Privacy Policy

Privacy disclosure provided pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data.
Plissè S.p.a. (hereinafter, "Plissè" or the "Data Controller"), as the data controller, and in consideration of the importance it gives to the protection and security of personal data, communicates that pursuant to Art. 13 of EU Regulation no. 2016/679 (hereinafter, the "GDPR"), your data will be processed in the manner and for the purposes listed below.

1. Identity and contact details of the Data Controller and Data Processor

The Data Controller is Plissè S.p.a., with registered office at Via Ghebo, 1 - 35017 Piombino Dese (Pd), Italy (hereinafter, the "Data Controller"), in the person of its legal representative pro tempore.

2. Processing purpose

The Data Controller processes personal data (such as name, surname, company name, address, telephone number, e-mail address, bank and payment details - hereinafter, the "data") that you have communicated while signing the contract and for all other services that you may request from the Data Controller.
Data belonging to special categories pursuant to Art. 9 of the GDPR will not be processed.
The user has the option of registering on the site, providing identification and contact data, in order to be enabled to make purchases as a registered user and have access to his wishlist, information on the status of purchases made and returns.

3. Purposes of processing and legal basis

The legal basis of the treatment is the following:
A. execution of the contract, for the following purposes:
- conclusion of the online purchase contract and subsequent obligations (delivery of the purchased goods, etc.);
- fulfilments concerning the execution of the online purchase contract.
B. fulfillment of legal obligations, for the following purposes:
- accounting and tax keeping, and other obligations as per law;
- in the event of checks or controls by organizations or authorities, presentation of the documentation relating to the contract and related tax and accounting documents.
C. Consent of the person concerned:
- newsletter or commercial communications, integrated marketing, customer experience, profiling; Pursuant to art. 130 paragraph 4 of the Privacy Code, the customer may be sent communications by email relating to offers or promotions concerning products similar to those purchased.

4. Processing methods

Your personal data is processed by means of the operations indicated in Art. 4(2) of the GDPR, specifically the collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are processed by electronic and paper-based means. The data will be handled, processed and stored on our computer systems. The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes, and for no more than 10 years from the termination of the relationship for administrative purposes, and for no more than 1 year from the collection of data for Marketing Purposes. Customer profiling activities are performed through the site, only with the prior consent of the interested party.

5. Data access

Your data may be made accessible as follows for the purposes referred to in Art. 3(A) and 3(B):
- to employees and collaborators of the Data Controller in their capacity as persons in charge and/or system administrators;
- to third-party companies or other subjects (such as credit institutes, professional firms, insurance consultants, etc.) who are outsourcers of the Data Controller, in their capacity as external data controllers.

6. Data communication

Without the need for express consent and Art. 6(b) and (c) of the GDPR), the Data Controller may communicate your data for the purposes referred to in Art. 3(A) to the judicial authorities in the event that they explicitly request such, as well as to persons to whom communication is mandatory by law for the accomplishment of the stated purposes. These subjects will process data in their capacity as independent data controllers. Personal data will not be disseminated.

7. Data transfer

Personal data is stored in our computer system, and servers both in Italy and other European countries will be used to store the data. It is understood that the Data Controller, where necessary, will have the right to move the servers to server farms outside of the EU. The Data Controller hereby ensures that the data will be transferred in accordance with applicable legal provisions, subject to the stipulation of standard contractual clauses provided for by the European Commission.

8. Nature of the provision of data and consequences of their refusal

The provision of data for the purposes referred to in Art. 3(A) and 3(B) is mandatory. In their absence, we cannot guarantee the services in Art. 2.

9. Rights of data subjects

As the data subject, you have the rights set forth in Art. 15 of GDPR, specifically:
i. to obtain confirmation as to whether personal data regarding you exists or not, including data not yet registered, and to ask for a copy of such data in an intelligible form;
ii. to obtain an indication of a) the origin of personal data; b) of the purposes and methods of the processing activities; c) of the logic applied for processing activities carried out with the aid of electronic instruments; d) of the identification details of the data controller, the data processors and the designated representative pursuant to Art. 5, paragraph 2 of the Privacy Code and Art. 3, paragraph 1, of the GDPR; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of such data as a delegated representative in the territory of the State, data processors or appointed persons;
iii. obtain: a) the updating, correction or, if applicable, the integration of data; b) the deletion, transformation into anonymous format or blocking of data processed against the law, including data which it is not necessary to store in relation to the purposes for which it was collected or subsequently processed; (c) certification that the operations as per points (a) and (b) above were brought to the knowledge, also in terms of content, of those to whom the data was communicated or disclosed, unless this is impossible or implies the use of means clearly disproportionate with the protected right;
iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of their collection; b) to the processing of personal data concerning you for the purpose of sending advertising material. Please note that the right of opposition of the data subject as per point (b) above as concerns direct marketing purposes through automated methods extends to traditional methods, and the possibility remains for the data subject to only partially exercise the right of opposition. Therefore, the data subject may decide to only receive communications through traditional methods, only automated communications, or neither of the two.
Where applicable, the data subject also has the rights referred to in Articles 16-21 of the GDPR (Right of rectification, right to be forgotten, right of limitation of processing, right to data portability, right of opposition), as well as the right to lodge a complaint with the Guarantor Authority. It should also be noted that it is your duty to promptly communicate the update of your data by e-mail and/or registered mail, attested by an acknowledgment of receipt.

10. How to exercise your rights

You can exercise your rights at any time by sending the form available at this link:
- By registered mail, attested by an acknowledgment of receipt, to: Plissè S.p.a., with registered office at Via Ghebo, 1 - 35017 Piombino Dese (Pd), Italy
- certified email to amministrazione@pec.plisse.it or privacy@plisse.it.