Privacy policy
PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA
“INDIVIDUALFIRST SOCIETÀ A RESPONSABILITÀ LIMITATA SEMPLIFICATA”, with registered office in Bergamo, Via Pradello 2, Italy, VAT number: 04522480161 (hereinafter the “Controller”), as Data Controller, informs data subjects pursuant to Art. 13 of Italian Legislative Decree 196 of 30.06.2003 (the “Privacy Code”) and Art. 13 of EU Regulation 2016/679 (the “GDPR”) that your data will be processed in the following ways and for the following purposes:
SCOPE OF PROCESSING
The Controller processes personal, identifying and non-sensitive data (by way of example but not limited to: first name, surname, telephone, email — hereinafter “personal data” or “data”) provided by you when sending requests, making purchases or requesting information from the Controller's website http://www.individualsocks.com (the “Site”).
PURPOSES OF PROCESSING
- Personal data collected from data subjects is processed and used directly to handle the user's request for information.
b) Where the data subject gives valid consent, the data may be processed for commercial communications about the Controller's activities or products, including by telephone and email (newsletter).
INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
These services allow interaction with social networks, or with other external platforms, directly from the pages of this Site. Interactions and information acquired by this Site are in any case subject to the User's privacy settings for each social network. Where a social network interaction service is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.
STATISTICS
The services in this section allow the Controller to monitor and analyse traffic data and serve to keep track of User behaviour.
GOOGLE ANALYTICS (GOOGLE INC.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Site, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualise and personalise the adverts of its own advertising network. Personal data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy – Opt Out
DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS
This type of service allows content hosted on external platforms to be displayed directly from the pages of this Site and to be interacted with.
Where a service of this type is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages on which it is installed.
GOOGLE FONTS (GOOGLE INC.)
Google Fonts is a typeface display service managed by Google Inc. that allows this Site to integrate such content within its pages.
Personal data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
GOOGLE MAPS WIDGET (GOOGLE INC.)
Google Maps is a map display service managed by Google Inc. that allows this Site to integrate such content within its pages.
Personal data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy
METHODS OF PROCESSING
Your personal data is processed by means of the operations set out in Art. 4 of the Privacy Code and Art. 4(2) GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data is processed using IT procedures and electronic means, and residually on paper, by specifically appointed internal staff and by external processors where appointed, also on the basis of the contractual agreements in place.
SECURITY
Data is kept in IT, electronic and, residually, paper archives. The Controller has adopted security measures to protect your data against the risk of loss, misuse or alteration. In particular, it has adopted the measures set out in Arts. 32-34 of the Privacy Code and Art. 32 GDPR.
RETENTION PERIODS
The Controller will process personal data for the time necessary to fulfil the purposes above and in any case for no more than 10 years from collection. Shorter periods may apply for specific purposes, as indicated in the relevant sections of this notice.
PLACE OF PROCESSING
Data will be processed by the Controller at its registered office and operating premises.
COMMUNICATION AND DISCLOSURE
Personal data will not be publicly disclosed by the Controller.
Communication to third parties, other than the Controller, the processors (internal and external to the company structure) and the appointed persons in charge of processing, is envisaged for the pursuit of the purposes indicated and in any case within their limits, to third-party individuals and companies and to commercial partners engaged in the correct and proper pursuit of the purposes described. The data provided by the user may be communicated to parties for whom there is a legal obligation to communicate, or a need to communicate in order to assert a legitimate right of the company before the competent bodies. In any case, processing by third parties must be carried out fairly and in compliance with the legal provisions in force.
DATA TRANSFERS
The Controller transfers personal data to third countries exclusively in the context of relations with the suppliers listed in the section “Suppliers who process data on our behalf”. Such transfers take place on the basis of the safeguards provided for in Chapter V of Regulation (EU) 2016/679.
NATURE OF PROVISION AND CONSEQUENCES OF REFUSAL
Providing data is optional and left to the wishes of anyone who wishes to see the portfolio prepared by the Controller. Failure to provide the data strictly necessary for registration makes it impossible to proceed with it and therefore to use the services. Data not expressly indicated as mandatory may be provided freely by data subjects. The data subject may subsequently refuse permission to process data already provided: in that case, they will not receive by email or telephone any further communication regarding the Controller's portfolio or other commercial communications about the Controller's professional activities.
RIGHTS OF THE DATA SUBJECT
Under Art. 7 of the Privacy Code and Art. 15 GDPR, the data subject may obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, and its communication in intelligible form. The data subject has the right to obtain information about:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied where processing is carried out with the aid of electronic instruments;
d) the identifying details of the controller, of the processors and of the representative designated pursuant to Article 5(2) and Art. 3(1) GDPR;
e) the parties or categories of parties to whom the personal data may be communicated, or who may become aware of it as designated representative in the territory of the State, as processors or as persons in charge.
The data subject has the right to obtain:
a) the updating, rectification or, where of interest, the integration of the data;
b) the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
c) confirmation that the operations under points a) and b) have been notified, including as regards their content, to those to whom the data was communicated or disclosed, except where this proves impossible or involves means manifestly disproportionate to the protected right.
The data subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of collection;
b) to the processing of personal data concerning them for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication. Where applicable, you also have the rights set out in Arts. 16-21 GDPR (right of rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights at any time by sending an email to support@individualsocks.com.
MINORS
This Site and the Controller's Services are not intended for persons under 18, and the Controller does not knowingly collect personal information relating to minors. Should information about minors be recorded unintentionally, the Controller will delete it promptly at users' request.
CONTROLLER AND PROCESSORS
The Controller is “INDIVIDUALFIRST SOCIETÀ A RESPONSABILITÀ LIMITATA SEMPLIFICATA”. The Controller provides the following email address for all communications: support@individualsocks.com. The Controller keeps an up-to-date list of the appointed processors and makes it available for consultation by the data subject at the registered office indicated above.
CHANGES TO THIS NOTICE
This Notice may change. We therefore recommend checking it regularly and referring to the most up-to-date version.
COOKIE NOTICE
The website http://www.individualsocks.com (the “Site”) uses cookies. Below you will find more information about cookies, how they are used on the Site and what control procedures we apply to them. By continuing to browse the Site after reading our banner, you consent to the use of cookies in accordance with this notice. If you do not agree to the use of cookies, please disable them by following the instructions given below.
WHAT ARE COOKIES?
Cookies are data created by a server and stored in text files on the hard disk of the computer or on any device used to access the Internet (smartphone, tablet); they make it possible to collect information about the user's browsing on the website. Cookies may be stored permanently on your computer and have a variable duration (persistent cookies), but they may also disappear when the browser is closed or have a limited duration (session cookies). Cookies may be installed by the site you are visiting (first-party cookies) or by other websites (third-party cookies).
COOKIES USED AND PURPOSES
Browsing cookies: These first-party session cookies allow users to browse and use the site safely and efficiently (management of the browsing session).
Functionality cookies: These persistent first-party cookies make it possible to keep track of users' choices (language selection).
Analytics cookies: The cookies of the Google Analytics platform are used to collect information about users' use of the Site (number of visitors, pages visited, time spent on the site, etc.).
The characteristics of the cookies used on the Site are set out in the list below:
Cookie: Google Analytics
Name: _ga
Purpose: This cookie is used to distinguish unique users by assigning a randomly generated number. It is included on every page of the site and is used to create analyses of visitor browsing, session data and campaign reports. The site uses Google Analytics, a web analytics service provided by Google Inc. (“Google”) which uses cookies placed on the user's computer to allow aggregated statistical analysis of the use of the website visited. Google Analytics is a simple, easy-to-use tool that helps website owners measure how users interact with the site's content. As the user browses the pages, Google Analytics records information about the page visited, such as its URL, through JavaScript libraries. The Google Analytics JavaScript libraries use cookies to “remember” what a user did on previous pages and their interactions with the website. Google Analytics does not store any personal information about the site's users.
Duration: 2 years
Google Cookie Policy
Cookie: Google Analytics
Name: _gat_gtag
Purpose: This cookie limits the number of requests sent.
Duration: 1 minute
Google Cookie Policy
Cookie: Google Analytics
Name: _gid
Purpose: This cookie identifies the user.
Duration: 24 hours
Google Cookie Policy
DISABLING COOKIES
Without prejudice to the above regarding cookies strictly necessary for browsing, the user may delete other cookies through the functionality made available for this purpose by the Controller in this notice, or directly through their browser.
Each browser has different procedures for managing settings. Users can obtain specific instructions through the links below:
Microsoft Windows Explorer
Google Chrome
Mozilla Firefox
Apple Safari
Opera
Third-party cookies can also be disabled through the methods made available directly by the third-party company responsible for that processing.
For information about the cookies stored on your device and to disable them individually, see www.youronlinechoices.com
LEGAL REFERENCES
This notice is drawn up in fulfilment of the obligations laid down by Legislative Decree 196/2003 and GDPR 679/16, by Art. 10 of Directive 95/46/EC, and by Directive 2009/136/EC on Cookies.
We value your privacy and the information you agree to share in connection with our SMS marketing service. We use this information to send you text notifications (for your order, including abandoned checkout reminders), text marketing offers and transactional texts, including our review requests.
Our website uses cookies to keep track of the items you have added to your basket, including when you have abandoned the checkout. This information is used to determine when to send basket reminder messages by SMS.
INDIVIDUAL CIRCLE — LOYALTY PROGRAMME
If you join the Individual Circle, we process your first name, surname and email address in order to manage your membership of the programme, send you the communications reserved for members and grant you the benefits set out in the programme terms.
From the first name and surname you provide, we derive the initials of your monogram. We use them to personalise the products intended for you and the communications we send you.
The legal basis for the processing is your consent, which you may withdraw at any time through the unsubscribe link at the bottom of every email we send, or by writing to support@individualsocks.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
We keep this data for as long as you remain a member of the programme and for the two years following the end of your membership, subject to any different legal obligations.
PERSONALISED COMMUNICATIONS
If you are a member of the Individual Circle, we may use your previous purchases and your preferences to send you communications consistent with your style, rather than communications identical for all recipients. You may object to this processing at any time while remaining a member of the programme: you will continue to receive our communications, but not personalised ones.
SUPPLIERS WHO PROCESS DATA ON OUR BEHALF
For the management of the online store and of communications we use suppliers who process personal data as data processors, on the basis of specific agreements pursuant to Art. 28 of Regulation (EU) 2016/679:
- Shopify Inc. — e-commerce platform, management of orders and customer accounts
- Klaviyo Inc. — sending communications by email and managing subscriber lists
- ChatPowers Inc. (Zoko) — customer support via WhatsApp
- Google LLC — browsing statistics and web services
Some of these suppliers are based in the United States of America. Data transfers take place on the basis of the safeguards provided for in Chapter V of Regulation (EU) 2016/679, in particular by means of standard contractual clauses approved by the European Commission and, where applicable, by adherence to the EU-US Data Privacy Framework.