INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE REGISTRATION OF A PERSONAL ACCOUNT PURSUANT TO ARTICLES 13 AND 14 OF REG. (EU) 2016/679 ("GDPR")
La Sportiva S.p.A., with its registered office at Via Ischia n. 2, 38030 - Ziano di Fiemme (TN), ITALY, provides the following information required by the GDPR regarding the processing of personal data related to the registration on the website https://www.lasportiva.com/it (the "Website") and the use of related services by users ("User/s") - in particular, in relation to the purchase, through the e-Commerce platform hosted by the Site, of products under the "La Sportiva" brand.
1. Sources and categories of data processed
If you choose to register on the Website by creating a personal account, the data processed will be as follows:
-
your identification and contact data (e.g., name, surname, language and country from which you interact with us, email);
-
connection, geolocation, and/or navigation data (e.g., location data, device identification number).
To create a personal account, the User must register on the Website by filling out the appropriate form, entering their name and surname, email address, date of birth (if desired), and creating a password.
The form also allows the User, if they wish, to subscribe to the newsletter service offered by La Sportiva, by ticking a specific check box. For information regarding this processing, you can refer to the information available at the following link: https://www.lasportiva.com/en/privacy-policy-newsletter
2.Identity and contact details of the data controller
The data controller is La Sportiva S.p.A., tax code and VAT number 01039930225, with its registered office at Via Ischia n. 2, 38030 - Ziano di Fiemme (TN), ITALY, email address gdpr@lasportiva.com ("La Sportiva" or "Controller").
3. Purposes of processing, legal bases, and data retention periods
|
WHY ARE PERSONAL DATA PROCESSED? |
WHAT IS THE CONDITION THAT MAKES THE PROCESSING LAWFUL? |
HOW LONG DO WE RETAIN PERSONAL DATA? |
|
a)A. To allow registration on the Website and the use of related services. b)Personal Data will be processed to enable the User to register on the Site, create their own personal area, and use the connected digital services, including automated communication services, such as sending emails related to order confirmations or abandoned cart reminders (so-called marketing automation). |
c)The performance of a contract to which the User is a party. |
For the entire duration of the contractual relationship with La Sportiva (registration on the Website) and, as the ordinary limitation period, for the 10 years following. The access credentials will be retained until the account is deactivated. In the event of a dispute, data will be retained until the expiration of the terms for the exercise of appeal actions. |
|
B. To establish, exercise, or defend the rights of La Sportiva. |
The legitimate interest of the Controller. |
|
|
C. For general marketing purposes: for example, the sending by the Controller - using automated contact methods (newsletter) - of promotional and commercial communications related to services/products offered by La Sportiva, news and information regarding initiatives and events promoted by the Controller or related to the La Sportiva Group and/or 'La Sportiva' branded products; conducting market studies and statistical analyses. For this, please refer to the dedicated information available on the Site. |
Consent of the data subject as provided for in Article 6(1)(a) of the GDPR. |
The consent expressed by the User will remain valid until it is revoked by the data subject (by clicking on the 'unsubscribe' link in each communication). Personal data processed for general marketing purposes will be retained for a maximum period of 24 months from the date of sending the last newsletter communication. |
|
D. To send - to the email address provided by the User in the context of a purchase - promotional communications regarding products that are the same as or similar to those the customer has already purchased on the Website. |
The so-called "soft spam" referred to in Article 130, paragraph 4 of the Italian Legislative Decree 196/2003 ("Privacy Code"). |
Until the data subject objects (by clicking on the 'unsubscribe' link in each communication). |
After the above retention periods have expired, the data will be destroyed, deleted, or anonymized.
4. Provision of data
The provision of data marked with an asterisk (*) in the form is necessary to proceed with the registration on the Website. Some fields in the form are marked as mandatory, as they are intended for data that we need to be able to allow you to access the Website functionalities. Information on the processing of navigation data and the use of cookies can be found in the Privacy and Cookie Policy available on the Website.
5. Categories of data recipients
Data may be communicated to third parties acting as independent data controllers, such as, for example, public authorities and professional firms, authorized to receive them.
Data may also be processed, on behalf of the Controller, by third parties, designated as data processors pursuant to art. 28 of the GDPR, who perform activities functional to the achievement of the above purposes (e.g., IT and customer care service providers).
Additionally, the data will be processed by La Sportiva employees - belonging to the corporate functions responsible for pursuing the above purposes - who have been expressly authorized to process the data and have received adequate operational instructions.
-
Transfer of data outside the EEA
The data will be transferred outside the EU, in particular to the United States of America, based on the following guarantees:
-
adherence of the relevant provider to the EU-US Data Privacy Framework;
-
signing of standard contractual clauses.
7. Rights of data subjects
All data subjects (i.e., the individuals to whom the data refer) can exercise the rights provided for in articles 15-22 of the GDPR, by writing via email to: gdpr@lasportiva.com. In particular, data subjects can:
-
obtain confirmation from the Controller as to whether or not personal data concerning them are being processed and, if so, request access to the data and the information provided for in art. 15 of the GDPR;
-
obtain the rectification of inaccurate data or the completion of incomplete data pursuant to art. 16 of the GDPR;
-
request the deletion of personal data in the cases provided for in art. 17 of the GDPR;
-
obtain the restriction of processing (i.e., the temporary submission of data to the sole operation of storage), in the cases provided for in art. 18 of the GDPR;
-
object at any time, for reasons related to their particular situation, to the processing of personal data concerning them carried out on the basis of the legitimate interest of the Controller, pursuant to art. 21 of the GDPR;
-
where the processing is based on consent, contract, or for the execution of pre-contractual measures adopted at the request of the data subjects and is carried out by automated means, request to receive the data in a structured, commonly used, and machine-readable format, and, if technically feasible, to transmit them to another controller without hindrance, pursuant to art. 20 of the GDPR ("right to data portability").
As indicated above, data subjects can object at any time to processing for direct marketing purposes (also by clicking on the "unsubscribe" link in each email communication).
In any case, data subjects have the right to lodge a complaint with the supervisory authority competent in the Member State where they usually reside or work or of the State where the alleged violation occurred.
