L’ESTROSA s.r.l., with registered office in Grumo Nevano (NA), the operating holding company of the L’ESTROSA brand and site manager of www.lestrosa.com (“Website”), the company directly operates the selling of products offered on the Website with shipping in Europe, recognise the importance of maintaining the confidentiality, integrity and security of your personal data (“Personal Data”), and hereby inform you that any Personal Data which you provide to L’ESTROSA through our Website, as well as any Personal Data which you may provide to a L’ESTROSA store, including through its subsidiaries and/or affiliates, will be processed in compliance with current European privacy laws (Regulation (EU) 2016/679 – “GPDR”) and with any specific local regulations applicable from time to time for the processing of data outside the European Union, together with the principles and general rules of conduct contained in the Code of Ethics adopted by L’ESTROSA s.r.l.
1. Type and source of Data
During their normal operation, the computer systems and software procedures used to operate our Website collect certain personal data (log files). The transmission of such data is inherent to the use of internet communication protocols. This information is not collected in order to be associated to specific data subjects. However, due to its nature, this information can allow users to be identified by means of their processing and integration with data held by third parties. Such information includes the IP addresses or domain names of the computers you use to visit our Website, URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical status code of the server reply (successful, error, etc.) and other parameters concerning the user’s operating system and computer environment. This data is used with the sole purpose of obtaining anonymous statistical information on the use of our Website and to guarantee its correct operation.
Personal Data voluntarily provided by the data subject
L’ESTROSA s.r.l. collects and processes the Personal Data that you directly and voluntarily provide through our Website when you place online orders and/or register to our Website and/or subscribe to our newsletter and/or contact our Customer Service. L’ESTROSA s.r.l. also collects and processes the Personal Data that you may provide by filling in our Customer Card at our stores. These data include, for example, your first and last name, postal and e-mail address, phone number and date of birth. Furthermore, when you voluntarily send an e-mail through our Website and/or to the addresses indicated in our Website, we collect your e-mail address so that we can reply to any request, as well as any additional Personal Data contained in your message.
2. Purpose of processing
Your Personal Data may be processed based on the necessity for the provision of the services for the following purposes:
(a) to respond to all your requests and to manage your relationship with L’ESTROSA s.r.l.;
(b) to fulfil your online purchase orders and perform all management activities connected with it (including administrative management of the contract, delivery of goods, payment processing, management of any claims and litigation, and fraud prevention), and to comply with any applicable legal or regulatory obligations.
Furthermore, subject to your prior consent, your Personal Data may be included in the L’ESTROSA customer data base, managed by the holding company L’ESTROSA s.r.l., and processed together with the details of your purchases for the following purposes:
(c) profiling: to perform individual or group studies, surveys, statistical and/or market researches on your preferences with regards to our products, so that we can offer you a personalised service and promote cultural and recreational activities that may interest you;
(d) marketing: to contact you and/or send you (by post, telephone, e-mail and any other form of electronic communication) information and promotions, including commercial information, newsletters, advertising material, catalogues and invitations to events related to the L’ESTROSA’s products and services.
3. Processing Methods
Your Personal Data will be processed by suitable electronic or automated means and computerised tools, or manually and on hard copy, exclusively for the purposes for which they have been collected and guaranteeing the security and confidentiality of any processed information. Your Personal Data will be processed only by L’ESTROSA’s internal staff duly authorised to do so under their respective job duties. Your Personal Data may also be processed by third parties to the extent necessary and/or instrumental for the above purposes. These third parties will act on behalf of L’ESTROSA s.r.l. as data processors (e.g. service providers, carriers, IT technicians or any other suppliers appointed by L’ESTROSA to carry out and/or manage any promotional campaigns for L’ESTROSA’s products and services, etc.).
Please also note that if you consent to the processing of your Personal Data for the purposes referred to under letters (c) and (d) of paragraph 2 above, your data will be automatically visible to, and shared with, all L’ESTROSA stores, and L’ESTROSA s.r.l. will take all appropriate security and confidentially measures required by applicable legislation.
4. Nature of the provision of personal data
The provision of your Personal Data is optional.
However, if you wish to make a purchase order for products offered on our Website, and/or receive information on L’ESTROSA’s products and services, and/or contact our Customer Service and/or use any other services offered by L’ESTROSA, you need to fill in all mandatory fields of the relevant forms.
The processing of your Personal Data for the purposes indicated at letters (c) and (d) of paragraph 2 above is subject to your prior express consent. If you withhold your consent, we may not be able to offer you a personalised service and inform you of any initiatives that may interest you and/or send you any other commercial information on products, initiatives and events of L’ESTROSA.
You may withdraw your consent to the processing of your Personal Data by us at any time, by sending an e-mail at email@example.com, or by using the “unsubscribe” link included in all of our commercial electronic communications, and/or by using any other appropriate procedures which may be made available to you.
5. Transfer and disclosure of data of data
Whenever necessary and/or instrumental to the above purposes, your Personal Data may be processed on behalf of L’ESTROSA by other entities acting as data processor, including:
As L’ESTROSA is part of an international network and uses global services your Personal Data may be transferred abroad in accordance with applicable legislation, including to countries outside the European Union where L’ESTROSA s.r.l. pursues its interests, by adopting all appropriate security measures and safeguards to ensure an appropriate level of data security. Your Personal Data will not be used for third-party advertising purposes or for the promotion of products, services or initiatives by entities other than the L’ESTROSA s.r.l., nor shall they be disclosed to unknown persons under any circumstances.
6. Retention period
Your personal data will be processed and stored for as long as required for the purposes for which they were collected, and in accordance with the storage periods provided for by the applicable laws, or until you revoke your consent to the processing, if applicable. After such period, your Personal Data will be automatically and permanently erased or made anonymous.
7. Data controllers
For the purpose of managing and executing your online purchase orders referred to at letter (b), of the paragraph 2 above the Data Controller is L’ESTROSA s.r.l.. Please contact the Data Controller by sending an e-mail to firstname.lastname@example.org.
For the other purposes of data processing referred to at letters (a), (c) and (d) of the paragraph 2 above the Data Controller is L’ESTROSA s.r.l.. Please contact the Data Controller or Data Protection Officer (“DPO”) by sending an e-mail to email@example.com.
8. Rights of the data subject
Please note that you may exercise the rights under Articles 15 to 21 GDPR, and specifically the right to request information as to whether your Personal Data is being processed and as to the characteristics of the processing, the right to rectification and erasure of your Personal Data, the right to object to the processing and/or the right to have those Personal Data transmitted to another controller.
You also have the right to withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.