Privacy policy
Privacy & cookies policy - in accordance with Articles 13 and 14 of the General Data Protection Regulation (EU) 679/2016 ("GDPR")
DATA CONTROLLER
The Data Controller is Bigli 6 SRL ("Bigli"), located at Corso Sempione 38, 20154 Milano, VAT number 12299180963, email privacy@eredizucca.com.
SUBJECT
This Privacy Policy & Cookies policy ("Privacy Policy") describes how Bigli (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you access or visit our website (the "Site") and use our services, including registration in the personal area of the Site, online sale of grooming products and the possibility to book our grooming services in our store in Milan("Products" or "Services").
For purposes of this Privacy Policy, "you" and "your" means you as the user of the Site and the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is valid from the date of publication (latest update: June 2024).
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.
SOURCE FOR DATA COLLECTION
The personal data described in the following sections (the "Personal Data" or the "Data") are automatically collected or provided by users through browsing or use of the Site and the use of our Services, or for the purchase of one of our Products.
We may also obtain your Data from third parties, including from vendors and service providers who may collect information on our behalf, such as:
-
Companies who support our Site and Services, such as Shopify.
-
Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with Products or Services you have requested, in order to perform our contract with you.
HOW WE COLLECT AND USE YOUR DATA
Your Data will be processed in pursuance of the principles of fairness, lawfulness and transparency, through manual and automated methods and by deploying either paper and electronic means, in any case within the limits of the purposes of Data processing(s) set forth by the present Privacy Policy and, in any case, in order to ensure the safety and confidentiality of your Data.
DESCRIPTION OF DATA PROCESSING
Accessing or visiting the Site
CATEGORIES OF DATA - BROWSING DATA - log files, IP addresses, domain names of users' terminals, URI addresses, server request times and methods, server responses, other parameters concerning the operating system and the IT environment or device of the Site user.
PURPOSE OF PROCESSING – to collect of anonymous statistical Data on the use of the Site by the users, as well as for controlling the Site operation. In particular we may infer information about your interactions with our Site and other Services you use, the content you view and the search queries you submit; information about you based on your interaction with our Products and Services; information on the type of device you are using, how you access our Site, your browser or operating system and your Internet Protocol ("IP")address.
MANDATORY OR OPTIONAL PROVISION OF DATA – Optional - The failure to provide the Data, carried out by disabling cookies/local Storage in the browser, could prevent you from accessing all the Website functions.
LEGAL BASIS OF PROCESSING - The legitimate interest of the Controller to operate and control the Site and to obtain Data on its usage, or your consent, depending on the cookie.
DATA STORAGE PERIOD - Depending on the purpose of the individual cookies and in any case no later than 2 years from the date of access to the Site.
Please check also below our cookie policy for more information.
Registration and access to personal area
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, tax code in case you purchase the Product as a private customer or VAT number if you are a professional, email, address, telephone number - OTHER DATA relevant category (private/professional)
PURPOSE OF PROCESSING - To allow you to register as a customer on the Site and to access the reserved and personal area of the Site in order to purchase the Products or use the respective Services.
MANDATORY OR OPTIONAL PROVISION OF DATA - Necessary. If you do not wish to provide your Data, you will not be able to register as a customer or use the related Services in the reserved personal areas of the Site. The purchase of the Products can also be made as a guest and in this case the registration data are optional, but if you do not want to provide them to us we will not be able to maintain an archive of the Products purchased for your reference as a registered customer, to offer you any reserved Services.
LEGAL BASIS OF PROCESSING - The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
DATA STORAGE PERIOD - The Controller undertakes to erase your Data from its systems provided for your registration and access to the reserved areas of the Site and for use of the related services, 10 years after the date of cancellation of the relevant registration.
Marketing and advertising
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, email, address, company, country, region, city - OTHER DATA relevant category (private/professional). Personal Data communicated in the specific registration form to access your personal area of the Site.
PURPOSE OF PROCESSING – for marketing and promotional purposes, such as to send you marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for Products or Services, also through the use of our social network accounts (Meta, Instagram, X). We may also ask you to participate in customer satisfaction surveys or inquiries or invite you to any of our events. We may also send you this information following your subscription to our newsletter.
MANDATORY OR OPTIONAL PROVISION OF DATA - Optional. If you do not provide these Data, it will not be possible for the Controller to send you marketing and promotional communications.
LEGAL BASIS OF PROCESSING - The consent given in the registration process to your personal area of the Site by flagging the relative "consent button". You can exercise your right to object to the receipt of these communications at any time, immediately or at a later date, by writing to privacy@eredizucca.com.
DATA STORAGE PERIOD - The Controller undertakes to erase your Data from its systems provided in relation to marketing and advertising 24 months after the date of each purchase or request.
Online purchase agreement
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, tax code in case you purchase the Product as a private customer or VAT number if you are a professional, e-mail, telephone number, address, invoicing/shipping address - PURCHASE DATA type and price of Products purchased - OTHER DATA personal Data communicated on the specific text form on the Site.
PURPOSE OF PROCESSING - To carry out sales of Products on the Site (therein including, for example, the entry of Products on the wish list, delivery, invoicing, etc.) and management of after-sales services (including returns, refunds, repairs).
MANDATORY OR OPTIONAL PROVISION OF DATA - Necessary. If you do not wish to provide your Data, the Controller will not be able proceed with the corresponding order or manage the related Product and after-sales services.
LEGAL BASIS OF PROCESSING - The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
DATA STORAGE PERIOD: The Controller undertakes to erase your Data from its systems provided for the execution of the sale and management of the after-sales services 10 years after the date of the last purchase or from the last interaction with the Controller.
Managing reservation of our grooming services
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, email, telephone number - OTHER DATA Personal Data communicated to book your reservation.
PURPOSE OF PROCESSING - To manage requests of booking grooming services reservation. The Controller may use third-party tool or application operated by a provider that acts, always in full compliance with the privacy regulations, through a special service contract on behalf of the Controller, and as Data Processors under Article 28 of the GDPR.
MANDATORY OR OPTIONAL PROVISION OF DATA - Necessary. If you do not provide these Data, it will not be possible for the Controller to process your requests to book our grooming service.
LEGAL BASIS OF PROCESSING - The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
DATA STORAGE PERIOD - The Controller undertakes to erase your Data from its systems provided in relation to the requests submitted by you 1 year after the date of provision of the Data.
Sending marketing offers related to Products or Services similar to those already purchased or requested (soft spam)
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, e-mail - PURCHASE DATA type of Products purchased, or Services requested.
PURPOSE OF PROCESSING - sending communications containing marketing offers related to Products or Services similar to those already purchased or requested (soft spam).
MANDATORY OR OPTIONAL PROVISION OF DATA - Optional. If you wish to object to the processing of your Data, it will not be possible for the Controller to keep you constantly updated on offers and promotions of Products and Services related to those already purchased or requested.
LEGAL BASIS OF PROCESSING - The Controller's legitimate interest in developing relationships with its customers and increasing the volume of requests and sales of the Products or Services. You can exercise your right to object to the receipt of these communications at any time, immediately or at a later date, by clicking the unsubscribe button contained in the emails or newsletters you receive or by writing to privacy@eredizucca.com.
DATA STORAGE PERIOD - The Controller will erase the Data processed for the purposes of sending communications containing marketing offers related to Products or Services similar to those already purchased or requested (soft spam), 24 months after the date of each purchase or request, unless any objection is made before that period elapses and without prejudice to their storage for 10 years for the purposes of executing the sale and for the management of after-sales services.
Managing requests to our customer care
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, email, telephone number - OTHER DATA Data communicated to provide the requested assistance.
PURPOSE OF PROCESSING - To manage requests made to the customer care.
MANDATORY OR OPTIONAL PROVISION OF DATA - Necessary. If you do not provide these Data, it will not be possible for the Controller to process your requests to our customer care.
LEGAL BASIS OF PROCESSING - The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
DATA STORAGE PERIOD - The Controller undertakes to erase your Data from its systems provided in relation to the requests submitted to the customer care 1 year after the date of provision of the Data.
Managing requests to our page contact
CATEGORIES OF DATA - PERSONAL AND CONTACT DATA name, surname, email, address, company, country, region, city - OTHER DATA relevant category (private/professional). Data communicated in the specific text form on the Site or to the mailbox of the Controller.
PURPOSE OF PROCESSING - To manage contact requests made via the specific Site page ("contacts") or by email to the Controller.
MANDATORY OR OPTIONAL PROVISION OF DATA - Necessary. If you do not provide these Data, it will not be possible for the Controller to process the requests sent.
LEGAL BASIS OF PROCESSING - The need to perform a contract or to take steps prior to entering into a contract to which you are party, as well as the need to comply with legal obligations.
DATA STORAGE PERIOD - The Controller undertakes to erase your Data from its systems provided in relation to requests submitted via the Site or by email 1 year after the date of provision.
SUBJECTS AUTHORISED TO PROCESS DATA
Your Data will be processed by duly appointed employees of the Controller, who have been expressly authorised to process the Data under our instructions and taking appropriate measures to protect your Data in relation to all the purposes set forth above.
POSSIBLE RECIPIENTS OF THE DATA
The following subjects may become aware of your Data in connection with the processing purposes set out in this Privacy Policy and will be allowed to process the Data either as an autonomous Data controllers or Data processors duly appointed by the Controller (the list of such Data processors is available upon e-mail request to be submitted to: privacy@eredizucca.com):
• Subjects dealing with the management of the centralized system for customer relations; with marketing services (sending newsletters, market research, customer satisfaction analysis); Subjects who perform activities functional to the execution of the purchase of the Products or the Services i.e. banking service providers, fraud prevision service providers, payment services providers, carriers and shippers, companies providing IT infrastructure and IT support and consulting services, companies providing Data analysis and development services as well as law, accounting and auditing firms;
• the Controller's purchasers or successors in the event of merger, sale, restructuring, reorganisation, winding-up or other sale or transfer of some or all of the Controller's assets in the context of which personal information are transferred.
TRANSFER OF PERSONAL DATA ABROAD
All Data processing is carried out in countries of the European Union.
Please note that we may transfer, store and process your personal information outside the country you live in. If the Data need to be transferred abroad, the Controller undertakes to:
-
Ensure that the country to which the Data will be sent guarantees an adequate level of protection, as provided under Article 45 of the GDPR; or
-
Comply with the standard contractual clauses for Data protection approved by the European Commission as to the transfer of personal Data outside the EEA in accordance with Article 46.2 of the GDPR.
YOUR RIGHTS AS DATA SUBJECT
In relation to the above Data processing, you can exercise at any time, by sending an email to privacy@eredizucca.com, the following rights under the conditions and within the limits indicated in Articles 12 and 13 of the GDPR:
-
Right of access (Art. 15 GDPR).
-
Right of rectification of inaccurate Data and completion of incomplete Data (Art. 16 GDPR).
-
Right to erasure of Data (Art. 17 GDPR).
-
Right to restriction of processing (Art. 18 GDPR).
-
Right to object to processing carried out in accordance with Art. 6, paragraph 1, letters e) or f) GDPR.
You also have the right to lodge a complaint with the Supervisory Authority, i.e., the Italian Data Protection Authority known as (“Garante Privacy”) and/or other competent supervisory authorities (Art. 77 GDPR).
Moreover, if the processing is based on consent or a contract and is carried out by automated means, you have the right to receive your Data in a structured, commonly used, and machine-readable format and, if technically feasible, to transmit those Data to another controller without hindrance under Article 20 of the GDPR.
You also have the right to object at any time to the processing of the Data, immediately or after the transfer of the Data, in relation to the sending by the Controller of unsolicited communications containing marketing offers related to Products or Services similar to those already purchased or requested (soft spam) directly to the email address provided during the purchase of Products or request of Services, pursuant to Art. 130, paragraph 4 of Italian Legislative Decree no. 196/2003, as amended by Italian Legislative Decree no. 101/2018.
You can also choose to be contacted for marketing purposes exclusively via traditional methods, expressing your opposition to receiving communications through automated methods.
You have the right to withdraw the consent provided for marketing purposes at any time by writing to privacy@eredizucca.com.
MINORS' DATA
The Site and the Services are no intended for minors under the age of 18; therefore, the Controller does not carry out any collection and/or processing of personal Data relating to such minors. In the event that personal Data relating to minors are entered on the Site, we will delete them.
***
COOKIES POLICY
We automatically collect certain information about your interaction with the Site and the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.
COOKIES
For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.
Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available.
***