This information describes the characteristics of the processing of the personal data collected through the e-commerce platform (hereinafter, the “ Platform ”) owned by DEDAR S.p.A., with registered office at Piazza della Repubblica 1/A, 20121 Milano, taxpayer’s code and VAT no. 03187590157 (hereinafter, “ Dedar ”).

Controller

The personal data controller is Dedar.

Collection of the Data

Data communicated by the users

Certain areas of the Platform require the users to communicate personal data, including identification data and contact details (hereinafter, the “ Data ”). The provision of these Data is on a voluntary basis: should the users not wish to provide them, they will in any case be able to browse the Platform without benefiting from the main functionalities of the Platform.

The Data absolutely necessary are marked by an asterisk.

The users are invited not to communicate to Dedar any third-party personal data, unless this is necessary (as an example, because the user does not have their own, personal email address and has no other direct contact details): in this case, it is reminded that it is the user’s responsibility to fulfil the legal obligations concerning the protection of personal data and, in particular, to inform the third parties that their data are being communicated in order to obtain, as the case may be, their consent.

Purpose and legal basis of processing

Dedar processes the Data in strict compliance with the applicable legislation concerning the protection of personal data and with the indications of the Data protection supervisory authority.

Registration of an account

The Data communicated by the users in the section “ Register” of the Platform will be processed to allow the user to register an account with the Platform. The registration allows to access all the functionalities of the Platform (as an example, finalising a purchase, monitoring their orders, reserving a product, creating a moodboard , monitoring any consents given to specific purposes of processing, filing complaints).

These processing operations are instrumental to the pursuit of Dedar’s legitimate interest to allow the users to use the services provided on the Platform. This interest has been balanced against the expectations of the users, and no significant invasion of their private life or other undue impact on their rights have been identified.

At any time the users can object to this processing by writing to Dedar to the contact details provided in the section “ Rights of users”. Should the objection request be accepted, the account will be cancelled and any communications relating to any order will have to be exchanged with Dedar via email. In any case, any objection will not compromise the lawfulness of the processing of the Data carried out by Dedar until that time.

The processing of the Data for this purpose is voluntary, but is mandatory and necessary to enjoy the functionalities of the Platform dedicated to registered users. The refusal to provide the Data or any further objection will not prevent the user from browsing the Platform.

Purchase of a product

Should the user decide to purchase any of the products available on the Platform, the Data of the user, including VAT no., will be processed to manage the purchase orders (this includes the sending of service communications on the order status, via email; the pre-sale and post-sale customer service activity) and to fulfil the obligations provided by the laws on selling and buying.

The processing is necessary to the execution of a contract to which the user is part and/or of pre-contractual measures taken on the user’s request, and to allow Dedar to fulfil the related legal obligations.

The processing of the Data for this purpose is voluntary, but is necessary: the refusal will prevent the user from finalising the purchase and/or from receiving the purchased product.

Subscription to the newsletter

The Data will be processed to allow the user to benefit from the newsletter service, and therefore the sending of the email newsletter concerning Dedar’s activity and the most significant novelties therein, the previews, the products, and the fairs and events Dedar will participate in.

This processing is only permitted with the prior consent of the data subject.

At any time the users can withdraw their consent and can request to be unsubscribed from the newsletter service, by sending a specific communication to Dedar to the contact details provided in the section “ Rights of users” and signifying their intention to unsubscribe from the service, or by following the procedure indicated at the bottom of the message received, by clicking on the button “ Unsubscribe”.

The processing of the Data for this purpose is optional: any refusal to communicate the Data will result, only, in Dedar being unable to send the newsletter to the user, but will not prevent the user from browsing the Platform and/or from registering an account.

Replies to commercial requests from users

The Data will be processed to respond to the requests that may be transmitted by the users by contacting Dedar via the specific sections of the Platform (this includes requests for consultancy or appointment). The Data may, also, be processed – in case of interest on the part of the users – to allow Dedar to provide business feedback, to schedule meetings and to consider, where appropriate, the opportunity to start a contractual relationship.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest to reply to the users in order to assist them and to provide advice on Dedar’s products or on the users’ projects. This interest of Dedar has been balanced against the interest of the users and appears compatible with the reasonable expectation of the users to receive a reply to the requests sumbitted. Further, if the users express an interest in that respect, the processing might be, also, necessary to execute pre-contractual measures taken upon the user’s request.

If the contact does not lead to a pre-contractual or contractual relationship between Dedar and the user, the users will, in any event, be able to object to this processing at any time, by writing to Dedar to the contact details provided in the section “ Rights of the users”. In any event, any objection will not compromise the lawfulness of the processing carried out by Dedar until that time, but will result in the erasure of all Data and in the impossibility to follow-up on any pending requests.

The communication of the Data for this purpose is voluntary, but is necessary: any refusal will result in the impossibility to contact Dedar to receive assistance or specific advice, and in the impossibility to start any contractual relationship with Dedar.

Use of Social Media platforms

The Data will be processed through the pages of the Social Media platforms dedicated to Dedar.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest consisting in managing the interactions with the users (comments, public posts, etc.) in compliance with the applicable legislation.

The Data are given freely by the users via the aforesaid pages of the Social Media platforms.

As regards the Data processing operations carried out by the managers of the Social Media platforms used by Dedar, please refer to the information provided by them in their privacy policies.

 

Data retention term

As regards the registration of the account, if no access is made for a period longer than 36 months from the date of registration the account will be deactivated. If the user gives an affirmative answer to the request which will be sent one month prior to the expiry, the account will be kept active and will be retained for further periods of 36 months.

If any purchases are made, the Data will be retained for the duration necessary to fulfil the tax, accounting, and regulatory obligations associated to the sale of Dedar’s products.

As regards the processing of the data for sending the newsletter, without prejudice to the user’s right to withdraw their consent, the Data will be processed and kept for 24 months from when the consent is given.

As regards the processing of the personal data to respond to commercial requests from users, the Data will be retained to respond to the user’s request, for a maximum period of 12 months from when the last contact occurred. If a contractual relationship is established between the user and Dedar, the Data will be processed for the period indicated in the related information which will be transmitted together with the contract.

The Data will be retained longer if this is necessary to comply with any obligation in law or to ensure legal protection of Dedar’s rights.

Recipients of the Data and transfer outside the EU

The Data, with regard to the aforesaid purposes, may be communicated to public authorities, where this is necessary to comply with any obligation in law.

If any purchases are made, the Data will be made know to providers of services accessory to online sale, such as forwarders and carriers (as regards the shipping and delivery of the purchased products), and banking institutions (for the management of payments and refunds). For this purpose, the Data relating to the users whose residence or domicile is outside the European Union may be transmitted, also, to local carriers. The transfer of the Data, in these cases, will be supported by adequacy decisions of the European Commission or by appropriate safeguards under art. 46 and ff. of the GDPR (i.e. subscription of standard contractual clauses).

The Data will be made known to Italian-based providers of newsletter services for the purposes of sending the  newsletter.

Further recipients of the Data are the consultants and companies providing services accessory and instrumental to those provided by Dedar such as, as an example but not limited to, the Italian-based company providing Platform management services according to the mandate conferred upon it by Dedar.

In addition, the agents of Dedar carrying out activities in the performance of their mandate are recipients of the Data.

The aforesaid categories of recipients process the Data as autonomous data controllers or as processors or as persons authorised according to the provisions of arts. 24, 28 and 29, respectively, of the GDPR.

A complete list of the recipients of the Data as well as further information on the transfer of Data outside the EU are available upon request to be addressed to the contact details provided below in the section “ Rights of users”.

Users’ rights

At any time the users can:

1. obtain access to the Data;
2. obtain the rectification or erasure or, where applicable, limitation to the processing;
3. object to the processing;
4. withdraw their consent;
5. where applicable, receive the Data provided to Dedar in a structured, commonly used, and machine-readable format, and transmit these Data to another processor without obstruction by Dedar;
6. file a complaint with the Data protection supervisory authority.

These rights can be exercised by contacting Dedar:

• by email:  info@dedar.com
• by post, to the address: Via della Resistenza 3, 22070 Appiano Gentile

The "Inspiration" section of the   dedar.com  website presents a collection of images created by Dedar customers/partners and representing the result of the use of Dedar products by the customers/partners themselves. Dedar has taken steps to collect the relevant authorisations to use the images from the authors. For further information, please contact Dedar at the following e-mail address:   communication@dedar.com .