Privacy Policy
-
Privacy Policy
Last Update: October 2024
INFORMATION ON THE PROCESSING OF PERSONAL DATA
- Subjects of the agreement:
Pursuant to art. 13 of EU Regulation no. 2016/679 “General data protection regulation” (hereinafter “GDPR”)
- Exelite S.p.A. (formerly Liu Jo S.p.A) with registered office in Viale J.A. Fleming 17, 41012, Carpi (MO), Italy privacyconsumer@liujo.it (hereinafter “LIU JO”)
and
- Digital Boite s.r.l. with registered office in Via Cusani 5, 20122, Milan, Italy, dpo@digitalboite.com (hereinafter “DB”)
(hereinafter, jointly, the "Data Controllers") provide you with the following information on the collection, use, disclosure and processing of your personal data carried out through the website www.liujo.com (hereinafter "Website"), the LIU JO mobile application (hereinafter "App") or any point of sale belonging to the LIU JO single-brand store network.
In particular:
- LIU JO is the owner of the Website and of the App and is the independent data controller of the personal data processed for marketing and profiling purposes;
- DB is the independent data controller of the personal data processed for the purposes of sales, invoicing, payment and delivery of products purchased through the Website and/or the App;
- LIU JO and DB are joint controllers of the personal data processed for the purposes of:
- registering on the Website and/or the App;
- managing customer and post-sales services;
- managing multi-channel services.
The essential content of the joint data controller agreement in place between LIU JO and DB is shown in the following table. Any further information in relation to the content of the aforementioned joint controller agreement may be requested by writing to LIU JO or DB at the addresses above or by contacting the DPOs by writing to the addresses indicated in the following paragraph.
Parties involved
Purpose
LIU JO
DB
Types of data
Customer
Registration of users on the website or App and use of services reserved for registered users (e.g.: wish list, order management, etc.)
Management of services reserved for registered users (e.g.: wish list, order management, etc.)
Management of services reserved for registered users (e.g.: wish list, order management, etc.).
Management of the e-commerce platform and of the other technological tools
Common personal data (e.g. name, surname, email, password, gender, date of birth, browsing data)
Fraud prevention;
Defence of rights in court
Customer
Management of customer services and after-sales services
Management of requests relating to:
Product information;
In-store purchases;
Anti-counterfeiting.
Management of requests relating to:
Size guide
Registration on the website;
Payments;
Shipments;
Returns and Refunds;
Technical assistance;
Management of the e-commerce platform and of the other technological tools.
Common personal data (e.g. name, surname, email)
Exercise of the rights of the data subjects;
Fraud prevention;
Defence of rights in court.
Customer
Management of Multi-channel services
Management of requests relating to the use of the multi-channel services offered, which require a direct involvement of the stores.
Management of requests relating to the use of multi-channel services offered, such as the Click&Collect and Reserve in Store services.
Common personal data (e.g. name, surname, email)
For more information on the personal data processed in relation to browsing the Website and/or the App, please refer to paragraph I below.
For more information on the personal data processed through the use of cookies and other similar tracking technologies, please consult our Cookie Policy.[P4I1]
- Date protection officer (DPO)
LIU JO and DB have respectively appointed a data protection office/DPO:
- The Data Protection Officer (DPO) for LIU JO is available at the email address dpo@liujo.it;
- The Data Protection Officer (DPO) for DB is available at the email address dpo@digitalboite.com.
Depending on the purposes pursued, we will process the following personal data, by way of example and not limited to:
Personal data: name, surname, date of birth, sex
Contact data: telephone number, email address.
Authentication data: email address, password
Shipping data: shipping address, telephone number, email address.
Billing and tax free information:: billing address, name and surname, company name, tax ID code, VAT number, nationality, passport number,
Information relating to purchases made: items, size and colour, price, data of purchase.
Data relating to the customer profile and preferences: data on behaviour and purchases.
Browsing data: data collected when you visit and consult the Website or App including through cookies or other tracking technologies (For more information on the processing of your data through these technologies, please refer to the Cookie Policy.
Data related to geographical position (store locator service): IP address
Any additional data communicated to use specific Services offered by LIU JO.
- D. Purpose, legal basis of processing and data retention times
Purpose
Legal basis
Period of retention
Provision of sales Services and any additional service requested by Customers in store
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR
The Data relating to purchases will be retained for the time necessary for carrying out the contract relating to the Services offered to you, and in any case for no longer than 10 years from the termination of the contract, unless other retention times have been defined
Management of After-Sales Assistance and Support services to customers in store,such as the management of administrative, tax-related and accounting obligations imposed by law, support services on payments, shipments, returns and refunds, as well as additional services offered such as the subscription, upon your request, to the LIU JO Newsletter
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR
The Data processed in order to provide a service requested by you will be retained for the time necessary to perform the service or until you ask to revoke the subscription to the service. The Data processed in order to manage your requests will be retained until the request is satisfied and for a further period of 6 months. The Data processed to comply with legal obligations will be retained according to the timeframes established by the applicable legislation.
Fulfilment of a legal obligation which the Data Controller is subject to, pursuant to art. 6.1 letter c) GDPR.
Operational management of navigation and security of the Website or App
Legitimate interest of the data controller pursuant to art. 6.1. letter f) GDPR
7 days from the date of the visit to and of the consultation of the Website or App. As regards data relating to cookies, please refer to the specific cookie policy
Performance of the sales contract and online after-sales activities, such as management of administrative, tax-related and accounting obligations imposed by law, as well as of support services on payments, shipments, returns and refunds
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR. Requirement to fulfil obligations under national or supranational legislation which data controllers are subject to pursuant to art. 6.1 letter c) GDPR, such as fulfilling tax and accounting obligations
The data will be retained for the time necessary for carrying out the contract, or for the provision of legal or conventional guarantees and following termination of the contract for no more than 10 years, unless otherwise required by applicable law
Registration of users on the Website or App and use of services reserved for registered users. Such registration may take place by filling out a data collection form on the Website and App.
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR
Personal data collected for the purpose of registration on the Website or App will be retained until you request to revoke your registration
Use of online customer services,including technical support to recover the access credentials to your personal account and sending Newsletters following your request
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR
The data processed in order to provide a service requested by the user will be retained for the time necessary to perform the service or until you request to revoke the subscription to the service. The data processed in order to respond to customer requests will be retained until the request is satisfied and for a further period of 6 months
Use of multi-channel services offered to customers, such as, by way of example and not limited to, the Click&Collect or the Reserve in Store services
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter b) GDPR
The data will be retained for the time necessary to perform the service or until you request to revoke the subscription to the service
Use of the Store locator service, which consists in identifying the nearest store based on your current location
Free, specific, informed, unequivocal and revocable consent by the data subject in accordance with art. 6.1 lett. f)
The data will be retained until you request to withdraw your consent
Prevention of abuse and fraud
Legitimate interest of the data controller , pursuant to art. 6.1. letter f) GDPR
The data collected through the Website or the App will be retained for no more than 180 days
Ascertainment, exercise or defence of a right in court and out-of-court debt collection s
Legitimate interest of the data controller pursuant to art. 6.1. letter f) GDPR
The personal data will be retained for the entire duration of the debt collection action and in the event of legal disputes, for the entire duration of the same, until the allowed time limits of the appeals have been exhausted
Sending “Soft Spam” communications via email, i.e. commercial communications regarding products and services similar to those you have purchased
Legitimate interest of the data controller in accordance with art. 6.1 lett. a) of the GDPR
The personal data will be retained until the request to stop sending such emails is received, which can be opted for through the link available at the bottom of each of these communications
Marketing activities, such as sending commercial communications concerning products and services (news, new arrivals, exclusive opportunities, offers and promotions) and carrying out market research and surveys for satisfaction feedback with the aim of improving services and the relationship with users
Free, specific, informed, unequivocal and revocable consent by the data subject pursuant to art. 6.1 letter a) GDPR
Personal data collected for marketing purposes will be retained until you request to revoke your registration on the Website or App or until you revoke consent to the processing of personal data. Personal data relating to the details of purchases processed for marketing purposes will be retained for 24 months from their registration. Upon expiry of the retention periods indicated above, the data will be automatically deleted or made anonymous in a permanent and irreversible manner.
Profiling, of the browsing and purchasing habits of registered users by means of the data provided by the user, data resulting from browsing the Website or App and data relating to the details of purchases made on the Website or App for the purpose of sending personalised commercial communications according to your interests
Free, specific, informed, unequivocal and revocable consent by the data subject pursuant to art. 6.1 letter a) GDPR
The personal data collected for profiling purposes will be retained until you request to revoke your registration on the Website or App or until you revoke your consent to the processing of personal data. The personal data relating to browsing as well as the data relating to the details of purchases processed for profiling purposes will be retained for 24 months Upon expiry of the retention periods indicated above, the data will be automatically deleted or made anonymous in a permanent and irreversible manner.
Personnel selection, such as the storage and management of applications and documents (such as CVs) sent through the “Work with us” section of the Website
Performance of a contract to which the data subject is a party or of pre-contractual measures at the request of the same, pursuant to art. 6.1 letter a) GDPR
The personal data collected will be retained for the period strictly necessary for selecting candidates for the individual positions and, in any case, no longer than 12 months from their submission. Before the end of the established period, the Data Controllers may contact you to verify your interest in continuing to be taken into consideration for any open positions. In the event of a negative response or of no response, your personal data will be deleted. In the event of an affirmative response, the Data Controllers will retain your data for a further 12 months.
E. Provision of data
F.Recipients of the personal data
The data will be processed by:
a. employees and collaborators of the data controllers (including the personnel of physical stores) authorised to collect, use, disclose or process your personal data;
b employees and collaborators of DB, as data processor, with regard to managing the marketing and profiling activities on behalf of LIU JO;
c. third parties established in the European Union, as data processors, used by the data controllers, in particular for services to acquire and enter personal data, shipping, mailing of promotional material, market research, customer satisfaction surveys, management and maintenance of IT systems;
Your data may be transmitted to third parties, independent data controllers, in particular self-employed professionals or legal or tax consultancy and assistance companies and companies managing payments made by debit or credit card. Your Data may also be transmitted to independent data controllers such as supervisory and control authorities or other public or private bodies entitled to request the data.The complete list of the recipients of personal data can be requested in writing at the addresses indicated above in paragraph A.
The complete list of the recipients of personal data can be requested in writing at the addresses indicated above in paragraph A.
G. Transfer of data outside of the European Union
Your data will not be transferred outside of the European Union.
H. Rights of the Data Subjects
By contacting the email addresses indicated above in paragraph A, you may request from the data controllers access to the data concerning you, their deletion, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as the right to object to the processing, for reasons related to your specific situation, in the event of the legitimate interest of the data controller.
Should processing be based on consent or on the contract and be carried out with automated tools, you may also exercise the right to receive your data in a structured, commonly used and machine-readable format, as well as, if technically feasible, request to transmit these to another data controller without hindrance.
You have the right to withdraw the consent given for marketing and/or profiling purposes at any time, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing.
If you prefer, you can ask to be contacted exclusively through traditional methods for said purposes and you can express your objection only to receiving communications through automated methods.
You also have the right to lodge a complaint with the competent supervisory authority in the Member State where you habitually reside or work or in the State where the alleged infringement has occurred.
Finally, you can modify/update your personal data and the consents to the processing of personal data at any time by accessing your personal account or by sending an email to dpo@liujo.it or alternatively, to privacyconsumer@liujo.it.