PRIVACY POLICY
This page provides information on how DIANA E-COMMERCE CORPORATION SRL and DIADORA S.P.A., a sole shareholder company, manage the processing of personal data of users (hereinafter referred to as the “User” or the “Data Subject”) who use the electronic contact form at www.diadora.com (hereinafter also referred to as the “Website”) to send requests regarding the purchase of a Product on the Website. This privacy policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”).
This information supplements the website’s navigation policy, to show the User how Diadora and Diana will process the data entered in the contact form: we therefore invite you to read the privacy policy
https://www.diadora.com/en/sg/customer_service/privacy_%26_security/privacy-policy.html
- CONTROLLER
DIANA E-COMMERCE CORPORATION SRL, with registered office at Via San Daniele no. 137/139, 35038, Torreglia (PD), VAT Number 05097740285, e-mail privacy@dianacorp.com (hereinafter, “Diana”) and Diadora SPA, Company with sole shareholder, with registered office in Via Montello, 80, Caerano di San Marco - Treviso (hereinafter “Diadora”) are the joint data controllers of the processing of personal data. You may find out more on the agreement between Diana and Diadora, in accordance with Article 26 GDPR, by contacting us via email at: privacy@diadora.com or privacy@dianacorp.com.
When we use the terms “Joint Data Controller”, “We” or “Our” we are referring jointly to Diadora and Diana. However, if the information refers to only one of the two data controllers, you will find the reference to either Diana or Diadora.
- DATA PROTECTION OFFICER (DPO)
Diadora has appointed a Data Protection Officer (DPO), that the Data Subject may contact at the following address: dpo@diadora.com.
Diana has appointed a Data Protection Officer (DPO), that the Data Subject may contact at the following address: privacy@dianacorp.com.
- PURPOSE, LEGAL BASIS AND DATA STORAGE PERIOD
Your personal data will be processed by Diana and Diadora for
#
|
PURPOSE
|
LEGAL BASIS
|
STORAGE PERIOD
|
A
|
Customer care
To manage and reply to your enquiries sent via the Online Shop’s contact form, for example for after-sales service or for information on the Website’s products and services.
|
Performance of the contract or pre-contractual measures requested by you
|
For 3 months from the reply to your request (subject to further storage, if necessary, for the following purposes)
|
B
|
Contractual and legal purposes
To fulfil contractual and/or legal obligations under administrative, accounting, civil, tax, regulatory, EU or international laws,
|
Fulfilment of contractual and/or legal obligations
|
For the period provided under the law. Invoicing data are kept for 10 years from the issue date of the invoice.
|
C
|
Dispute management and prevention of offences
To defend or assert a right of a Joint Data Controller and/or for the detection and prevention of fraud and other crimes or offences
|
Legitimate interest of the Joint Data Controllers
|
For the period necessary for the purpose for which the data are collected in accordance with the applicable legislation (e.g. limitation periods)
|
- NATURE OF DATA PROVISION
Provision of data in the fields marked with an asterisk (*) is not mandatory but is necessary to reply to the requests of the User in accordance with Article 3. The failure to provide the data marked with an asterisk will make it impossible for the User to receive a response to any requests. On the other hand, provision of data in the fields not marked with an asterisk, although useful to facilitate relations with Diana and Diadora, is optional and failure to provide the data will not affect our ability to respond to the User's requests.
- RECIPIENTS OF PERSONAL DATA AND DISCLOSURE OF DATA
Only for the purposes specified above, all data collected and processed may be disclosed by Diadora and Diana to internal persons authorised to process data by virtue of their duties, as well as to the following categories of external persons as independent controllers or external processors:
- IT service providers, such as direct marketing, internet service and cloud computing;
- persons who perform logistics, warehousing, promotion, supply, sale and delivery of products and services of the Joint Data Controllers;
- persons who perform customer service activities;
- professional firms and other persons who provide assistance, consultancy and services regarding, for example, legal, tax, accounting, financial, technical-organisation, data processing and disclosure;
- persons that provide banking, financial, insurance and debt collection services;
- subsidiaries, parent companies, investee companies or affiliates;
- public authorities and supervisory and control bodies;
- third-party companies in the context of acquisitions or disposals of the company or a business unit.
Should these recipients process data on behalf of Diadora and Diana, they shall be appointed data processors under a contract or other legal instrument.
The updated list of Recipients is available upon specific request to the Joint Data Controllers of the processing through the methods indicated in the paragraph “Data Subjects’ Rights” below.
No data collected on the Website is subject to dissemination.
- MINORS
The Website and the related services are not dedicated to minors and, therefore, Diana and Diadora do not knowingly collect personal data online of persons aged under 18.
- TRANSFER OF DATA TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS
Your personal data may be transferred, for the same purposes for which they are collected, to the United States of America (USA), which is a country outside the European Union.
The transfer of personal data to entities located in the USA will take place exclusively by virtue of the signing with the non-EU recipient of the standard contractual clauses approved or adopted by the European Commission (Article 46(2)(c) and (d) of the GDPR) or in any case entities registered to the Privacy Shield, a self-certification mechanism for the companies located in USA which intend to receive personal data from European Union according to the implementing decision (EU) 2016/1250 adopted by the European Commission on 12 July 2016.
You can obtain a copy of such data sending a request to Diana and Diadora, as specified under paragraph “Data subjects’ rights” below.
- DATA SUBJECTS’ RIGHTS
Data subjects have the right to ask Diana and Diadora for access to their personal data and to amend them if inaccurate, to erase them or to limit the processing if the conditions are met, to object to their processing for interests of Diana and Diadora and to obtain the portability of the data personally provided only if subject to processing by automated means based on consent or contract. Data subjects have the right to withdraw the consent provided for the processing purposes for which it is necessary, without prejudice to the lawfulness of the processing executed until the withdrawal.
To exercise these rights, you may contact us at:
- via postal service: Diadora S.p.A., Caerano di San Marco (TV), Via Montello n.80, or
- via e-mail: privacy@diadora.com.
You may also exercise these rights against either Joint Data Controller at the addresses indicated above.
Data subjects also have the right to lodge a complaint before the competent supervisory authority for the protection of personal data, the Italian Data Protection Authority (www.garanteprivacy.it).