Privacy Policy
-
Privacy Policy
Last Update: July 2022
INFORMATION ON THE PROCESSING OF PERSONAL DATA
- Subjects of the agreement:
In accordance with art. 13 of European Regulation no. 2016/679 “General data protection regulation” (hereinafter “GDPR”)
- Liu Jo S.p.A. based in Viale J.A. Fleming 17, Carpi (MO), Italy privacyconsumer@liujo.it (hereinafter “LIU JO”)
and
- Digital Boite s.r.l. based in Via Cusani 5, 20122 Milan, Italy, dpo@digitalboite.com (hereinafter “DB”)
(hereinafter collectively the "Controllers") provide you with the following information on the collection, usage, sharing and processing of your personal data carried out via the website www.liujo.com (hereinafter "Website"), the LIU JO application for mobile devices (hereinafter "App") or any other point of sale forming part of the network of LIU JO stores.
In detail:
- LIU JO is the owner of the Website and the App and is the autonomous controller of the personal data processed for the purpose of marketing and profiling.
- DB is an autonomous controller of personal data processed for the purposes of sales, invoicing, payments and shipments of products purchased via the Website or the App
- LIU JO and DB are joint controllers of personal data processed for the purposes of:
- registration on the site and/or the app
- operation of customer service and post-purchase services
- operation of multi-channel services
The main content of the joint agreement between LIU JO and DB is stated in the following table. Any further information relating to the content of the below joint Controller agreement may be requested by writing to LIU JO or DB at the addresses stated above, or by contacting the DPO by writing to the email indicated in the following section.
Parties involved
Purpose
LIU JO
DB
Types of data
Customer
Registration of users on the site or on the App and provision of the services reserved for registered customers (eg. wishlist, order management, etc.)
Operation of the services reserved for registered customers (eg. wishlist, order management, etc.)
Operation of the services reserved for registered customers (eg. wishlist, order management, etc.)
Operation of the e-commerce platform and other technology
Common personal data (name, surname, email, password, sex, date of birth, browsing data)
Fraud prevention
Defence of rights in court
Customer
Operation of customer service and post-purchase services
Processing of queries relating to:
Information on products
Purchases in store
Anti-counterfeiting
Processing of queries relating to:
Size guide
Website registration
Payments
Shipments
Returns and Refunds
Technical assistance
Operation of the e-commerce platform and other technology
Common personal data (eg. name, surname, email)
Exercising the rights of the parties
Fraud prevention
Defence of rights in court
Customer
Operation of multi-channel services
Management of requests relating to the use of multichannel services offered, which require the direct involvement of the stores
Management of requests relating to the use of multichannel services offered, such as the Click&Collect and Reserve in Store services.
Common personal data (eg. name, surname, email)
For further information on the personal data processed while using the Website and/or App, see paragraph I below.
For further information on the personal data processed by the use of cookies and other similar tracking technologies, see our Cookie Policy.[P4I1]
- Date protection officer (DPO)
LIU JO and DB have both nominated a data protection office/DPO:
- The data protection officer/DPO for LIU JO can be contacted at the following email address dpo@liujo.it;
- The data protection officer/DPO for DB can be contacted at the following email address dpo@digitalboite.com
According to the intended purposes, we will process the following personal data, for example and not limited to:
Personal data: name, surname, date of birth, sex
Contact data: telephone number, email address.
Authentication data: email address, password
Shipping data: delivery address, telephone number, email address.
Invoicing and tax free data: billing address, name and surname, company name, fiscal code, VAT number, nationality, passport number,
Information on purchases made: items, size and colour, price, data of purchase.
Data relating to the customer's profile and preferences: data on behaviour and purchases.
Browsing data: data collected during the visit and usage of the Website or the App, including via cookies or other tracking technologies (For further information on the processing of your data via such technologies, please see the Cookie Policy.
Data related to geographical position (store locator service): IP address
- Purpose, legal basis for the processing and retention periods of the data
Purpose
Legal basis
Period of retention
Operational management of browsing and security of the Website and the App
Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f)
7 days from the date on which the site or app was visited
For data relating to cookies refer to the specific cookie policy.
Execution of the contract of sale and post-sales activities, such as carrying out the administrative, fiscal and accounting activities required by law, as well as support services relating to payment, shipping, returns and refunds.
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR
The data will be stored for the duration necessary for the execution of the contract, and in accordance with the legal or conventional requirements, and following the completion of the contract, not longer than 10 years save for other data retention periods provided for in the applicable regulations
The need to fulfil the obligations provided for in the national or international regulation which the data controllers are subject to, in accordance with art. 6.1 lett. c) of the GDPR, for example, the fulfilment of fiscal and accounting obligations.
Registration on the website or the app and the provision of services for registered users.
Such a registration can be made by completing the form for the collection of current data on the Website or on the App.
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR
Personal data collected for the purpose of registering on the Website or App will be retained until you decide to withdraw your registration.
Provision of customer service, including technical support to recover login data for your personal account, the sending of newsletters at your request.
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR
Data processed for the purpose of providing a service requested by the user will be retained for the period necessary to carry out the service, or until you request the revocation of your registration for the service.
The data processed in order to respond to a customer request will be retained until the matter is resolved and for a further period of 6 months
Use of multichannel services offered to the customer, for example, but not limited to, the Click&Collect service or Reserve in Store
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR
The data will be retained for the period necessary to provide the service, or until you decide to revoke your subscription to the service.
Use of the store locator service, which involves the determining of the closest store on the bases of your current location
Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR
The data will be retained until you decide to revoke your consent.
Prevention of crime and fraud
Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f)
Data collected via the Website or the App will be retained for not more than 180 days.
Inspection, exercise or defence of rights in court and extra-judicial credit recovery.
Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f)
The data will be retained for the full duration of the credit recovery process and in the case of a legal disagreement, for the duration of the same, until the expiry of the period in which complaints may be lodged.
Sending of "soft spam" communications via email, namely commercial communications regarding products and services similar to those you have purchased
Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f)
The personal data will be retained until a request to stop receiving such emails is received, which may be requested via the link available at the bottom of each of these communications.
Marketing activities: such as the sending of communications of a commercial nature about products and services (news, new arrivals, exclusives, offers and promotions) and for the carrying out of market research and surveys to record the level of customer satisfaction with the aim of improving our services and customer relations
Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR
Personal data collected for marketing purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data.
Personal data relating to the details of purchases which is processed for marketing purposes will be retained for 24 months from the date of recording.
On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous.
Profiling activities using the navigation and shopping habits of registered users using the data provided by the users, data provided by the use of the Website or the App, and from data relating to the details of purchases made on the Website or the App in order to send personalised commercial communications according to the user's interests
Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR
Personal data collected for profiling purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data.
Personal data relating to browsing and details of purchases which are processed for profiling purposes will be retained for 24 months
On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous.
Selection of employees, such as the storage and management of application and documents (such as the CV) which were submitted through the "Work with us" section of the website
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR
The personal data collected will be stored for the period strictly necessary for the selection of candidates for the individual positions, and not longer than 12 months from the time of their communication. Prior to the expiry of the retention period, the Controllers may contact you to verify your continued interest in being considered for any open positions. In case of a negative response or lack of response, your personal data will be deleted. In the case your provide a positive response, the Controllers will retain your data for an additional 12 months.
E. Sharing of data
F.Recipients of the personal data
The data will be processed by:
a. employees and associates of the Controllers of the data who are authorised to collect, use, share or process your personal data;
b employees and associates of DB, who are responsible for data processing regarding the management of marketing and profiling activities on behalf of LIU JO;
c. third parties located within the European Union, which are responsible for processing and are employed by the data controllers, in particular, for services for the acquisition of and integration of personal data, shipping services, mailing of promotional materials, market research, surveys on customer satisfaction, and the management and maintenance of informatics systems;
Your data may also be transmitted to third parties, autonomous data controllers, in particular freelancers or consulting firms, legal or financial assistance companies, and debit or credit card payment processing services.
The complete list of recipients of personal data can be requested by writingto the addresses indicated above in paragraph A.
G. Transfer of data outside of the European Union
Your data will not be transferred outside of the European Union.
H. Rights of the interested parties
Contacting the address given above in paragraph A, you may request from the data Controllers access to the data relating to you, deletion of the data, correction of errors in the data, additions to incomplete data, and the limitation of processing of the data in the cases provided for in art. 18 of the GDPR. You may also oppose the processing of your data the in Controller's legitimate interest for reasons relating to your particular situation.
Where the processing is based on consent or on the contract and is performed by automated tools, you also have the right to receive your data in a structured, commonly used and machine-readable format, as well as, if technically possible, you may request that this data is transmitted to the other Controller without prejudice.
You have the right to revoke your consent at any moment for the purposes of marketing and/or profiling, as well as to oppose data processing for marketing purposes, including profiling connected to direct marketing.
If you prefer, you can request to be contacted for the purposes mentioned above exclusively in traditional ways, and you may register your opposition only to receiving automated communications.
Furthermore, you have the right to file a complaint with the competent oversight authority in the member state in which they usually reside or work, or in the state in which the alleged violation took place.
You may at any time modify or update your personal data and your consent to the processing of personal data by accessing your personal account or by sending an email to dpo@liujo.it or alternatively, to privacyconsumer@liujo.it.I. Processing of data useful for navigation
During their normal operation the ID systems and software procedures used to operate this website or this app acquire some personal data whose transmission is implicit in using Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by their very nature could allow users to be identified through processing and associations with data held by third parties.
Included among the information which may be collected in the IP address, the type of browser or operating system used, addresses in URI form (uniform resource identifier), the domain name and the website address from which the Website was accessed or left for (referring/exit pages), the time in which the server request was carried out, the method used and information on the response received, other information on the user's browsing (see also the section on cookies) and other parameters relevant to the operating system and computer environment of the user.
This same data may also be used to identify and verify responsibility in the case of possible cyber crimes against the Website or the App.