This privacy policy provides you with all information that is useful for understanding how we collect and use the information identifying users of the website and illustrates the purpose and processing methods used by the data controller to process personal data. Please read our privacy policy carefully, as it applies every time a user browses the pages of the website www.blaze-milano.com, regardless of whether the same decides to take advantage of the services proposed by the same and/or purchase any of the displayed products. These guidelines shall be regarded as an integral part of the website’s general user conditions as they provide information on privacy and the security systems adopted by the website.

The owner and controller of the data processed by this website is BLAZÉ s.r.l., with registered office in Via Bettino Ricasoli 2, Milan, Italy tax id and vat registration 08197490967 (hereinafter “BLAZÉ”, “data controller” or “owner”). BLAZÉ independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee confidentiality, integrity and availability of the data. .

Data controller: BLAZÈ srl- registred office in p.zza Castello, 18 – 20121 Milan.

Data protection officer: fausto.sorrentino@macwin2005.it; tel 0637511706.

2. Purpose of personal data processing:

Management of the relationship with the data subject (client and/or prospect) referring to the purchase of products from BLAZÈ srl and related processing operations (delivery, invoicing, warranty management, etc.).

Direct or indirect marketing purposes, by submitting to the interested party promotional communications using multiple channels listed below.Depending on how the user interacts with the platform, BLAZÈ will process the personal data for the following purposes, based on different legal terms:

Purpose:  Registration as user of the platform

Legal Standing: This is necessary on the terms regulating the use of the platform;

Information: If the user decides to create an account, the owner needs to process the personal data to identify the data subject as a user of the platform and grant the access to its various functionalities, products, and services available to the data subject as a registered user. The user may cancel the registered account by contacting BLAZÈ.

Purpose:  Contractual fulfillment and provision of the service.

Legal Standing: Lawful interest to conduct the necessary verifications to prevent potential fraud or fraudulent uses of the Platform;

Information: To contact the user for updates or informative notices related to the contracted functionalities, products or services, including quality surveys; To manage payment of the ordered products; To manage potential exchanges or returns of the products; To prevent and detect unauthorized uses of the platform and eventual frauds against the owner;

Purpose:  Satisfy requests or applications that the user makes through the customer support channels.

Legal Standing: In case of request related to the exercise of the user’s rights or to claims on BLAZÈ’S products, the owner is legally permitted to process the personal data for compliance with the owner’s legal obligations.

Information: BLAZÈ processes the data that are strictly necessary to manage or resolve the request or the application.

Purpose:  Marketing 

Legal Standing: User’s consent.

Information: If the user subscribes to BLAZÈ’S newsletter and if the user provides consent to profiling and marketing activities, the owner will process the personal data to manage your subscription, including to send customized information on BLAZÈ’S products or services through various channels (such as e-mail, sms, push notifications)

3. Storage time of data:

Data will be kept for the time necessary to manage the relationship with the client, including implementation of the guarantee and/or any “recall/update” campaigns, compliant to provisions in force, and, for direct/indirect marketing purposes only, for a period consistent with the commercial aims and dynamics related to the nature of the product itself.

The time for which the personal data will be kept will depend on the purposes for which the owner process them, as outlined below:

Purpose:  1. To manage the platform user registration 

Time for which the data are kept: User’s BLAZÈ will process the data for the time during which the data subject will remain a registered user (meaning, until he/she decides to unsubscribe).

Purpose:  2. Performance and execution of the purchase or services contract 

Time for which the data are kept: BLAZÈ will process the data for the time necessary to manage the purchase of the products that the user acquired, including potential returns, complaints or claims related to the purchase of the product in question.

Purpose:  3. Costumer support 

Time for which the data are kept: BLAZÈ will process the data for the time necessary to meet the different requests or applications.

Purpose:  4. Marketing 

Time for which the data are kept: BLAZÈ will process the data until the data subject will decide to unsubscribe or cancel the subscription to the newsletter.

 In any case, BLAZÈ will keep the data duly stored and protected for the time during which liability may arise for their processing, in compliance with legislation in force from time to time. Once each of the eventual actions is time-barred the owner will promptly proceed to delete the personal data.

4. Place of the data processing:

The personal data that BLAZÈ collects from the user is generally stored within a country of the European union or the European economic area (“eu/eea”) but may also, whenever necessary for the contractual fulfilment and for the provision of the service, be transferred to and processed in a country outside of the eu/eea. Any such transfer of the personal data will be carried out in compliance with applicable laws.

In some cases BLAZÈ may transfer personal data from the eu/eea to a third country not being approved by European commission as a safe country for such transfer (adequacy decision). Whenever applicable the owner will use standard contractual clauses to ensure a equivalent level of protection as granted within the eu/eea or other lawful grounds for transfer.

5. Nature of the provision:

Data provision is free, but the refusal to provide certain data may not make it possible to perform the services related to the relationship with the client.The consent for marketing purposes may be in any case denied without entailing any burden or damage to the interested party in relation to his position towards the controller.

6. Type of data processed.

Personal data, billing data and data concerning commercial choices made, limited to marketing purposes.

7. Way of data processing.

Data processing may be carried out either manually or through it. Data may be also processed by automated tools. In relation to this specific method of processing, the interested party may request not to be subject to decisions that come from it with the same methods indicated for the exercise of the generality of his rights (section 8).

8. Scope of data dissemination.

Data may circulate within the data controller company subject to the limits of what is necessary for the pursuit of the purposes indicated above and in any case in compliance with the security measures necessary to avoid loss or leakage of data.

The data or some of them may be communicated to the service providers that process the data on behalf of the controller. The data will not be disseminated anyway.

To the extent necessary, the personal data may be shared with suppliers, sub-contractors and independent third-parties, acting as processors and sub-processors (like, for instance, financial institutions, technological and analytical service providers or providers and partners of services related to logistic, transport and and/or their partner establishments), carrying out certain tasks on BLAZÈ’S behalf.

Moreover, the owner may also share personal data to third parties, if he has reason to believe that using or disclosing such information is necessary or advisable to:

1) conduct investigations of possible breaches of law;

2) protect the owner’s rights, safety or property;

3) investigate security breaches or cooperate with government authorities pursuant to a legal matter;

4) identify, contact, or bring legal action against someone who may be violating an agreement they have with BLAZÈ.

The owner reserves the right to transmit any data he has about the data subject in case of mergers, acquisitions or company reorganization.

9. Rights of the data subject.

At any time the data subject may exercise the rights referred to in articles 15 and following of the European regulation n. 679/2016 and precisely: the right to know whether their personal data are being processed and therefore to know their content and origin, to verify their accuracy or to request their integration, deletion, limitation, updating, correction, transformation into anonymous form or blocking, as well as the right to object in any case, for legitimate reasons, to their processing and to lodge a complaint with the data protection supervisor.

Regarding the user’s right to request rectification of the available data, it should be noted that if the data subject is a registered user on the platform, he may also access the relevant personal data section to change or update your personal data. In any case, please take into account that, on actively making the personal data available to the owner through any procedure, the data subject guarantees that they are true and accurate, and he/she undertakes to notify to BLAZÈ any change or modification of the data. Only the user shall be liable for any loss or damage caused to the platform or to the person responsible for the platform or to any third party by reporting erroneous, inaccurate or incomplete information in the registration forms.

You may withdraw at any time the given consent interrupting the data processing.

When blaze is legally permitted to process the personal data due to the user’s consent or to the contractual fulfillment, as explained in article 2, the data subject will also have the right to request the portability of the data. This means that you he/she have the right to receive the shared data in a structured, commonly used and machine-legible format, to be able to transmit them to another entity directly without impediments on our part. Moreover, where the processing of the data is based on a lawful interest, the user will also have the right to object to the processing of the interested data.

These rights may be exercised by sending a request to the pro tempore data controller at the e-mail address e-boutique@blaze-milano.com.