Privacy policy
Privacy Policy and Information regarding the Protection and Use of Personal Data
Ottica Izzo of Alfonso Maria Izzo & Co. S.a.s., VAT ID 00851170621, headquartered in Montesarchio (BN), Via Napoli No. 4 (hereinafter "Ottica Izzo" or the "Controller"), is committed to consistently protect the online privacy of its users and customers. This document (hereinafter: "Privacy Policy") has been prepared in accordance with Article 13 of the EU Regulation 2016/679 (hereinafter: "Regulation") in order to allow you to understand our privacy policy, to comprehend how your personal information is managed when you purchase products on or use the website www.otticaizzo1970.com (hereinafter the "Website"), and, if applicable, to provide consent to the processing of your personal data, expressed and informed.
We inform you that your personal data will be subject to processing, in compliance with the referenced data protection regulations, and the confidentiality obligations that inspire our Company's activities. The processing carried out by Ottica Izzo will adhere to the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.
Ottica Izzo informs you that, if you choose PayPal as the payment method, you will be automatically redirected to the PayPal website to complete the payment according to the terms and conditions agreed upon with PayPal and their procedures. The data entered on the PayPal website (as well as payment instrument data linked to your PayPal account) will be processed by PayPal as an independent data controller, under their sole responsibility and based on their privacy policy. PayPal may share with Ottica Izzo, as the seller, the customer's information and their PayPal account details necessary to complete the transaction and refund operations.
This information is also provided in the context of customer support services, including but not limited to: assistance in online product purchases, information requests, product returns and exercising the right of withdrawal, and filing complaints.
DATA CONTROLLER AND DATA PROTECTION OFFICER
The data controller is the company Ottica Izzo of Alfonso Maria Izzo & Co. S.a.s., headquartered in Montesarchio (BN), Via Napoli No. 4.
The data controller can be contacted for clarifications and questions regarding the processing of personal data at the email address info@otticaizzo1970.com
The company has not appointed a Data Protection Officer.
For further information regarding the data subject's rights, please refer to the section titled "Your Rights" in this notice.
PERSONAL DATA SUBJECT TO PROCESSING
The personal data subject to processing by Ottica Izzo are those provided by the user during browsing on the website www.otticaizzo1970.com, when registering for the newsletter, creating an account on the website www.otticaizzo1970.com, and/or when making a purchase of products available on the website www.otticaizzo1970.com, in addition to the data necessary for the provision of the online sales service, such as those required for payment execution, shipping, or product exchanges.
Cookies
For more information about the cookies used by this website, please refer to the cookies policy at the following link.
LEGAL BASIS, PURPOSE, AND NATURE OF PROCESSING
The personal data provided by the user during browsing on the website www.otticaizzo1970.com are processed by the Data Controller in accordance with the current regulations on Personal Data Protection.
The legal basis for the processing is identified in the provision of services by Ottica Izzo, in the management and facilitation of the website, as well as in the establishment, execution, and possible resolution of the online sales contract concluded between the parties and in the obligations arising directly and/or indirectly from the same contract.
The processing of personal data by Ottica Izzo aims to achieve the purposes listed below.
1. Direct Marketing - Subscription to the newsletter of otticaizzo1970.com. In the event that the user decides to subscribe to the newsletter of www.otticaizzo1970.com, only following specific and optional consent, personal data will be processed by the Data Controller for sending commercial or promotional communications, updates related to (for example: exclusive offers, special events, and promotions). To unsubscribe from the newsletter, simply click on the appropriate unsubscribe link at the bottom of the received emails or write to the address info@otticaizzo1970.com . The Data Controller, to compare and potentially improve the results of communications, uses systems for sending newsletters and promotional communications equipped with a reporting mechanism, through which the Data Controller can learn details such as, for example, the number of readers, openings, and clicks, the type of device used to open and read emails, display complications of the message; link tracking, meaning the number of clicks made on message links, and click tracking, meaning which links were clicked. These data are used solely for the purpose of comparing and improving communication results.
For the purpose stated in point 1, providing personal data and consenting to their processing is optional; in case of failure to provide consent, it will not be possible to proceed with the subscription to the newsletter of www.otticaizzo1970.com.
2. Creation of an account on the website otticaizzo1970.com. In the event that the User decides to register on the website www.otticaizzo1970.com, only following specific and optional consent, personal data will be processed by the Data Controller for the purpose of registering on www.otticaizzo1970.com. Specifically, upon providing one's first name, last name, email address, and setting up a password, these data will be processed for creating a personal account, expediting the purchase procedure, enabling the user to view the history of placed orders, modify personal settings, and update the account. At any time, the user can delete the account through the dedicated procedure within their account or by contacting customer service at the email info@otticaizzo1970.com
For the purpose stated in point 2, providing personal data and consenting to their processing is optional. Failure to provide consent will result in the inability to create an account on the website www.otticaizzo1970.com and access the related functionalities.
3. Shopping Activities on the website otticaizzo1970.com. The provided personal data will be used for the purpose of establishing, managing, executing, and concluding the online sales contract. The Data Controller will process the data for managing the purchase order, including, for example, payment and shipping activities, order processing, and fulfilling obligations as required by current regulations. In case of credit card payment, essential transaction information (credit/debit card number, expiration date, security code) will be processed by the payment system provided by Shopify INC (https://help.shopify.com/it/manual/your-account/privacy/GDPR). However, Ottica Izzo will never display or store such information.
For the purpose stated in point 3, providing personal data and consenting to their processing is mandatory. Failure to provide consent will result in the inability to establish, manage, execute, and/or conclude the online sales contract and proceed with related activities.
4. User Profiling. Only following possible and explicit consent, the provided personal data may be processed by Ottica Izzo for profiling activities aimed at identifying user preferences in order to create personalized content and offers.
For the purpose stated in point 4, providing personal data and consenting to their processing is optional. In case of failure to provide consent, Ottica Izzo will not engage in the profiling activity as previously mentioned.
DATA PROCESSING METHODS AND STORAGE
The processing of personal data is carried out by the Data Controller in compliance with the provisions of the current regulations on personal data processing. The Data Controller performs the processing using computer and/or telematic tools and with organizational and logical methods strictly related to the pursuit of the purposes indicated on this page. Appropriate security measures are always adopted to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of personal data, as well as their loss and improper or unlawful use, in accordance with the applicable regulations. However, Ottica Izzo cannot guarantee to users that the security measures implemented for the website and data transmission on the website are capable of limiting or excluding any risk of unauthorized access or data dispersion by devices belonging to the user. For this reason, users are advised to ensure that the tool used for browsing the website www.otticaizzo1970.com is equipped with software suitable for protecting data transmission over the network (antivirus) and that their internet provider has adopted appropriate measures for the security of data transmission over the network.
Ottica Izzo also commits to processing the data according to the principles of fairness, lawfulness, and transparency, collecting them to the extent necessary and accurate for processing, and allowing their use only by authorized personnel. The management and storage of acquired personal data will take place in archives and on platforms owned by Shopify INC located in their data centers in the USA and Canada.
With regard to the various purposes for which they are collected, personal data will be retained for the time strictly necessary to achieve those purposes or for the longer period required by law.
Personal Data processed for the purpose of Service Provision and Relationship Management will be retained for the time strictly necessary to achieve those purposes. In any case, since these processes involve the provision of services, Ottica Izzo will process Personal Data for the time allowed by Italian law for safeguarding its interests (Art. 2946 and following of the Civil Code) from possible claims related to the Services.
For the Marketing purpose, Your Personal Data will be retained for 24 months, and for the Profiling purpose, for 12 months, subject to Your right to object to these processes at any time. At the end of the retention period, Your Personal Data will be deleted. However, Ottica Izzo may retain Your Personal Data for a period of time provided and permitted by Italian law to safeguard its interests (Art. 2947(1)(3) c.c.).
If, on subsequent occasions after the initial provision of data and related consent, You provide consent again for Marketing and/or Profiling purposes through any of the multiple contact and/or communication channels with Ottica Izzo (e.g., through the Website or its stores), the retention period for the aforementioned purposes will start anew from the date of the last consent.
In the case of creating a personal account, Your Personal Data will be retained and processed for as long as Your account remains active. Therefore, Your account and Personal Data will be deleted if You do not make purchases on the Website for a consecutive period of 5 (five) years. Before the expiration of this period, Ottica Izzo will send You a communication to the provided contacts, asking You to confirm the intention to keep the account despite the inactivity.
Further information regarding the retention period of Personal Data and the criteria used to determine it can be requested by writing to the Data Controller at the contact details provided in the "Contacts" section of this Privacy Policy. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access.
TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED: RECIPIENTS
The collected personal data will not be disclosed in any way and will be processed within the limits and for the purposes described by Ottica Izzo employees based on appropriate operational instructions.
Some data processing may also be carried out by third parties, designated as external Data Processors, whom the Data Controller uses or may use as part of contract management, service provision, and organizational needs of its activity. In particular, data may be communicated to:
- Subjects, both public and private, who may access the data under the provisions of laws, regulations, or community legislation, within the limits provided by these rules;
- Entities that need to access the data for purposes related to the existing contractual relationship between the parties, to the extent strictly necessary for the performance of auxiliary tasks (such as banks and credit institutions, technical service providers, hosting providers, IT companies, communication agencies, postal couriers, and shipping companies);
- Consultants, to the extent necessary for the performance of their professional assignment.
The updated list of external Data Processors and authorized parties is kept at the Data Controller's headquarters and is available to the data subject upon written request to be made via email to info@otticaizzo1970.com
TRANSFER OF PERSONAL DATA
Personal data is stored on servers located within the European Union. Nevertheless, the Data Controller may move the servers outside the EU, if necessary. In such a case, the Data Controller ensures that the transfer of data outside the EU will comply with the applicable legal provisions, including the implementation of standard contractual clauses established by the European Commission.
YOUR RIGHTS
Pursuant to Articles 15 and following of the Regulation, you have the right to ask Ottica Izzo at any time for access to your Personal Data, rectification or (in cases provided by the Regulation) erasure, to object to its processing; you have the right to request restriction of processing in cases provided by Article 18 of the Regulation, as well as to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another controller without hindrance in cases provided by Article 20 of the Regulation. If the processing is based on consent, you can revoke your consent at any time without affecting the lawfulness of processing based on the consent before its revocation.
To exercise your rights, you can contact the Data Controller or the Data Protection Officer at the contacts provided in the following section. You are also informed that through the "Contacts" section of the Website, you can send communications to the Data Controller to exercise some of your rights mentioned above (such as objecting to receiving commercial communications, requesting erasure of your personal data, etc.). Consent to Profiling through cookies can be revoked as indicated in Section A. above.
In any case, you have the right to lodge a complaint with the competent Supervisory Authority (Data Protection Authority), under Article 77 of the Regulation, if you believe that the processing of your Personal Data is contrary to the applicable regulations.
CONTACTS
To exercise the above-mentioned rights or for any other request, you can write to the Data Controller: via Napoli, n. 4 – 82016 Montesarchio (BN), or via email info@otticaizzo1970.com