Privacy

This information describes the characteristics of the processing of the personal data collected through the e-commerce platform (hereinafter, the “ Platform ”) owned by DEDAR S.p.A., with registered office at Piazza della Repubblica 1/A, 20121 Milano, taxpayer’s code and VAT no. 03187590157 (hereinafter, “ Dedar ”).

Controller

The personal data controller is Dedar.

Collection of the Data

Data communicated by the users

Certain areas of the Platform require the users to communicate personal data, including identification data and contact details (hereinafter, the “ Data ”). The provision of these Data is on a voluntary basis: should the users not wish to provide them, they will in any case be able to browse the Platform without benefiting from the main functionalities of the Platform.

The Data absolutely necessary are marked by an asterisk.

The users are invited not to communicate to Dedar any third-party personal data, unless this is necessary (as an example, because the user does not have their own, personal email address and has no other direct contact details): in this case, it is reminded that it is the user’s responsibility to fulfil the legal obligations concerning the protection of personal data and, in particular, to inform the third parties that their data are being communicated in order to obtain, as the case may be, their consent.

Purpose and legal basis of processing

Dedar processes the Data in strict compliance with the applicable legislation concerning the protection of personal data and with the indications of the Data protection supervisory authority.

Registration of an account

The Data communicated by the users in the section “ Register” of the Platform will be processed to allow the user to register an account with the Platform. The registration allows to access all the functionalities of the Platform (as an example, finalising a purchase, monitoring their orders, reserving a product, creating a moodboard , monitoring any consents given to specific purposes of processing, filing complaints).

These processing operations are instrumental to the pursuit of Dedar’s legitimate interest to allow the users to use the services provided on the Platform. This interest has been balanced against the expectations of the users, and no significant invasion of their private life or other undue impact on their rights have been identified.

At any time the users can object to this processing by writing to Dedar to the contact details provided in the section “ Rights of users”. Should the objection request be accepted, the account will be cancelled and any communications relating to any order will have to be exchanged with Dedar via email. In any case, any objection will not compromise the lawfulness of the processing of the Data carried out by Dedar until that time.

The processing of the Data for this purpose is voluntary, but is mandatory and necessary to enjoy the functionalities of the Platform dedicated to registered users. The refusal to provide the Data or any further objection will not prevent the user from browsing the Platform.

Purchase of a product

Should the user decide to purchase any of the products available on the Platform, the Data of the user, including VAT no., will be processed to manage the purchase orders (this includes the sending of service communications on the order status, via email; the pre-sale and post-sale customer service activity) and to fulfil the obligations provided by the laws on selling and buying.

The processing is necessary to the execution of a contract to which the user is part and/or of pre-contractual measures taken on the user’s request, and to allow Dedar to fulfil the related legal obligations.

The processing of the Data for this purpose is voluntary, but is necessary: the refusal will prevent the user from finalising the purchase and/or from receiving the purchased product.

Replies to commercial requests from users

The Data will be processed to respond to the requests that may be transmitted by the users by contacting Dedar via the specific sections of the Platform (this includes requests for consultancy or appointment). The Data may, also, be processed – in case of interest on the part of the users – to allow Dedar to provide business feedback, to schedule meetings and to consider, where appropriate, the opportunity to start a contractual relationship.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest to reply to the users in order to assist them and to provide advice on Dedar’s products or on the users’ projects. This interest of Dedar has been balanced against the interest of the users and appears compatible with the reasonable expectation of the users to receive a reply to the requests sumbitted. Further, if the users express an interest in that respect, the processing might be, also, necessary to execute pre-contractual measures taken upon the user’s request.

If the contact does not lead to a pre-contractual or contractual relationship between Dedar and the user, the users will, in any event, be able to object to this processing at any time, by writing to Dedar to the contact details provided in the section “ Rights of the users”. In any event, any objection will not compromise the lawfulness of the processing carried out by Dedar until that time, but will result in the erasure of all Data and in the impossibility to follow-up on any pending requests.

The communication of the Data for this purpose is voluntary, but is necessary: any refusal will result in the impossibility to contact Dedar to receive assistance or specific advice, and in the impossibility to start any contractual relationship with Dedar.

Use of Social Media platforms

The Data will be processed through the pages of the Social Media platforms dedicated to Dedar.

The processing of the Data for this purpose is necessary to Dedar’s legitimate interest consisting in managing the interactions with the users (comments, public posts, etc.) in compliance with the applicable legislation.

The Data are given freely by the users via the aforesaid pages of the Social Media platforms.

As regards the Data processing operations carried out by the managers of the Social Media platforms used by Dedar, please refer to the information provided by them in their privacy policies.

Data retention term

As regards the registration of the account, if no access is made for a period longer than 36 months from the date of registration the account will be deactivated. If the user gives an affirmative answer to the request which will be sent one month prior to the expiry, the account will be kept active and will be retained for further periods of 36 months.

If any purchases are made, the Data will be retained for the duration necessary to fulfil the tax, accounting, and regulatory obligations associated to the sale of Dedar’s products.

As regards the processing of the data for sending the newsletter, without prejudice to the user’s right to withdraw their consent, the Data will be processed and kept for 24 months from when the consent is given.

As regards the processing of the personal data to respond to commercial requests from users, the Data will be retained to respond to the user’s request, for a maximum period of 12 months from when the last contact occurred. If a contractual relationship is established between the user and Dedar, the Data will be processed for the period indicated in the related information which will be transmitted together with the contract.

The Data will be retained longer if this is necessary to comply with any obligation in law or to ensure legal protection of Dedar’s rights.

Recipients of the Data and transfer outside the EU

The Data, with regard to the aforesaid purposes, may be communicated to public authorities, where this is necessary to comply with any obligation in law.

If any purchases are made, the Data will be made know to providers of services accessory to online sale, such as forwarders and carriers (as regards the shipping and delivery of the purchased products), and banking institutions (for the management of payments and refunds). For this purpose, the Data relating to the users whose residence or domicile is outside the European Union may be transmitted, also, to local carriers. The transfer of the Data, in these cases, will be supported by adequacy decisions of the European Commission or by appropriate safeguards under art. 46 and ff. of the GDPR (i.e. subscription of standard contractual clauses).

The Data will be made known to Italian-based providers of newsletter services for the purposes of sending the  newsletter.

Further recipients of the Data are the consultants and companies providing services accessory and instrumental to those provided by Dedar such as, as an example but not limited to, the Italian-based company providing Platform management services according to the mandate conferred upon it by Dedar.

In addition, the agents of Dedar carrying out activities in the performance of their mandate are recipients of the Data.

The aforesaid categories of recipients process the Data as autonomous data controllers or as processors or as persons authorised according to the provisions of arts. 24, 28 and 29, respectively, of the GDPR.

A complete list of the recipients of the Data as well as further information on the transfer of Data outside the EU are available upon request to be addressed to the contact details provided below in the section “ Rights of users”.

Users’ rights

At any time the users can:

1. obtain access to the Data;
2. obtain the rectification or erasure or, where applicable, limitation to the processing;
3. object to the processing;
4. withdraw their consent;
5. where applicable, receive the Data provided to Dedar in a structured, commonly used, and machine-readable format, and transmit these Data to another processor without obstruction by Dedar;
6. file a complaint with the Data protection supervisory authority.

These rights can be exercised by contacting Dedar:

• by email:  info@dedar.com
• by post, to the address: Via della Resistenza 3, 22070 Appiano Gentile

Privacy Notice – Newsletter
pursuant to Articles 13 and 14 of European Regulation 2016/679 (GDPR)

By subscribing to the newsletter, you declare that you are over 16 years of age and give your consent to the processing of your personal data in order to receive newsletters and other commercial communications from the Joint Controllers of the processing. Therefore, in compliance with the provisions of Articles 13 and 14 of the European Privacy Regulation 2016/679 (hereinafter also simply referred to as the “GDPR”), we hereby provide you, as the Data Subject, with the required information regarding the purposes and methods of processing your personal data, as well as the scope of communication and dissemination thereof.

Purposes of the processing

The data processing is aimed at the activities of sending newsletters and/or sending communications and/or informational and promotional material via e-mail, relating to the promotional activities/initiatives of Dedar S.p.A. and Mariaflora (Filippo Uecher S.r.l.).

Methods of data processing

Pursuant to Article 5 of the GDPR, the personal data subject to processing shall be processed lawfully and fairly, and shall not be excessive in relation to the purposes referred to in point 1.

The personal data processed for the purposes referred to in point 1 shall be processed in compliance with the principles of data minimization and storage limitation pursuant to Article 5 no. 1 letter e) of the GDPR and shall be stored for 2 years from the last interaction with the individual Joint Controller and in any case until the data subject unsubscribes via the opt-out option available at the bottom of each communication, unless otherwise required by law.

In the event of withdrawal of consent, the data shall be deleted within a maximum period of 3 months from the request, without prejudice to specific legal obligations regarding the retention of accounting and administrative documentation.

The processing is carried out by means of the operations or set of operations as set out in Article 4 no. 2 of the GDPR and may be carried out with or without the aid of electronic or otherwise automated tools and according to logic fully consistent with the purposes pursued.

The data processing is carried out by both Joint Controllers of the processing, by Data Processors and/or by persons authorized by the individual Joint Controllers and/or the Data Processors.

Legal basis of the processing, nature of data provision and consequences of refusal

The provision of personal data for the purposes referred to in point 1 of this notice is carried out pursuant to Article 6 no. 1 letter a) of the GDPR (explicit consent of the data subject), is optional and is strictly necessary to allow the Joint Controllers to send newsletters and/or communications and/or informational and promotional material via e-mail, relating to the promotional activities/initiatives of Dedar S.p.A. and Mariaflora (Filippo Uecher S.r.l.).

It is specified, however, that any refusal by the data subject to provide their personal data will result in the impossibility of carrying out the activities referred to in point no. 1.

Scope of data communication

The data subject to processing may be communicated to parties acting as external Data Processors pursuant to Article 28 of the GDPR, such as, by way of example and not exhaustively: external collaborators, consultants and, in general, all those parties to whom communication is necessary for the proper fulfillment of the purposes indicated in point no. 1.

Authorized persons and Data Processors shall process the data only if necessary for the performance of the tasks assigned to them.

All of the above without prejudice to the guarantee of protection of the rights of the data subject.

Scope of data dissemination

Personal data are not subject to dissemination.

Transfer of data abroad

Personal data may be transferred to countries within the European Union for the purposes mentioned in point no. 1. Furthermore, in the event of the use of cloud platforms for data storage and/or transfer, the data may be transferred to third countries, in compliance with the provisions of Articles 44 et seq. of the GDPR.

Rights of the data subject

Pursuant to Articles 15, 16, 17 et seq. of the GDPR, you may exercise your rights by contacting the individual Joint Controller of the processing.

In particular, you may obtain from the Joint Controller:

• - confirmation as to whether or not personal data concerning you exist and their communication in an intelligible form;
• - information on the origin of the data;
• - information on the purposes and methods of processing;
• - information on the logic applied to the processing;
• - information on the identification details of the controller and of the parties to whom the data may be communicated;
• - updating, rectification and integration of the data;
• - erasure, anonymization or blocking of data processed in violation of the law;
• - restriction of processing;
• - objection to direct marketing;
• - withdrawal of consent;
• - the right to lodge a complaint with the Supervisory Authority, the Data Protection Authority.

The data subject may object, for legitimate reasons, to the processing of data concerning them, even if relevant to the purpose of collection, and also has the right to data portability pursuant to Article 20 of the GDPR.

To exercise the aforementioned rights, it is possible to contact each of the Joint Controllers by sending a request, including by e-mail, to the contact details indicated below.

Joint Controllers of the processing

a) The Joint Controller of the processing is Dedar S.p.A. (Tax Code 03187590157), also the sole shareholder of Mariaflora (Filippo Uecher S.r.l.), represented by its legal representative pro tempore, with registered office in Milan (20121 – MI), Piazza della Repubblica, 1/A and operational office in Appiano Gentile (22070 – CO), Via della Resistenza, 3, e-mail: info@dedar.com.

The Joint Controller has appointed a Data Protection Officer (DPO), who can be contacted at the following e-mail address: dpo@dedar.com.

b) The Joint Controller of the processing is Mariaflora (Filippo Uecher S.r.l.) (Tax Code 02588410023), represented by its legal representative pro tempore, with registered office in Milan (20121 – MI), Piazza della Repubblica, 1/A and operational office in Ponderano (13875 – BI), Via Gramsci, 48, e-mail: info@mariaflora.com.

Joint Controllership Agreement

Pursuant to Article 26 of the GDPR, the Joint Controllers have defined, in a specific agreement, their respective rights and obligations arising from the proper compliance with the rules and principles set out in the GDPR, with particular regard to the exercise of the rights of the data subject, as well as their respective roles in communicating information to the data subjects.

In compliance with paragraph 3 of the same article, the content of the agreement is summarized below.

The agreement became effective between the parties immediately upon its signing and shall remain valid and effective until the expiration, original or extended, of the contractual relationship binding the Joint Controllers, or until its termination for any reason whatsoever.

Within the scope of said agreement, the Joint Controllers have undertaken, also separately from one another, to:

• - process personal data lawfully, fairly and transparently in line with constitutional principles and applicable legislation, in particular the GDPR, and only for the time strictly necessary for the intended purposes, including those necessary to comply with legal obligations;
• - collect personal data limited to what is strictly necessary to carry out the activities constituting the common project (relevant and limited personal data), ensuring their relevance, accuracy, truthfulness and updating;
• - ensure the timely restoration of the availability of personal data in the event of a physical or technical incident;
• - make the methods of processing personal data and their storage clear, transparent and relevant in order to ensure adequate security;
• - ensure compliance with applicable legislative and regulatory provisions for the protection of personal data, possibly updating the management of personal data protection;
• - ensure that their employees and collaborators are reliable and have full knowledge of primary and secondary legislation regarding the protection of personal data;
• - following the termination of the processing, as well as following the termination of the contractual relationship, regardless of the cause, the Joint Controllers shall continue, each on their own behalf and under their own exclusive responsibility, to process the data of the data subjects for the aforementioned purposes, becoming independent controllers thereof.

Furthermore, the Joint Controllers undertake, with particular regard, to facilitate the exercise of the rights of the Data Subject. To this end, the Data Subject may exercise their rights against and in relation to each Joint Controller of the processing. Following the requests, the Joint Controllers shall coordinate with each other in order to manage relations with the Data Subject.

Upon receipt of the goods, customers are strongly advised to carefully check the state of the packaging. Should the packaging appear to be damaged, the goods must only be accepted “with reserve” and the packaging conserved so that a claim may be made to the carrier. It is necessary to inspect the goods carefully (with regards to colour, meters and defects) as soon as they are delivered since any claims must be made within 8 days of delivery, complemented by photographic material. This rule also applies whenever the goods are delivered to a different address from that of the customer or directly to the upholsterer: the customer must inspect the product, or have it inspected on his behalf, before it is made up. No claims will be accepted for any article that has already been cut, sewn or made up, or is returned without control stamps.

If the return is authorized by Dedar, the goods should be shipped at expense of the customer, perfectly packaged, intact and complete with relative control stamps, and sent back within ten working days from the approval given by Dedar in writing. Any return of goods shipped at Dedar’s expense will be rejected.

Requests to return goods for reasons other than those coming under Dedar’s own responsibility will only be accepted under exceptional circumstances, and in no event if such a request is made beyond ten days from the date of shipment.

For tax reasons, Dedar does not accept returns of goods supplied free of charge.

For further information contact Customer Service.

The "Inspiration" section of the   dedar.com  website presents a collection of images created by Dedar customers/partners and representing the result of the use of Dedar products by the customers/partners themselves. Dedar has taken steps to collect the relevant authorisations to use the images from the authors. For further information, please contact Dedar at the following e-mail address:   communication@dedar.com .