Privacy Policy
Data Controller
+39 srl – VIUZZO DEL CROCIFISSO DELLE TORRI 10, 50142, FLORENCE, ITALY – VAT NO. AND TAX CODE: 06721860481
Data Controller's email address: info@39leathergoods.com
Types of Data Collected
Among the Personal Data collected by this Application, either independently or through third parties, are: Cookies, Usage Data, first name, last name, telephone number and email address.
Full details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or through specific information notices displayed before the data are collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application.
All Data requested by this Application are mandatory unless otherwise specified. Failure to provide such Data may make it impossible for this Application to provide its services. Where this Application specifically indicates that certain Data are optional, Users are free not to provide such Data without any consequences for the availability or operation of the service.
Users who are unsure about which Data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies or other tracking tools by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is intended to provide the service requested by the User, in addition to any other purposes described in this document and, where available, in the Cookie Policy.
The User is responsible for any Personal Data relating to third parties that are published or shared through this Application and confirms that they have the right to communicate or disclose such Data, thereby releasing the Data Controller from any liability towards third parties.
Newsletter and Marketing Communications
The personal data provided by Users will be processed by +39 srl, acting as the Data Controller, for the purpose of managing newsletter subscriptions and sending updates, news, new product launches, promotions and marketing communications relating to the products and activities of the 39 Leather Goods brand.
The personal data processed for this purpose may include the User's email address and, where provided, first name and last name.
The processing is based on the User's freely given, specific and informed consent, pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR).
Newsletter subscriptions are managed through GetResponse, an external email marketing platform that processes Personal Data on behalf of the Data Controller.
GetResponse acts as a Data Processor in accordance with the applicable data processing agreement.
Personal Data will be processed electronically and retained until the User withdraws their consent or unsubscribes from the newsletter.
Users may withdraw their consent at any time, free of charge, by clicking the unsubscribe link included in every marketing email or by contacting the Data Controller at info@39leathergoods.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
For further information about the processing of Personal Data by GetResponse, please refer to its Privacy Policy.
Methods and Location of Data Processing
Methods of Processing
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data.
Data processing is carried out using IT and/or electronic tools, following organisational procedures and methods strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, Personal Data may be accessible to certain categories of persons involved in the organisation of this website (administrative, sales, marketing and legal personnel, as well as system administrators) or to external parties (such as third-party technical service providers, postal and delivery services, hosting providers, IT companies and communication agencies), who may also be appointed as Data Processors by the Data Controller, where necessary.
An updated list of Data Processors may be requested from the Data Controller at any time.
Location
Data are processed at the Data Controller's operating offices and in any other location where the parties involved in the processing are situated.
For further information, please contact the Data Controller.
Data Retention Period
Data are processed for the time necessary to provide the service requested by the User or for the purposes described in this document.
The User may always request the restriction of processing or the deletion of their Personal Data, subject to any applicable legal obligations.
Purposes of Processing the Collected Data
User Data are collected to enable the Data Controller to provide its services, as well as for the following purposes: Analytics, Contacting the User and Payment Processing.
The types of Personal Data used for each purpose are specified in the relevant sections of this document.
Details on the Processing of Personal Data
Personal Data are collected for the following purposes and through the following services:
Contacting the User
By completing the contact form with their Personal Data, the User authorises the use of such Data to respond to requests for information, quotations or any other enquiries indicated in the form heading.
Personal Data collected: last name, email address, first name and telephone number.
Google Analytics
Google Analytics is a web analytics service provided by Google that allows the Data Controller to monitor and analyse website traffic and understand how Users interact with this Application.
Google Analytics collects information relating to Users' interactions with the website, including pages visited, browsing behaviour, session duration, browser and device information, and other usage-related data.
Google processes this information on behalf of the Data Controller to generate statistical reports and provide analytics services.
The use of Google Analytics may involve the collection of Cookies and Usage Data.
Personal Data collected: Cookies, Usage Data, device and browser information, and information relating to website interactions.
Legal basis: User consent, where required under applicable data protection and cookie regulations.
Place of processing: Data may be processed in different locations, including outside the European Economic Area, subject to the applicable safeguards for international data transfers.
For further information about how Google processes Personal Data, please refer to Google's Privacy Policy and Google Analytics data protection information.
Payment Processing
Payment processing services allow this Application to process payments by credit card, bank transfer or other payment methods.
Payment-related Data are collected directly by the provider of the requested payment service and are not processed by this Application in any way.
Some of these services may also allow scheduled messages to be sent to the User, such as emails containing invoices or payment notifications.
Privacy Policy.
Further Information on Personal Data
Online Sale of Goods and Services
The Personal Data collected are used to provide services to the User or to sell products, including payment processing and any applicable delivery.
Personal Data collected to complete a payment may include credit card details, bank account information used for bank transfers or other payment instruments.
The payment Data collected by this Application depend on the payment system used.
Cookie Policy
This Application uses Cookies.
For further information and a detailed explanation, please refer to the Cookie Policy.
Further Information on Data Processing
Legal Defence
The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages leading to possible legal action, in order to defend against misuse of this Application or related services by the User.
The User acknowledges that the Data Controller may be required to disclose Personal Data upon request from public authorities.
Specific Privacy Notices
At the User's request, in addition to the information contained in this Privacy Policy, this Application may provide additional and contextual privacy notices concerning specific services or the collection and processing of Personal Data.
System Logs and Maintenance
For operational and maintenance purposes, this Application and any third-party services used by it may collect system logs, which are files recording interactions and may also contain Personal Data, such as the User's IP address.
Information Not Contained in This Policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided in this document.
Exercising User Rights
Users have the right, at any time, to obtain confirmation as to whether or not their Personal Data are being processed by the Data Controller.
Users also have the right to know the content and origin of their Personal Data, verify their accuracy, request their completion, deletion, updating, rectification, anonymisation or blocking of any Personal Data processed unlawfully, as well as to object to their processing on legitimate grounds.
Requests should be addressed to the Data Controller.
This Application does not support "Do Not Track" requests.
To determine whether any third-party services used by this Application support such requests, Users are encouraged to consult the relevant Privacy Policies.
Changes to This Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page.
Users are therefore encouraged to consult this page regularly, referring to the date of the last modification indicated at the bottom of the page.
If Users do not accept the changes made to this Privacy Policy, they must stop using this Application and may request the Data Controller to remove their Personal Data.
Unless otherwise specified, the previous version of this Privacy Policy shall continue to apply to Personal Data collected up to that point.
Information About This Privacy Policy
The Data Controller is responsible for this Privacy Policy, which was prepared using templates provided by Iubenda and stored on its servers.
Definitions and Legal References
Personal Data (or Data)
Any information relating to an identified or identifiable natural person, directly or indirectly, including by reference to any other information, such as a personal identification number.
Usage Data
Information collected automatically through this Application (or through third-party applications used by this Application), which may include: IP addresses or domain names of the computers used by Users connecting to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical status code of the server response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time-related details of the visit (such as the time spent on each page) and details relating to the navigation path within the Application, with particular reference to the sequence of pages visited and the parameters relating to the User's operating system and IT environment.
User
The individual using this Application who must coincide with the Data Subject or be authorised by the Data Subject, and whose Personal Data are being processed.
Data Subject
The natural or legal person to whom the Personal Data refer.
Data Processor
The natural or legal person, public authority, agency or other body appointed by the Data Controller to process Personal Data on its behalf, in accordance with the provisions of this Privacy Policy.
Data Controller
The natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools used, including security measures, in connection with the operation and use of this Application.
Unless otherwise specified, the Data Controller is the owner of this Application.
This Application
The hardware or software tool through which Users' Personal Data are collected and processed.
Cookies
Small pieces of data stored on the User's device.
Legal References
Notice to European Users: This Privacy Policy is provided in accordance with applicable European data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Directive 2002/58/EC, as amended by Directive 2009/136/EC, concerning the use of Cookies and electronic communications.
This Privacy Policy relates exclusively to this Application.