 2 is subject to the release by you of an explicit consent. Any refusal to issue consent has no other effect than that of not being able to offer you a personalized service and informing you of initiatives that may be of interest to you and / or sending you any other commercial information on GREVI products, initiatives and events.
Lei potrà in qualsiasi momento modificare o revocare il Suo consenso ovvero opporsi al trattamento scrivendo a GREVI mode sas Via della Manifattura 10 – 50058 Signa (FI) o tramite e-mail all’indirizzo firstname.lastname@example.org or using the link "unsubscribe”Present in all our electronic commercial communications or other specific procedures that may be made available to you.
5. Transfer and disclosure of data
Your Personal Data, as necessary and / or instrumental for the execution of the purposes indicated above, may be processed on behalf of GREVI by external subjects who will act as Data Processors belonging to the following categories:
- companies, consultants and professional firms that provide assistance and / or consultancy, or that perform, on behalf of GREVI, services connected and instrumental to the purposes of data processing.
Personal Data will not be used for promotional purposes of third parties or referring to products, services or initiatives not coming from GREVI a and will in no case be disclosed to indeterminate subjects.
6. Retention period
Your personal data will be processed and stored for the time necessary for the execution of the purposes for which they were collected and in accordance with the retention times provided for by the applicable regulations or until you revoke the consent given for the treatments where provided. Subsequently, personal data will be automatically deleted or permanently anonymised.
7. Data controllers
The Data Controller is GREVI MODE sas – Via della Manifattura 10 – Tel. + 39 055 876223 – P.Iva : IT00398670489 – 50058 Signa – Firenze – Italy. Grevi will process your data in accordance with the GDPR.
For the exercise of your rights, as well as to receive any information relating to them and / or this information, you can contact the owner or the data protection manager appointed by the owner ("DPO"), by writing to: GREVI mode sas - Via della Manifattura 10 - 50058 Signa (FI) or by e-mail. email@example.com
8. Rights of the data subject
Please note that you may exercise the rights under Articles 15 to 21 GDPR, and specifically the right to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, the right to object to the processing and/or the right to have those Personal Data transmitted to another controller. You also have the right to withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal. You may lodge a complaint with the Italian supervisory authority (Autorità garante per la protezione dei dati personali) at Piazza di Montecitorio no. 121, 00186, Rome (Italy).
Last updated : 4th march 2020