Customer Privacy Policy - Protecting Your Data at Debbano

 

Protecting your data at Debbano

 

Why do we collect your data?

We can only process your data for the following reasons and, in any case, provided a legal basis allows us to do so.

1) Registraton on the website www.debbano.com

Your personal data is processed in order to fulfill your request to create a personal account for accessing and using the services offered by Debbano through the website.

2) For the sale of products via www.debbano.com

and associated regulatory requirements

Your personal data is processed in order to carry out the activities preliminary and consequent to the purchase of products through the website, i.e., for the management of the order, payments, the handling of complaints, shipping, returns, and the statutory warranty covering the product sold, as well as to fulfill any other obligation deriving from the sale, such as the registration and storage of your personal data, and any other obligations that Debbano must fulfill under the sales contract and specific regulations governing it, including those relating to accounting.

Your personal data may also be used to send you specific communications and information relating to contractual obligations or deadlines, the way in which the service is provided, or any business operational requirements. Subject to the principles of necessity, relevance, and non-excessiveness, such communications may be made by telephone (or e-mail).

Your personal data are also processed to prevent fraud of any kind, including contractual fraud. Finally, your data will be processed to provide you with assistance on the services covered by the sales contract.

3) For marketing activities related to Debbano’ products and services

Your personal data is processed to send you communications and advertising and/or promotional material in order to suggest new services, products, and/or activities offered by Debbano, as well as to carry out market research or opinion polls. Your data may be processed via.

- e-mail;

- SMS;

- telephone (possibly automated).

The processing in question may be carried out if:

- You give your consent to the use of your data also with regard to the traditional and automated methods of communication with which the data is processed;

- You did not object to the processing.

4) For IT security purposes

Debbano processes, including via its suppliers (third parties and/or other recipients), your personal data to the extent strictly necessary and proportionate for the purposes of ensuring that a network or connected servers are secure and able to resist, to a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal data.

For these purposes, Debbano has procedures in place to manage personal data breaches.

Who will process your data?

Your personal data will only be processed by authorized Debbano personnel. However, in order to carry out all processing activities necessary for the purposes described above, your personal data may be communicated to the following recipients in compliance with the principle of data minimization: IT consultants and IT service providers, marketing/communication agencies, consultants who may be involved in administrative and accounting management, banks and credit institutions, shipping companies, law firms/lawyers and providers of services conducive to the sale of products purchased on www.debbano.com.

What happens if you do not provide your data?

Your personal and identification data is needed to create your account in order to access the reserved area of the website; if such data is not provided, Debbano will be unable to fulfill your requests.

What happens if you do not consent to process personal data for marketing purposes (direct, research, and market surveys) by Debbano?

If you do not provide your personal data for this specific purpose, such processing will not take place, and this will not affect the processing of your data for the main purposes.

If you have given your consent and subsequently withdraw it or object to the processing for marketing purposes, your data will no longer be processed for marketing purposes without any adverse consequences or effects.

How will we process your personal data?

Your personal data is processed using both electronic and manual means and equipment provided to persons acting under the authority of Debbano and authorized and trained for this purpose. In any case, personal data will be protected as appropriate, using effective and adequate security measures to mitigate the risk of a breach.

How long is your personal data stored?

The personal data required to create an account in order to access the reserved area of the website will be kept for the time necessary to perform this activity and, in any case, for a period not exceeding 10 years, except in cases where events occur that require the competent authorities, also in collaboration with third parties/recipients entrusted with Debbano’ data security activities, to carry out any investigations into the causes that led to the event. Furthermore, the personal data processed for the management of the sales contract with Debbano will be retained for up to ten years after its conclusion, as well as for the fulfillment of obligations (e.g., tax and accounting obligations) that remain even after the conclusion of the sales contract.

Personal data processed by Debbano for marketing purposes (direct marketing, market research, and surveys) will be stored by Debbano unless you exercise your rights to request its erasure.

For any further information, please contact mail to: privacy@debbano.com

What are your rights?

We remind you that you may exercise the following rights at any time:

- access;

- rectification;

- erasure;

- restriction of processing;

- objection to processing;

- portability.

You are granted your rights without any special charges or formalities and exercising them is essentially free of charge. You have the right:

- to obtain a copy, also in electronic form, of the data to which you have requested access. Should you require further copies, Debbano may charge you a reasonable fee;

- to obtain the erasure of your personal data or the restriction of its processing or the updating and rectification of your personal data, and for third parties/recipients to comply with your request in the event that they should receive your data, insofar as no legitimate reasons prevail that are more compelling than those that motivated your request (e.g., environmental investigations and emergency risk containment handled by the Data Controller using the same);

- to obtain any relevant communication concerning the activities carried out following the exercise of your rights without delay and, in any case, within one month of your request, unless you are duly informed of a substantiated extension of up to two months.

For any further information and to submit your enquiry, please contact Debbano by e-mail mail to: privacy@debbano.com