Couture Hayez S.A.S. di Cazzaro L. & C.
Via F. Hayez 14, 20129 Milano
P.IVA/ C.F. N° 07177980963

PRIVACY POLICY

Information pursuant to art. 13 of EU Regulation 679/2016 (GDPR – General Data Protection Regulation) and art. 13 of Legislative Decree 196/2003

EU Regulation 679/2016 establishes that those who process personal data of third parties (so-called “data subjects”) and thus qualify as “Data Controllers,” must provide accurate information regarding the methods and purposes of the processing, as well as the rights claimed by data subjects, as stipulated in art. 13 of the GDPR itself. This is also done to obtain, if necessary, their consent.

The “processing” of data consists in and includes, among other things, activities such as collection, recording, organization, structuring, storage, adaptation, modification, processing, use, communication, dissemination, limitation, deletion (see art. 4 point 2 GDPR).

According to art. 4 paragraph 1 GDPR, “personal data” refers to “any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

In consideration of the above and as “Data Controllers” of the personal data communicated by you or third parties, our company guarantees that the processing will be carried out in compliance with the legal provisions and provides you with the following information.

• Data Controller for Your Personal Data

The Data Controller is “Couture Hayez s.a.s. di Cazzaro L. & C.” with registered office in 20129 – Milan, via F. Hayez n. 14, VAT number 07177980963.

• Purpose of the Processing

The personal data provided by you, including but not limited to your name, surname, date of birth, residence, etc., will be processed exclusively for the following purposes:

• Responding to your request for information and/or appointment sent to us by email at info@couturehayez.com and/or at couturehayez@gmail.com or through the completion of the dedicated contact, information, and appointment request form on our website, www.couturehayez.com.
• Sending you emails or providing communications in any form related to the order placed with us and for its proper fulfillment (e.g., scheduling fittings for the chosen dress, coordinating variations-integrations and/or changes to your order, etc.).
• Sending you emails with proposals and/or promotions related to our products and services of potential interest to you, based on the order already placed with us and/or the preferences and requests communicated to us electronically or during appointments.
• Processing your orders, both in the case of in-person purchases at our atelier and online purchases (shipment of goods, invoicing, related activities, etc.).
• Record-keeping and accounting and tax compliance in the context of payment and billing for our service.

The aforementioned purposes may require the processing of data (including ‘sensitive’ data) relating to other individuals (e.g., parents, children, fiancé, spouse).

• Mandatory and Necessary Nature of Data Provision

The provision of data is mandatory and necessary for all that is required by legal and contractual obligations, as outlined above. Therefore, any refusal to provide them in whole or in part may result in our company being unable to fulfill the obligations towards you.

• Special Types of Data Processed: INTERNET Browsing Data and Cookies

The computer systems and software procedures used to operate the website www.couturehayez.com acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols. These are not collected to be associated with identified individuals, but by their nature, they could allow the identification of users through processing and association with data held by third parties. This category of data includes IP addresses or domain names of computers used by users connecting to the site, the URLs of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment. The IP addresses of all visitors accessing our site are collected. The data collected is used for the management of the technical and administrative operations of the portal, the diagnosis of any technical problems, and the prevention of intrusion and abuse of the service. Personal data collected through website navigation will be used only for internal statistical purposes or for the potential suppression of unlawful conduct. This data is used solely for the purpose of obtaining anonymous statistical information about the use of the site and to check its correct functioning, being deleted immediately after processing.

A cookie is a text element that is inserted into the hard drive of a computer only after authorization, as a result of which the text is downloaded into a small file. Cookies serve to enable access to the service provided through our website, acting as security filters and allowing Web applications to send information to individual users. For strictly technical reasons related to cybersecurity, our portal uses session cookies (which are automatically deleted by each user’s browser upon closure) and records the IP address of visitors accessing our website and the reserved area of the privacy portal. No personal user data is acquired by the site. Cookies are not used to transmit personal information.

• Data Processing Methods

For the achievement of the above purposes, the processing of your personal data (collection, consultation, use, processing, etc.) is carried out through computer, telematic, and paper tools, in compliance with current legislation and, in particular, to ensure confidentiality and security, in accordance with the principles of fairness, lawfulness, transparency, and protection of individual rights. Your data will be processed only for the specific and strictly necessary purposes for each commissioned service.

The processing is carried out directly by our company as the Data Controller.

• Communication and Disclosure

Your personal data may be communicated, for the purposes and within the limits strictly necessary for the fulfillment of legal, regulatory, and contractual obligations, in compliance with current legislation, to the following categories of subjects:

• Professionals in charge of managing our company’s accounting;
• Individuals authorized to access by law or regulations;
• IT service companies (e.g., those responsible for managing and maintaining email services).

Your personal data will not be disclosed in any way.

• Retention Period of Personal Data

All the aforementioned data will be kept for the time necessary for the completion of the obligations connected and/or arising from the commissioned service, and for a period of 24 months following its completion.

• Data Transfer

Personal data is stored on servers located within the European Union. If it becomes necessary for our company to transfer servers outside the EU, we assure you in advance that the transfer of data outside the EU will take place with the legal guarantees under art. 46 GDPR in accordance with applicable laws, following the contractual agreements provided at the European level.

• Rights of the Data Subject

In your capacity as the data subject, you have the right, in accordance with art. 7 of the Privacy Code and Regulation EU 679/2016, as specified below:

• To obtain confirmation of the existence or non-existence of your data, its origin, and content, to verify its accuracy, and to request its integration.
• To request access to your personal data from our company and rectification or deletion of the same, to limit the processing of data concerning you, or to object to their processing under articles 15, 16, 17, 18, and 21 of the GDPR.
• To the portability of your data under art. 20 GDPR.
• To withdraw your consent at any time (without prejudice to the lawfulness of processing based on consent given before such withdrawal).
• To lodge a complaint with a Supervisory Authority under art. 77 GDPR if you believe that the processing concerning you violates said Regulation.

For the exercise of your rights, for questions and information regarding the processing of your data and the security measures adopted, you can contact: Couture Hayez s.a.s. di Cazzaro L. & C., via F. Hayez n. 14, 20129 Milan, at the following contact details: Tel. 02 20241665 Email: info@couturehayez.com