Privacy & Cookie Policy

1. General Considerations
Protecting your privacy while using our website is very important to us. We have therefore prepared this Privacy Policy to explain what information we collect and store and how that information may be used further by DaunaSpiga.it. This document also explains how we use cookies and analytics tools on our website and in our products and services.

By accepting this Privacy Policy, you consent to the collection, processing, and use of your data in compliance with applicable data protection laws and the provisions set forth below. Please note that users under the age of 18 may not submit any personal data to us or provide any declaration of consent without the approval of their parents or guardians. Any changes to our Privacy Policy will be posted on this site and, where applicable, users will be notified by email.

2. Our Contact Details

If you have any questions or concerns about the data protection practices of DaunaSpiga.it, please contact our Data Protection Officer at the following address:

Fragranza Daune s.r.l.

Privacy, Legal Service

Via Manfredonia I Traversa snc,

71121 Foggia, (FG)

The easiest and quickest way to submit your questions is to write to us at: gestione@fragranzedaune.com

3. Your Rights

You can exercise your data protection rights against us at any time and free of charge.

You have the right to request confirmation as to whether or not personal data concerning you is being processed. If so, you have the right to access such data and further information in accordance with Article 15 of the General Data Protection Regulation (GDPR).
In accordance with Article 16 of the GDPR, you have the right to obtain the rectification of inaccurate personal data without undue delay.
In accordance with Article 17 of the GDPR, you have the right to request the immediate erasure of your personal data or, in accordance with Article 18 of the GDPR, to restrict the processing of your personal data.
In accordance with Article 19 of the GDPR, you have the right to receive confirmation that all recipients to whom we have disclosed your personal data have been informed of any rectification, erasure, or restriction of processing.
In accordance with Article 20 of the GDPR, you have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to withdraw your consent at any time, in whole or in part, pursuant to Article 7, paragraph 3 of the GDPR. Furthermore, pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data if it is processed based on the legitimate interests of DaunaSpiga.it. You have the right to object to the use of your data for direct marketing purposes at any time.
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or where the alleged infringement occurred.

4. Where your data is located

Your data is stored within the European Economic Area (EEA). Data processing also takes place abroad, in countries outside Europe, to the extent permitted by law. Subject to any legal or contractual authorizations, we process data in a third country only if the specific requirements set out in Article 44 et seq. of the GDPR are met. This means that the processing is based, for example, on specific guarantees, such as the officially recognized declaration of a data protection level corresponding to the European level (e.g., the Privacy Shield for the United States) or in compliance with specific officially recognized contractual obligations (so-called standard contractual clauses). For further information, see http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087 e https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32000D0520.

5. Data Transfer

Your personal data is treated with the utmost confidentiality. The data is not sold to third parties or passed on for commercial purposes. DaunaSpiga.it may, however, make your data accessible to third parties (so-called data controllers) where necessary for the provision and execution of our services. The categories of these third parties are listed in the specific procedures under Section 9. These service providers are bound by a duty of strict confidentiality and may process the transmitted data only for the services they are required to provide. Where possible, the data is first anonymized or pseudonymized. Your personal data will only be transmitted to recipients other than those listed in this Privacy Policy if there is a legal obligation to do so (for example, transmission to authorities).

6. Data Deletion

Unless expressly stated in this Privacy Policy, the data stored by our company will be automatically deleted in accordance with Articles 17 and 18 of the GDPR as soon as it is no longer necessary for the purposes stated in this Data Protection Policy and its deletion does not violate any legal data retention obligations. If data is not deleted because it is required for other legally required purposes, its processing will be restricted, meaning the data will be blocked and will not be processed for other purposes. This applies, for example, to data that must be retained for tax or commercial purposes.

7. Data Security

DaunaSpiga.it places great importance on the secure processing of your personal data and has therefore adopted appropriate technological and organizational security measures. We protect your data from loss, destruction, modification, publication, and unauthorized access. We constantly monitor technological advances to ensure a state-of-the-art level of protection. Where possible, data is encrypted and anonymized so that it cannot be read by third parties. Data processing and transfer are performed using the SSL (Secure Socket Layer) system. We employ physical and logical tools to control and limit access, firewalls, recovery systems, and integrity tests. Our employees regularly participate in training on the careful handling of sensitive data and are bound by the obligation to maintain data confidentiality in accordance with the applicable regulatory framework.

8. Legal Basis for Data Processing

Unless the legal basis is explicitly stated in the Privacy Policy, the following applies: the legal basis for the collection and processing of data with your consent is Article 6(1)(a) and Article 7 of the GDPR. The legal basis for processing for the purpose of fulfilling our services and implementing (pre-)contractual measures as well as responding to requests is Article 6(1)(b) of the GDPR. The legal basis for processing for the purpose of fulfilling our legal obligations is Article 6(1)(c) of the GDPR. Where data processing is necessary to safeguard the legitimate interests of our company or a third party, Article 6(1)(f) of the GDPR serves as the legal basis for such processing. If we commission third parties to process data based on a so-called data processing agreement, this is done on the basis of Article 28 of the GDPR.

9. When and how do we process personal data?

We process your personal data to ensure the proper use of our services and to continuously improve them. We also use your data to process orders and requests and to make home deliveries. The purposes of processing can be classified into the following categories:

9.1 Website provision

Purpose and scope of data processing

In principle, we do not store any personal data when you simply visit our website. With so-called server log files, our web servers merely log non-personally identifiable access data, such as your IP address, browser version and operating system, the previously visited page (referrer URL), the page viewed, and the time of access. This data is collected and processed for the purpose of enabling the use of our website (connection) and ensuring system security and stability, as well as for the technical administration of the network infrastructure. This data does not allow us to draw any conclusions about you personally.

Data retention period and access

Log file information is retained for security reasons (e.g., for analysis of potential abuse or fraud) for a maximum of 7 days, after which it is automatically deleted.

No data retention is made.

We will not share this data with third parties unless this is necessary to provide our services (e.g., hosting providers, web analytics companies to evaluate our users’ general online behavior).

Legal Basis and Opt-Out

The legal basis for storing data on our servers (server log files) for each access is Article 6 (1) (f) GDPR and our legitimate interests, such as optimizing our services or protecting against abuse through unauthorized use.

The recording of data for the provision of the website and the storage of data in log files are essential for operating the website. Therefore, there is no option for the user to object.

10. Cookies, Analytics Tools, and Social Media Applications

10.1 Cookies

Purpose and Scope of Data Processing

Cookies are small files that allow us to store specific information on the device from which the user accesses our website (PC, smartphone, or similar) and retrieve this information when the user returns to the same site. Cookies are used to improve your online experience on our website by enabling us to make it more user-friendly, faster, and more secure. Furthermore, by anonymously analyzing how you use our website, they are also used for advertising and market research purposes. We use cookies pursuant to Art. 6 (1) (f) GDPR based on our legitimate interests in the analysis, optimization, and commercial operation of our online store.

“Third-party cookies” are cookies provided by providers other than the controller of the online offering. Cookies are considered “permanent” or “persistent” if they remain stored even after the browser is closed. We primarily use so-called “session cookies,” which are automatically deleted after your visit. Depending on their purpose, a distinction is made between the following cookie categories:

Technical/required cookies: These cookies are functional, meaning they are absolutely necessary to ensure the essential functionality of the website. For example, they enable navigation on the website; therefore, they cannot be deactivated.
Analytical/performance cookies: These cookies relate to performance and allow us to improve the website’s functionality. For example, they can increase speed, save your selected page settings, or save your wish list. Analytical cookies are also used to perform statistical analyses on website use and improve it. By preventing the storage of these cookies, the website may respond more slowly or certain functions may be limited.
Advertising/tracking cookies: These cookies are used to create user profiles and are used to send advertising to users based on their browsing behavior. We use tracking cookies to analyze visitor preferences (for example, which pages of our online store a customer has visited and which products they have viewed). This allows us to personalize your shopping experience and improve the marketing communications we send you. If you reject these cookies, the products recommended to you may not match your interests.
Cookies may collect the following information: IP address, unique identifier (UDID) and device model, domain, browser used and language selected, operating system and system settings, country and time zone-specific cookie identifier (cookie identifier), cookie information, and other information, such as whether your device has the software required to use certain features, previously visited web pages, the URL of the site from which you arrived at our site, and information about your interaction with our pages, such as access times, user paths through the site, preferences, and purchases.

10.2 Google Analytics

Based on our legitimate interests (i.e., interest in the analysis, optimization, and commercial operation of our online offering pursuant to Art. 6 (1) (f) GDPR), we use the web analytics service Google Analytics. Google Analytics uses “cookies,” text files that are stored on your computer to help analyze your use of the website. Google uses this information to evaluate your use of the website on our behalf, to compile reports on website activity, and to provide us with other services related to website activity and internet usage.

As part of these operations, pseudonymous user usage profiles may be created from the processed data. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there. IP anonymization is enabled on this website for the use of Google Analytics. This means that if your browser transmits your IP address for technical reasons, Google anonymizes it by shortening it (by deleting the last octet). Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. Google is Privacy Shield certified and therefore guarantees compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

For more information, please visit the following page: https://www.google.com/intl/it_ALL/analytics/learn/privacy.html

You can deactivate Google Analytics by following this link: https://support.google.com/analytics/answer/181881?hl=it

10.3 Use of Facebook, Instagram, LinkedIn, WhatsApp, and Pinterest plug-ins

Plugins from Facebook, Instagram, LinkedIn, and WhatsApp (hereinafter, the “Social Media Platforms”) are used on our websites. The plug-ins are recognizable by their company logos. When you use these plug-ins, a connection is established with the social media platform’s server and the social media platform is displayed. In this case, This way, your IP address is transmitted to the Social Media Platform, which pages of our website you visited and when. If you are logged in as a member of the Social Media Platform at the same time, the Social Media Platform will assign this information to your personal account. The social media service, using the transmitted data, is able to determine your username and, in some cases, even your real name and associate this information with your personal social media account. You can prevent this by logging out of your account before using the plug-in. Further information on data collection and use by Facebook, Twitter, and Instagram, and your rights and options for protecting your privacy, can be found in the privacy policies of each Social Media Platform.

Privacy and Cookie Policy updated on March 15, 2023