Privacy Policy
-
Privacy Policy
Last Update: December 2024
INFORMATION ON THE PROCESSING OF PERSONAL DATA
- Subjects of the agreement:
Pursuant to art. 13 of EU Regulation no. 2016/679 “General data protection regulation” (hereinafter “GDPR”)
- Exelite S.p.A. (formerly Liu Jo S.p.A) with registered office in Viale J.A. Fleming 17, 41012, Carpi (MO), Italy privacyconsumer@liujo.it (hereinafter “LIU JO”)
and
- Digital Boite s.r.l. with registered office in Via Cusani 5, 20122, Milan, Italy, dpo@digitalboite.com (hereinafter “DB”)
(hereinafter, collectively, the "Controllers") provide you with the following information on the collection, usage, disclosure and processing of your personal data carried out through the website www.liujo.com (hereinafter "Website"), the LIU JO application fo mobile devices (hereinafter "App") or any other point of sale forming part of the network of LIU JO stores.
In detail:
- LIU JO is the owner of the Website and of the App and is the autonomous controller of the personal data processed for the purpose of marketing and profiling;
- DB is an autonomous controller of personal data processed for the purposes of sales, invoicing, payments and shipments of products purchased via the Website or the App;
- LIU JO and DB are joint controllers of the personal data processed for the purposes of:
- registration on the site and/or the app;
- operation of customer service and post-purchase services;
- operation of multi-channel services.
The main content of the joint agreement between LIU JO and DB is stated in the following table. Any further information relating to the content of the below joint Controller agreement may be requested by writing to LIU JO or DB at the addresses stated above, or by contacting the DPO by writing to the email indicated in the following section.
Parties involved
Purpose
LIU JO
DB
Types of data
Customer
Registration of users on the website or App and the provision of services for registered users (e.g.: wish list, order management, etc.)
Operation of the services reserved for registered customers (e.g.: wish list, order management, etc.)
Operation of the services reserved for registered customers (e.g.: wish list, order management, etc.).
Operation of the e-commerce platform and other technology
Common personal data (eg. name, surname, email, password, sex, date of birth, browsing data)
Fraud prevention;
Defence of rights in court
Customer
Operation of customer service and post-purchase services
Processing of queries relating to:
Product information;
In-store purchases;
Anti-counterfeiting.
Processing of queries relating to:
Size guide
Registration on the website;
Payments;
Shipping;
Returns and Refunds;
Technical assistance;
Management of the e-commerce platform and of the other technological tools.
Common personal data (e.g. name, surname, email)
Exercising the rights of the parties;
Fraud prevention;
Defence of rights in court.
Customer
Operation of multi-channel services
Management of requests relating to the use of multichannel services offered, which require the direct involvement of the stores
Management of requests relating to the use of multichannel services offered, such as the Click&Collect and Reserve in Store services
Common personal data (e.g. name, surname, email)
For further information on the personal data processed while using the Website and/or App, see paragraph I below.
For further information on the personal data processed by the use of cookies and other similar tracking technologies, see our Cookie Policy.[P4I1]
- Data protection officer (DPO)
LIU JO and DB have both nominated a data protection office/DPO:
- • The data protection officer (DPO) for LIU JO can be contacted at the following email addressdpo@liujo.it;
- • The data protection officer (DPO) for DB can be contacted at the following email address dpo@digitalboite.com.
According to the intended purposes, we will process the following personal data, for example and not limited to:
Personal data: name, surname, date of birth, sex
Contact data: telephone number, email address.
Authentication data: email address, password
Shipping data: delivery address, telephone number, email address
Billing and tax free information: billing address, name and surname, company name, fiscal code, VAT number, nationality, passport number;
Information on purchases made: items, size and colour, price, date of purchase;
Data relating to the customer's profile and preferences: data on behaviour and purchases;
Browsing data: data collected during the visit and usage of the Website or the App, including via cookies or other tracking technologies (For further information on the processing of your data via such technologies, please see the Cookie Policy.
Data related to geographical position (store locator service): IP address
Possible further data transmitted in order to make use of specific services offered by LIU JO.
- Purpose, legal basis for the processing and retention periods of the data
Purpose
Legal basis
Period of retention
Provision of retail services and of any further service requested by the customer in store
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party , pursuant to art. 6.1 letter b) GDPR
The data relating to purchases will be stored for the duration necessary for the execution of the contract relating to the services offered to you, and therefore not longer than 10 years from the completion of the contract, save for other data retention periods.
Management of After-Sales Assistance and Support services to customers in store, such as carrying out the administrative, fiscal and accounting activities required by law, as well as support services relating to payment, shipping, returns and refunds, as well as other services offered, such as registration for the LIU JO newsletter at your request
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, pursuant to art. 6.1 letter b) GDPR
Data processed for the purpose of providing a service requested by you will be retained for the period necessary to carry out the service, or until you request the revocation of your registration for the service. The data processed in order to respond to your requests will be retained until the matter is resolved and for a further period of 6 months. Data processed in order to comply with legal obligations will be stored according to the period provided for in the applicable regulation.
Compliance with a legal obligation which the data controller is subject to, pursuant to art. 6.1 letter c) GDPR.
Operational management of browsing and security of the Website and the App
Legitimate interest of the Controller for the data processing, pursuant to art. 6.1. letter f) GDPR
7 days from the date on which the site or app was visited For data relating to cookies refer to the specific cookie policy
Execution of the contract of sale and online post-sales activities, such as carrying out the administrative, fiscal and accounting activities required by law, as well as support services relating to payment, shipping, returns and refunds
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, pursuant to art. 6.1 letter b) GDPR. The need to fulfil the obligations provided for in the national or international regulation which the data controllers are subject to, pursuant to art. 6.1 letter c) GDPR, for example, the fulfilment of fiscal and accounting obligations
The data will be stored for the duration necessary for the execution of the contract, and in accordance with the legal or conventional requirements, and following the completion of the contract, not longer than 10 years save for other data retention periods provided for in the applicable regulations
Registration on the website or the app and the provision of services for registered users. Such a registration can be made by completing the form for the collection of current data on the Website or on the App.
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, pursuant to art. 6.1 letter b) GDPR
Personal data collected for the purpose of registering on the Website or App will be retained until you decide to withdraw your registration.
Provision of online customer service, including technical support to recover login data for your personal account and the sending of newsletters at your request
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party , pursuant to art. 6.1 letter b) GDPR
Data processed for the purpose of providing a service requested by the user will be retained for the period necessary to carry out the service, or until you request the revocation of your registration for the service. The data processed in order to respond to a customer request will be retained until the matter is resolved and for a further period of 6 months
Use of multi-channel services offered to the customer, for example, but not limited to, the Click&Collect service or Reserve in Store
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, pursuant to art. 6.1 letter b) GDPR
The data will be retained for the period necessary to provide the service, or until you decide to revoke your subscription to the service.
Use of the Store locator service, which involves the determining of the closest store on the bases of your current location
Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. f)
The data will be retained until you decide to revoke your consent
Prevention of crime and fraud
Legitimate interest of the data controller , pursuant to art. 6.1. letter f) GDPR
Data collected via the Website or the App will be retained for not more than 180 days
Inspection, exercise or defence of rights in court and extra-judicial credit recovery
Legitimate interest of the Controller for the data processing, pursuant to art. 6.1. letter f) GDPR
The data will be retained for the full duration of the credit recovery process and in the case of a legal disagreement, for the duration of the same, until the expiry of the period in which complaints may be lodged
Sending of "soft spam" communications via email, namely commercial communications regarding products and services similar to those you have purchased
Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. a) of the GDPR
The personal data will be retained until a request to stop receiving such emails is received, which may be requested via the link available at the bottom of each of these communications
Marketing activities: such as the sending of communications of a commercial nature about products and services (news, new arrivals, exclusives, offers and promotions) and for the carrying out of market research and surveys to record the level of customer satisfaction with the aim of improving our services and customer relations
Free, specific, informed, unambiguous and revocable consent of the party pursuant to art. 6.1 letter a) GDPR
Personal data collected for marketing purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data. Personal data relating to the details of purchases which is processed for marketing purposes will be retained for 24 months from the date of recording. On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous
Profiling activities, using the navigation and shopping habits of registered users using the data provided by the users, data provided by the use of the Website or the App, and from data relating to the details of purchases made on the Website or the App in order to send personalised commercial communications according to the user's interests
Free, specific, informed, unambiguous and revocable consent of the party pursuant to art. 6.1 letter a) GDPR
Personal data collected for profiling purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data. Personal data relating to browsing and details of purchases which are processed for profiling purposes will be retained for 24 months. On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous.
Selection of employees, such as the storage and management of application and documents (such as the CV) which were submitted through the "Work with us" section of the website
Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, pursuant to art. 6.1 letter a) GDPR
The personal data collected will be stored for the period strictly necessary for the selection of candidates for the individual positions, and not longer than 12 months from the time of their communication. Prior to the expiry of the retention period, the Controllers may contact you to verify your continued interest in being considered for any open positions. In case of a negative response or lack of response, your personal data will be deleted. In the case your provide a positive response, the Controllers will retain your data for an additional 12 months.
E. Sharing of data
F.Recipients of the personal data
The data will be processed by:
a. employees and associates of the Controllers of the data (including staff at physical stores) who are authorised to collect, use, share or process your personal data;
b employees and associates of DB, who are responsible for data processing regarding the management of marketing and profiling activities on behalf of LIU JO;
c. third parties located within the European Union, which are responsible for processing and are employed by the data controllers, in particular, for services for the acquisition of and integration of personal data, shipping services, mailing of promotional materials, market research, surveys on customer satisfaction, and the management and maintenance of informatics systems.
Your data may also be transmitted to third parties, autonomous data controllers, in particular freelancers or consulting firms, legal or financial assistance companies, and debit or credit card payment processing services. Your data may also be transmitted to autonomous data controllers whose supervisory authority, or other public or private interests, justifies their request for the data.
The complete list of recipients of personal data can be requested by writing to the addresses indicated above in paragraph A.
G. Transfer of data outside of the European Union
Your personal data may be transmitted outside of the European Economic Area (for example to Albania, for the purpose of customer assistance provided by the call center). LIU JO undertakes to guarantee that this transmission happens in accordance with CHAPTER V of the GDPR. In particular, adequate security measures and appropriate methods of transmission (for example, the standard contractual clauses approved by the European Commission) will be implemented to guarantee a standard of protection equivalent to that which is expected within the EEA.
H. Rights of the Data Subjects
Contacting the email addresses given above in paragraph A, you may request from the data Controllers access to the data relating to you, deletion of the data, correction of errors in the data, additions to incomplete data, and the limitation of processing of the data in the cases provided for in art. 18 of the GDPR. You may also oppose the processing of your data the in Controller's legitimate interest for reasons relating to your particular situation.
Where the processing is based on consent or on the contract and is performed by automated tools, you also have the right to receive your data in a structured, commonly used and machine-readable format, as well as, if technically possible, you may request that this data is transmitted to the other Controller without prejudice.
You have the right to revoke your consent at any moment for the purposes of marketing and/or profiling, as well as to oppose data processing for marketing purposes, including profiling connected to direct marketing.
If you prefer, you can request to be contacted for the purposes mentioned above exclusively in traditional ways, and you may register your opposition only to receiving automated communications.
Furthermore, you have the right to file a complaint with the competent oversight authority in the member state in which you usually reside or work, or in the state in which the alleged violation took place.
You may at any time modify or update your personal data and your consent to the processing of personal data by accessing your personal account or by sending an email to : dpo@liujo.it or alternatively, to privacyconsumer@liujo.it.