Privacy Policy

Purpose: allow web browsing; carry out aggregate statistical analyzes aimed at measuring the correct functioning of this website and, in the case of computer crimes, ascertaining any liability.

Data processed: IP addresses, domain names, URIs. These data are acquired by the computer systems responsible for the operation of this website.

• provision of services aimed at allowing users to browse this website;
• legitimate interest consisting in guaranteeing the correct functioning of the IT systems and in proceeding with the investigation of possible crimes (possibly also on the basis of the existence of a legal obligation).

retention period: 30 days following the date of collection, except for legal provisions or provisions of Public Authorities which impose a different retention time in relation to investigations connected to any computer crimes.

Purpose: processing of purchase orders placed online and carrying out the related activities (sending of the goods, invoicing, management of payments, tracking of the shipment, delivery of the goods, possible activation of the return and refund process of the order, management of the return, etc.).

Data processed: contact details (name, surname, e-mail address, telephone number) and shipping address. In the event of a return, we will also ask you to provide us with your IBAN code, which is necessary to refund the price of the goods returned by you. de Carlo's will not process the data relating to the payment method indicated by you (e.g. payment card number and security code), which will instead be collected exclusively by the manager of the payment service chosen by you.

Legal basis: execution of the sales contract.

Retention period: time necessary to fulfill contractual and regulatory obligations regarding the sale of products (e.g. tax regulations).

Purpose: in order to improve the customer service, we propose that you fill out a questionnaire in which you can indicate your satisfaction with the assistance received or share your further observations.

Data processed: ticket number that was assigned to your request for assistance, data provided when completing the questionnaire, in the event that the user wishes to be contacted again, the contact data will also be processed

Legal basis: the specific consent of the user expressed by completing each questionnaire.

Shelf life: up to 1 year after collection.

Purpose: sending commercial communications via the traditional paper mail service, e-mail, SMS, landline and mobile phone, carrying out market research and measuring your level of satisfaction regarding products relating to the de Carlo's brand.

Data processed: contact data (e.g. name, surname, e-mail address, telephone number).

Legal basis: your consent which you can revoke at any time by writing to privacy@de-carlis.com or by accessing your reserved area.

Retention period: until your consent is revoked.

Purpose: verify the correspondence between the purchasing party and the holder of the selected payment instrument.

Data processed: your name, surname, details of e-commerce orders and information on the type of payment instrument used to make the purchase.

Legal basis: legitimate interest in preventing and combating fraud.

Retention period: two years following data collection.

Purpose: creation of a reserved area ("account") that will allow you to save some content (e.g. the "wishlist" or list of your favorite products, purchase history, etc.).

Data processed: personal and contact data indicated in the online form relating to registration in the reserved area. The data essential for the use of our services are marked with an asterisk: without providing this information we will not be able to make the service you requested available to you.

Legal basis: execution of the website registration contract.

Retention period: in the event of non-use for over 3 years, the accounts created and the data relating to them will be deleted.

Purpose: to make the use of your reserved area ("account") easier by allowing you to save your access credentials and remain connected to your account beyond the end of the browsing session.

Data processed: your access credentials.

Legal basis: your consent expressed through the acceptance of a cookie (see also Cookie Policy).

Retention period: the cookie that allows you to save your login credentials will remain active for 12 months. At any time, you can deactivate cookies by accessing the "Cookie Settings" section available on the Cookie Policy.

Purpose: creation of statistical reports and behavioral models in order to examine - in aggregate form - the economic effectiveness of the commercial initiatives (e.g. launch of a new product) of de Carlo's S.p.A. and to direct future commercial and promotional initiatives.

Data processed: information relating to your purchases, country of origin, age, gender, information obtained by examining your interaction with us, through e-mail, our website and through the Apps that may be developed by us or by third parties (for further information, please consult the relevant privacy policies).

Legal basis: legitimate interest of de Carlo's S.p.A. to analyze - in a pseudonymized form (therefore without information directly attributable to individual customers) - customer data to obtain strategic information relating to customer purchasing behavior and the ways in which customers interact with companies through the various communication channels and the effectiveness of commercial and promotional initiatives, in order to be able to compete with the main operators in the sector.

Retention period: the data relating to your purchases will be stored - in pseudonymized form - for a period of five years. The other personal data will be stored - in pseudonymized form - for a period of two years.

Purpose: if the product you want is not available, you can order it in our stores and receive it at home or in our stores. We will therefore collect your personal data for the processing of your purchase order and for carrying out the related activities (sending the goods, invoicing, payment management, shipment tracking, delivery of the goods, possible activation of the return and refund process of the order, return management, etc.).

Data processed: personal and contact data (name, surname, shipping address, email address, telephone number), information relating to the product purchased (e.g. size). If you wish to return the products purchased, to proceed with a refund of the price paid, we will ask you to communicate your IBAN code.

Legal basis: execution of the sales contract.

Retention period: time necessary to fulfill contractual and regulatory obligations regarding the sale of products (e.g. tax regulations).

Data controller: de Carlo's S.p.A. To exercise your rights in relation to this specific purpose you can contact us by writing to privacy@de-carlis.com

Purpose: to provide a product customization service.

Data processed: information (e.g. size, color, model) relating to purchases made by you in the previous 12 months.

Legal basis: legitimate interest in providing the best customer service in its stores, in line with their needs.

Retention period: 12 months starting from the date of collection.

Purpose: sending by e-mail the receipt relating to a purchase made at a "de Carli's" point of sale.

Data processed: e-mail address

Legal basis:

• fulfillment of regulatory obligations in tax matters;
• fulfillment of contractual obligations.

Purpose: sending a notice to the e-mail address indicated by you regarding the new availability of a product (so-called back in stock)

Data processed: e-mail address

Legal basis: execution of pre-contractual measures adopted on the basis of your request

Retention period: your e-mail address will be deleted immediately after informing you of the new availability of the product you requested and, in any case, no later than one month from the request.

Purpose: in our stores there is a video surveillance system to protect the safety of our stores, staff and customers who access them. The purpose of the processing is therefore that of protection against concrete dangerous situations such as fires, thefts, robberies, acts of vandalism and illicit access. The images collected may also be used for the purposes of defence, assessment and exercise of one's claims and rights.

Data processed: your image

Legal basis: legitimate interest of the owner in the protection of its corporate assets and the safety of its employees and customers.

Retention period: Images will be retained for a period of 72 hours. In the event of a request by the judicial authority or the judicial police or, in any case, in the case of use of the images in a judicial proceeding, the retention period may be extended until the proceedings themselves are concluded.

The Data Controller will process the personal data of users/customers using manual and IT tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data themselves. The spontaneously provided data is collected with electronic tools directly by the Data Controller or by means of subjects appointed as "Authorized for processing" or through third parties expressly appointed as Data Processors, also through Customer Relationship Management (CRM) IT systems. The CRM is used by the Owner both to improve the management of customer data from an administrative and IT point of view, and to offer higher quality services and, if you give your consent, for both direct and profiled marketing purposes.

On our site you may also find social buttons/widgets, i.e. those particular "buttons" depicting the icons of social networks (for example, Facebook and Instagram) and interactive social walls (which present content from social networks). These "buttons" allow users who are browsing our site to interact directly with the social network with one click, which acquires data relating to your visit. In some areas of the site the so-called social login, which allows you to access your reserved area via your social network account. When you log in to the social network, you accept the terms, conditions of use and privacy policy of the social network itself.

The personal data collected may be transferred outside the European Union. In this case, the transfer will take place in compliance with the provisions of EU Regulation 2016/679 ("GDPR") (in particular, the data will be transferred only after signing the Standard Contractual Clauses approved by the EU Commission with decision no. 2021/914/EU or towards countries capable of guaranteeing an adequate level of protection of personal data and therefore recipients of an Adequacy Decision adopted by the EU Commission).