Privacy Policy retail

HOW WE USE YOUR DATA

(articles 13 and 14 of EU Regulation 2016/679)
INF11 – v.03 of 26/05/21

Dear Customers,

we wish to provide some information about the methods and purposes relating to the processing of your personal data.

Who we are

The Data Controller is Betty Blue S.p.A., Tax/VAT no. 01842471201, with registered office at Via Viadagola no.30, Quarto Inferiore di Granarolo Emilia (BO), Italy, in the person of its pro tempore legal representative.

Nature and provision of data

The provision of your personal data to BETTY BLUE S.p.A. is optional, but it is indispensable to receive information material, news or promotions. Therefore, if you refuse to provide the necessary data, these services cannot be provided.

Purpose of data processing

We inform you that your personal data will be processed and used for the following purposes:

  1. Management of data for commercial and informative purposes (communication regarding collections, promotions or invitations to events, through Mass Email Marketing campaigns, Direct Mail Marketing campaigns, etc.) also with the use of profiling techniques of habits, interests and purchase preferences, aimed at providing a personalised experience in line with customer tastes.
    Data retention period: 7 years
  2. Customer assistance during the purchase phase, with verification of previous purchases, in order to propose coordinated or matching items of clothing, or to evaluate the tastes of the customer and propose suitable articles.
    Data retention period: 7 years

Legal basis

The legal bases, which legitimise the processing operations described in this Privacy Policy, are:

  • In relation to point a):
    • the explicit consent (art. 6 paragraph 1 letter a) of EU Regulation 679/16 “The data subject has given consent to the processing of his or her personal data for one or more specific purposes”).
  • In relation to point b):
    • Legitimate interest (Art. 6 paragraph 1 letter f) of EU Regulation 679/16 “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”). In this case, the legitimate interest pursued corresponds to the customer assistance during the purchasing process in the boutiques, in order to offer him or her clothing and accessories in line with his/her tastes.

The Data Controller BETTY BLUE S.p.A. will process your personal data only to the extent that they are indispensable, in relation to the goal of the purposes referred to in the previous point, in compliance with the provisions of current legislation on the protection of personal data.

Methods of data processing

Your personal data, as "data subject", in particular:

  1. Name, contact details (address, e-mail, date of birth).
    Data category: Identification - Personal data: common
  2. Economic data (value of purchases made at the boutiques).

Data category: Economic - Personal data: common

  1. Type of products purchased
    Data category: Products – Personal data: common

they will be processed with a high level of security and in any case always in line with the most modern standards. All the protection measures indicated by the regulations on the protection of personal data and by the applicable legislation, as well as those determined by the Data Controller, are implemented.

The data will be processed by the authorised categories below:

 

  • Data processors:
    • To manage the service of sending commercial communications:
      • FILOBLU S.p.A.
    • For Management and subscription to the newsletter service at Elisabetta Franchi boutiques:
      • Elisabetta Franchi franchising network (Data Processors)
  • Subjects authorised to the processing:
    • Technical staff
    • Staff employed at the Elisabetta Franchi Boutiques and Outlets (Direct trade)

Communication and data transfer

The data, collected by the Data Controller, may be communicated not only to the subjects indicated above, but also to other categories of subjects for whom communication is strictly necessary, functional and compatible with the legal basis governing the processing of your data.

As part of the processing carried out by the subjects described above, your data will be made available to the entire network of Elisabetta Franchi stores, owned or franchised, so you can always take advantage from the exclusive benefits guaranteed by your registration wherever you are. In this case, your data will be protected through the use of encryption techniques. In particular, your data will be transferred to third countries for which there are adequate guarantees pursuant to art. 46 of EU Regulation no. 679 of 2016.

Automated decision-making and profiling

Your data is not processed with the aid of automated decision-making processes.

The processing of your data may take place with the use of profiling techniques, aimed at offering a personalised experience based on your tastes.

Rights of the data subject

As a data subject, you have the rights set out in sections 2, 3 and 4 of part III of (EU) Regulation 2016/679 (e.g. to request the Data Controller to: access and rectify or erase your personal data; limit the processing of your personal data; object to their processing). The data subject has in particular the right to:

  • obtain confirmation from the Data Controller whether personal data concerning him/her are being processed or not and, in that case, to obtain access to the personal data and information provided for in article 15 of EU Regulation no. 679 of 2016;
  • obtain from the Data Controller the rectification of any inaccurate personal data concerning him/her;
  • obtain the erasure of personal data concerning him/her, where such data are no longer necessary for the purposes for which they were collected or otherwise processed, or where further conditions set out in article 17 of EU Regulation no. 679/2016 are met and provided that the conditions set out in article 17(3) of EU Regulation no. 679/2016 are not met;
  • obtain from the Data Controller the restriction of data processing when:

a)      the data subject objects to the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;

b)     the processing is unlawful but the data subject objects to the deletion and instead requests the application of limiting measures or requests that such processing takes place in order to assess or defend one of his/her rights in court;

  • receive in a structured format, commonly used and readable by automatic devices, personal data concerning him/her; in the event of exercising this right, the data subject will have the right to request that the Data Controller transmits such data directly to another data processor;
  • oppose the processing of personal data concerning him/her in the event that the conditions of art. 21 of EU Regulation no. 679/2016, paragraph 2, are met;
  • lodge a complaint with a supervisory authority.

The data subject may contact the following address regarding the exercise of these rights:

Data controller

BETTY BLUE SPA
VIA VIADAGOLA 30 - GRANAROLO DELL'EMILIA (BO) – 40057
TAX CODE 03348000484 - VAT NO. 01842471201
Data Protection Officer
E-mail dpo@elisabettafranchi.com

Data retention

The personal data you provide us with will be stored for the purposes of performing the agreed service and will be kept for the time necessary to perform the same. Retention may be by means of:

-        storage within the hardware systems of the Data Controller or its processors;

-        archiving in accordance with the Digital Administration Code (CAD); in this case, the Data Controller will resort exclusively to subjects accredited in accordance with art. 29 CAD if data are not archived directly on its own application systems.