Privacy

This information describes the characteristics of the processing of the personal data collected through the e-commerce platform (hereinafter, the “ Platform ”) owned by DEDAR S.p.A., with registered office at Piazza della Repubblica 1/A, 20121 Milano, taxpayer’s code and VAT no. 03187590157 (hereinafter, “ Dedar ”).

Controller

The personal data controller is Dedar.

Collection of the Data

Data communicated by the users

Certain areas of the Platform require the users to communicate personal data, including identification data and contact details (hereinafter, the “ Data ”). The provision of these Data is on a voluntary basis: should the users not wish to provide them, they will in any case be able to browse the Platform without benefiting from the main functionalities of the Platform.

The Data absolutely necessary are marked by an asterisk.

The users are invited not to communicate to Dedar any third-party personal data, unless this is necessary (as an example, because the user does not have their own, personal email address and has no other direct contact details): in this case, it is reminded that it is the user’s responsibility to fulfil the legal obligations concerning the protection of personal data and, in particular, to inform the third parties that their data are being communicated in order to obtain, as the case may be, their consent.

Purpose and legal basis of processing

Dedar processes the Data in strict compliance with the applicable legislation concerning the protection of personal data and with the indications of the Data protection supervisory authority.

Registration of an account

The Data communicated by the users in the section “ Register” of the Platform will be processed to allow the user to register an account with the Platform. The registration allows to access all the functionalities of the Platform (as an example, finalising a purchase, monitoring their orders, reserving a product, creating a moodboard , monitoring any consents given to specific purposes of processing, filing complaints).

These processing operations are instrumental to the pursuit of Dedar’s legitimate interest to allow the users to use the services provided on the Platform. This interest has been balanced against the expectations of the users, and no significant invasion of their private life or other undue impact on their rights have been identified.

At any time the users can object to this processing by writing to Dedar to the contact details provided in the section “ Rights of users”. Should the objection request be accepted, the account will be cancelled and any communications relating to any order will have to be exchanged with Dedar via email. In any case, any objection will not compromise the lawfulness of the processing of the Data carried out by Dedar until that time.

The processing of the Data for this purpose is voluntary, but is mandatory and necessary to enjoy the functionalities of the Platform dedicated to registered users. The refusal to provide the Data or any further objection will not prevent the user from browsing the Platform.

Purchase of a product

Should the user decide to purchase any of the products available on the Platform, the Data of the user, including VAT no., will be processed to manage the purchase orders (this includes the sending of service communications on the order status, via email; the pre-sale and post-sale customer service activity) and to fulfil the obligations provided by the laws on selling and buying.

The processing is necessary to the execution of a contract to which the user is part and/or of pre-contractual measures taken on the user’s request, and to allow Dedar to fulfil the related legal obligations.

The processing of the Data for this purpose is voluntary, but is necessary: the refusal will prevent the user from finalising the purchase and/or from receiving the purchased product.

Replies to commercial requests from users

The Data will be processed to respond to the requests that may be transmitted by the users by contacting Dedar via the specific sections of the Platform (this includes requests for consultancy or appointment). The Data may, also, be processed – in case of interest on the part of the users – to allow Dedar to provide business feedback, to schedule meetings and to consider, where appropriate, the opportunity to start a contractual relationship.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest to reply to the users in order to assist them and to provide advice on Dedar’s products or on the users’ projects. This interest of Dedar has been balanced against the interest of the users and appears compatible with the reasonable expectation of the users to receive a reply to the requests sumbitted. Further, if the users express an interest in that respect, the processing might be, also, necessary to execute pre-contractual measures taken upon the user’s request.

If the contact does not lead to a pre-contractual or contractual relationship between Dedar and the user, the users will, in any event, be able to object to this processing at any time, by writing to Dedar to the contact details provided in the section “ Rights of the users”. In any event, any objection will not compromise the lawfulness of the processing carried out by Dedar until that time, but will result in the erasure of all Data and in the impossibility to follow-up on any pending requests.

The communication of the Data for this purpose is voluntary, but is necessary: any refusal will result in the impossibility to contact Dedar to receive assistance or specific advice, and in the impossibility to start any contractual relationship with Dedar.

Use of Social Media platforms

The Data will be processed through the pages of the Social Media platforms dedicated to Dedar.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest consisting in managing the interactions with the users (comments, public posts, etc.) in compliance with the applicable legislation.

The Data are given freely by the users via the aforesaid pages of the Social Media platforms.

As regards the Data processing operations carried out by the managers of the Social Media platforms used by Dedar, please refer to the information provided by them in their privacy policies.

 

Data retention term

As regards the registration of the account, if no access is made for a period longer than 36 months from the date of registration the account will be deactivated. If the user gives an affirmative answer to the request which will be sent one month prior to the expiry, the account will be kept active and will be retained for further periods of 36 months.

If any purchases are made, the Data will be retained for the duration necessary to fulfil the tax, accounting, and regulatory obligations associated to the sale of Dedar’s products.

As regards the processing of the data for sending the newsletter, without prejudice to the user’s right to withdraw their consent, the Data will be processed and kept for 24 months from when the consent is given.

As regards the processing of the personal data to respond to commercial requests from users, the Data will be retained to respond to the user’s request, for a maximum period of 12 months from when the last contact occurred. If a contractual relationship is established between the user and Dedar, the Data will be processed for the period indicated in the related information which will be transmitted together with the contract.

The Data will be retained longer if this is necessary to comply with any obligation in law or to ensure legal protection of Dedar’s rights.

Recipients of the Data and transfer outside the EU

The Data, with regard to the aforesaid purposes, may be communicated to public authorities, where this is necessary to comply with any obligation in law.

If any purchases are made, the Data will be made know to providers of services accessory to online sale, such as forwarders and carriers (as regards the shipping and delivery of the purchased products), and banking institutions (for the management of payments and refunds). For this purpose, the Data relating to the users whose residence or domicile is outside the European Union may be transmitted, also, to local carriers. The transfer of the Data, in these cases, will be supported by adequacy decisions of the European Commission or by appropriate safeguards under art. 46 and ff. of the GDPR (i.e. subscription of standard contractual clauses).

The Data will be made known to Italian-based providers of newsletter services for the purposes of sending the  newsletter.

Further recipients of the Data are the consultants and companies providing services accessory and instrumental to those provided by Dedar such as, as an example but not limited to, the Italian-based company providing Platform management services according to the mandate conferred upon it by Dedar.

In addition, the agents of Dedar carrying out activities in the performance of their mandate are recipients of the Data.

The aforesaid categories of recipients process the Data as autonomous data controllers or as processors or as persons authorised according to the provisions of arts. 24, 28 and 29, respectively, of the GDPR.

A complete list of the recipients of the Data as well as further information on the transfer of Data outside the EU are available upon request to be addressed to the contact details provided below in the section “ Rights of users”.

Users’ rights

At any time the users can:

1. obtain access to the Data;
2. obtain the rectification or erasure or, where applicable, limitation to the processing;
3. object to the processing;
4. withdraw their consent;
5. where applicable, receive the Data provided to Dedar in a structured, commonly used, and machine-readable format, and transmit these Data to another processor without obstruction by Dedar;
6. file a complaint with the Data protection supervisory authority.

These rights can be exercised by contacting Dedar:

• by email:  info@dedar.com
• by post, to the address: Via della Resistenza 3, 22070 Appiano Gentile

Newsletter Privacy Policy
pursuant to art. 13 and 14 of Regulation (EU) 2016/679 (GDPR)

By subscribing to the newsletter, you declare that you are over 16 years of age and give your consent to the processing of your personal data to receive newsletters and other commercial communications from Dedar S.p.A., in its capacity as Data Controller. Therefore, in compliance with the provisions of Art. 13 and 14 of the European Regulation on Privacy 2016/679 (for the sake of simplicity, hereinafter also referred to as “GDPR”), we are providing you, as the Data Subject, with the necessary information regarding the purposes and methods of processing your personal data, as well as the scope of communication and dissemination of the same.

Purposes of the data processing

The data processing is aimed at sending newsletters and/or sending communications and/or informational and promotional material via email, relating to the promotional activities/initiatives carried out by Dedar S.p.A.

Data processing methods

Pursuant to Art. 5 of the GDPR, the personal data being processed shall be processed lawfully and fairly, and shall not fall outside the purposes set out in point 1.

The personal data processed for the purposes referred to in point 1 shall be processed in compliance with the principles of data minimisation and storage limitation, pursuant to Art. 5 no. 1 letter e) of the GDPR and shall be retained for 2 (two) years from the last interaction with the Data Controller and, in any case, until the Data Subject unsubscribes via the opt-out option present at the bottom of each communication, unless otherwise required by law.

In the event that the Data Subject withdraws his/her consent, their data shall be deleted within 3 (three) months of such request, without prejudice to specific legal obligations regarding the retention of accounting and administrative documentation.

The processing is carried out by means of the operations or sets of operations as set out in Art. 4 no. 2 of the GDPR and may be carried out with or without the aid of electronic or automated tools and according to logics that fully respond to the purposes pursued.

The data processing is carried out by the Data Controller, the Data Processor, and/or by persons appointed by the Data Controller and/or the Data Processor.

Legal basis of the data processing, nature of data provision and consequences of refusal

The provision of personal data for the purposes referred to in point 1 of this Privacy Policy is carried out pursuant to Art. 6 no. 1 letter a) of the GDPR (explicit consent of the Data Subject), is optional and strictly necessary to allow the Data Controller to send newsletters and/or communications and/or informational and promotional materials via email, relating to the promotional activities/initiatives carried out by Dedar S.p.A.

However, it should be noted that any refusal by the Data Subject to provide his/her personal data shall make it impossible to carry out the activities referred to in point no. 1.

Scope of communication of data

The data, subject to processing, may be communicated to entities acting as external Data Processors pursuant to Art. 28 of the GDPR, including, by way of example and not limited to: external collaborators, consultants and, in general, all those subjects to whom communication is necessary for the correct fulfilment of the purposes indicated in point no. 1.

Data Controllers and Data Processors shall process data only if necessary to carry out their assigned tasks.

All this without prejudice to the guarantee of protection of the rights of the Data Subject.

Scope of data dissemination

Personal data shall not be disclosed.

Transfer of personal data abroad

Personal data may be transferred to European Union countries for the purposes referred to in point no. 1. Furthermore, in the event of use of cloud platforms for the storage and/or transfer of data, the same may be transferred to third countries, in compliance with the provisions of Art. 44 et seq. of the GDPR.

Rights of the data subject

Pursuant to Art. 15, 16, 17 et seq. of the GDPR, you can exercise your rights by contacting the Data Controller.

In particular, you are entitled to obtain from the Data Controller:

• - confirmation of the existence or otherwise of your personal data and provision of the same data in an intelligible form;
• - know the origin of the data;
• - know the purposes and data processing methods;
• - know the logic applied to the data processing;
• - know the identifying details of the Data Controller and of the subjects to whom the data may be communicated;
• - the updating, correction and integration of the data;
• - the deletion, the transformation into anonymous form or the blocking of personal data processed unlawfully;
• - the limitation of the data processing;
• - oppose the processing of your personal data for direct marketing purposes;
• - revoke the consent for the processing of your personal data;
• - lodge a complaint with the Italian Authority for the Protection of Personal Data (Garante).

The Data Subject may, for legitimate reasons, object to the processing of data concerning him/her, even if pertinent to the purpose of the collection and, moreover, has the right to data portability pursuant to Art. 20 of the GDPR.

To exercise the aforementioned rights, you can contact the Data Controller by sending a request, including an email, to the addresses indicated below.

Data Controller

Data Controller DEDAR S.P.A., (Tax Code 03187590157), in the person of its legal representative pro tempore, with registered office in Milan (20121 – MI, Italy), in Piazza della Repubblica, 1/A and operational headquarters in Appiano Gentile (22070 – CO, Italy), in Via della Resistenza, 3, email: info@dedar.com

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted at the following email address: dpo@dedar.com

Upon receipt of the goods, customers are strongly advised to carefully check the state of the packaging. Should the packaging appear to be damaged, the goods must only be accepted “with reserve” and the packaging conserved so that a claim may be made to the carrier. It is necessary to inspect the goods carefully (with regards to colour, meters and defects) as soon as they are delivered since any claims must be made within 8 days of delivery, complemented by photographic material. This rule also applies whenever the goods are delivered to a different address from that of the customer or directly to the upholsterer: the customer must inspect the product, or have it inspected on his behalf, before it is made up. No claims will be accepted for any article that has already been cut, sewn or made up, or is returned without control stamps.

If the return is authorized by Dedar, the goods should be shipped at expense of the customer, perfectly packaged, intact and complete with relative control stamps, and sent back within ten working days from the approval given by Dedar in writing. Any return of goods shipped at Dedar’s expense will be rejected.

Requests to return goods for reasons other than those coming under Dedar’s own responsibility will only be accepted under exceptional circumstances, and in no event if such a request is made beyond ten days from the date of shipment.

For tax reasons, Dedar does not accept returns of goods supplied free of charge.

For further information contact Customer Service.

The "Inspiration" section of the   dedar.com  website presents a collection of images created by Dedar customers/partners and representing the result of the use of Dedar products by the customers/partners themselves. Dedar has taken steps to collect the relevant authorisations to use the images from the authors. For further information, please contact Dedar at the following e-mail address:   communication@dedar.com .