In compliance with Articles 13 (for data collected from the Data Subject) and 14 (for data not collected from the Data Subject) of Regulation (EU) 2016/679 (GDPR), Users of this Website are provided with the following information, which refers exclusively to processing carried out through this Website and not through other websites that may be accessed via links on this Website.

Data Controller

Piazza Affari s.n.c. di Lunardi Nicola & C.
Email: info@lazzarionline.com
Tax Code and VAT No. 02192410237, registered office at Via Camporsolo 11A, 37047 San Bonifacio (VR), Italy, Certified e-mail: piazza.affari@pec.it

The Data Controller may appoint service providers as Data Processors for technical assistance, maintenance, technical management and similar activities relating to this Website. Their details may be provided upon request.

Types of data processed and sources

• Browsing data

• Cookies, for which please refer to the relevant Cookie Policy

• Data voluntarily provided by the User, including identification, personal, billing and similar data

• Data relating to interactions with e-mail communications, such as message opening, date and time of opening and interactions or clicks on links contained in the communications, where tracking is enabled and has been validly authorised

• Sources: browsing, other websites, cookies and similar technologies, the User, interactions with e-mail communications and public sources

We may process browsing data and cookies, for which please refer to the relevant Cookie Policy.

We may also process data voluntarily provided by the User, for example through contact forms or communications sent by e-mail.

Where the Data Subject has given the relevant consent, e-mail communications may contain tracking technologies, including pixels or equivalent technologies, which allow information relating to the opening of messages and interactions with them to be detected.

Purpose of processing

• Providing Users with the web services offered by the Website

• Performance of pre-contractual and/or contractual obligations

• Handling User requests

• Cookie management

• Sending newsletters and informational, commercial and promotional communications

• Measuring openings and interactions with e-mail communications, subject to the Data Subject's consent

In particular, personal data provided to the Data Controller will be processed for the following purposes:

• to respond to specific requests submitted to the Data Controller through the Website and its communication tools;

• for subscription to the newsletter and for sending, by e-mail, informational, commercial and promotional communications, including the newsletter, relating to products and/or services of the Data Controller and/or third parties, subject to the Data Subject's specific consent given by ticking the relevant box;

• to detect and measure, through tracking technologies embedded in e-mail communications, such as pixels or equivalent technologies, the opening of communications, the time of opening and interactions with the contents and links contained therein, for the purpose of measuring the effectiveness of communications and improving the Data Controller's communication and marketing activities. Such processing is carried out subject to the Data Subject's consent;

• for informational communications relating to the Data Controller's services following a request for information;

• for other ancillary purposes related to those indicated above and falling within the activities of the Website;

• for the processing of the e-mail address provided by the Data Subject in connection with the sale of a product or service, also for sending, without further consent where permitted by applicable law, communications concerning the direct sale of products or services similar to those previously purchased. The Data Subject may object to such processing at any time, easily and free of charge.

Legal basis for processing

• Consent

• Performance of contractual or pre-contractual obligations

• Information

• Soft spam

• Legitimate interest

• Direct marketing where permitted by applicable law

For the processing of personal data for sending newsletters and informational, commercial and promotional communications by e-mail relating to products and/or services of the Data Controller and/or third parties, the legal basis is the Data Subject's consent pursuant to Article 6(1)(a) GDPR and Article 130 of Italian Legislative Decree No. 196/2003, as amended.

Consent is also the legal basis for the use of tracking technologies within e-mail communications that allow the opening of messages and related interactions to be detected. The Data Subject may withdraw consent to tracking separately from consent to receive communications.

Legitimate interests of the Data Controller

• Exercise of the Data Controller's rights

• Performance of the contractual service

• Direct marketing where permitted by applicable law

Processing may also be based on the legitimate interests of the Data Controller, including the exercise of its rights, performance of contractual services and direct marketing activities where permitted by applicable law, including so-called soft spam.

Mandatory or optional provision of data

The provision of data and consent for marketing purposes are optional. Failure to provide marketing consent does not affect the possibility of making purchases or using other services provided through the Website.

Consent to the use of tracking technologies in e-mail communications is optional. Failure to provide or subsequent withdrawal of tracking consent does not prevent the Data Subject from continuing to receive e-mail communications where marketing consent remains valid.

Consequences of failure to provide consent

• Commercial communications will not be received where marketing consent has not been provided.

• E-mail openings and interactions will not be tracked where tracking consent has not been provided.

Failure to consent to marketing only prevents the Data Controller from sending newsletters and informational, commercial and promotional communications relating to products and/or services of the Data Controller and/or third parties.

Failure to consent to tracking, or subsequent withdrawal of such consent, results only in the disabling of technologies used to measure openings and interactions in relation to the Data Subject, without preventing the receipt of e-mail communications where marketing consent remains valid.

Recipients of personal data

• Disclosure: YES

• Recipients: partner companies, consultants and service providers of the Data Controller

• Intra-EU transfer: YES

• Transfer outside the EU: YES, in compliance with Articles 44 et seq. GDPR

Personal data may be communicated to companies connected with or controlled by the Data Controller, as well as to consultants and service providers acting on behalf of the Data Controller for the performance of activities connected with the purposes described in this Privacy Policy.

For the management of e-mail communications, newsletters, marketing activities and, where authorised by the Data Subject, measurement of openings and interactions, the Data Controller uses Klaviyo, Inc., which processes personal data as a Data Processor.

Personal data may be transferred to the United States in compliance with Articles 44 et seq. GDPR, on the basis of the EU-U.S. Data Privacy Framework and, where that mechanism is not applicable, through appropriate safeguards provided for under applicable law, including the Standard Contractual Clauses approved by the European Commission.

Retention period

• Until consent is withdrawn, unless different retention periods apply to specific processing purposes.

Personal data processed for newsletter and marketing purposes will be retained until the relevant consent is withdrawn, without prejudice to the period strictly necessary to record such withdrawal and comply with legal obligations.

Data collected through tracking technologies contained in e-mail communications will be retained for the period necessary for the purposes for which they were collected and, in any case, until withdrawal of the relevant consent, in accordance with the retention periods applied by the Data Controller and its service providers.

Rights of the Data Subject

The Data Subject has the rights provided for under Articles 15 to 22 GDPR, including:

• access

• rectification

• erasure

• restriction

• data portability

• objection

These rights may be exercised by contacting the Data Controller at info@lazzarionline.com.

The Data Controller will respond as soon as possible and in any event within one month of receipt of the request.

Right to withdraw consent

• through the unsubscribe link or preference centre included in the communications received

• by e-mail at info@lazzarionline.com

• at one of our stores

Consent to receive marketing communications and, separately, consent to the use of tracking technologies may be withdrawn at any time, without affecting the lawfulness of processing carried out before such withdrawal.

Consent may be withdrawn by:

• using the unsubscribe link or preference centre included in the communications received;

• using any available option that allows tracking to be disabled while maintaining subscription to e-mail communications;

• sending an e-mail to the Data Controller at info@lazzarionline.com;

• expressly requesting withdrawal at one of the Data Controller's stores.

Complaints

The Data Subject has the right to lodge a complaint with the competent supervisory authority if they believe that their personal data is being processed in breach of applicable data protection law.

Profiling

Personal data may be subject to profiling where the conditions laid down by applicable law are met and, where required, specific consent has been obtained.

Profiling allows the Data Controller to evaluate certain aspects relating to the Data Subject's preferences, interests and tastes in relation to the products sold and the activities carried out by the Data Controller, in order to provide communications and services that are more relevant to the Data Subject's needs.