Cookie and Privacy policy

The company Bottega Profumiera, being a brand of Officina delle Essenze srl that has it’s headquarter in Rome (RM), via Pierluigi Sagramoso 52 – 00060, E-Mail: [email protected] (VAT no. 11311081001) (hereafter “Owner”) and acting in its capacity as Data Controller pursuant to articles 4 no. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons in respect of personal data processing (hereafter “Regulation”), informs that according to the Art. 13 of Regulation it will proceed to the processing of personal data with regard to website users.

1. PURPOSE OF DATA PROCESSING

• REGISTRATION: at the time of purchase, the User can enter the billing and shipping details indicated on the checkout page also for creating an account. Another option is to subscribe via social media, submitting First name, Last name and e-mail address, or to save the credit card number in order to avoid entering it again.
• PURCHASE: once the purchase is made, First name, Last name, address, telephone number, e-mail and payment information are collected on the website. If the User is a VAT number holder, there will be requested and stored Company name, VAT number and PEC address or Recipient code.
• CUSTOMER CARE: username and email are collected by filling in and sending the form.
• REVIEW: First name, Last name (or nickname) and e-mail are collected by leaving a review.
• WHATSAPP, FACEBOOK or INSTAGRAM: by contacting Bottega Profumiera via WhatsApp, Facebook or Instagram, it is possible to make a purchase after collecting all data necessary for a new order (First name, Last name, billing and shipping addresses, e-mail and telephone number).

2. LEGAL BASIS AND PURPOSE OF PROCESSING

The data processing is carried out to allow the exercising of activities related to service introduction and management requested from the Data Controller. The data will be processed legitimately, fairly and with the utmost confidentiality, in compliance with the appropriate security measures provided by the Code and Regulation.

The processing is carried out with analog and digital tools. The data will not be subject to the public disclosure, in particular:

• REGISTRATION: the purpose is to allow a direct access to the website by authorizing an instant purchase. The legal basis is a consent.
• PURCHASE: the purpose is to allow the User to complete the purchase of Bottega Profumiera products and to ship them. The legal basis is the fulfillment of the Purchase Agreement and legal obligations (including those of accountable and fiscal nature). The data are communicated to the reference shipping courier, duly appointed as Data Controller. After making a purchase, the data are exported to a CRM in order to send commercial information, the consent is optional in accordance with the Art. 130 c. 4 of Legislative Decree no. 196/03, without prejudice to the possibility to opt-out at any time via specific link.
• CUSTOMER CARE: the legal basis is a consent and the data are processed in order to authorize Bottega Profumiera to respond to requests.
• REVIEW: the legal basis is a consent and the data are processed in order to authorize a review publication.

If the purchase is failed (abandoned cart, pending payment, payment failed) or the order is completed with a bank transfer and the recipient has never received any payment, Bottega Profumiera retains the right to send two messages via e-mail within 24/48 hours in order to give the User time to complete the procedure. In the first case, the purpose of processing is the legitimate interest of the Owner. In the second case, there is a fulfillment of pre-contractual measures carried out upon request of the data subject. After making a purchase, always based on the legitimate interest of the Owner, a request for product review is sent with the appropriate confirmation for publication.

3. METHODS OF DATA PROCESSING AND DURATION OF DATA STORAGE

The Data Controller will process personal data for as long as required to fulfill the purposes as follow:

• REGISTRATION: until the User decides to unsubscribe from the site; Bottega Profumiera will remove every account after 7 years from the User’s last access. Prior to this, the Data Controller will send an e-mail to learn if the User wants to keep the account active.
• PURCHASE: the entered data will be stored for no more than 10 years from the purchase.
• CUSTOMER CARE: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.
• REVIEW: the reviews will be kept online for as long as the website is active.
• ABANDONED CART: the Data Controller will verify obsolete data every 5 years and will proceed with its removal.

4. DATA COMMUNICATION

The Data Controller may communicate the data for the purposes referred to in Article 2 to all subjects for whom such communication is mandatory in order to fulfil the legal provisions. However, the data will not be a subject to public dissemination.

5. DATA STORAGE AND TRANSMISSION

The personal data management and storage take place on servers, located within the European Union (the servers are currently in Italy), of assigned third-party companies that are duly appointed as data processors.

In order to consent payments through third-party circuits (e.g. PayPal), as well as submission of commercial information (newsletters) or use of reporting systems of sales and visit, the Data Controller uses one or more suppliers based in the USA and transfers all necessary data to non-EU countries. The Data Controller also ensures that the data transmission to non-EU countries takes place in compliance with the applicable legal provisions by concluding, if necessary, agreements that guarantee an adequate level of protection and/or by adopting standard contractual provisions provided by the European Commission. The list of data processors is available on site.

6. RIGHTS OF THE DATA SUBJECT

The User, in capacity as data subject, has rights referred to in Article 15 of Regulation, namely:

• The data subject is eligible to receive a personal data confirmation, or its absence, and a notice in an intelligible form;
• The data subject has the right to receive information on:
  1. The origin of personal data;
  2. Purposes and methods of processing;
  3. Logic applied in case of processing with electronic tools;
  4. Identification details of the Owner, the managers and the representatives;
  5. Subjects and categories of subjects to whom personal data may be disclosed or who can be acknowledged in this regard in capacity of appointed representative in the State, managers or agents.
• The data subject has the right to obtain:
  1. Updates, rectification or, when necessary, integration of data;
  2. Removal, transformation into anonymous form or freezing of data processed illegally, including the data that are not obligatory to be stored in relation to the purposes they were collected or eventually processed;
  3. Confirmation that the operations under letters a) and b), as well as their content, have been brought to the attention of those to whom the data were communicated or disclosed unless this requirement proves impossible or involves manifestly disproportionate effort compared with the right that is to be protected.
• The data subject has the right to fully or partially object:
  1. For legitimate reasons to the processing of personal data relating to him/her, even if pertinent to the purpose of collection;
  2. To the processing of personal data relating to the data subject in order to fulfil purposes not covered under Art. 2.

Also on the basis of Art. 15 and those following the GDPR, the User has the right to request, at any time, access to his/her personal data, their rectification or removal, limitation of the data processing in cases provided by Art. 18 of the GDPR; to obtain from automatic device, in a structured and commonly used format, the data relating to the User in cases provided by the Art. 20 of the GDPR.

At any time, based on the Art. 7 of the GDPR, the User may withdraw from the given consent; lodge a complaint to the competent supervisory authority under Art. 77 of the GDPR if the User deems that his/her data processing does not follow the current legislation. The User can make a request of opposition to the personal data processing under Art. 21 of the GDPR where he/she will provide valid reasons that justify such opposition. The Data Controller reserves the right to evaluate the request. It will not be accepted if there are compelling legitimate grounds to proceed with the processing that prevails over the User’s interests, rights and freedom. At any time, the data subject can exercise the rights referred to in the previous article by sending:

• A registered letter to: Officina delle Essenze srl, via Pierluigi Sagramoso, 52 – 00060 Rome
• An e-mail to PEC: [email protected]

COOKIE POLICY

The present policy covers the use of cookies on bottegaprofumiera.com and is available for the User in implementation of the provision adopted by the Privacy Guarantor for the personal data protection “Identification of simplified procedures for the information notice and the acquisition of consent for the use of cookies – 08 May 2014” and in compliance with Art. 13 of the GDPR.

Bottega Profumiera notifies that the provision of data is optional with regard to the cookies that are installed on the device of the User. However, some of them are necessary for the proper use of the website (technical cookies) and therefore, in the absence of consent, only some cookies will be automatically blocked.

WHAT ARE COOKIES?

Cookies are small text files that are stored on the User’s device while browsing a website.

WHAT ARE COOKIES FOR?

They allow the website to activate basic or extra functions that make the website operate or improve services offered to the User.

EXAMPLES OF WEBSITE COOKIES

• Some cookies are stored in order to recognize the User’s specific browsing session. If the cookies did not function, the User A would see the cart of the User B and vice versa. On the other hand, by storing a cookie the website tracks the User A, for whom it will keep in memory all products placed in the cart, just like a faithful assistant.
• A cookie is stored to evaluate whether the User has already logged in or not. If the User has logged in, the previously entered billing and shipping details are retrieved. Otherwise, it is necessary to enter them again.
• The website stores a cookie to evaluate the User’s language (Italian, English or other). Thanks to this cookie all communications between Bottega Profumiera and the User take place in the preferred language of the latter.
• Some cookies allow interaction between the website and payment circuits such as PayPal or Amazon Pay. The systems would not be able to “talk” without cookies.

More details about cookies are available on Wikipedia.

This website makes use of cookies of third parties for:

Tracking with anonymized IP without profiling (Google Analytics)

The website uses performance cookies of Google Analytics to study the Users’ behavior during browsing, with a view to improve its speed, accessibility and User experience. The Data Controller has selected to anonymize User’s IP for Google Analytics integration, that way there are no invading ads or possible profiling from Google.

For more details, please consult a special page dedicated to IP anonymization (or masking) in Analytics on Google.

Personal Data Processed: cookies and usage data
Place of processing: USA

Google Fonts

The fonts of this website use Google Fonts service to integrate and use font style. The information obtained through the stored cookie is transmitted from the User’s browser to Google and allows its tracking.

Bottega Profumiera has decided to integrate these tools due to the fact that Google cares about Users’ privacy and shows it with a strict application of service conditions. Please consult Google page to access Google Privacy Policy. The latter includes information on cookies that Google Maps or Google Fonts can store in User’s device.

Personal Data Processed: cookies and usage data
Place of processing: USA

Sharing and interaction with external social networking platforms

The website uses sharing tools (social widgets) to allow the User to interact and forward the page URLs to external platforms (Facebook, Twitter, etc.). The interactions and the information acquired by these applications are subject to the policy settings of the User that are managed within every social networking platform.

Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland

Conversion tracking with Facebook pixel

The tracking of Facebook Ads conversion (via the Facebook pixel), depending on the displayed page, allows the Data Controller to connect data from Facebook advertising network with operations carried out on bottegaprofumiera.com and vice versa.

Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland

Remarketing and behavioral targeting with Facebook pixel

The website uses Facebook pixel to provide personalized content based on the User behavior on bottegaprofumiera.com, as well as to monitor conversions, manage, disseminate and track ads on social media. This service allows the Data Controller to offer a tailor-made experience according to the real needs of the User or what the User has or has not done on the website. If the User does not want to activate this function, it will be sufficient to disable non-essential cookies via a special banner.

Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland

Facebook Custom Audience and/or similar

The Facebook function “custom audience” and “similar” allows the Owner to offer ads to Facebook audience based on the behavior and the interests of Facebook users that have already visited bottegaprofumiera.com at a certain period or have done specific operations with other Facebook pixel previously installed. Here as well, the Users can leave Facebook cookies disabled and avoid participating in the following service.

Personal Data Processed: cookies and usage data
Place of processing: USA or Ireland

Facebook Audience Network

Facebook Audience Network is an advertising service that allows the Data Controller to use some identifiers to offer ads to the User via Facebook.

Personal Data Processed: Cookies, usage data and unique identifiers (e.g. Google Advertiser ID or IDFA)
Place of processing: USA or Ireland

All above mentioned services that involve “Facebook” are offered by Facebook, Inc. or by Facebook Ireland Ltd, depending on the location of bottegaprofumiera.com is accessed from. For more details on Facebook’s use of Data, please consult Facebook data policy.