This policy concerns the processing of users' personal data (hereinafter, "User / Users") processed through the website www.shop.oamc.com (hereinafter, "Website") also in relation to the e-commerce services performed thereon (hereinafter, "Services"). Using the Services, the User will purchase from Drop S.r.l, with registered office in Montegranaro (FM), V.le Sandro Pertini 1, 63812, is appointed as Data Processor (“Processor”).

CONTROLLER OF TREATMENT

Through this document, Onward Luxury Group S.p.A., with registered office in Via Cassia 69, 50023 Impruneta (FI), VAT 06868090488, as controller of the processing of personal data (hereinafter, "Controller"), intends to inform the Users, according to articles 13 et seq. of EU Regulation 679/2016 (hereinafter, the "Regulation"), with specific reference to the processing of personal data carried out through the Website.

1) TYPE OF DATA PROCESSED AND TYPES OF TREATMENT

• Navigation data: the computer systems and software procedures on which is based the Website acquire, during their normal operations, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but due to their nature, through processing and association with data held by third parties, this information allows to identity Users. This category of data includes the IP addresses or domain names of the computers used by Users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the User's IT environment. These data are used only to obtain anonymous statistical information on the use of the Website and to check its correct functioning and are deleted immediately after processing.
• Data provided voluntarily by the User who purchases a product on the Website and / or uses a Service: the finalization of the sale of a product through the Website and / or the use of the Services, involves the processing of Users data, with the sole purpose of offering the Services and fulfilling the related contractual and administrative obligations, including but not limited to, processing the order and payment and the delivery of the purchased product. The data processed are: first name, last name, phone number, phone number, customer ID, e-mail address, street, city, state, country, company name.
• Data provided voluntarily by the User for sending promotional communications relating to the Services: in the event that the Interested person registers himself to the newsletter service or expresses his consent for the receipt of commercial communications by the Controller, the data will be processed for sending such communications by electronic mail or ordinary mail to the addresses provided by the interested party. The data processed are: first name, last name, e-mail address, stree, city, state, country, company name.
• Cookies: for the processing of data via cookies, please read the relevant policy.

2) PURPOSE AND LEGAL BASIS OF THE TREATMENT

Users' collected data will be processed by the Controller:

• WEBSITE FUNCTIONING: to pursue a legitimate interest of the Controller, consisting in guaranteeing the security of the Website and of the information exchanged on it, i.e. the ability of such Website to face, at a given level of security, unforeseen events or acts illegal or malicious that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible. The legal basis for the processing is art. 6, par. 1 letter f) of the Regulations.
• USE THE SERVICES: to use the Services offered through the Website, for example to allow the User to purchase a product, etc. The legal basis for the processing is art. 6, par. 1, lett. b) of the Regulation being the treatment necessary for the execution of the contract of which the interested party is a party;
• SENDING COMMERCIAL COMMUNICATIONS CONTROLLER: if the interested party has expressed his explicit consent to send invitations to training courses, events organized by the Controller or to send promotional communications of the Controller's activity, therein including market research. The legal basis for the processing is art. 6, lett. a) of the Regulation, i.e. the consent of the interested party.

3) DURATION OF THE TREATMENT AND PERIOD OF STORAGE OF THE DATA

For the purposes of the abovementioned art. 2) the personal data will be processed for the period strictly necessary for the pursuit of the aforementioned objectives and also subsequently, for the fulfillment of legal obligations and / or for defensive purposes.

The data provided for commercial communications, opinion surveys and market research will be saved until the request of the interested party to interrupt the activity or for 2 years.

4) METHOD OF TREATMENT

The processing will be carried out both on paper and electronically, with the help of modern computer systems and with manual methods, only by persons expressly appointed for this purpose. The processing will take place with logics and by way of data organization strictly related to the obligations, tasks or purposes mentioned above. The Data Controller uses technical and organizational measures to protect the data in its possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved based on technological development.

In some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Controller.;

5) MANDATORY OR OPTIONAL NATURE OF PROVIDING DATA

The provision of the data referred to in point 1, lett. b) is optional. However, in the event of refusal, the User may not purchase on the Website.

The provision of the data referred to in point 1, lett. c) is optional. The User can withdraw his consent at any time and without giving reasons. The easiest way to do this is to click on the "Unsubscribe" link, which is found in every newsletter or communication received. The User can alternatively send a communication to the Controller at info@oamc.com

6) SCOPE OF COMMUNICATION AND DIFFUSION

The User's personal data will be processed by subjects authorized to carry out these tasks, duly appointed as data processors or processors, equipped with security measures designed to guarantee the confidentiality of the parties to whom the data relate and to avoid the illicit access to third parties or unauthorized personnel. If necessary, the data collected may be communicated, within the limits strictly relevant to the obligations, tasks or purposes referred to in point 2, to public or private subjects (insurers, accounting and certification companies, etc.) or to the Competent authorities for the purpose of prevention, detection or repression of crimes, with compliance with the rules governing the subject. No data will be released.

With specific regard to the e-commerce platform, Drop S.r.l. (based in Via Sandro Pertini 1, 63812 Montegranaro (FM), VAT number 01383870431) is responsible for the processing of personal data of Users for purposes related to sales, delivery, returns, customer care.

The updated list of all data processors is available at the Onward Luxury Group and can be requested at the following e-mail address: info@oamc.com This list can be subsequently integrated and / or updated as needed.

User data, stored on electronic media, is kept and stored on a server owned by Onward Luxury Group located in the European Union.

7) USERS RIGHTS

Users have the right to know their rights, essentially consisting in the right to receive from the other party information regarding the existence of the processing of their personal data, as well as to access to their data, to obtain their correction, integration, updating, deletion or blocking. Furthermore, the User will also have the right to obtain a copy of his / her data, the limitation of the processing and / or, furthermore, to oppose their treatment, in addition to the right to data portability and to propose a complaint to the competent control authorities at the conditions and within the limits indicated in the art. 13 of the Regulation.

The following rights are guaranteed to each interested party in the processing pursuant to arts. 15 and ss. of the Regulations:

• Right to information;
• Right of access for the interested party;
• Right of correction;
• Right to cancellation (right to oblivion);
• Right to limit the treatment,
• Right to data portability.

The User can therefore know which are the personal data held by the Controller, their origin and how they are used, request their updating, rectification or integration as well as, in the cases provided for by current regulations, cancellation, limitation of the treatment or oppose their treatment. Each interested party may, if he wishes, request to receive a copy of the personal data held by the Controller concerning him in a format that can be read by electronic devices and, where technically possible, the Controller may transfer the data directly to a third party indicated by the Interested.

If the User deems that the processing of his personal data has been carried out illegitimately, he may file a complaint with one of the competent control authorities for compliance with the rules on the protection of personal data. In Italy, the complaint can be presented to the Independent Authority for the Protection of Personal Data.

8) EXERCISE OF RIGHTS

To exercise of the aforementioned rights, Users can send a communication to the e-mail address info@oamc.com, indicating in subject "Privacy - exercise of rights".

This Privacy Policy was published on 4th September 2019. Any updates will always be published on this page.