Privacy Policy

A.F. MAYER, with registered office in Reggio Emilia, Via Pansa 45, 42124, VAT/CF 02991320355, as an independent data controller of personal data of users (hereinafter referred to as “Users”) who browse and use the services available on the website chiaraferragnicollection.com (hereinafter referred to as the “Site” and the “Services”), hereby provides the privacy policy pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter referred to as the “Regulation” or the “Applicable Legislation”).

This Site and the Services are intended for individuals who have reached the age of 18. Therefore, the Data Controllers do not collect personal data of individuals under 18 years of age. Upon request of the Users, the Data Controller will promptly delete any inadvertently collected personal data related to individuals under 18 years of age.

The Data Controllers highly respect the right to privacy and the protection of personal data of their Users. For any information regarding this privacy policy, Users can contact the Data Controller at any time using the following methods:

For A.F. MAYER:

By sending a registered letter with return receipt to the Data Controller’s registered office (Reggio Emilia, Via Pansa 45, 42124); By sending an email to info@mayerorganics.com.

The Data Controller has not appointed a Data Protection Officer (DPO) as it is not subject to the obligation of designation under Article 37 of the Regulation.

Purposes of the processing

1.1 The personal data of Users will be lawfully processed by A.F. MAYER. in accordance with Article 6 of the Regulation for the following processing purposes: a) contractual obligations and provision of Services: To allow the use of the Services, including, for example, the purchase of products, the shipment of purchased products, and the management of any product returns: the processed data includes the name, surname, shipping address, email address, as well as any other personal information voluntarily provided by the User, for example, in case of a return note; For the management of any requests received through customer service and/or the Site: the processed data includes name, surname, email address, and any other data that may be necessary depending on the circumstances (e.g., order number, address, etc.).

The User’s personal data will be used by A.F. MAYER. solely for the purpose of verifying the User’s identity (including through email address validation), thus preventing possible fraud or abuse, and contacting the User for service-related reasons (e.g., sending notifications regarding the Services) and/or managing orders and requests as indicated above. Except as otherwise provided in this privacy policy, A.F. MAYER. will not make the Users’ personal data accessible to other Users and/or third parties.

The legal basis for the processing is the need to perform pre-contractual and contractual obligations of which the User is a party. The provision of personal data for the above-mentioned processing purposes is optional but necessary, as the failure to provide them will make it impossible for the User to use the Services, purchase products on the Site, or receive post-sales support.

b) administrative and accounting purposes, i.e., to carry out organizational, administrative, financial, and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations, for example, issuing purchase receipts and/or invoices;

The legal basis for the processing is the need to perform pre-contractual and contractual obligations of which the User is a party, as well as the need to comply with legal obligations. The provision of personal data for the above-mentioned processing purposes is mandatory to finalize orders and comply with legal obligations.

c) legal obligations, i.e., to fulfill obligations provided for by law, by an authority, by a regulation, or by European legislation.

The legal basis for the processing is the need to comply with legal obligations. The provision of personal data for the above-mentioned processing purposes is mandatory.

1.2 The personal data of Users will be lawfully processed by A.F. MAYER. in accordance with Article 6 of the Regulation for the following processing purposes:

a) contractual obligations and provision of Services: To enable the browsing of the Site: the processed data includes the IP address and log data; To allow the User to register on the Site and comply with the Terms of Use of the Site, which are accepted by the User during the registration process: the processed data includes the name, surname, date of birth (not mandatory), province of residence/domicile, email address;

The legal basis for the processing is the need to perform pre-contractual and contractual obligations of which the User is a party. The provision of personal data for the above-mentioned processing purposes is optional but necessary, as the failure to provide them will make it impossible for the User to browse the site, register on the Site, and use the Services.

b) marketing purposes, subject to the free and optional consent of the User, i.e., for sending commercial information and communications or information about products, Services, events, participation in customer satisfaction surveys and market research for the improvement of Services, also through the sending of periodic newsletters: the processed data includes the name, surname, email address, as well as the date of birth, which will be used, for example, to send you birthday wishes and/or dedicated promotions based on your age group.

The legal basis is the explicit consent of the User to the processing of data for this purpose. The provision of data for this purpose is optional. In case of lack of consent, the possibility of registering on the Site will not be affected in any way.

If consent is given, the User may revoke it at any time by requesting it from the Partner using the methods indicated in the following paragraph 6.

The User may also easily object to further sending of promotional communications via email by clicking on the appropriate link to revoke consent, which is included in each promotional email. After revoking consent, the Partner will send the User an email confirming the revocation of consent.

The Partner informs that, following the exercise of the right to object to the sending of promotional communications via email, it is possible that, for technical and operational reasons (e.g., formation of contact lists already completed shortly before receiving the opposition request from the Partner), the User may continue to receive some additional promotional messages on the same day on which they exercised their right. If the User continues to receive promotional messages after 24 hours from exercising the right to object, please report the issue to the Partner using the contact information indicated in the following paragraph 6.

c) legal obligations, i.e., to fulfill obligations provided for by law, by an authority, by a regulation, or by European legislation.

The legal basis for the processing is the need to comply with legal obligations.

Provision of personal data for the aforementioned processing purposes is mandatory.

Data processing methods:

The Data Controllers will process Users’ personal data using manual and computerized tools, with logic strictly related to the purposes themselves, and in any case, to guarantee the security and confidentiality of the data.

Data retention periods:

Users’ personal data will be stored for the time strictly necessary to fulfill the primary purposes outlined in the previous paragraph 1, or as provided by law and/or necessary for the civil protection of the interests of both Users and the Data Controller.

In particular, A.F. MAYER will delete from its systems the provided data:

• For the execution of the sale and management of Services, including post-sales services, after 10 years from the date of the last purchase or last interaction with A.F. MAYER.
• For requests submitted through customer service or the Website, after 10 years from the date of submission.

The Partner will delete from its systems:

• Data provided for registration on the Website after 10 years from the date of cancellation of the corresponding registration.
• Data processed for sending commercial information, participation in customer satisfaction surveys, and market research after 5 years from the data collection, or until any objection is raised.

In any case, A.F. MAYER is committed to conducting data processing in accordance with the principles of adequacy and minimization, annually verifying the necessity of data retention for a period not exceeding what is necessary to achieve the purposes for which the data was collected and processed.

A.F. MAYER may retain the data to fulfill legal obligations or to establish, exercise, or defend its rights in legal proceedings. Once the purposes for which the data was collected and processed are achieved, A.F. MAYER will take appropriate measures to anonymize the data, preventing identification while still reserving the possibility to use the data anonymously.

Scope of communication and data disclosure:

Employees and/or collaborators of A.F. MAYER entrusted with managing the Website and all services related to the provision of Services, including marketing activities, may become aware of Users’ personal data. These individuals, who have been instructed accordingly by the Data Controller in accordance with Article 29 of the Regulation, will process Users’ data exclusively for the purposes indicated in this privacy policy and in compliance with the provisions of the Applicable Law.

Users’ personal data may also be disclosed to third-party subjects who may process personal data on behalf of the Data Controller as “Data Processors.” Examples of such third parties include providers of IT and logistics services essential to the operation of the Website and/or Services, outsourcing service providers, hosting or cloud computing providers, as well as professionals and consultants of A.F. MAYER.

Users have the right to obtain a list of any Data Processors appointed by each Data Controller by requesting it from the respective Data Controller using the methods indicated in the following paragraph 6.

Furthermore, Users’ personal data may be communicated by A.F. MAYER, to the extent necessary and essential to fulfill contractual obligations, to independent third-party data controllers, such as payment service providers and logistics service providers necessary for the delivery of goods sold through the Website. These independent data controllers will process User data solely for the purpose of correctly processing orders related to the Services.

Transfer of personal data to third countries:

The entire data processing takes place in Italy, countries in the European Union, Canada, and, in some cases, the United States.

If there is a need to transfer data to additional third countries, A.F. MAYER undertakes to:

• Ensure that the country to which the data will be sent guarantees an adequate level of protection, as provided for in Article 45 of the GDPR; or
• Use the standard contractual clauses for the protection of data approved by the European Commission for the transfer of personal information outside the EEA, as provided for in Article 46.2 of the GDPR.

Rights of data subjects:

Users may exercise their rights guaranteed by the Applicable Law by contacting the Data Controllers using the following methods:

• Sending a registered letter to the Data Controller’s registered office.
• Sending an email to info@mayerorganics.com.

A.F. MAYER will comply with Users’ requests regarding the processing activities for which it is a Data Controller.

In accordance with the Applicable Law, the Data Controller informs that Users have the right to obtain:

• Information about the origin of personal data.
• Information about the purposes and methods of processing.
• Information about the logic applied in case of processing carried out with the aid of electronic tools.
• Identification details of the Data Controllers and Processors.
• Subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as Data Controllers or Processors.

Furthermore, Users have the right to obtain:

a) Access, update, rectification, or integration of data. b) Erasure, anonymization, or blocking of data processed unlawfully, including data that does not need to be stored for the purposes for which it was collected or subsequently processed. c) Confirmation that the operations in letters a) and b) have been notified, including their content, to those to whom the data has been communicated or disclosed, unless this proves impossible or involves a disproportionate effort. d) The right to withdraw consent at any time, when the processing is based on consent. e) (where applicable) the right to data portability (the right to receive personal data concerning them in a structured, commonly used, and machine-readable format), the right to restrict the processing of personal data, and the right to be forgotten. f) The right to object: i) In whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection. ii) In whole or in part, to the processing of personal data concerning them for the purposes of sending advertising or direct sales material, or for carrying out market research or commercial communication. iii) If personal data is processed for direct marketing purposes, the right to object at any time to the processing of their data for such purposes, including profiling to the extent that it is related to such direct marketing. g) If they believe that the processing concerning them violates the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State where they habitually reside, work, or where the alleged violation occurred). The Italian supervisory authority is the Garante per la protezione dei dati personali, located at Piazza Venezia n. 11 – 00187 – Rome (http://www.garanteprivacy.it/).

A.F. MAYER is not responsible for updating all the links displayed in this Privacy Policy. Therefore, whenever a link is not working and/or up-to-date, Users acknowledge and accept that they must always refer to the document and/or section of the websites referenced by that link.