Privacy Policy
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
(Articles 13 and 14 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, hereinafter the “GDPR”)
Abraham Industries S.r.l., owner of the Liviana Conti, Semicouture, Erika Cavallini and Circus Hotel brands, is committed to protecting your personal data and respecting your privacy.
This notice applies to you if:
-
you wish to register on one of the websites of Abraham Industries S.r.l.’s brands [www.livianaconti.com – www.semicouture.it – www.erikacavallini.com – www.circushotel.it];
-
you wish to subscribe to our newsletters or receive promotional and commercial communications concerning the products of the brands listed above;
-
you have requested information about our products or services;
-
you are interested in working with or for our company.
Please read this notice carefully to fully understand how we process your personal data.
Please also note that any third-party websites referred to or linked to through this Website are the sole responsibility of the third parties operating them and are therefore governed by their own separate Terms and Conditions and Privacy Policies.
1. Who is the Data Controller?
The Data Controller of your personal data is Abraham Industries S.r.l. (VAT number: 01729810406), with its registered office at Via Fosse Incrociate 284, 47822 Santarcangelo di Romagna (RN), Italy. Email: info@abrahamindustries.it; certified email (PEC): abrahamindustries@pecmail.net.
The Data Controller is the person who determines the methods, purposes and means of processing your personal data.
2. Who is the Data Protection Officer?
The Data Protection Officer is Smart Compliance Solutions for you s.r.l., which can be contacted at: dpo@abrahamindustries.it.
The Data Protection Officer performs the duties listed in Article 39 of Regulation (EU) 2016/679, hereinafter also referred to as the “GDPR”.
3. What personal data do we process, for what purposes and for how long will it be retained?
Personal data means any information that allows a natural person to be identified. For the purposes set out below, the Data Controller needs to use the following personal data:
a) To create your account, you will be asked to provide your first and last name, date of birth and email address. To process your purchase order and deliver the products you have purchased, you will be asked to provide your shipping and billing addresses and telephone number. To manage your order or return requests, you will find a summary of your orders in the private area of your personal account.
Your personal data will also be used to send you updates on the status of your purchase orders or requests and to issue accounting documents.
The legal basis for this processing is Article 6(1)(b) and (c) of the GDPR. This personal data is strictly necessary to fulfil pre-contractual and contractual obligations and comply with legal obligations, including administrative, tax and accounting requirements.
You may request the deletion of your account at any time. Please note, however, that accounting documents will be retained for ten years from the date the service is provided, as required by applicable law. The Data Controller also undertakes to periodically review accounts that have been inactive for more than five years and to delete them after giving prior notice.
b) To respond to requests submitted through the contact form available on the Website, you will be asked to provide your first and last name and the email address to which we should send our reply. This data will be processed with your prior, freely given and explicit consent, pursuant to Article 6(1)(a) of the GDPR, and retained only for as long as strictly necessary to respond to your requests.
c) To send you commercial, promotional and advertising communications in the form of newsletters and SMS messages, as well as soft marketing communications, such as communications aimed at assessing your satisfaction with products or services you have already purchased and conducting market research on product categories similar or complementary to those you have already chosen, you will be asked to provide your email address.
You may request activation of this service independently of creating a personal account. The data collected for this purpose will be processed with your prior, freely given and explicit consent, pursuant to Article 6(1)(a) of the GDPR.
This data will be retained for as long as the newsletter service remains active or until you choose to unsubscribe. You may unsubscribe from the service, including for just one of the Group’s brands, by clicking the link at the bottom of each communication you receive.
d) To send you commercial or promotional communications tailored to your purchasing habits, we may process data collected through your interactions with our services, such as purchases made, product categories selected and purchase frequency. This allows us to analyse your consumer preferences and improve our commercial offering by suggesting content that matches your interests. These analyses are not, in any event, associated with an automated decision-making process.
This data will be processed with your prior, freely given and explicit consent, pursuant to Article 6(1)(a) of the GDPR, and retained for 36 months. At the end of this retention period, the data will automatically be deleted or permanently and irreversibly anonymised, unless you choose to renew your consent to continue using the service.
Please note that this purpose may only be pursued if the data subject has created a personal account or otherwise has an active individual profile. Without an active account or profile, any consent given for this purpose will have no effect and will not result in any further processing.
e) To assess your unsolicited application submitted through the “Work with us” page, we will ask you to provide your first and last name, email address, mobile telephone number, one or more preferred areas of work, and your CV. The data collected for this purpose will be processed with your prior, freely given and explicit consent, pursuant to Article 6(1)(a) of the GDPR, and retained for 12 months.
f) For information on cookie management, please refer to the dedicated page.
4. Is providing your data mandatory?
Providing the personal data required for the processing referred to in Section 3(a) is mandatory. If you refuse to provide it, you will not be able to complete your purchase.
For the processing referred to in Sections 3(b), (c), (d) and (e), providing your data is entirely optional, but necessary to use the relevant service or allow us to assess your unsolicited application.
5. Who may your personal data be disclosed to?
Your data may be accessed by Abraham employees and/or collaborators responsible for managing orders or responding to your requests.
Your data may also be accessed by third parties appointed as “Data Processors”, such as, by way of example, consultants and providers of IT and logistics services necessary for the operation of the Website.
You have the right to obtain a list of any parties appointed as Data Processors by submitting a request to us.
The personal data processed will not be publicly disclosed in any way. If it is transferred to third countries, a level of data protection meeting European requirements will be ensured.
The provisions governing third-party cookies, as described in the Cookie Policy, remain unaffected.
6. How can you obtain information about your data, amend it, delete it or obtain a copy?
At any time, subject to the conditions set out in Article 7 and Articles 15 to 22 of Regulation (EU) 2016/679, you may exercise the following rights:
-
request information about the existence of your personal data, its source, and the purposes and methods of processing and, where applicable, obtain access to the personal data and related information;
-
request that your data be updated, rectified, completed or erased; request restriction of processing where one of the conditions set out in Article 18 of the GDPR applies; and request the anonymisation or blocking of personal data processed unlawfully, including data that no longer needs to be retained for the purposes for which it was collected and/or subsequently processed;
-
object, in whole or in part, on legitimate grounds and as provided by law, to the processing of your data, even where it is relevant to the purpose for which it was collected, and to the processing of personal data for commercial information, advertising, direct sales, market research or commercial communications.
Each user also has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; to receive their personal data, processed on the basis of a contract or the data subject’s consent and provided knowingly and actively or through use of the service, in a structured, commonly used and machine-readable format, and to transmit it to another Data Controller without hindrance; and to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
To exercise these rights, you may send a request to customercare@abrahamindustries.it.
7. What security measures do we adopt and what advice do we give you to protect your personal data?
We process your data with the utmost care for its security: we have adopted appropriate physical, IT and organisational measures to protect it.
You can also actively help protect your privacy by following a few simple recommendations:
-
create strong passwords using a combination of uppercase and lowercase letters, numbers and symbols;
-
avoid using the same password for multiple accounts and change it regularly;
-
do not share your login credentials with others and keep them in a safe place.
Be alert to phishing attempts and do not provide your personal data in response to suspicious emails.
We continuously work to improve our security measures and provide you with a protected environment in which your data remains secure.
8. Who do we receive personal data from?
We primarily collect your personal data directly from you, for example when you register on our websites, place an order, subscribe to our newsletter, contact us for information or take part in initiatives we organise.
In some cases, we may also receive your personal data from social media platforms if you have voluntarily taken part in one of our advertising or promotional campaigns through those channels. In these cases, the data is processed in accordance with the privacy settings you have chosen on those platforms and with applicable law.
We ensure that all data collected, whether directly or through third parties, will be processed exclusively for the stated purposes and in accordance with the principles of transparency and security.
9. Can this Privacy Notice change over time?
This notice may be updated. If there are substantial changes to the way we process personal data, we will inform you promptly.