Privacy Policy

Last update: may 2022

PRIVACY NOTICE

OUR PRIVACY POLICY IN SHORT

This is the website of the Arclinea branded products, brought to you by  Arc linea Arredamenti S.p.A. as part of the Design Holding Group of companies.

We are thrilled to be able to offer our great design products to you. In order to do that, we are subject to certain rules that protect your personal data and privacy. You will find our extended privacy policy below.

This is a summary of our extended notice, by which we wish to draw your attention to certain essential elements.

In some cases, we need your data, because without them we would not be able to perform an order you place through our website (if the Site offers this possibility), or placed in one of our stores or to respond to inquiries you make. Some other processing operations are instead based on our legitimate interest or your consent. In particular, we believe that giving your consent to marketing would be beneficial to you, because for example we would be able to bring you up to date with respect to new product offerings. For the same reason, we seek your consent to profiling. This would enable us to get to know you better and possibly make offers of products especially designed for you.

Naturally, you have a number of rights under this notice and applicable laws. They are listed in section 6 of the General Part of the extended privacy notice. We do care about your privacy. If you need to contact us for further clarity on how we use your data, do contact us at the following addresses privacy@arclinea.net or privacy@designholding.com and as specified below.

EXTENDED PRIVACY NOTICE

This privacy notice (“Notice”) describes how the companies Arc linea Arredamenti S.p.A. (“Arclinea ”), Design Holding S.p.A. (“Design Holding”) and the other companies of the Design Holding Group (the “Group”) may process your personal data collected through www.arclinea.it/ website being it transactional (if applicable) or not (the “Site”), and possibly (if existing) in physical stores (the “Store”) or on any other occasion in which you may deal with us.

This Notice further describes how the Design Holding and the Design Holding Group companies may further process your personal data for certain jointly controlled marketing purposes and profiling purposes.

In this Notice:

In this Notice you can find the following information in detail:

1.  CONTROLLERS

2. HOW YOUR PERSONAL DATA ARE PROCESSED

3. PROCESSING ACTIVITIES

I.   PURCHASES ON THE TRANSACTIONAL SITE 

II.    REGISTRATION ON THE TRANSACTIONAL AND NON-TRANSACTIONAL SITE

III.   WHEN YOU CONTACT US THROUGH OUR TRANSACTIONAL AND NON-TRANSACTIONAL SITE

IV.  PURCHASE IN OUR PHYSICAL RETAIL STORES

V.   MARKETING ACTIVITIES RELATING TO SIMILAR PRODUCTS

VI.  B2C MARKETING AND PROFILING ACTIVITIES

       VII. B2B MARKETING AND PROFILING ACTIVITIES

       VIII. PLUG-INS AND INTERACTIONS WITH SOCIAL NETWORKS

IX.  BROWSING DATA AND COOKIES

X.   ADMINISTRATIVE AND SECURITY PURPOSES

XI.  WHEN YOU DIRECTLY CONTACT THE CONTROLLERS

XII. COMPLY WITH LEGAL OBLIGATIONS AND EXERCISE OF RIGHTS BEFORE COMPETENT AUTHORITIES

4. WHO YOUR PERSONAL MAY BE DISCLOSED TO

5. TRANSFER OF PERSONAL DATA OUTSIDE THE EEA

6. YOUR RIGHTS

7. CHANGES TO THIS NOTICE

8. HOW TO CONTACT THE CONTROLLER

9. HOW TO EXERCISE YOUR RIGHTS

 

Protection and privacy of your personal data are a priority for us. This Notice is constantly updated. The head of this Notice shows the latest update date. We invite you to constantly check the Notice to be informed about any updates, provided that as it concerns the list of companies part of the Design Holding Group, the relevant update might occur at later than the actual variation of the Group’s composition, due to technical and organizational reasons.

  1. CONTROLLERS

Under this notice, three different types of data controllers are envisaged with respect to different types of processing.

In particular, for the processing operations that are related to you interacting with us as a consumer, that is when you purchase our products or deal with us for your own needs as an end user, Arclinea will qualify as sole controller when it processes personal data for the purposes of performing contracts you are a party to or to respond to your queries, whereas with your consent Arclinea and Design Holding will process your data as joint controllers for marketing and profiling purposes (“B2C Marketing and Profiling Processing Activities”).

When you qualify as an employee, collaborator, representative, owner or account in any capacity of our business customers or contacts (such as companies, professional firms and self-standing professionals), Arclinea will qualify as sole controller when it processes personal data for the purposes of performing contracts you are a party to or to respond to your queries, whereas with your consent all the Group companies will process your data as joint controllers under the law, in order to make B2B marketing propositions embracing our Group’s full potential of product offerings designed on your needs and possibly carry out profiling in order to tailor our Group’s offerings to your preferences (“B2B Marketing and Profiling Processing Activities”).

Finally, for administrative and security purposes your data will be stored in the Group CRM by Design Holding S.p.A.

The details of who does what follow below.

1.1. Autonomous data controller

With regard to the Processing Activities referred to in paragraph I, II, III, IV, V of this Notice, the following company shall act as autonomous controller pursuant to Article 4(7) GDPR

1.2 Joint Controllers for B2C and B2B Marketing and Profiling Processing Activities

The companies of the Group will act under a joint controllership agreement pursuant to Article 26 GDPR, under which they determine together the means and purposes of the processing operations relating to B2B and B2C Joint Marketing and Profiling Activities, performed with your consent by using your personal data collected through this Site or in Store and/or when you make contacts with us on occasion of purchases made through our transactional Site or in Store and/or because you have provided us with your data upon making inquiries or otherwise by getting in touch with us, including on occasions of visits to shops and stores managed by the Group companies or by third parties on their behalf.

With regard to the B2C Processing Activities referred to in paragraph VI of this Notice, the following company shall act as joint controllers:

With regard to the B2B Processing Activities the Group companies act as joint controllers are described in paragraph VII of this Notice.

The joint controllers members of the Group (collectively the “Joint Controllers”) are currently the following companies:

ARES SRL

Via dell'Artigianato, 24 -20881 Bernareggio 8 (MB)

FLOS BESPOKE SRL

Via Alcide De Gasperi, 2 - 25060 Collebeato (BS)

ANTARES ILUMINACIÓN SAU

Calle Mallorca n. 1 - Polígono Industrial de Reva, Riba-roja de Túria - 46394  Valencia (ES)

FLOS BENELUX NV

BDC/ESPLANADE 1 Bus 95 - 1020 Brussel (BE)

FLOS FRANCE SAS

20-22 Passage Dauphine - 75006- Paris (FR)

FLOS GMBH

Obermünsterstr. 18 - 93047 Regensburg (DE)

FLOS BV

Cruquiusweg 109 S - 1019 AG Amsterdam (NL)

FLOS SCANDINAVIA AS

Sydhavnsgade 28 - 2450 Koebenhavn (DK)

FLOS SVERIGE AB

Lützengatan 1 - 115 20 Stockholm (SW)

FLOS NORGE AS

Sjolyst Plass 4 - 0278 Oslo (NO)

FLOS UK LTD

Crown Chambers, Princes Street, Harrogate, North Yorkshire - HG1 1NJ (GB)

Luminous Designs Investment ApS

Kuglegårdsvej 19 - 1434 Copenhagen (Denmark)

Louis Poulsen Germany GmbH

Liesegangstrasse 17 D-40211 Düsseldorf - Postfach 190136 D-40111 Düsseldorf (Germany)

Louis Poulsen Sweden AB

Box 23013 S-104 35 Stockholm (Sweden)

Louis Poulsen Norway AS

Lysaker Brygge 37/39 N-1366 Lysaker (Norway)

Louis Poulsen Finland Oy

Kyllikinportti 2 FIN-00240 Helsinki (Finland)

Louis Poulsen Japan Ltd.

AXIS Building 3F Minato-ku - Tokyo Japan 106-0032

Louis Poulsen Switzerland AG

Töpferstrasse 5 - CH-6004 Lucerne (Switzerland)

Louis Poulsen Holland BV

Dorpsstraat 18 - 1431 CD Aalsmeer Postbus 375 - 430 AJ Aalsmeer (Nederland)

Arc Linea Arredamento Spa 

Viale Pasubio 70, Caldogno, Italia

B&B Italia London Ltd

250 Brompton Road, Cross SW3 2AS,  London (UK)

B&B Italia München GmbH

Maximilianplatz 21, Munich (Germany)

B&B Italia Paris S.à.r.l.

3 Rue du Colonel Moll, 75017 Paris (France)

B&B Italia Contract France sas

33 Rue Galilee, 75116, Paris (France)

Fashion Furniture Design UK limited

3rd Floor, Palladium House, London, W1F 7LD, (UK)

 

Changes to Group’s structure should be expected. Although we will seek to update this notice accordingly, such update might be delayed.

The essence of the joint controllership agreement entered into by the companies of the Group can be consulted at the end of this privacy policy.

 

1.3 Autonomous data controller for administrative and security purposes

With regard to the processing operations referred to in paragraph of X this Notice, relating to both B2B and B2C processing activities, the following company shall act as autonomous controller pursuant to Article 4(7) GDPR

  1. HOW YOUR PERSONAL DATA ARE PROCESSED

Your personal data are processed through computer, automated and/or manual means in compliance with the principles of lawfulness, fairness, transparency, accuracy, integrity, data minimization and purposes and storage limitation, as well as in accordance with the provisions of the GDPR and applicable legislation on the protection of personal data. Personal data are collected, elaborated, transferred and stored by using appropriate security measures (physical, logical and organisational) to protect them from possible breaches (such as destruction, loss, alteration, unauthorised disclosure or accidental or unlawful access to such personal data) and to ensure that processing is carried out only for the purposes described in this Notice.

  1. PROCESSING ACTIVITIES

Each of the following paragraphs describe the processing activities carried out within Arclinea transactional and/or non-transactional Site and when you visit a Arclinea physical Store. When so specifically indicated in the tables below, the processing activities concerned shall be intended for subjects qualifying as both consumer (B2C) and business (B2B) users or customers.

  1. PURCHASES ON THE TRANSACTIONAL SITE

This paragraph describes how your personal data are processed when you purchase Arclinea branded products online from a transactional Site operated under the brand Arclinea if existing. Namely, you can purchase those products in two ways:

  1. As a “Guest”,

You are a Guest when you purchase a product from the Site without first creating an account as registered user. Please note that at the time of concluding the purchase, you will be required to read this Notice but not to provide your consent for the processing of data for marketing and profiling purposes. This will instead be required after the conclusion of the purchase (at the “Thank you” page) and your personal will not be processed for marketing or profiling purposes if you do not provide your consent at this occasion, without this affecting the proper performance of the purchase.

  1. As a registered user

You are a registered user when you create an account on the Site. Please note that when you create the account, you may also be requested to provide your consent for the processing of your data for marketing and profiling purposes.

 

Controllers

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (name, surname)

 

Contact details (e-mail address, phone number)

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Creation of an account on the Website

 

Legal Basis: need to perform a contract - Article 6(1)(b) GDPR

Data subject

Impossibility to create an account on the Website

Data retained until the cancellation of the account*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

Arclinea

Personal information (name, surname, tax code)

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, domicile/physical address, e-mail address)

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Invoice data

 

Payment data

Performance of the purchase agreement

 

Legal Basis: need to perform a contract - Article 6(1)(b) GDPR

Data subject

Impossibility to proceed with the purchase

10(ten) years after the purchase*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. REGISTRATION ON THE TRANSACTIONAL AND NON-TRANSACTIONAL SITE

This paragraph describes how your personal data are processed when you register your product and/or create a profile online in our transactional or non-transactional Site.

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (name, surname)

 

Contact details (e-mail address, mail address, phone number)

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Country of residence

 

 

Creation of a profile or registration of a product on the Site

 

Legal Basis: need to perform a contract - Article 6(1)(b) GDPR

Data subject

Impossibility to create a profile or register a product on the Site

Data retained until the cancellation of the account*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. WHEN YOU CONTACT US THROUGH OUR TRANSACTIONAL AND NON-TRANSACTIONAL SITE OR OTHERWISE

a) When you contact us through the contact us section of our website or otherwise

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (e.g. name, surname)

 

Contact details (e.g. e-mail address, phone number, postal address)

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Any other information that you choose to share in your message or in the attachments

 

Deal with and provide a feedback to your requests including when you send us your portfolio

 

 

Legal Basis: consent (provided with a clear affirmative action e.g. when contacting us seeking information) - Article 6(1)(a) GDPR

Data subject

Impossibility to deal with your requests

Time necessary to deal with and provide a feedback to your requests*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

 

b) When you book an appointment

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (e.g. name, surname)

 

Contact details (e.g. e-mail address, phone number, postal address)

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Any other information that you choose to share in your message or in the attachments

 

Deal with and provide a feedback to your requests including, when you book an appointment

 

 

Legal Basis: consent (provided with a clear affirmative action e.g. when contacting us seeking information) - Article 6(1)(a) GDPR

Data subject

Impossibility to deal with your requests

Time necessary to deal with and provide a feedback to your requests*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

c) When you contact us through the career section of our website or otherwise you send us your application

As part of the application and Xion process, we do not normally ask you to provide us with Personal Data that may reveal your health conditions, religious beliefs, sexual orientation, tradeXmembership, political opinions, criminal record or criminal charges. If, in the course of the Xion process, you provide us with such data (e.g. because they are contained in your CV) we will only process them with your express consent. Failing this, we will not consider this data for Xion purposes and will delete it as soon as possible.

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (e.g. name, surname)

 

Contact details (e.g. e-mail address, phone number, postal address)

 

Data relating to your qualifications, education and professional career;

Photograph/personal portrait (if contained in CV);

 

Data that could reveal your racial or ethnic origins, health conditions, religious beliefs, tradeXmembership and political opinions, only if provided by you during the assessment process (e.g. if contained in your CV).

As part of the application and Xion process, need to carry out pre-contractual measures at the request of the data subject

 

Legal Basis: need to perform a contract - Article 6(1)(b) GDPR

Explicit consent provided with an explicit affirmative action - Article 9(2)(a) GDPR

Data subject

Impossibility to deal with your requests

1 (one) year*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. PURCHASE IN OUR PHYSICAL RETAIL STORES

When you make a purchase at one of the Arclinea’s physical stores, we may ask you to provide us with your personal data in order to include it into our database and process it in a manner described in the following table.

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Personal information (name, surname, tax code)

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, domicile/physical address, e-mail address)

 

Payment related data

 

For B2B customers:

Profession, e-mail address, work e-mail address, work telephone number, name of the company/business/organisation you work for.

 

Invoice data

 

Payment related data

Performance of the purchase agreement

 

Legal Basis: need to perform a contract - Article 6(1)(b) GDPR

Data subject

Provision necessary for the conclusion of the purchase. In case of failure, we will not be able to deal with your request.

10(ten) years after the purchase*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. MARKETING ACTIVITIES RELATING TO SIMILAR PRODUCTS

This paragraph describes how your personal data can be processed by Arclinea for marketing purposes relating to products similar to those you have purchased. Pursuant to the applicable legislation, those processing activities do not need your consent but are based on the legitimate interest of the controller. Anyway, you always have the right to object to the processing pursuant to Article 21 GDPR.

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

For both B2C and B2B customers

 

Personal information (name, surname)

E-mail address, work e-mail address

 

Marketing activities (i.e. newsletter, promotional communications via e-mail) relating to products similar to those you purchases

 

Legal Basis: legitimate interest of the controller* – Article 6(1)(f) GDPR and Article 130(4) Legislative Decree n. 196/2003

 

*Opt-out always granted

Data subject

N/A

7 (seven) years from the last purchase*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority;

 

  1. B2C MARKETING AND PROFILING PROCESSING ACTIVITIES

This paragraph describes how your personal data can be processed for B2C marketing and profiling purposes.

With your consent, provided either on a transactional or non-transactional website or in a physical store of Arclinea personal data processed according to this paragraph will be stored on a common database within the Group held by Design Holding and may be used for engaging in marketing activities relating to Arclinea branded products.

Furthermore, with your specific consent, your personal data may be used for profiling operations aimed at the realization of personalized marketing messages and/or product offerings based on your preferences (including activities and purchases concluded on the Website and in Store and possibly other data that we may correlate). Profiling can also be based on personal information collected through cookies, as better explained in the cookie policy which can be accessed through this Site.

 

Controllers

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Design Holding

Personal information (name, surname, tax code)

 

Purchase history

 

Preferences and interests and cluster derived data.

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, e-mail address)

 

Invoice data

 

Payment data

Marketing activities (i.e. newsletter, promotional communications via e-mail, telephone, sms, and ordinary mail, surveys, market searches) relating to products, services and initiatives.

 

Legal Basis: your consent - Article 6(1)(a) GDPR

Data subject

Impossibility to receive marketing communications.

 

No consequences for the purchase or the other activities on the website

7 (seven) years from the consent*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority;

Arclinea

Design Holding

Personal information (name, surname, tax code)

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, e-mail address)

 

Invoice data

 

Payment data

 

Your preferences and interests.

 

Your previous purchases and activities on the Site and in Store

 

Your belonging to specific clusters identified by age/gender/profession

 

Profiling activities aimed at the realization of personalized marketing messages and/or offerings based on your preferences (including activities and purchases done on the Site and in Store) and relating to branded products Legal Basis: your consent - Article 6(1)(a) GDPR

Data subject

 

 

Impossibility to receive personalized marketing communications from the Group.

 

No consequences for the purchase or the other activities on the website

7 (seven) years from the consent *

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. B2B MARKETING AND PROFILING PROCESSING ACTIVITIES

This paragraph describes the processing activities of personal data that we carry out with regard to employees, collaborators, representatives, owners or accounts in any capacity of our B2B customers (companies, professional firms and sole professionals).

 

Controller

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Joint Controllers (DH Group companies)  

Personal information (name of the company/business/organisation you work for, tax code)

 

Purchase history.

 

Preferences and interests and cluster derived data.

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, e-mail address)

 

Invoice data

 

Payment data

Marketing activities (i.e. newsletter, promotional communications via e-mail, telephone, sms, and ordinary mail, surveys, market searches) relating to branded products, services and initiatives.

 

Legal Basis: your consent - Article 6(1)(a) GDPR

Data subject

 

Organisations that manage fairs and events in which we have taken part as exhibitors, subject to the prior consent of the data subject to the disclosure of personal data to third parties for the purpose of sending promotional messages for marketing purposes;

 

Social networks to which you are subscribed, subject to your prior consent

Impossibility to receive marketing communications.

 

No consequences for the purchase or the other activities on the website

7 (seven) years from the consent*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority;

Joint Controllers (DH Group Companies)  

Personal information (name of the company/business/organisation you work for, tax code)

 

Purchase history.

 

Preferences and interests.

 

Country of residence

 

Zip code and address

 

Contact details (e.g. phone number, e-mail address)

 

Invoice data

 

Payment data

Profiling activities aimed at the realization of personalized marketing messages and/or offerings based on your preferences (including activities and purchases done on the Site and in Store) and relating to branded products Legal Basis: your consent - Article 6(1)(a) GDPR

Data subject

 

Organisations that manage fairs and events in which we have taken part as exhibitors, subject to the prior consent of the data subject to the disclosure of personal data to third parties for the purpose of sending promotional messages for marketing purposes;

 

Social networks to which you are subscribed, subject to your prior consent

 

Impossibility to receive marketing communications.

 

No consequences for the purchase or the other activities on the website

7 (seven) years from the consent*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority;

 

  1. PLUG-INS AND INTERACTIONS WITH SOCIAL NETWORKS

The Site may interactions with third parties websites (e.g. the other companies of the Group) and social networks (e.g. Facebook, Instagram, LinkedIn) through hyperlink, sharing button, social plug-in and other similar instruments.

By accessing one of the areas of the Site equipped with this type of tool, the Internet browser will connect the data subjects (either consumers or business data subjects) directly to the servers of the third-party websites in question, thus transferring their personal data to the providers of those Websites.

Depending on the specific agreements in place with the providers of such third-party websites, Arclinea may act as autonomous controller or joint controllers with respect to such data transfers. With regard to the methods of privacy protection and processing of personal data collected by the operators of third- party websites with which the interactions described above occur, please refer to the relevant websites.

 

  1. BROWSING DATA AND COOKIES

When a user (either acting as a consumer or as a business user) visits the Site, the controllers may collect the following browsing information:

This information is collected for the proper operation, management, maintenance and improvement of the Site, as well as to ensure that users’ browsing is safe and to be able to establish liability in the event of security breaches. They may also be used to allow us to obtain statistics on the use of the Website with the possibility of analyzing the data also in aggregate form and to carry out profiling activities.

Users are always free to decide whether to provide the controllers with their browsing data, for example by choosing to disable cookies through the settings of their browsers. However, refusal to provide information necessary for navigation purposes may make it impossible to carry out activities strictly related to navigation itself and, therefore, also to consult and interact with the Website.

We keep these data only for the time strictly necessary for the purposes for which they are collected.

Through the Website, navigation data is collected through the use of cookies. To learn more about how cookies work, and how to activate and deactivate them, please consult our cookie policy which is accessible through this Site.

 

  1. ADMINISTRATIVE AND SECURITY PURPOSES

This paragraph describes the processing operations carried out by Design Holding for the purpose of storing your Personal Data in the Group CRM Database for administrative purposes, including purposes aimed at ensuring the same level of network and information security.

 

Controllers

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Design Holding

 

 

Personal data collected according to the above paragraphs

Storing your Personal Data in the Group CRM Database for administrative purposes, including purposes aimed at ensuring the same level of network and information security to all Personal Data individually collected by the companies of the Group

Legal Basis: legitimate interest of the companies of the Group - Article 6(1)(f) GDPR

Data subject

N/A

The data will not be stored for a period of time exceeding those indicated in the precedent paragraphs

 

  1. WHEN YOU DIRECTLY CONTACT THE CONTROLLERS

This paragraph describes the processing activities carried out by Arclinea, Design Holding and the Joint Controllers for the purpose of dealing with your requests made when you contact us through the relevant contact channel provided through the Website.

Controllers

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Design Holding

Joint Controllers (DH Group Companies)

 

 

 

Personal information (e.g. name, surname)

 

Contact details (e.g. e-mail address, phone number, postal address)

 

Information contained in your request and provided to the controllers

Deal with and provide a feedback to your requests

 

Legal Basis: consent (provided with a clear affirmative action while contacting us seeking information) - Article 6(1)(a) GDPR

Data subject

Impossibility to deal with your requests

Time necessary to deal with and provide a feedback to your requests*

 

*Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

 

  1. COMPLY WITH LEGAL OBLIGATIONS AND EXERCISE OF RIGHTS BEFORE COMPETENT AUTHORITIES

This paragraph describes the processing operations carried out by Arclinea, Design Holding and the Joint Controllers for the purpose of exercise of their rights before a competent authority or to comply with legal obligations imposed on them.

 

Controllers

Categories of data

Purpose and legal basis of the processing

Source of data

Consequences of not providing data

Retention period

Arclinea

Design Holding

Joint Controllers (DH Group Companies)

 

 

Personal data collected according to the precedent paragraphs and other data that can be suitable for the specific intended purpose

Exercise and/or defence of a right before a competent authority (e.g. judicial, administrative)

 

Legal Basis: legitimate interest of the controller - Article 6(1)(f) GDPR

Data subject

N/A

Time necessary for the purpose of exercise and/or defend the specific right involved*

 

Extension possible if necessary to comply with a legal obligation or to defend a right before a competent authority

Arclinea

Design Holding

Joint Controllers

(DH Group Companies)

 

Personal data collected according to the precedent paragraphs and other data that can be suitable for the specific intended purpose.

Compliance with a legal obligation

 

Legal Basis: need to comply with a legal obligation - Article 6(1)(c) GDPR

Data subject

N/A

Time necessary for the purpose of complying with the legal obligation concerned

 

4.             WHO YOUR PERSONAL MAY BE DISCLOSED TO

When necessary for the purposes described in this Notice, your personal data may be disclosed to third parties as shown in this paragraph.

a)    Data processors

Arclinea, the Joint Controllers and Design Holding, where applicable, have appointed third parties for the provision of services relating to the Site (e.g. webmaster, IT consultant and system integrator, e-commerce platform, CRM marketing platform, customer care service provider). Such third parties will process your personal data on behalf and under the instructions of Arclinea, Design Holding or the Joint Controllers pursuant to Article 28 GDPR.

These subjects have been Xed among professionals who guarantee the implementation of appropriate technical and organizational measures, so that the processing is always carried out in compliance with applicable legislation and ensuring the protection of data subjects’ rights.

b)    Other third parties

Your personal data might be disclosed to other third parties that would process it as autonomous controllers, such as:

·       Carriers of products purchased through the Website.

·       Providers of payment services or payment gateways/platforms used to purchase products through the Website (e.g. PayPal, credit card service providers, banks, financial intermediaries etc.).

·       Third parties in the context of any mergers/acquisitions that may involve the Group, to the extent strictly necessary for the purposes of the transaction based on a legitimate interest, and in any event to the extent permitted by the applicable law.

·       Professionals such as lawyers, auditors or accountants.

·       Third parties such as judicial and/or administrative authorities, law enforcement agencies where necessary for the exercise or protection of rights of Arclinea and/or, where applicable, Design Holding as well as to comply with statutory obligations.

You may request more detailed information on those subjects to whom your personal may be disclosed by contacting us as indicated in the paragraph “How to contact the controllers”.

5.             TRANSFER OF PERSONAL DATA OUTSIDE THE EEA

For the purposes of the processing described in this Notice, your personal data may be transferred to countries outside the European Economic Area (“EEA”), which includes all Member States of European Union, Norway, Liechtenstein, and Iceland.

If that is the case, we ensure that all possible transfers outside the EEA will be made in such a way as to guarantee the full protection of your rights and freedoms. Namely, with re