PROTECTION OF PERSONAL DATA

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to and for the purposes of Art. 13 of the New European Regulation 2016/679 (GENERAL DATA PROTECTION REGULATION – GDPR) relating to the protection of natural persons with regard to the processing of personal data. As required by the GDPR, before proceeding with the processing, the interested party (User of the website andreamorando.it) is informed that the personal data collected through the site are being processed by the Company BiMORE Srl (hereinafter also "the Data Controller of the Processing” or “the Owner”) using IT and/or telematic tools, for the purposes indicated in this information. To this end, the interested party is provided with the Privacy Policy prepared by the Data Controller, creator and promoter of the activities available on the bimoritaly.com website.

Data Controller

The Data Controller of personal data is BiMORE Srl, with registered office Piazza Dante 23R, 16121 Genoa, VAT number: 02608300998.

BiMORE Srl has identified a Data Protection Officer pursuant to articles 37 et seq. of the European Regulation 2016/679, who is identified in the person of the managing director Biancs Morando.

This subject may be contacted for clarifications and questions relating to the processing of personal data at info@bimoritaly.com

For further information relating to the rights of the interested party, please consider the paragraph entitled "Rights of interested parties" of this information.

Information on treatment

The personal data being processed are collected directly by BiMORE Srl or by third parties expressly authorized by it, or communicated by BiMORE Srl to such third parties for the pursuit of the purposes described below.

The personal data provided by the User when browsing the website www.bimoritaly.com are processed by the Data Controller in accordance with current regulations on the protection of personal data.

The legal basis of the processing is identified in the provision of its services by BiMORE Srl, in the management and facilitation of the website, as well as in the establishment, execution and possible termination of the online sales contract concluded between the parties and in the obligations thereof contract connected and/or directly and/or indirectly deriving from the same. The processing of personal data by BiMORE Srl is aimed at pursuing the purposes listed below.

Subscription to the bimoritaly.com newsletter

In the event that the User decides to subscribe to the dibimoritaly.com Newsletter, only following a possible and specific consent, following the online path, the personal data will be processed by the Data Controller for the sending of commercial or promotional communications, of related updates (for example: exclusive offers, special events and promotions). To unsubscribe from the newsletter, simply click on the unsubscribe link at the bottom of the emails received or write to info@ bimoritaly.com. The Data Controller, to compare and possibly improve the results of communications, uses systems for sending newsletters and promotional communications equipped with a reporting mechanism, thanks to which the Data Controller will be able to know details such as, for example, the number of readers , openings and clicks, the type of device used to open and read emails, the complications of viewing the message; link tracking, i.e. the number of clicks made on the links in the message and click tracking, i.e. which links were clicked. This data is used for the sole purpose of comparing and improving communication results

In the event that the User decides to register on the bimoritaly.com website, only following a possible and specific consent, the personal data will be processed by the Data Controller for the purposes of registration on bimoritaly.com. In particular, upon providing your name, surname, e-mail address and setting an access password, these data will be processed for the creation of a personal account, to speed up the purchase procedure, to allow the User to view the history of orders placed, change personal settings and update the account, view the history of returns and requests for exchange of goods, save favorite items in the Wishlist. At any time the User can cancel the account through the dedicated procedure within their account or by contacting Customer Service at the email address info@ bimoritaly.com or by telephone number. 0105304322; confirm list of possible activities and data necessary for account registration.

The personal data provided will be used for the purposes of establishing, managing, executing and concluding the online sales contract. The data will be processed by the Data Controller for the management of the purchase order with reference, by way of example, to the payment and shipping activity, taking charge of any returns, the conduct of administrative and accounting purposes related to the management of the order and the fulfillment of obligations established by current legislation. In case of payment by credit card, the information essential for the execution of the transaction (credit/debit card number, expiration date, security code) will be processed by the payment system provided by Shopify INC. (https://help.shopify.com/it/manual/your-account/privacy/GDPR. However, this information will never be viewed or stored by BiMORE Srl

Only following a possible and explicit consent, the personal data provided may be processed by BiMORE Srl for profiling activities which allows identifying the User's preferences in order to create personalized content and offers.

Personal data processed

The personal data processed by BiMORE Srl are those provided by the User when browsing the andreamorando.it website, when registering for the newsletter or creating an account on the bimoritaly.com website and/or the possible purchase of products available on the bimoritaly.com website for purchase. Such data may be, for example: name, surname, e-mail address, in addition to the data necessary for the provision of the online sales service such as, for example, those functional to the execution of the payment and shipping or exchange of the products purchased.

The processing of personal data is carried out by the Data Controller in compliance with the provisions of current legislation on the processing of personal data. The Data Controller processes personal data using IT and/or telematic tools and with organizational and logical methods strictly related to the pursuit of the purposes indicated on this page, always adopting appropriate security measures in order to prevent access, unauthorized disclosure, modification or destruction of personal data, their loss and their illicit and incorrect use and in any case in line with current legislation. However, BiMORE Srl cannot guarantee its Users that the measures adopted for the security of the site and the transmission of data and information on the site are capable of limiting or excluding any risk of unauthorized access or dispersion of data by devices. pertaining to the User. For this reason, Users are advised to ensure that the tool adopted for browsing the andreamorando.it website is equipped with software suitable for the protection of data transmission over the network (for example updated antivirus) and that their Internet Provider has adopted suitable measures for the security of data transmission online BiMORE Srl also undertakes to process the data according to the principles of correctness, lawfulness and transparency, to collect them to the extent necessary and exact for the processing and to allow their use only by personnel for the authorized purpose. The management and storage of the personal data acquired will take place in archives, on platforms owned by Shopify INC. located in their data centers in the USA and Canada and on servers located within the European Union owned by the Data Controller and/or third-party companies that have been appointed External Data Processors and, in any case, currently located in Europe. In relation to the different purposes for which they are collected, personal data will be kept for the time strictly necessary to achieve them and, in any case, in compliance with the regulatory provisions in force regarding data processing.

In any case, BiMORE Srl will take care to avoid the use of the data for an indefinite period by proceeding, on a periodic basis, to appropriately verify the actual continuation of the interest of the subject to whom they refer.

Recipients and Data Processors

The data collected will not be disclosed in any way and will be processed within the limits and for the purposes described by BiMORE Srl employees on the basis of adequate operating instructions. Some data processing may also be carried out by third parties, appointed as External Data Processors, of whom the Data Controller makes use or could make use as part of the management of the contractual relationship, the provision of the services offered and for the organizational needs of its business. In particular, the data may be communicated to:

subjects, public and private, who can access the data pursuant to legal provisions, regulations or community legislation, within the limits established by these rules;

- subjects who need to access the data for purposes related to the contractual relationship existing between the parties, within the limits strictly necessary for carrying out auxiliary tasks (such as, for example, banks and credit institutions, suppliers of technical services, hosting providers, companies IT companies, communication agencies, postal couriers and shipping companies);

- consultants, within the limits necessary to carry out their professional duties.

The updated list of External Managers and subjects authorized to process is kept at the headquarters of the Data Controller

and is available to the interested party, upon request to be made via e-mail to info@bimoritaly.com

Transfer of data abroad

The management and storage of personal data will take place on the servers of the Data Controller and/or third-party companies duly appointed as External Data Processors located within the European Union.

Personal data may be transferred abroad, in compliance with the provisions of current legislation, even to countries not belonging to the European Union. The transfer to non-EU countries, in addition to the cases in which this is guaranteed by the Commission's Adequacy Decisions, is carried out in such a way as to provide appropriate and appropriate guarantees pursuant to the articles. 46 or 47 or 49 of the Regulation.

Rights of interested parties

The User (hereinafter also "the interested party"), as interested party, may exercise, at any time, the rights provided for in articles 15, 16, 17, 18, 20 and 21 of the GDPR which confer, in particular, the faculty of:

obtain from the Data Controller, pursuant to Article 15, confirmation as to whether or not personal data is being processed and, in this case, obtain access to the data themselves and to information such as: (i) the purposes of the treatment; (ii) the categories of personal data; (iii) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients located in Third Countries or International Organizations; (iv) when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;

obtain from the Data Controller, pursuant to Article 16, the rectification of inaccurate personal data concerning him without unjustified delay; taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration;

obtain from the Data Controller, pursuant to Art. 17, the cancellation of personal data concerning him without unjustified delay. The Data Controller has the obligation to delete, without unjustified delay, the personal data if one of the reasons indicated in Article 17 c.1 exists;

obtain from the Data Controller, pursuant to Art. 18, the limitation of processing when one of the hypotheses governed by Art. 18 c1.

obtain from the Data Controller, pursuant to Art. 20, data portability, i.e. receiving in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a Data Controller. The User also has the right to transmit such data to another Data Controller without impediments from the first Data Controller to whom he provided them, if the conditions indicated by the Art. 20 c. 1. Finally, the User has the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible;

object, in whole or in part, pursuant to Art. 21, to the processing of personal data concerning him.

To exercise their rights, the User can send their requests to info@andreorando.it

Furthermore, it should be noted that the interested party has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation, without prejudice to the consequences indicated above regarding a possible refusal to provide such personal data. . The interested party also has the right to lodge a complaint with a Supervisory Authority.

You can make requests regarding the exercise of these rights by contacting BIMORE Srl at the email address info@bimoritaly.com BIMORE Srl undertakes to respond to the interested party's requests within one month, except in cases of particular complexity for which it could take a maximum of three months. In any case, the Data Controller will provide the interested party with evidence of the reason for the wait within one month of the request. The outcome of the request will be provided in writing or in electronic format. In the event of a request for rectification, cancellation or limitation of processing, the Data Controller undertakes to communicate the results of the requests received from the interested party to each of the recipients of his data, unless this proves impossible or involves a disproportionate effort.

The Company specifies that the interested party may be asked for a possible contribution if the questions are manifestly unfounded, excessive or repetitive; in this regard, the Data Controller will equip itself with a register to track requests for intervention.

Third Party Websites

The bimoritaly.com website contains links to and from Partner sites and affiliated companies. If you follow a link to one of these sites, please remember that this Privacy Policy does not apply to such websites. BIMORE Srl assumes no responsibility for the privacy policies or practices of such websites and it is the User's responsibility to check the aforementioned policies.

Changes to this information

The Data Controller reserves the right to make changes to this Privacy Policy at any time by advertising them to users on the bimoritaly.com website. Please therefore consult this page often, taking as reference the date of last modification indicated at the end of the document. In case of non-acceptance of the changes made to this Privacy Policy, the interested party may request from the Data Controller

to delete your personal data. Unless otherwise specified, the previous Privacy Policy will continue to apply to personal data collected up to that point.