Who processes your data?

Design Group Italia I.D. S.r.l., with registered office in Viale Aleardo Aleardi n. 12, 20154, Milan, Italy, Tax Code 11300970156, privacy@designgroupitalia.it, (hereinafter ‘DGI’ or ‘Data Controller’, which may also be referred to with the expressions ‘we’, ‘us’ or ‘our‘) is the controller of the processing of your personal data.
Note that as regards to data collected through our Social Media, Facebook, Instagram, Twitter, and LinkedIn are the joint controller of the processing of your personal data, as published within the social media themselves. For further information, please read their respective privacy policies.

What information do we process?

We will retain the contact details you provide us with (e.g. name, address, telephone number, e-mail address, country of residence) when you contact us or subscribe to the newsletter or when you contact us through our social media as public comments or private messages.
Your use of our website implies the processing of the browsing data and the device that you are using and your IP address (the number that identifies a specific device connected to the internet and is required in order for your device to communicate with websites). Moreover, DGI may analyze the website you browsed from, what you did and what you did not do on our website.

How do we collect information?

We collect data both directly from you and through the functionalities of the website.
Directly from you: For instance, if you decide to subscribe to the newsletter or you contact us through the website or social media. If you do not provide us with your data, you will not be able to use the services on the website.
Through the use of the functionalities of the website: We use cookies in our e-mails in order to collect usage data. Should you like to learn more about it, please read our Cookie Policy below.

Why and for how long do we keep information?

a) To respond to your requests received through e-mail contacts or through social media. DGI may use your data to respond to your requests received by e-mail through “contact us” or “get in touch” functionalities or received through our social media, as public comments or private messages. Moreover, DGI may use your personal data when you send us an e-mail to submit your application. The legal basis of such data processing is the performance of your request. The retention period of your data in relation to this processing is equal to the time necessary to process your request.

b) To prevent or control unlawful conduct or to protect and enforce rights. For instance, we may use your data to prevent infringement of our intellectual property rights (e.g., counterfeiting of our trademarks and/or our partners’) or theft (including but not limited to credit card cloning) or other unlawful acts, as allowed by applicable law.
The legal basis for such data processing is the legitimate interest of DGI. The period of retention of your data is equal to the time reasonably necessary to enforce our rights from the moment we become aware of the offense or the potential commission of it.

c) For newsletter subscription purposes. Upon your prior consent, DGI may contact you via e-mail, with information or promotions relating to its activities and potential scheduled events (including the newsletters), following your subscription to the newsletter by entering your email address. The legal basis for such data processing is your explicit consent which, as far as the subscription to the newsletter is concerned, consists of entering your personal e-mail address.
The retention period of your data is equal to 24 months from the collection of your data.

The provision of personal data

For the purposes of subparagraphs from a) and b) above, the provision of data is necessary to allow us to comply with your requests.
For the purposes of subparagraph c), the provision of data is optional, a refusal shall not cause any prejudice for the purposes of subparagraphs from a) and b). You may withdraw your consent at any time, but this shall not affect the lawfulness of the processing carried out before such a withdrawal.

Where is your information processed?

Data shall be processed and stored at the offices of DGI and of its suppliers within the European Union. Personal data may also be communicated to third-party service providers – duly appointed as data processors pursuant to art. 28 of the GDPR – which have their registered office outside of the European Union as well.

Such data transfers shall be authorized either upon:

• an adequacy decision, adopted by the European Commission pursuant to art. 45 of the GDPR, referred to the Extra-EU country where personal data are transferred to; or
• appropriate guarantees provided for by articles 46, 47 and 49 of the GDPR (namely, standard contractual clauses approved by the European Commission, binding corporate rules, contractual or covenant guarantees provided for by the involved data controllers, or by way of derogation to the prohibition of the transfer, which is applicable under certain circumstances).

Only with regard to the data collected on our social media, these will be stored on the aforementioned platforms, according to the privacy policies of each social network, which we recommend you consult.

Who do we share your information with?

Provided that, where required by law, we will obtain your prior consent and comply with any formalities required by law, we may share your data with third parties, such as our service providers, although in such a case we shall enter into an agreement pursuant to art. 28 of the GDPR aimed at protecting your data. These parties shall only be in possession of the data required to perform their functions and shall only use them for the purpose of providing services on behalf of the data controller or complying with the law. You may find out the details of such data processors, pursuant to Article 28 of the GDPR, by contacting DGI.

Where permitted or required by law, DGI may also share the personal data requested by a government agency or by another authorized third party or organization, in order to protect or enforce its rights or those of third parties or to limit or prevent fraud and other offenses.

Minors

Our website is not intended for minors under the age of 18, but for adults. If you are a parent or guardian and you believe that your child may have sent us some personal data, please contact us.

Security Measures

We adopt the security measures required by law. We adopt security measures in order to protect your data. The standard security measures that we use depend on the type of data that we process and such measures meet the requirements provided for by law and by the standards of European government agencies.

Your rights

You may contact DGI in order to request access to, the rectification or erasure or restriction of the processing of your personal data, to object to such processing, and to request the portability of your data; you may also withdraw your consent at any time (and this shall not affect the lawfulness of the processing based on the consent granted before such a withdrawal).

When you exercise your right of access, you have the right to know whether your data is being processed or not, as well as the purpose of the processing, the categories of data being processed, the recipients or categories of recipients who your data have been disclosed with (and, if they are located in a third country, the guarantees in place), the retention period of your data (or the criteria in order to determine such a retention period), whether automated processing is being carried out or not (e.g., through profiling), the logic involved behind such processing, and the source of the data (when not initially collected by DGI).

You have the right to lodge a complaint with the Italian Data Protection Authority and to request to the data controller, at any time, information about the data processors and the parties that are authorized by the data controllers to process your data.

You may exercise your rights by contacting DGI at the above-mentioned addresses.

You can also exercise your rights, in relation to the processing of personal data carried out through our social media, by contacting each social network in accordance with their respective privacy policies.

You may withdraw your consent to receive the newsletter. In order for you to stop receiving the newsletter, you may follow the instructions shown in the promotional message that you receive. Alternatively, you may withdraw your consent by contacting DGI at the above-mentioned addresses.

What happens if we amend this policy?

We may make amendments to our privacy policy. We will notify you in relation to any of such changes, in accordance with the law. Please visit the website periodically to check for updates.