PRIVACY AND COOKIE POLICY


Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council LA BOTTEGA DEL CASHMERE SRL informs you, pursuant to Article 13 of Regulation (EU) 2016/679 regarding the protection of natural persons with regard to the processing of personal data (the “EU Regulation”), that it is necessary to process personal data collected automatically or provided during your browsing or use of the website www.bramanicashmere.com (the “Website”).



1. DATA CONTROLLER


The data controller is LA BOTTEGA DEL CASHMERE SRL, represented by its legal representative, with registered office at Via Aldo Moro 3/A – Biella, Italy (hereinafter, “BRAMANI” or the “Data Controller”).



2. TYPES OF DATA PROCESSED


Data voluntarily provided by the user
To enable the use of the Website and its services (including the creation of a personal account, online purchases, and inquiries), the Data Controller needs to process certain personal data, such as name, surname, and e-mail address.
Voluntary submission of e-mails, registration, completion of purchases, and inquiry forms involves the collection of identifying data (name, surname, telephone number, address, e-mail) and any additional information you provide in messages or forms.

Browsing data
The Website’s IT systems and software procedures automatically collect some personal data as part of their normal operation.
This category includes: IP addresses or domain names of users’ devices, URI addresses of requested resources, request times, methods used to submit requests to the server, file size obtained, numeric codes indicating server response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment.
Such data are necessary for the proper use of the Website and are processed exclusively to obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.) and to ensure proper functioning.
Browsing data are not stored for more than seven days and are deleted immediately after aggregation, except when required by judicial authorities.



3. PURPOSES AND LEGAL BASIS OF PROCESSING


Personal data collected are used exclusively for:

A. Use of the Website and Services
To allow navigation, registration, online purchases, and access to a personal account.
Legal basis: (i) performance of a contract to which you are a party; (ii) compliance with a legal obligation to which the Data Controller is subject.

B. Promotional communications and direct marketing
Sending information about Bramani activities and promotions, advertising material, and direct marketing communications, newsletters, discounts, and loyalty initiatives via traditional or automated methods (e.g., e-mail).
Legal basis: your explicit consent.

C. Personalized offers and benefits (profiling)
Sending offers, discounts, and other benefits based on your preferences and purchase behavior, including through loyalty programs that involve registration and analysis of your purchase data.
Legal basis: your explicit consent.
Data may be stored electronically and/or on paper.



4. DATA RETENTION


The Data Controller will retain personal data only for the time necessary to achieve the purposes for which they were collected:

  • Browsing data: maximum 7 days;
  • Marketing purposes: deleted or anonymized within 24 months from collection;
  • Profiling purposes: deleted or anonymized within 12 months from collection.

Data may be retained beyond these periods to comply with legal obligations or to establish, exercise, or defend a legal claim.



5. DATA RECIPIENTS


Data will not be disseminated but may be accessed by:

  • Entities authorized under EU or national law;
  • Service providers and partners acting as independent data controllers or data processors (e.g., couriers, marketing and advertising agencies, IT consultants, law firms, market research companies, providers of personalization and optimization services, call centers, commercial partners).

Employees and collaborators of the Data Controller, duly appointed and authorized, may also process the data. All data sharing is conducted in compliance with technical and organizational measures to ensure an adequate level of security.



6. TRANSFER OF DATA OUTSIDE THE EU


The Data Controller does not transfer your personal data outside the European Union. All processing takes place within the EU.



7. AUTOMATED DECISION-MAKING


With your explicit consent, your data may be used for profiling and automated decision-making aimed at sending personalized offers, discounts, and promotions.
The Data Controller adopts all appropriate measures to protect your rights, freedoms, and legitimate interests pursuant to Article 22(3) of the EU Regulation.
Refusing consent does not prevent the use of the Website or the completion of purchases.



8. NATURE OF DATA PROVISION


  • Purpose A (Website use and online purchases): providing data is mandatory. Refusal will prevent the use of the Services or completion of purchases.
  • Purpose B and C (marketing and profiling): providing data is optional; refusal will prevent receiving newsletters, offers, and personalized communications.



9. RIGHTS OF THE DATA SUBJECT


Under the EU Regulation, you have the right to:

  • withdraw consent at any time;
  • access your personal data (Art. 15);
  • rectify or complete data (Art. 16);
  • request deletion of data (Art. 17);
  • request restriction of processing (Art. 18);
  • receive data in a structured, machine-readable format (Art. 20);
  • object at any time to the processing of personal data, including profiling (Art. 21);
  • not be subject to decisions based solely on automated processing, including profiling (Art. 22);
  • lodge a complaint with a supervisory authority or seek judicial remedy (Art. 77).

To exercise your rights, you may contact the Data Controller at Via Aldo Moro 3/A – Biella, Italy.



10. CONSENT TO DATA PROCESSING


Purpose A:
I have read and understood the privacy notice and freely and expressly consent

□ I CONSENT □ I DO NOT CONSENT

to the processing of my personal data for the purposes described in section 3.A, necessary to use the Website.

Purpose B:
I have read and understood the privacy notice and freely and expressly consent

□ I CONSENT □ I DO NOT CONSENT

to the processing of my personal data for the purposes described in section 3.B, including receiving newsletters, commercial, promotional, and marketing communications, both via traditional and automated methods (with the possibility to opt for traditional methods only at any time).

Purpose C:
I have read and understood the privacy notice and freely and expressly consent

□ I CONSENT □ I DO NOT CONSENT

to the processing of my personal data for the purposes described in section 3.C, including receiving offers, discounts, and any other promotional initiatives tailored to my specific needs and purchase preferences.