PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679
Data subjects: users and customers of the โAEFFE S.P.A.โ website www.philosophyofficial.com
WHY THIS INFORMATIONย
ย
Pursuant to Regulation (EU) 2016/679 (hereinafter the โRegulationโ, or โGDPRโ), this page describesย how the personal data of users and customers of the website of โAEFFE S.P.A.โ accessible by electronicย means at the following address: www.philosophyofficial.com are processed.
This information does not concern other sites, pages or online services that can be reached viaย hypertext links that may be published on this site, but which refer to resources outside the domainย www.philosophyofficial.com
DATA CONTROLLERS
Following consultation of the site or the purchase of products on the site, data relating to identified orย identifiable natural persons may be processed.
AEFFE S.P.A. with registered office in Via delle Querce 51 - 47842 San Giovanni in Marignano (RN) VATย no.: 01928480407, Email: privacy@aeffe.com, Tel: 0541 965211.
Aeffe S.P.A. is the owner of the processing of your personal data relating to navigation on the site,registration on the online portal, orders placed and to respond to customer care requests received andย in general to guarantee the functions available on the website; as well as, subject to your free consent,ย for the optional purposes of marketing and profiling.
Drop Srl with registered office in Montegranaro (FM), via Sandro Pertini n.1, cap. 63812, tax code,ย registration number with the Marche Companies' Register and VAT number 01383870431. E-mailย privacy@drop.it.
Drop Srl is the owner of the processing of your personal data for the sole purposes necessary toย comply with regulatory obligations in tax and accounting matters arising from purchases made at theย online shop on the site
- Legal basis: legal obligation and contractual obligation.
DATA PROTECTION OFFICER
The Data Protection Officer (โDPOโ) for Aeffe S.p.A. is the company Studio Paci & C. Srl (Contactย person Dr. Gloriamaria Paci) who can be contacted at the following address:
dpo.aeffe@studiopaciecsrl.it, telephone: 0541 -1795431 and PEC: studiopaciecsrl@pec.it.
The Data Protection Officer (โDPOโ) of Drop Srl can be contacted at the following e-mail address:ย dpo@drop.it.
TYPES OF DATA PROCESSED, PURPOSE OF PROCESSING AND LEGAL BASIS
Given that personal data means any information relating to an identified or identifiable natural person,ย directly or indirectly (art. 4 no. 1 GDPR), that the data subject means the natural person (user and/orย client of the Site) to whom the data refer and that processing means any operation or set of operationsย carried out with or without the aid of automated processes and applied to personal data or sets ofย personal data (art. 4 no. 2 GDPR), the personal data that Aeffe S.p.A. processes as a result ofย navigation on the Site are as follows.
1) Navigation data
Legal basis: โdata processing necessary for the navigation of the websiteโ - contractual obligation - art.ย 6 par. 1 letter b) GDPRย
The computer systems and software procedures used to operate this site acquire, during their normalย operation, some personal data whose transmission is implicit in the use of Internet communicationย protocols.ย
This category of data includes the IP addresses or domain names of the computers and terminalsย used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resourcesย requested, the time of the request, the method used to submit the request to the server, the size of theย file obtained in response, the numerical code indicating the status of the response given by the serverย (successful, error, etc.) and other parameters relating to the user's operating system and computerย environment.ย
This data, which is necessary to navigate the Site and to use the information it contains, is alsoย processed by Aeffe Sp.A. in order to:ย
- obtain aggregate and anonymous statistical information on the use of the Site (most visited pages,ย number of visitors per time slot or per day, geographical areas of origin of visitors, etc.);ย
- check the correct usability of the contents offered by the Site;ย
- prevent or combat any possible computer offences, fraudulent use of the functionalities available onย the Site, also for the purpose of reconstructing security incidents and their traceability
Duration of storage:ย
browsing data in compliance with the principles of lawfulness, purpose limitation, data minimisation,ย in accordance with Article 5 of the GDPR, will be kept for a period of time not exceeding theย achievement of the technical purposes described above for which they are collected and processed,ย except for any need to ascertain crimes by the judicial authorities.
2) Data communicated by the userย
Legal basis: โdata processing necessary to answer usersโ questionsโ - contractual obligation - art. 6ย par. 1 letter b) GDPRย
The optional, explicit and voluntary sending of messages to the contact addresses of Aeffe S.p.A.,ย private messages sent by users to institutional profiles/pages and on social media, as well as theย completion and submission of forms on the owner's site, entail the acquisition of the sender's contactย data, necessary to respond, as well as all the personal data included in the same communications.ย
Specific information is published on the pages of the site set up for the provision of certain services,ย where necessary the user's consent is collected, informing the user of the purpose and the option ofย providing it.ย
Duration of storage:ย
The data communicated by the user are stored for the time necessary to handle individual requests,ย any subsequent storage for statistical purposes provides for the anonymisation of such data (exceptย for any need to ascertain criminal offences by judicial authorities).
3) Registration and purchase data
Legal basis: User registration and purchase - contractual obligation - art. 6 par. 1 letter b) GDPR
Invoicing and fiscal and accounting fulfilments - legal obligation - art. 6 par. 1 letter c) GDPR
Registration on the portal is preparatory to correct identification in anticipation of and against aย purchase. Registration will allow you to create your user profile without having to re-enter your data forย subsequent purchases. Your user profile will store your residential address, shipping address (ifย different from your residence), tax code if required by law, and your purchase history. You can requestย the deletion of your user profile at any time. It is possible to make an online purchase even withoutย registering on the portal, your data will be processed exclusively for your correct identification, to allow
the purchase and shipment in application of the general conditions of sale, and to allow invoicing inย accordance with the law.
Information on the processing of Level I data can be found in the specific information available in theย registration and purchase forms.
4) Data acquired through cookies and other tracking systemsย
Use is made of:ย
a) technical cookies necessary for user navigation, they facilitate the correct navigation of the site andย the usability of its contents by the user. Legal basis: โcontractual as they are functional and necessaryโ.ย
b) analytical cookies used to process aggregate statistical analyses of the use of and interaction withย the site by the user. Subject to the user's consent. Legal basis: โconsentโ.ย
c) Profiling cookies are used to collect information on the preferences expressed by the user duringย browsing and to prepare reports to be used for targeted advertising and marketing campaigns. Legalย basis: โconsentโ.ย
For analytical and profiling cookies, consent to the processing of personal data, pursuant to Art.ย 6(1)(a) GDPR, is expressed by the data subject by clicking on the accept all cookies button or byย managing the preferences available by clicking on the customise button, in accordance with theย ย
provisions of the โCookie and other tracking tools guidelinesโ annexed to the GPDP (Garante per laย Protezione dei Dati Personali) Measure no. 231 of 10.06.2021.ย
Information on the processing of data, the purpose, duration and complete management of cookies,ย including their consent and revocation, can be found in the document โCookie Policyโ also in the footer.
5) Direct marketingย
Legal basis: consent of the data subject - Art. 6 para. 1 letter a) GDPRย
By entering the personal data (identification and contact details) requested in the forms providing forย the granting of consent for direct marketing activities (including newsletter subscription), the Userย declares that he/she having read this information notice, and gives consent, on an optional basis, to the processing ofย personal data for marketing activities.ย
In addition to the data communicated by the User, Aeffe S.p.A. also acquires the date and time theย form was sent, the page it came from and the IP address of the device used to register consent.
The data communicated and, in any case, acquired by Aeffe S.p.A. are used to receive periodic e-mailย communications containing information about new products on sale at the e-commerce site, eventsย and promotions (marketing purposes) from Aeffe S.p.A..ย
In relation to the sending of promotional material to your e-mail inbox, interactions with theย communications transmitted (e.g. rate of opening of e-mails, any clicks on links and/or banners and/orย buttons) may also be processed.ย
6) Profilingย
Legal basis: consent of the data subject - Art. 6 para. 1 letter a) GDPRย
By entering the personal data (identification and contact details) requested in the forms providing forย the granting of consent for profiling, the User declares that he/she has read this information notice,ย that he/she is over 16 years of age and gives his/her consent, which is in any case optional, to theย processing of personal data for profiling activities.ย
In addition to the data communicated by the User, Aeffe S.p.A. also acquires the date and time theย form was sent, the page it came from and the IP address of the device used to register consent.ย
As a result of the specific consent given to the profiling activity, Aeffe S.p.A. acquires a series of dataย and information suitable for revealing consumption habits and lifestyles based on the preferencesย shown by the User when interacting with the pages of the Site, the products purchased and theย contents of the communications received by Aeffe S.p.A..ย
These data, associated with each other, contribute to defining, through their inclusion in clusters, i.e.ย groups of distinct Users based on the preferences shown, the User's profile and are functional toย receiving communications that are personalised on the basis of the profile.ย
With regard to the sending of promotional material to your e-mail inbox, interactions with theย communications transmitted (e.g. rate of opening of e-mails, clicks on links and/or banners and/orย buttons) may also be processed.
7) Further data acquired by the Data Controllerย
The subscription to the newsletter, the possible request to receive personalized commercialย communications and also the interaction with the pages of the Site that the User can reach alsoย through social networks, as a result of the marketing campaigns promoted by Aeffe S.p.A. thatย determine the redirection to a specific page (so-called โlanding pageโ), allows Aeffe S.p.A. to acquireย other data than those communicated by the Users, such as, for example, the date and time of theย request and the date and time of the request. so called โlanding pageโ), allows Aeffe S.p.A. to acquireย other data than those communicated by the Users, such as, for example, the date and time of openingย of e-mails containing newsletters and commercial communications, the contents of interest andย therefore the preferences shown by the recipients.ย
This data is functional for establishing a relationship with customers and also for sending news and/orย information selected on the basis of demonstrated preferences.ย
For the purposes set out above, the legal basis legitimising the processing is represented by theย consent to the processing, pursuant to Art. 6, par. 1 lett. a) GDPR, expressed by the data subject byย clicking on the relevant boxes within the form intended for newsletter subscription and the request toย receive personalised communications.
Further details on the processing of the data communicated by Users, the legal bases and processingย methods are available in the complete information notices of the data acquisition forms of theย marketing campaigns.ย
8) Social Media Policy: Information about the processing of personal data carried out through theย Social Media platforms usedย
For information on the processing of personal data carried out by the operators of the Social Mediaย platforms, please refer to the information provided by them through their respective privacy policies.ย Aeffe S.p.A. processes personal data provided by users through the pages of the dedicated Socialย Media platforms, as part of its corporate promotion and advertising purposes, in order to manageย interactions with users (comments, public posts, messages, shares, etc.) in compliance with current legislation on the protection of personal data and with this privacy policy; where necessary, the user'sย consent is collected, informing the user from time to time on the purposes and the optionality ofย providing it.ย
Personal or โsensitiveโ data included in public comments or posts within social media channels mayย be removed.ย
9) Customer Care
Legal basis: contractual obligation - art. 6 para 1 letter b) GDPR.ย
Handling and responding to any reports, post-sales inquiries (including order status and tracking),ย purchase assistance, returns, refunds, order cancellations and complaints submitted by theย Customer, in compliance with the general terms and conditions of sale.ย
OPTIONAL PROVISION OF DATA AND REVOCABILITY OF CONSENTย
With the exception of automatically acquired navigation data, the provision of personal data is alwaysย voluntary and optional, although the refusal of communication may prevent the sending of messages,ย requests for information or assistance, as well as the submission of any complaints, reports andย requests for assistance in general.ย
Consent to data processing, where required, is also optional but necessary in the event that the dataย subject wishes to subscribe to the newsletter and/or receive personalized commercialย communications.ย
Full information on data processing is available in the information notices attached to theย aforementioned forms, to which reference is made.ย
The right to revoke consent to the processing given, both for marketing and profiling activities, isย recognized at any time to the data subject and can be exercised by accessing their personal area, afterย registration, or by using the unsubscribe functionality present at the bottom of the commercialย communications received and/or profiling or by sending a communication to privacy@aeffe.com.
PERSONAL DATA OTHER THAN THOSE IDENTIFIED IN THE CONTACT FORMSย
Since the contact forms on the pages of the Site contain free text fields or allow in some cases theย sending of files the User is invited to verify the personal data he/she intends to share, avoidingย communicating the so-called special data, i.e., data likely to reveal the person's political opinions,ย religious or philosophical beliefs, state of health, sexual life or sexual orientation. With regard to suchย data, if Aeffe S.p.A. considers that the communication was made in error or does not consider itย
necessary to process the request received, it will not take it into account and/or will provide for itsย immediate deletion.ย
PERSONAL DATA REFERRING TO OTHER PERSONS (OTHER THAN THE DATA SUBJECT)ย
For the same reasons explained above, contact forms and files sent as attachments may in factย contain personal data referring to other persons concerned (for example, in the case where theย shipment of the order is requested to a person other than the buyer). In the event that the User decidesย to communicate such data, he/she assumes full responsibility for it, even by proxy of the data subject.ย
PERIOD OF DATA RETENTIONย
In compliance with the principle of limitation of storage under Article 5 GDPR, data are kept for theย time strictly necessary to achieve the purposes described above.ย
In particular:ย
- In the case of portal registration, your data will be retained until your eventual cancellation ofย membership or following a period of inactivity of 5 years.ย
- The data related to the optional purposes (4. Direct Marketing - 5. Profiling) are kept until revocationย of consent to be requested either by accessing your personal area, by the automatic modalitiesย present in the e-mails, or by sending the request to the contact data of the Data Controller. At the endย of 2 years from the acquisition of consent, you will be sent a communication to the issued contactย channels to allow the revocation of consent or continuation of the same.ย
- for activities carried out in performance of a contract or pre-contractual measures taken at theย request of the data subject, pursuant to Art. 6(1)(b) GDPR, the data are retained for the duration of theย contract; for example, for portal registration, your data will be retained until your eventual cancellationย of your membership or following a period of inactivity of 5 years. If you have made a purchase, theย same may be retained for a period of time in compliance with the obligations prescribed by applicableย laws, for example on the basis of tax legislation for at least 10 years;ย
It is without prejudice, however, to the right of the Data Controllers to retain the data for a longer periodย than that indicated above in order to ascertain and/or defend its rights in court (e.g. in case ofย complaints). In such cases, the retention times are those related to the aforementioned defensiveย needs and the terms may coincide with the decadential and prescriptive terms provided by law.ย
RECIPIENTS OF THE DATAย
Recipients of the data collected as a result of the consultation of some of the services listed above areย certain entities designated by the Data Controllers in accordance with Article 28 of the Regulations, asย data processors, and other additional service providers in the sphere of web-agencies, digitalย communication, supportย
systems, social networks in the area of data collection through marketing campaigns and any otherย digital service providers for which you can request a full list by writing to privacy@aeffe.com andย privacy@drop.it. Some data and information may be transmitted or acquired by parties identified asย independent data controllers, including Third Party Companies such as payment method operatorsย chosen by the data subject (e.g., PayPal, Scalapay, Klarna), data related to cookies that are usuallyย anonymized before sending, for statistical purposes.ย
The personal data collected are also processed by the staff of the Data Controllers acting on the basisย of specific instructions provided by the Data Controllers regarding the purposes and methods of suchย processing.
SECURITY OF PROCESSINGย
The personal data transmitted and stored for the time necessary for the stated purposes are protectedย by specific technical organizational security measures with reference to art. 32 of the Regulations,ย capable of guaranteeing on a permanent basis the confidentiality, integrity, availability, as well as theย ability to promptly restore the availability and access of personal data in the event of a physical orย technical incident, including against the risks of destruction, loss, modification, unauthorizedย disclosure or from access, accidental or unlawful, to personal data transmitted, stored or otherwiseย processed. The communication of data via the web is protected by SSL encryption of theย communication channel, the completion of contact forms on the Site, is protected by Google'sย โReCaptchaโ system that allows to distinguish between so-called โhumanโ and automated access inย order to prevent โrobotizedโ systems can simulate data entries that cannot be traced back to a personย with the intention of compromising the functionality of the Site.ย
your personal data of which Drop Srl is the Data Controller are processed by Drop Srl within theย European Union and are not transferred to other non-EU countries.ย
RIGHTS OF DATA SUBJECTSย
The exercise of rights is guaranteed by both data controllers, respectively to the purposes of their ownย competence, by writing to the contact details above. Data subjects have the right to obtain, in theย cases provided for, access to their personal data, rectification, deletion of the same, limitation of theย processing concerning them, portability, or to object to the processing and to revoke consent (whereย used as a legal basis) with reference to Articles 15 to 22 of the Regulations). The request is madeย through the contact details of the Data Controllers.ย
For the exercise of rights, it is also possible to use the template prepared and available on the websiteย of the Data Protection Authority at this link: https://www.garanteprivacy.it/home/docweb/-/docweb display/docweb/4535524
RIGHT TO COMPLAINย
Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to file a complaint with the Supervisory Authority, as provided for in Article 77 of the Regulation, or to take legal action before the competent courts (Article 79 of the Regulation). The complaint form is available on the website of the Data Protection Authority at the following link:
https://www.garanteprivacy.it/home/docweb/-/docweb display/docweb/4535524
Last Update: 17/03/2025
ย