Privacy Policy

1. General

Esthes Srl as Data Controller of your personal data pursuant to and for the purposes of EU Regulation 679/2016 (hereinafter GDPR) and the related Legislative Decree. 101/2018, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of lawfulness, correctness, transparency and the protection of your privacy and your rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned law and the confidentiality obligations set forth therein.

2. Data Collection

Where we collect your data:

• data provided by you through our site that refer to this policy
• data that have been provided to us by a third party (independent data controller) to whom you had previously given, respectively, a specific consent for the communication of your data to third parties and one to allow third parties to process such data for their own promotional and marketing purposes

3. Personal Data Categories

According to the provisions of Article 14 of EU Regulation 679/2016, since the data was not obtained from the data subject, the categories of personal data being processed are reported:

• Identification data or name, surname, citizenship, date of birth, telephone number and e-mail address
• Personal data collected during the appointment (measurements, physical conditions, any pathologies)

4. Method, Purpose and Legal Basis of Data Processing

We inform you that the data will be processed with the support of the following means / methods:

Mixed - electronic and paper

• by electronic calculators with the use of software systems managed by third parties
• by electronic calculators with the use of software systems managed or programmed directly by the Owner
• temporary treatment in anonymous form

The provision of data, among other things, is necessary in order to proceed with the sending of the newsletter. Failure to indicate them may preclude this service.

Your data will be processed for the following purposes, related to the implementation of obligations relating to legislative obligations:

• services for the protection of consumers and users
• fulfillment of legal obligations related to commercial relationships

Furthermore, your data will be processed for the following purposes relating to the execution of measures related to contractual or pre-contractual obligations:

• technical and functional access to the site; technical cookies remain in the browser after it is closed
• statistical purposes and analysis of navigation and users;
• general customer analysis;
• promotional activities;
• marketing;
• customer management.

The legal basis on which the processing of common data is based according to art. 6 of the GDPR Regulation are:

• consent;
• contract;
• legitimate interest for specific promotional and marketing purposes.

The legal basis on which the processing of particular data is based pursuant to art. 9 of the GDPR Regulation are:

• informed consent
• contract

Each processing takes place in compliance with the procedures set out in Articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided.

The company processes your personal data on the basis of consent, i.e. through the explicit approval of this Privacy Policy by personnel expressly authorized by the Data Controller and in particular by the following categories of employees:

• administrative office
• marketing office

Without prejudice to communications made in fulfillment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of recipients:

• external managers, identified in writing and to whom specific written instructions have been provided regarding the processing of data;
• consultants and freelancers also in associated form.

No dissemination or transfer activities to third parties will be made for different purposes.

5. Retention Period

We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization pursuant to art. 5 of the GDPR, the retention period of your personal data is:

• established for a period of time not exceeding the achievement of the purpose for which they were collected and processed, for the execution and fulfillment of the contractual purposes;
• established for a period of time not exceeding the achievement of the purpose for which they were collected and processed and in compliance with the mandatory time limits established by law;
• established for a period of time not exceeding the provision of the services provided.

6. The Data Controller

The data controller pursuant to the law is Eshtes S.r.l., with registered office at Corso Dante Alighieri 68, 37031, Illasi (VR), Italy, registered with the Companies’ Register of Verona with no. 04818060230, VAT no. 04818060230, REA no. VR - 448670 contacted at the following addresses: info@sartoriaesthes.com .

You have the right to obtain from the Data Controller the cancellation (right to be forgotten - taking into account the technical possibilities in force), the limitation, updating, ratification, portability, opposition at any time to the processing of personal data that concern and in general can exercise all rights from articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

Rights of the interested party referred to in Articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 679/2016

The data controller pursuant to the law is Eshtes S.r.l., with registered office at Corso Dante Alighieri 68, 37031, Illasi (VR), Italy, registered with the Companies’ Register of Verona with no. 04818060230, VAT no. 04818060230, REA no. VR - 448670 contacted at the following addresses: info@sartoriaesthes.com .

You have the right to obtain from the Data Controller the cancellation (right to be forgotten - taking into account the technical possibilities in force), the limitation, updating, ratification, portability, opposition at any time to the processing of personal data that concern and in general can exercise all rights from articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR

Rights of the interested party referred to in Articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 679/2016

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, their communication in an intelligible form and the possibility of making a complaint to the supervisory authority.

The interested party has the right to obtain the indication:

• The origin of personal data;
• Of the purposes and methods of treatment;
• The logic applied in case of processing carried out with the aid of electronic tools;
• Of the identification details of the owner, of the managers and of the representative designed pursuant to Article 5, paragraph 2;
• Of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as a representative designed in the State, managers or agents.

The interested party has the right to obtain:

• Updating, rectification or, when interested, integration of data.
• The cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed;

The attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is detected impossible or involves a commitment of means manifestly disproportionate to the protected right.

The interested party has the right to object in whole or in part:

• For legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• To the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

7. Cookie management

A "cookie" is a text file saved on the user's computer when he accesses a website with the aim of providing information every time the user returns to the same site. It is a sort of reminder of the visited internet page. With cookies, the web server sends information to the user's browser (Internet Explorer, Mozilla, Google Chrome, Firefox, etc.), stored on the user's computer, which will be reread and updated every time the user returns to the site. . In this way, the website can automatically adapt to the user. During navigation, the user may also receive cookies from different sites on his terminal, so-called "Third-party cookies", set directly by the managers of these websites and used for purposes and in the manner defined by them. Depending on their duration, they are divided into session cookies or those temporary and automatically deleted from the terminal at the end of the browsing session, by closing the browser and persistent cookies or those that remain stored on the terminal until their expiration or cancellation by the 'user. Based on the function and method of use, cookies can be divided into technical cookies and profiling cookies.

Technical cookies

Some cookies are used to perform computer authentication, session monitoring and storage of specific information regarding users who access a web page. These cookies are known as technicians and are often useful to allow the best navigation on a website and to use all its functionalities. Technical cookies are those whose use does not require the user's consent. Analytics cookies also belong to this category. These are cookies that collect information about the use that a user makes of a website and that allow to improve its functioning. For example, the analytics cookies show which pages are most frequently visited, allow you to check which are the recurring patterns of use of a website and help to understand any difficulties that the user encounters in use.

Profiling cookies

Other cookies, on the other hand, can be used to monitor and profile users while browsing, study their movements of web browsing or consumption habits (what they buy, what they read, etc.), also for the purpose of sending advertising for targeted and personalized services. In these cases we speak of profiling cookies. The use of these cookies requires the prior acquisition of the user's free informed consent pursuant to art. 7 of EU Regulation 679/2016 and the national legislation in force.

Third party cookies

It may happen that a web page also contains cookies from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, maps or specific links to web pages of other domains that reside on servers other than the one on which the requested web page is located. In other words, these cookies are set directly by website managers or servers other than this website. In these cases, we are talking about so-called third-party cookies, which are usually used for profiling purposes. The use of these cookies requires the prior acquisition of the user's free informed consent.

Types of cookies used by our site

The main function of the cookies installed by the website are techniques, they are used to constantly improve the service, for authentication, for statistical purposes, such as counting visits to the site. The use of cookies is therefore strictly aimed at facilitating the functions of the server while browsing the Service.

Cookie management

The user can manage their cookie preferences through the features present in common browsers that allow you to delete / remove cookies (all or some) or to change the settings of the browser itself in order to block the sending of cookies or limit it to specific sites (as opposed to others). Therefore, it is possible to deny the use of cookies. By following the disabling procedure provided by your browser. Below are the methods proposed by the main browsers: Microsoft Windows Explorer, Mozilla Firefox, Google Chrome, Apple Safari by downloading a specific browser plug-in.