Privacy Policy of aria-couture.com

For information about the personal data collected, its purposes, and the parties with whom it is shared, please contact the Data Controller.

Data Controller Arianna Lenticchia
VAT ID 04160220366
Company Registration No. MO-447799, Modena
Data Controller's email address: info@aria-couture.com

Types of Data Collected

The Data Controller does not provide a list of the types of Personal Data collected. Full details on each type of collected Personal Data are provided in the relevant sections of this privacy policy or through specific information displayed prior to Data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Application. Unless otherwise specified, all Data requested by this Application is mandatory; failure to provide it may make it impossible for this Application to deliver its services. In cases where this Application specifically states that some Data is optional, Users are free to refrain from communicating it without affecting the Service’s availability or functionality.

Users who are uncertain about which Data is mandatory are encouraged to contact the Data Controller. Any use of Cookies or other tracking tools by this Application or the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User is responsible for any third-party Personal Data obtained, published, or shared through this Application.

Methods and Location of Data Processing

Processing Methods

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In some cases, in addition to the Data Controller, other parties involved in the operation of this Application (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as technical service providers, mail carriers, hosting providers, IT companies, communication agencies) may have access to the Data. These parties may also be appointed, if necessary, as Data Processors by the Data Controller. An updated list of Data Processors may be requested from the Data Controller at any time.

Location

Data is processed at the operational offices of the Data Controller and any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

The User’s Personal Data may be transferred to a country other than their own. To obtain more information on the Data's processing location, the User may refer to the section detailing Personal Data processing.

Retention Period

Unless otherwise stated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or based on the User's consent.

Cookie Policy

This Application uses Tracking Tools. Users can consult the Cookie Policy to learn more.

Additional Information for Users

Legal Basis of Processing

The Data Controller processes Personal Data related to the User if one of the following applies:

• The User has given consent for one or more specific purposes.
• Processing is necessary for the performance of a contract with the User or for pre-contractual measures.
• Processing is required to fulfill a legal obligation to which the Data Controller is subject.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• Processing is necessary for the purposes of legitimate interests pursued by the Data Controller or third parties.

The Data Controller is available to clarify the specific legal basis of each processing activity and to specify whether the processing is legally required, based on a contract, or necessary to conclude a contract.

Additional Information on Data Retention

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected, and it may be retained longer to meet legal obligations or based on the User's consent.

• For contractual purposes: Data will be retained until contract performance is completed.
• For legitimate interests: Data will be retained until the interest is fulfilled. Users can request more information on legitimate interests pursued by the Data Controller.
• For consent-based processing: Data may be retained until consent is withdrawn.

After the retention period ends, Personal Data will be deleted. Therefore, access, deletion, rectification, and data portability rights cannot be exercised after this period.

User Rights Under the GDPR

Users may exercise certain rights concerning their Data processed by the Data Controller, including:

• Withdrawing consent at any time.
• Objecting to Data processing.
• Accessing their Data.
• Verifying and requesting correction.
• Requesting Data processing restriction.
• Requesting Data deletion.
• Receiving their Data or transferring it to another controller.
• Filing a complaint with a data protection authority or taking legal action.

Users can obtain information on the legal basis for transferring Data abroad, including to any international organization governed by international law, such as the UN, as well as the security measures adopted by the Data Controller.

Opposition Rights

Users have the right to object to processing when it occurs on a basis other than consent, particularly if Data is processed for public interest purposes, official authority, or legitimate interests of the Data Controller. For direct marketing, Users may object freely, and upon such opposition, Personal Data will no longer be processed for this purpose.

Exercising Rights

Requests to exercise User rights may be sent to the Data Controller at the contact details provided in this document. The request is free, and the Data Controller will respond as soon as possible, within one month, providing the legally required information.

Additional Information on Processing

Users’ Personal Data may be used in legal proceedings or in the preparatory stages of possible litigation for the defense against misuse of this Application. Specific information may be provided on request.

Changes to this Privacy Policy The Data Controller reserves the right to modify this privacy policy at any time by notifying Users on this page and, where feasible, on this Application, as well as possibly sending a notification to Users through one of the contact methods held by the Data Controller. Users are encouraged to check this page frequently, referring to the date of the last modification indicated below.

If the changes affect processing activities based on the User’s consent, the Data Controller will collect new consent from the User, if necessary.