Privacy Policy
Disclosure pursuant to Article 13 of EU Regulation 2016/679 ("GDPR")
Luce Bianca s.r.l. (“Luce Bianca”),welcomes you to the website store.lebebe.eu (the "Website").
Luce Bianca invites you to note the following disclosure, issued pursuant to Article 13 of EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data ("GPDR").
This document constitutes Luce Bianca's sole disclosure and contains a description of all the processing carried out by Luce Bianca regarding its customers through the Website or at the points of sale.
The purpose of the processing performed from time to time by Luce Bianca will depend on the service you requested, as better specified in this document.
- 1. Who is the Data Controller
The Data Controller is Luce Bianca srl, with registered office in Naples (80143 - NA), Via Nuova Poggioreale T7, Centro Polifunzionale INAIL, Telephone (+39) 06 7001416, Fax (+39) 06 77261072, Tax ID and VAT number 05919601210 and registration number 78480 in the Register of Companies of Naples, email address lucebianca@legalmail.it (the "Data Controller").
- 2. What personal data we process
For the purposes specified in this disclosure, in compliance with your choices and your will to grant consent where required, the Data Controller will process the following personal data:
- personal data: name, surname and date of birth;
- contact details: address, telephone number and email;
- data relating to your purchases (date and place, number, type and characteristics of the products purchased) and consumer preferences.
- 3. Purpose of the processing and legal basis
This paragraph 3 contains a description of the possible processing purposes pursued by the Data Controller depending on the service you requested.
- 1. Sale of goods and services, after-sales support and execution of your requests, as well as fulfilment of legal obligations
In the event that you decide to purchase a product or service at any of the Data Controller's direct points of sale or through the Website, your personal data will be processed with the sole purpose of handling the sale and the obligations connected to it, and therefore to carry out all the order handling activities (including the administrative management of the contract, the shipment of products, the management of payments, credits and any disputes and fraud prevention), as well as those required by law.
If you require after-sales support for purchases made through the Website and/or at a direct point of sale, or if you make any other request to the Data Controller, you can contact Customer Service as specified at the following link. The personal data you disclose will be processed exclusively to respond to your requests.
Providing your personal data for the purposes specified above is optional. However, your refusal to provide the data will make it impossible for the Data Controller to fulfil your requests or to conclude the sales contract for its products/services.
The Data Controller does not require your specific consent to pursue the purposes referred to in this paragraph 3.1.
Your personal data will be processed for the time necessary to conclude and manage the contract, as well as to manage your subsequent requests relating to after-sales support.
Subsequently, your personal data will be kept for 10 years from the conclusion of the contract in line with the limitation period set by the applicable legislation.
- 2. Newsletter Forwarding
By filling in the appropriate section on the Website, you can subscribe to the Luce Bianca newsletter in order to be updated on the products and services offered.
In this case, the newsletter will be sent to your email address for the sole purpose of fulfilling your request to stay informed of Luce Bianca news and does not require your consent. In any case, upon receiving each newsletter, you can easily opt out of receiving further communications by Luce Bianca.
Your personal data will be processed until you decide to unsubscribe from the newsletter using the "unsubscribe" link included in all our electronic commercial communications or by contacting Luce Bianca at the email address specified in paragraph 1 above.
- 3. Marketing Activities
If you wish to be updated on the latest news about the products and services offered by Luce Bianca, you can join our marketing initiatives, thus allowing Luce Bianca to send you the newsletter and/or information, advertising and/or promotional material, as well as to invite you to sales events.
You can register for Luce Bianca's marketing initiatives through the Website and by releasing some of your personal data and, in particular, your contact details (email, telephone number, address). In this regard, please provide only the contact details through which you wish to be contacted.
To allow us to contact you by phone or at your address, you must give your consent.
Forwarding communications to your email address does not require your consent since it is based on the legitimate interest of Luce Bianca, it being understood that, upon receipt of any email communication, you can easily opt out of any further communications from Luce Bianca.
Subscribing to marketing initiatives remains optional and your refusal will not have any consequences on the performance of the additional activities requested by you (for example, the purchase of a product), but will prevent Luce Bianca from keeping you updated on the latest news of the products and services it offers.
Your contact details, necessary to send you news of the products and services offered by Luce Bianca, will be kept for a maximum period of 7 years from your last purchase. At the expiry of this period, the data will be automatically deleted, or permanently made anonymous.
Right to object to direct marketing activities
Please note that, at any time, you have the right to object to direct marketing activities by contacting Luce Bianca at the email address specified in paragraph 1 of this Disclosure. In any case, upon receiving each communication, you can easily opt out of receiving further communications by Luce Bianca.
- 4. Profiling Activity
Luce Bianca may also analyse your consumer habits and choices in order to send you personalized marketing communications.
Your express consent, which can be given through the Website, is required to allow Luce Bianca to carry out the profiling activity.
Accepting the profiling activity is optional and refusing it will not have any consequence on the additional activities you request (for example, the purchase of a product or subscribing to the newsletter).
Your personal data will be kept for a maximum period of 7 years and at the expiry of this period this data will be deleted automatically or made anonymous permanently.
Right to object to profiling
Please note that, at any time, you have the right to object to the profiling by contacting Luce Bianca at the email address specified in paragraph 1 of this Disclosure.
- 5. How will your personal data be processed
Your personal data will be processed in compliance with the provisions of the GDPR, by means of paper, IT and electronic tools, with procedures strictly related to the specified purposes and, in any case, with methods that guarantee security and confidentiality in accordance with the provisions of Article 32 GDPR.
- 6. Which parties your personal data may be disclosed to and who can become privy to them
For the pursuit of the purposes described in paragraph 3 above, your personal data will be known by the employees, equivalent staff and associates of the Data Controller who will operate as specifically appointed persons authorized to process personal data.
Furthermore, your personal data will be processed by third parties belonging, by way of example, to the following categories:
a) parties used by the Company to provide the requested services;
b) supervisory and control authorities and bodies, and in general public or private parties with public law functions;
c) parties that handle administrative and tax obligations for the Company;
d) other subsidiaries or associates;
e) parties that provide services for managing the Luce Bianca information system and telecommunications networks;
f) parties who carry out the control, revision and certification of the activities carried out by the Data Controller.
In some cases, the parties belonging to the above categories operate in total independence as Data Controllers, and in other cases as Data Supervisors specifically appointed by the Data Controller in compliance with Article 28 of the GDPR.
The complete and updated list of the parties to whom your personal data may be communicated can be requested from the Data Controller's registered office.
The personal data processed by the Data Controller are not subject to disclosure.
The processing covered in this disclosure does not involve the transfer of your personal data outside the European Union.
In any case, the Data Controller guarantees that if there is any transfer thereof, it will take place in compliance with the standard data protection clauses adopted by the Commission, in compliance with Article 46 of the GDPR, which ensure a protection equivalent to that provided by the GDPR.
- 7. What rights do you have as a data subject
In relation to the processing described in this Disclosure, as a data subject you may, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
- right of access - Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed, and if so, to obtain access to your personal data - including a copy thereof - and the transmission, among others, of the following information:
a) purpose of the processing
b) categories of personal data processed
c) recipients to whom these have been or will be communicated
d) data retention period or criteria applied
e) rights of the data subject (rectification, deletion of the personal data, limitation of the processing and right to object to the processing
f) right to lodge a complaint
g) right to receive information on the origin of your personal data, if these have not been collected from the data subject
h) the existence of an automated decision-making process, including profiling;
- right of correction - Article 16 GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning you and/or supplementing any incomplete personal data;
- right to deletion (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, the deletion of personal data concerning you, when:
a) the data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) you have withdrawn your consent and there is no other legal basis for the processing;
c) you have successfully opposed the processing of your personal data;
d) the data have been unlawfully processed,
e) the data must be deleted to fulfil a legal obligation;
f) the personal data have been collected in relation to the offer of company services of the information referred to in Article 8, paragraph 1, GDPR.
The right to deletion does not apply if the processing is necessary for the fulfilment of a legal obligation or perform a task carried out in the public interest or to ascertain, exercise or defend a right in court.
- right to limitation of processing –Article 18 GDPR: right to obtain the limitation of the processing when:
a) the data subject disputes the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited
c) the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the data subject opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the Data Controller compared to those of the data subject.
- right to data portability - Article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another Data Controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from the Data Controller to another Data Controller if this is technically feasible;
- right to object - Article 21 GDPR: right to oppose, at any time, the processing of your personal data based on the condition of legitimacy of the legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing that prevail over the interests, rights and freedoms of the data subject or to ascertain, exercise or defend a right in court.
Furthermore, the right to oppose the processing at any time if the personal data are processed for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing.
- lodge a complaint to the Italian Data Protection Authority, Piazza Venezia 11, 00187 – Rome.
The above rights may be exercised by contacting the Data Controller at the addresses specified in paragraph 1.
The Data Controller will take charge of your request and give you, without undue delay and, in any case, at the latest within one month of receipt thereof, the information relating to the action taken regarding your request.
The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny your request.
Lastly, please note that the Data Controller may request further information necessary to confirm the data subject's identity.