Privacy Policy

PRIVACY POLICY

pursuant to EU Regulation no. 679/2016 (“GDPR”) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

PRIVACY POLICY

This information (hereinafter "Information") is provided pursuant to EU Regulation 679/2016 and subsequent national adaptation legislation (hereinafter, collectively "GDPR") and describes how the company identified in the following point 2. collects and processes the Personal Data (the term "Personal Data" means all the categories reported in the following point 3., jointly considered) of users or customers and covers data collection activities - both online and offline - through the various channels, such as websites web in particular www.lisita.it ( “Sites” or “Site” ) the apps, social networks, physical stores, and, more generally, all collection activities in which express reference is made to this Privacy Policy.

Unisal Srl - as identified below - may periodically modify, integrate or update this Information, also in consideration of any changes to the applicable legislation or provisions of the Guarantor for the Protection of Personal Data. Substantial changes and updates to the Policy will be applied and brought to the attention of interested parties as soon as they are adopted by updating the link to the Privacy Policy in the footer of the Site. Unisal Srl invites the user to regularly consult this Policy to find out the latest information. updated version so as to always be informed about how they collect and use Personal Data. In the event of changes that significantly affect the rights of the registered user, Unisal Srl will inform the registered users via e-mail and the communication will be made with reasonable notice.

WHO WE ARE

Unisal Srl. as an independent data controller of personal data (hereinafter the "Data Controller"), in carrying out its activities it pays the utmost attention to the security and confidentiality of personal data.
Unisal Srl deals with:
– manage the site www.lisita.it / (e.g. operation of the Sites, cookies, e-commerce)
– organize activities relating to virtual stores and manage the purchase of products and services from the virtual store.
And furthermore, it deals with:
– manage Lisita brand physical stores

WHAT PERSONAL DATA CONCERNING YOU CAN BE COLLECTED

The Data Controller may independently collect for its own business some categories of personal data concerning you (the term "Personal Data" means all the categories listed below, considered jointly). In particular, Unisal Srl may collect:
– Contact details – name, surname, address, telephone, e-mail address and any other data provided spontaneously by you within the Sites to proceed with online orders and to register.
– Demographic data and interests – data that describes your demographic characteristics or habits, such as date of birth, age or age group, gender, geographical origin (postal code/zip code), favorite products, hobbies and interests and information about family or lifestyle.
– Payment data – information relating to the purchase you made and the related payment (e.g. credit/debit card number, IBAN). Such data will be processed limited to what is necessary in the case of periodic payments, and if you have not objected to the processing by changing your settings from "My account" on the Sites, from the "Payment Methods" section saved for subsequent purchases.
– Use of the website – information relating to how you use the Sites, open or forward our communications, including information collected through cookies (you can find our Cookie Policy , which regulates the details); Data provided by third parties (e.g. postal service companies, couriers, data entry companies) – all Personal Data that Unisal Srl receives from other sources to carry out its services.
– Social Log-In – information relating to your Social account as well as other data provided by you to the Social Network used to log in to the Site, which may be communicated based on the privacy preferences you have set on that Social Network .

Unisal Srl will generally not process Personal Data concerning personal beliefs, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, information relating to health, sexual life or sexual orientation (of hereinafter “Special Categories of Data” ). In the event that it is necessary to process Special Categories of Data, Unisal Srl undertakes to process such data in compliance with applicable legislation. The legal basis of this processing is, as a rule, the fulfillment of a legal obligation, it being understood that Unisal Srl will ask for your explicit consent if there is no concrete legal obligation for the processing of such Data.

HOW WE COLLECT YOUR PERSONAL DATA

The Data Controller may collect and process your Personal Data according to the methods set out below.

Unisal Srl collects your Personal Data:
– if you register on the Sites or if you register via apps, social networks or other websites in the ownership or availability of Unisal Srl;
– if you make online purchases or sign up for loyalty programs or prize events,

– if you sign up for the newsletter relating to the virtual store.
– if you contact Customer Service;
– if you provide your Personal Data in physical stores (e.g. as part of promotional activities, prize events, when participating in courses and events, requesting information).

If you provide Personal Data on behalf of someone else you must always ensure, in advance, that the interested parties have read this Privacy Policy and have given consent where necessary. The Data Controllers ask you to help them keep your Personal Data updated, informing them of any changes.

MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF ANY REFUSAL TO PROVIDE DATA

The Personal Data required for registration on the Sites or identified with an asterisk in the forms relating to the various activities are necessary to allow registration itself, just as the data requested is necessary to allow you to use the purchasing and/or booking functionality and /or online order or for the provision of the specific service requested. Unnecessary Personal Data is not identified with an asterisk in the various forms and may not be returned without any consequences.

FOR WHAT PURPOSES CAN YOUR PERSONAL DATA BE USED

The Data Controller may process your Personal Data for one or more of the purposes listed below and on the basis of the legal basis indicated from time to time. A) Fulfillment of purchase orders formulated through the Sites and activities related to order management (e.g. providing e-commerce services, sales and after-sales customer assistance, communications with the customer on the status of the order, receiving their requests for information relating to the products purchased, payment management, reports, home delivery and/or collection by you at the agreed point of sale, etc.); as well as to guarantee the correct fulfillment of the obligations established by law, including the regulations on prize events in the event of your participation in them;
Your contact details and payment data may be processed by the Data Controller in order to process your purchase order formulated by completing the appropriate form on the Sites.

Prerequisite for processing: execution of a contract of which the interested party is a party and fulfillment of the legal obligations connected to this contract. The provision is mandatory to process your order; otherwise we will not be able to proceed.

B) Registration on the Site, also through the Social Log-In system - to simplify registration operations using the information already provided to your Social Network

Unisal Srl may process the Contact Data to allow you to complete the registration procedure on the Site and allow you to access your Personal Area in order to: (i) download documents relating to the services purchased by you from your Personal Area; (ii) process other requests made through the website. Registration on the Site may also take place, where you voluntarily decide to use it, with the Social Log-In mechanism. In this way you will not have to enter the data necessary for registration (such as contact details), which will instead be communicated by the Social Network through which the Log-In is carried out. It is specified that in this case Unisal Srl may process the Social Log-In data, i.e. not only those relating to your Social account but also any other personal data that could be made visible according to the preferences set by you or based on the privacy policy. privacy of the Social Network itself. We therefore invite you to read the privacy policy of your Social Network, also for further information regarding these preferences.

Prerequisite for processing: fulfillment of contractual obligations, to allow you to register on the Site, it being understood that you are not obliged to use the Social Log-In to complete the registration.

C) Account management in case of registration on the Sites for the use of the related services
The use of the Sites does not require the creation of a personal account; however, to access some pages reserved for registered users, you will have to create one and thus become a registered user.

The Personal Data provided by you may be processed by Unisal Srl for the management of your personal account on the Sites.
Prerequisite for processing: execution of pre-contractual measures requested by the interested party and execution of a contract of which the interested party is a party. The provision is mandatory for the creation and management of the account; otherwise we will not be able to proceed.

Prerequisite for processing: execution of a contract of which the interested party is a party and fulfillment of the legal obligations connected to this contract.
The provision is mandatory to implement the aforementioned loyalty programs; otherwise we will not be able to proceed.

D) Marketing activities
Your contact data may be processed by Unisal Srl for marketing and advertising communication purposes (also personalized, in case of consent given pursuant to point F below), carried out using automated contact methods (email, text messages and other communication tools). mass messaging, etc.) and traditional methods of contact (for example, paper mail, telephone call with operator) or for market research and statistical surveys, where you give us specific consent and within the limits of what is described in the relevant formula.

Your contact data may also be processed by Unisal Srl for the periodic sending of communications aimed at informing you about promotional sales initiatives, including periodic ones (e.g. newsletters aimed at keeping you updated on products and services or initiatives promoted by the owners).

Prerequisite for processing: the consent of the interested party.

Failure to provide consent to marketing activities does not have consequences on contractual relationships. Consent can be revoked at any time by contacting the contacts indicated below in the "Your data protection rights" section. Furthermore, you can at any time indicate the contact method you prefer among those listed above and you can object to receiving promotional communications through all or only some of these contact methods.

E) Sending of Newsletters for the promotion of products and services similar to those of a previous purchase.

Your contact details relating only to email coordinates can be used by Unisal Srl. for promotional purposes relating to products and services similar to those which are the subject of your purchase. Following making a purchase on the Sites, the user will receive the Newsletter relating to similar products or services offered on the Sites.

Condition for processing: legitimate interest of Unisal Srl in maintaining an effective contractual relationship with you.

Your right to object to such processing remains immediately (i) via the appropriate link at the end of each e-mail, (ii) by modifying your preferences from the "My account" section on the Sites, or (iii) to through the contacts indicated below in the section “Your data protection rights”.

F) Profiling Activities
The Data Controller may use Personal Data for profiling purposes including, by way of example, the processing of Personal Data relating to your choices, habits and purchasing preferences, the geographical area of ​​reference, analysis of data relating to any registration on the Sites and their use, goods or services purchased, consumption range, level of expenditure incurred, active services, frequency of use, as well as for the creation of profiles (individual and/or aggregated) for the improvement of services and/or products offered by Unisal Srl., as well as to propose personalized commercial communications that may be of interest to you in case of consent pursuant to the previous point E). The profiling activity can also be carried out using the data collected for the purposes referred to in point D) above .

Prerequisite for processing: the consent of the interested party.

Failure to provide consent to profiling activities does not have consequences on contractual relationships. Consent can be revoked at any time by contacting the contacts indicated below in the "Your data protection rights" section, also in relation to the methods of processing of your data.

G) Defense of rights during judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered
Your Personal Data may be processed by Unisal Srl to defend its rights or take action or even make claims against you or third parties.

Condition for processing: legitimate interest of Unisal Srl in the protection of its rights.

You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The opposition request must be addressed to the following address: info@lisita.it

I) Analysis and improvement of services
Your Personal Data may be processed by the Data Controllers to analyze and improve their services with a view to customer satisfaction by detecting the degree of customer satisfaction in relation to the services and/or products provided (e.g. purchases, provision of courses, events, etc. ) and to collect other useful information in order to adapt its processes to what emerges from the investigation itself.

Condition for processing: legitimate interest of Unisal Srl in maintaining an effective contractual relationship with you.

You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The opposition request must be addressed to the following address: info@lisita.it

HOW WE KEEP YOUR PERSONAL DATA SECURE

Unisal Srl uses appropriate security measures in order to improve the protection, security, integrity and accessibility of your Personal Data. All your Personal Data is stored on our secure servers (or suitably archived paper copies) or on those of our suppliers, and are accessible and usable according to our standards and security policies (or equivalent standards for our suppliers) .

HOW LONG DO WE KEEP YOUR DATA

The Data Controller retains your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose.
Your personal data that is no longer necessary, or for which there is no longer a legal basis for its conservation, will be irreversibly anonymized or securely destroyed.

Below we report the storage times in relation to the different purposes listed above:

to. Processing of purchase orders formulated through the website and activities related to order management: the Personal Data processed for the execution of the purchase order through the Sites will be kept by Unisal Srl. for the time necessary to manage contractual obligations and subsequently for 10 years.
b. Account management in case of registration on the Sites for the use of the related services: the Personal Data processed for the management of accounts on the Sites will be retained by Unisal Srl. for 24 months from the date of your registration on the Sites.
c. Promotion of products similar to the one object of a previous purchase: the Personal Data processed for this purpose may be retained by the Data Controllers for 24 months from the date of your previous purchase (unless you object previously).
d. Marketing activities to provide promotional offers: the Personal Data processed for this purpose may be retained for 24 months from the date on which the Data Controllers obtained your last consent for this purpose (unless you withdraw it earlier).
And. Profiling Activities: the Personal Data processed for this purpose may be kept for 12 months from the date on which the Data Controllers obtained your last consent for this purpose (unless you withdraw it earlier).
f. Defend your rights during the course of judicial, administrative or extrajudicial proceedings, and in the context of disputes arising in relation to the services offered: the Personal Data processed for this purpose will be retained by the Data Controllers for 10 years.
g. Analyze and improve its services: the Personal Data processed for this purpose will be retained by the Data Controllers for 12 months.

CONTACTS

The contact details of the Data Controller are as follows:

Unisal Srl

Via Domitiana 260/266

Mondragone (CE)

VAT number 04184240614

E-mail: info@lisita.it

PEC: unisal@pec.it

YOUR DATA PROTECTION RIGHTS AND YOUR RIGHT TO MAKE COMPLAINTS BEFORE THE SUPERVISORY AUTHORITY

Under certain conditions you have the right to request:
– access to your personal data;
– the copy of the personal data that you have provided to us (so-called portability),
– the rectification of the data in our possession;
– the cancellation of any data for which the Data Controllers no longer have any legal basis for processing;
– the revocation of your consent, in the event that the processing is based on consent;
– the limitation of the way in which the Data Controllers process your personal data, within the limits established by current legislation.

Right to object : You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out by the owners for the pursuit of their legitimate interest. The opposition request must be addressed to the following address: info

The exercise of the above rights is subject to some exceptions aimed at safeguarding the public interest (for example the prevention or identification of crimes) and the interests of the Data Controllers. In the event that you exercise any of the aforementioned rights, it will be the responsibility of the Data Controllers to verify that you are entitled to exercise them and you will be given feedback, as a rule, within one month.

For any complaints or reports on the methods of processing of your data, the Data Controller will make every effort to respond to your concerns. However, if you wish, you can forward your complaints or reports to the authority responsible for data protection, using the relevant contact details: Guarantor for the protection of personal data – E-mail: garante@gpdp.it – Certified mail:protocol@pec.gpdp.it.