PRIVACY AND COOKIE POLICY
LA BOTTEGA DEL CASHMERE SRL informs you, pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the ‘EU Regulation’), that it is necessary to process personal data collected automatically or provided during your browsing or use of the website. http://www.bramanicashmere.com (il “Sito Web”).
1. DATA CONTROLLER
The data controller is LA BOTTEGA DEL CASHMERE SRL, represented by its legal representative, with registered office at Via Aldo Moro 3/A – Biella, Italy (hereinafter, “BRAMANI” or the “Data Controller”).
2. TYPES OF DATA PROCESSED
In order to enable the use of the Website and its services (creation of accounts, online purchases, requests for information), the Data Controller needs to process personal data such as: name, surname, e-mail address, telephone number and other information voluntarily provided by the user through forms or messages.
Browsing data
The computer systems and software procedures of the Website automatically acquire certain personal data during their normal operation. This category includes: the IP addresses or domain names of the devices used by users, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters relating to the user's operating system and IT environment. This data is necessary for the proper functioning of the Website and is processed exclusively to obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.) and to check its proper functioning. Browsing data does not persist for more than seven days and is deleted immediately after aggregation, except in the event of requests from the judicial authorities.
3. PURPOSES AND LEGAL BASIS OF PROCESSING
Personal data collected are used exclusively for:
A. Use of the Website and Services
To allow navigation, registration, online purchases, and access to a personal account.
Legal basis: (i) execution of a contract of which you are a party; (ii) compliance with a legal obligation applicable to the Data Controller.
B. Promotional communications and direct marketing
Sending information about Bramani activities and promotions, advertising material, direct marketing communications, newsletters, discounts, and loyalty initiatives via traditional or automated methods (e.g., email).
Legal basis: your explicit consent.
C. Personalized offers and benefits (profiling)
Sending offers, discounts, and other benefits based on your preferences and purchasing behavior, including loyalty programs that involve recording and analyzing your purchase data.
Legal basis: your explicit consent.
Data may be stored electronically and/or on paper.
4. DATA RETENTION
The Data Controller will retain personal data only for the time necessary to achieve the purposes for which they were collected:
- Browsing data: maximum 7 days
- Marketing purposes: deleted or anonymized within 24 months from collection
- Profiling purposes: deleted or anonymized within 12 months from collection
Data may be retained beyond these periods to comply with legal obligations or to establish, exercise, or defend a right in judicial proceedings.
5. DATA RECIPIENTS
Data will not be disclosed but may be accessed by:
- Authorities authorized under EU or national law
- Service providers and partners acting as independent Data Controllers or Data Processors (e.g., couriers, marketing and advertising agencies, IT consultants, law firms, market research companies, personalization and optimization service providers, call centers, commercial partners)
Employees and collaborators of the Data Controller, duly appointed and authorized, may also process the data. All data communication is carried out in compliance with technical and organizational measures ensuring an adequate level of security.
6. TRANSFER OF DATA OUTSIDE THE EU
The Data Controller does not transfer your personal data outside the European Union. All processing takes place within the EU.
7. AUTOMATED DECISION-MAKING
With your explicit consent, your data may be used for profiling and automated decision-making aimed at sending personalized offers, discounts, and promotions. The Data Controller adopts all appropriate measures to safeguard your rights, freedoms, and legitimate interests pursuant to Article 22(3) of the GDPR. Refusal of consent does not prevent the use of the Website or completion of purchases.
8. NATURE OF DATA PROVISION
- Purpose A (Website use and online purchases): providing the data is mandatory. Refusal will make it impossible to use the services or complete purchases.
- Purpose B and C (marketing and profiling): providing the data is optional; refusal will prevent receiving newsletters, offers, and personalized communications.
9. RIGHTS OF THE DATA SUBJECT
Under the GDPR, you have the right to:
- withdraw consent at any time
- access your personal data (Art. 15)
- rectify or supplement data (Art. 16)
- request deletion of data (Art. 17)
- request restriction of processing (Art. 18)
- receive data in a structured, commonly used, and machine-readable format (Art. 20)
- object at any time to the processing of personal data, including profiling (Art. 21)
not be subject to decisions based solely on automated processing, including profiling (Art. 22)
- lodge a complaint with a supervisory authority or take legal action (Art. 77)
To exercise your rights, you may contact the Data Controller at Via Aldo Moro 3/A – Biella, Italy.
